last executing test programs: 10m8.949134066s ago: executing program 0 (id=1181): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x10000, 0x4c, &(0x7f0000000380)=""/76, 0x41100, 0x2a, '\x00', r1, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x20000, 0x7fff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x2, 0x1, 0x7}], 0x10, 0x4}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f00000002c0)="2287", 0x2}], 0x1, 0x3) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x20000, 0x2880}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x23361}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x40}, 0x2c, 0x0, 0x5, 0xb, 0x8001, 0x1, 0x12, 0xe, 0x5, 0x7db8, {0x1, 0x8, 0xffff, 0x80, 0xffffffff, 0xd7d}}}}]}, 0x78}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 10m8.752579139s ago: executing program 0 (id=1184): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x35, "", [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x3782547cd4e8e663, 0x0, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xbe, 0x8}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x35) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r4, 0x4068aea3, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x1000000}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x0, 0x23, 0x28, {0x28, 0x22, "4f4752c8c6216ff4000f37020ec22c483855beab117b8354181451a7d4780704df38165a154e"}}, 0x0, 0x0, 0x0}, 0x0) 10m7.483500953s ago: executing program 4 (id=1191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) pipe2$watch_queue(0x0, 0x80) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x35, 0xffffffb9, 0x1a}, 0x9c) 10m7.482698387s ago: executing program 2 (id=1192): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r3, &(0x7f0000000480)=""/4081, 0x103a) getdents64(r3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x1000000}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x4412, 0x4) 10m7.296501297s ago: executing program 4 (id=1194): landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m7.125087176s ago: executing program 1 (id=1195): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x25, &(0x7f00000001c0), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept4$nfc_llcp(r8, &(0x7f0000000180), &(0x7f0000000280)=0x60, 0x800) getpid() 10m6.017863387s ago: executing program 4 (id=1196): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x7fff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000003c0)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x3, 0x3, 0x40, 0x3, 0x5}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@dev, @empty, 0x0}, &(0x7f00000001c0)=0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES16], 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@bridge_newvlan={0x30, 0x70, 0x10, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x30}}, 0x40800) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000000c0)=""/156, &(0x7f0000000180)=0x9c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 10m6.000309968s ago: executing program 2 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x7fff}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000001080)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003600)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="d744c90112af416c8e001d4d97209b4eb71e860ef05f0b765eb4ce42c73c1061a4f33d4a697099e65421944826fc3c1b2cff7a63f5db41c17c55a979d2140c533d2a4667a0b9b871000dbe089fcd7197fd8c2fd21406e7f3817752667e6a7f228290c12600ae3e368f75b3549c55200a1e0e195af891a2db0b524fa0c7496c68103d59eb1f2e29d9aad2006c59bcc485cd9a55316eeb356da3fc5bf5f08b934c80e1e18398f2dcd36da1645d89d8c55b6e9f39c7e09aea6e77d27ffe01d6c8e05b7c4ed12546c98b428a2c99201ab24ee3775b57f122877d116bd41acaf92d77838dffb5de6117d2a05f43795a", 0xed}, {&(0x7f00000033c0)="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", 0xfd}, {&(0x7f00000034c0)="b610a5a0dd2177a1a934c5be8998cafe23fc74b8fbb38ea152f462e546f61c4568cf733f44c86b7399f4f767", 0x2c}, {&(0x7f0000003500)="e92115caeae84893c203246bab8c1238e046c92014adc0d702fad4a2c03aaa60816409e82a2e71bcf1ed597fe9feab9ba0cd69b207f596e170a6b1e378873ad6dd48e823bcfa8cef82fc26f7f28a297a5c02d44db717430693b1a6a24a57cf54941889d80b3bc5387f0ab6089872b43fdd267e5f25aa836cb7eb5b7ccfc9029eb8", 0x81}, {&(0x7f00000035c0)="8fd81c3f0bdd3d9f9ea20fac47be7f640b307b4119007b", 0x17}], 0x6, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32, @ANYBLOB="007045809c0b97e600c000000000"], 0xa8, 0x11}}, {{&(0x7f0000003a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000091c0)=[{&(0x7f0000003ac0)="73aef80073371bb0032e2777324d01e175b89e59abbd7abea1fcdd8a915175f43c21f1e0229f4cf5a02862ab2426a85ad80c9deded462ad83da22b0fb6937bd4d738dfaa5061945eb510322417bc815e07c314021508ae35744943dcc151bef424878b293c18d27443be5ee9bfc40ca41e065d651ee0f37452a109a414995bbeb9f3647f868f75ba8db37598d7461ad2a40f5c76d061893c04c88982edefcd5dc4511d43fadb64115ed0cef4a1d8197bc5126538abdb9b09794be73f0329075daa1a3ceb1088276a63", 0xc9}, {&(0x7f0000003bc0)="2e7da64e50d4149845df9b22bb4940f51f312d888a980e9546997f84ee27c9e68c4a7ecb5d300fcf0a645a794bf73ad133a771c926b1f126ec982614e384daee974c137f0d96da4018c1eebdf4a456cac868cd2b833c00562c24b09f87c21180ec986b459888517258a2ce2f9f6fee9a8435189e6e6443c128d9192e00a1118980ce51f7afe280e2f956077fd628d6d8682f63e5a4a4adaccd86fa477edda81ed68ebc8003fbb825cc7ab609042d7f60f4fe0fcf5f29476fac7d91782941c6d56f2d16dae87b82d668", 0xc9}, {&(0x7f00000081c0)="c2a378f7cb8f9b79b20708f1259e264af25cbf713411a7b02d04789dedf7ccfa70fc2c054dcab03ac57015713c2373c8f59f64e239890fa332d7a3504bdd7b2ae17ed638a32c015a4d2f85528b701aa7a0ec36ebddc09b2b5eefac702a3337aae649f6b6abc471f97a1b2b5296b4a40cc245a9c30f0d597410d60fa050da24af6fd68c01a37fb85945405b9c21717145bc7beb37d8db293ab748dc0c57b94d82ff9b7823fe57c6190ab8cef0daced7a512772e63ed196846978c90a62f906c5fcde92c2ced8998c4a5a7e3f41a15060baefda008266a11d99d42fd596a47459c445b67396f4b82f9a2f4dbdac4186f573267d9a4879d59e7dcfd1734b5d755cf1a54507c68ea01ee12c825d337fd4951f3f5c790b34ceea23dc70a1dfad3d49a94363881c3f305cb38b92db4b6c06b10b9cee5ebc9596fce4022d534512f98c669fe43787b9448c99797572ae0c09709de5717ad7ebefea56aa9a555b415ad1f702a6f23dbab1e607c7c32a74c8f44967ab53d978fc43f370ce054d62e31bd1e58aa85aded166b048f4dc12028774587785a9fba7e4acd092e5ad8a07bbc932c8ffd710a690663b4d3c6dd22a5d73e3ba9c881056d7d23244a1988d9553547239c4d49610b5ee38ff889b27d3e55a450e4a7d7c3780109a65b80e8fcb608d3fbb004c76870f39594159e99297e1ae6cc5e56dc54d2db911b81f367337d93480fc620015dd99f3bc74b1fbe3f0ecf0556702cded04bb9e2b1d092aa1f293f7c207acace30c017329347eb74d8a4f51b52773c540e0f7f7309c6f0defa2f6cca6f3e392edaead829cff8879282b1e3a7c10730d3b3a5926f3144196dbf157ba45aad564ee23c1937b1ad729bcbf3da5fa07c2f9ba334825c4c64f419209e188ab592a7ba8a623ffe05a7225190faa1f9b2bdbc8dbe36fdba9edb329d0cfea4a227064e9342e77fa41a38b3ac641196643319c5e94ecb0431c2a380360856dd812485a07f2cc9df779e40756c1f8dfa420a684611586f64d3f365082902586205142670a87b43315a4ee7b61c096d274e8f769b3ca0439a2e4cdcf2aaf1e3cb9de668d779dbac98f59bd350e4410154385b87f484ee7741e5d254dcc6edd07a2ed23f9c58cb59e47e8758b486c434304a2b1d1ad2f49ad1f0d0d64444df1fe9915faedf76c45a927816fda1caa2139fc3fcd617ddb67743c005cc0fbc475907b2c21657ac3c9ea78081f969eda5bc5fcd975074e6022f2bbc7478b890969ec875f4d6b4b15e963a4e940592a8cfe009294383789384e4d10e3f287c57a3c0926763b1013408537fc65135335d7dcd95ae807e1dfb1101e5250fc4de096179beb5d45d88e9c4fae964ad3ed62783979b74fcd9c2370ff10916847f944b9a504b189ab4edf3fe6fda6962402728517a9eea7d6fc52b26c5113a89a8bf5798c60153dd8ce8a6a5a6a74e0112ba1450c8210747afeadde759cfbd3fb55c2a39774977d5a8d0568f4c5ad0de5b075a044374ca127a1760d1cc628ad90841b13ccc072bfb2fe58243e73065066e6f6ec3fa05b6f0b58b34489febadfa0964d547365bae8a1dd875b755b20b0c258b4fca165f5e23eef427f8f680585114a38916e4397f47611ea5a71961be0360ed90348bba1aec302ac3c0de0a431585e38dd83caa79677cb2527d5d0da006c7baff098768546e9385b5d99bc2b00b6ba3f272f972f05bd7cdff382b3897d38160a9fd3bd95e3103f92c1d465635c9a158f6c69c215006a3944c994fef0ebda6d125453c4afdd65642ab2afc29794495de3426f61dc6f0cc020812a6692c733d5524692e2a346ca3753771a9d76af28149c26a2d49458ce72e17a6c6d06efdb4217bb834b954df1bb929c5f4204e36e6850ab3674988f0832292a30227b17190244a1f641a97a2966b85c6dd157d42f81960518e97ec1ec82e66e0e19486814aeda6d79c6eb6357fa2c6edf93b855fe8eb791f4445329dc047c080dc7408b1069b68bd472f649d6234123f780a319548a5ccaf1d1d1ac9cca7ee1e53572041b64f86a07700a7507f5968c9c11d126d15830258103a2b6ac640c153801b43a9755849afd2c70940d0bdcf2e64e8ad108b11f648c5b1cd35e6b558c25894eb3b5c4a28d6d0c565d37f3718306b5d2f373afd74e5d8a4aeafd88b4afea9c37aaf78f25c02bca49d440dc81409f8cc79f05146b69e28e4fe92f58c39315b0e85a8c8a9cd5a06a2451f4e1f3e08b0dc54ed91ffbbcc034c5409cd0eb898a05d828e5e0ed7855151c6f8b6ae4957b43db15a31e7bc1020b7f8248a3c112c6e2c1690fc0d69287296df9b09a516bfb09fd43bdd75271e2114435f06d5311347ca19e06743efbc930f58acb520188de3664d10f2b7d834c5732a9483e478fa6fde11a004b768c7b5d40dcf5400f08e09005129a68c97bcfc258bc528f410be7bcc2938f8654e19b76e5d1a5fed38b7d3d96d584dfe6f2de8520e6b5f7565e99023ec0dfd1c468102e09efe5faa7636cd9ca9701ee9226481492ce186d1b5763d0b63f6f13906fb4e2c1342348d64e5c159cee5526a645574acff74120d003f428f9ffa50fb43f2778716028c21aa808790d82601bf6f697b56a9e9b39bb98df8bf99fbbeb645f7160123ab4b7938b4c119a2176d9235cda2174293fabfc1f0c1e0b0eeb05651eb3b55249b9ac1aeba04d81e98d9be789772b823c7c9204cdc901e9c885d582d5bd775f45e182f9b25339500ff6672f657061c00dbce48c31bb595d8dd343cd63c4f5d15c10009ab560fec2009b96508f65fa2f3d6febae1d12390819c174d64342bb25b0a67efe10af9012c12237184925ee90c1d611f6e152cdc8a73f3b5bcb65d4df070a071b4ddf3c1b834b2cacc649e1ca96aa54ec9c98eeede60c0a5899964299aac3bef9a76935079797af39117357997d982f6e0e5010502433e9b1a371d7eedd032e13c6527f09f2a0c464309a345bcfdb7e4e4031473cb347129963f2fe12a2820cccc24eb27f6d3f8329c1e9bc5b0fb369577e1773cc81a09c994f171405c505b0ec9b9bc3ad1023467f479cf39e81a28d4f309c98981e741a7187e39b7d772e70829fcb8e50b2e88182431a82c7ec16dd0c73b82b5245e0e3df747a9cd15b68a18a0785866ef09c5f14df6f44882a0fe12351982267c1c16238e7b8d3e3dfc7b147a9270f7cc5e113e6b85486e1161e0980229d413e19356132e18a2b795c23d7aad517c79ec7c2accea822988e27355186c24bb0461bceb1b918138acecfe6b95ddd2c9e01784ed576285bfefeec3a04cad1643bd8871dec80d48869393f6c6bbaeb4be6e5d5042adc902892bea4d4597cacc8814fe9d4653c846e942431ca82d1bb19fbee3ea1e938d17895cc2b1f9d64209304f1ee80cff2eea4aae07e5889b7b383b46221b846e1f099e71b56e5e5c4e0b495b3521fd78596c00e63c743bd2547b9aa1b082a6b11094d4e2a18b0da09622bc52e0c9e4ce103b32cbd7c93aa585895424cd92f1430b9a5feb600f764b0862580854a06016dc894b18e41c62accc3af2a1bf56db8eba0033b006071dc7f10ab00d8029b73f9943fa3ccd2a907bbe35bfd41348054c6a3435a293640a019562e7545720b901083adf3f49e37c006e7b11dc0e1b22f411f0232b82ebb94d6700634a7c2fd1518b8d381afa56b28156a7176fd0ace3625b6c3293b0f41634d1da9049e15105fe632750799c8abffa75bd8e4048b16712b7676392ace86a71f6a9a07e1ea390a82df2412308fda0944cd65aa9c898dc9e176464e2878adb69817c3e3e8960b79ea53c878c41e74f9ac176fce88642684181fdb1bce3f35820d569ee66d521ab3cf03f75ff0ac157d9c5814ab325d9fc81ecab01e3c70e5fb287fcc61d3fd65b86357cdabb3bbc1e3f05c49c290a89075490acc333320cf055b596c3738801fdf40df4b80b22ed0f47c4a9efbc3b0842dc70426f79fe3afb58b641ebe4332185fd9414014a591d7cab79edc8d75e1d1206f7fc8262df47f5b21af1a28ef9243eb06f9f2f6128fe0033dfd8f82fa98e6d3cd6d4fc4a7bdaefb4ab2abaf90326bf117bfd23c755ee6fc3864d537cc50c1df0808daf33ecf2a32b1e30c2f0fd34ccf994f0145091187e4843c089b8020bfbf32eece230e6a8494dab9094e31ba660e9e79df7f7d94e46891d40eb9b8ecc0d80a12f6871d9877f1a674a8afa85cd9531886b3ff5d88b2173d27527d150f4b53954799b38b004989ae3f5d0689b32d92b6c375a08c84faadbebc343e838c3447b8fd3ee8f299a196d4a4e1fd24b080261c19092ffa86edf45d04f3774f62fb20e89e1d75996308da56980fbd08620d75218a30e474338e080e20b66b87624659097f3ff615acf69840dd2f51d77be34ee904315677e41f4c2ec0c9261e5d4b3f9b1a350356845c5f13e90e5785961ce077fd110c9750c55adea6afecd4209732a45b09fb62c60ef04266da2ab9d7e0d262a60ccf81669f312a6300cd00b1f29deeab81b973b4a65e548a70a06e7d45d86806606dd86982aa0f5c2ff648ffe09bc551930a8ecef821763ae89ccec94ca70a7f2a805fb9881f4d8f68ad3abede04c98ecfdecde43fc171d72f34675e19ce32c959da3365098e5713e9f980177d0f090d019e293a3b92b582901cd48ef62eab7165f30777934dae34637a614b44a845e724c75f3018eb4afbeb50d96a26ba24effe1e21bee095227b33321a983a1c3fe1986d555a3ea677da828a58fd2aa9a0d71ae3b1e790e6f49aafc00a77e13c49b537748736f97a958b0801b62e3c9c1ed6aae7222778c8a9b2d4d20819c3d3e4aef4a0e0370650cefd64e32efc806073e47fbf9d4a80b69f1ef4400c9af850522adc2ab400c1c0d0348be05f54ad0987d191944953c7d45be40d7b4955411345b7cb182b7754dd5caafbc028b4f0f84b979e186965bb30965b72b4ed80a844bfd562695f79fc3a0259ae7870877e7743dac3c8e055c8b40d7a62af65270d4cad00ec5844c809e43750521ba3f6261b78d88c8f230d92dd66b43c58f9956700419208738b7f6939c256e41bd73a9e5d3ef9e6825011474602ad79006014cdbbf1cea3791e6b389ec48f81ccf5382ae0efb58224e25ff7ed62ac0916069d44d3a6dfc01d8d537e659be697c4809a9dfd4542d5220b752b567f98f25764a14f153a3c5c444a2b01df50b97fdd34158ee56e258368e47e3f04817558fc45754589dfa3ea955c83e2d193ce70dbbbffd9e1549381441ed34ce081a96aaa4daa943823bcd4f82895b2dbbd6a3b93016635c90056b45278f0d233840c97dfe0cfe7a553559300de7865fda770763c8cde630afacca4f3dffeab16ad0326bf3a73155d12d584478d86b42d4e7e2ad11cbaff75531d6eb4b1d77209306746ab1b9481eb7d1be30b4e2b3f19185f410b22464c617f7c22583d139eb6b93af41ecaa53f67ebfed8b4668fd2b92d21e1d05e89d2f0755ba8e6de17f99fa2ae7911d4724723edf143bb5f2de2bd7ff2c8dd950cbbe0550cd2d78510a12caa0f50f91fc532d3e47a1a3452145076426af9dbb18b6b7405284a8df33ac0244a93fb8a757e21bec6f682d8c31314b6df040fa1f9702ee660fa97ac7ced7ad76c339e8b43ad2c23968c08088b084dd27b99ab10c87a46a31ecea4071f916e5c9e923c43acc53a2a680507a4997f419130e8efb6cc61206b99d305204b6f3f051c9bb082c7852eb535c6e758f491bf7b5b38f38603d78c9d3ea479cd9b556b00015be974266dce352d1e359a3c16a", 0x1000}], 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c00000000000000010000000200000023dd4114719a3a5d8b4c7f18b84dc6f781f8e596c9d89a16f261b8711cf99e122517a254270dd97d0475d8128d4d6083c2eb21814d14fbc69f735c18b60b00aba447fd4b306e89e4ba22ec18a061c417d94ae55055e970975fccb4a272eafa2c0c69e3554d500e5de2b5f22f937dd13c650dc63cc3b6a0037fd45d33b7d040fcbd4362", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r3, @ANYRES32], 0xe0, 0x4040814}}, {{&(0x7f0000009380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000009500)=[{&(0x7f0000009400)="4eb3bd2a074d322b2a3b87ad15970bf0a97399490dbef415f8ebadee41c517e52ab3645819581f0d6d7eb55c33bb70ac394a67f16871213bb206938a91733048ae6ccc414aca811defd50b563807151832be76002210936dbfed781efc55ae0defb0e6cc0116445d42c4738743f69707532c815cd59aa1b9b239d7130378206b23401da2359a846d58c4956b8df6668709dda44e28b277ec9daf8c03bc07f1c03566a4fa917d579510706932ad45a1d34fba50463fd1791e0875e2aaca4ba90a3d1c618f585497864a342515a394d8ed564be71e4736c036003a9f5b077d798f96cdc67410e514774d9f62d90fa05c00b38d834a5132cc61fd0562fa", 0xfc}], 0x1, &(0x7f0000009680)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}}], 0x3, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r10, 0x5646, 0x0) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f00000000c0)={0x1f, 0x8000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x65dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) 10m5.624883305s ago: executing program 0 (id=1199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, 0x0, 0x0, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000280)="66660f3a15593702b801008ee8bad104b006ee650f01c50f0f55301c66b92b03000066b80020000066ba000000000f30b800088ee8660fd9200f015933f4", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000500)="f7790066baa00066b86b4266ef2e0f2f0164931a2372cc72ccefc7c729902cbb0000c4e2b1ba8c88d9000000e567400f38826b410f7842282ef2400f5d490cb801000000ed017f", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m5.307287672s ago: executing program 0 (id=1200): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r0 = gettid() ioprio_set$pid(0x3, r0, 0x2004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2aaaa"], 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r3 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) ioctl$EVIOCRMFF(r5, 0x40095505, &(0x7f0000000000)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x0, 0x80, 0x4, 0xfe, 0x3, 0x0, 0x2, 0x3200}}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x14}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0) 10m4.789284406s ago: executing program 2 (id=1203): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x1000, 0x4cf5, 0xfffd}, 0x3, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x503, 0x4, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x1a8, 0x0, 0x10001, 0x7, 0x0, 0xfffffffe, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2004, 0xfffffffc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x10000], [0x0, 0x0, 0x3, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0xfffffff4, 0xd0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x689, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x3, 0x0, 0x81, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffd, 0xb7, 0x807ffff, 0x0, 0x0, 0x0, 0x5b7f28b1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x7, 0x3, 0x20000, 0xe13, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffff45, 0x200], [0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x5, 0x54, 0x5e68, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x80, 0x0, 0x0, 0xfffffffb, 0xfffffffe, 0x85, 0xfffffffc, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="88", 0x1}], 0x1) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r4, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x22, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53"}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) close_range(r1, 0xffffffffffffffff, 0x0) 10m4.028964157s ago: executing program 1 (id=1205): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0xd11) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, r1) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 10m4.028464608s ago: executing program 4 (id=1206): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7", 0x12, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m3.824863004s ago: executing program 1 (id=1207): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x60d3, 0x5}) eventfd2(0x0, 0x80001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10m3.643299214s ago: executing program 1 (id=1208): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x10, 0x802, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 0\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='$!\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) getsockname$llc(0xffffffffffffffff, &(0x7f0000000140), 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000300)={0x4, "650000006e0000000100"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r7) 10m3.53323746s ago: executing program 4 (id=1209): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3, &(0x7f0000000080)=0x0) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="e946e714", 0x4, 0xeb}, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0x6, 0xffffffff, 0x7, 0x37cc4ec4}, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x14, r5, 0x1, 0x70bd2c, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 10m3.450640148s ago: executing program 0 (id=1210): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x1000, 0x4cf5, 0xfffd}, 0x3, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x503, 0x4, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x1a8, 0x0, 0x10001, 0x7, 0x0, 0xfffffffe, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2004, 0xfffffffc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x10000], [0x0, 0x0, 0x3, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0xfffffff4, 0xd0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x689, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x3, 0x0, 0x81, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffd, 0xb7, 0x807ffff, 0x0, 0x0, 0x0, 0x5b7f28b1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x7, 0x3, 0x20000, 0xe13, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffff45, 0x200], [0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x5, 0x54, 0x5e68, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x80, 0x0, 0x0, 0xfffffffb, 0xfffffffe, 0x85, 0xfffffffc, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="88", 0x1}], 0x1) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000004000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r4, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x22, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53"}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) close_range(r1, 0xffffffffffffffff, 0x0) 10m3.252661037s ago: executing program 4 (id=1211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x2000c001) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0xf3, {0xf3, 0x1, "942c3bc0fd08517265b1ddb475a9362c55753de03ebc79fefeff5ae2075b58ef5fe8736ca9e1a8ddb58da9969d40223fcb382dc0c91c25c86b4db18acdbd125fba271896e764647ecede2dfea275d75247892d92ad6b9d299a621524c82601f04eaa3f3d1e122048b874665baa43f6e42178d3b97ae21a7d67423893a9c8dba6e00651257af26add3634069eb410f1bad1d0e949a392f1d8a3fc721f5893a17eced8862508811fb20d903631e6a58055068b1bebb602bd9155b3a1409106b8279ec2dd0fede8ce6ec56507dcc13fd482c38c15a24a209543286da555e4b7c2d25b8beb9593c1f0352c7143b8837c0eb906"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003e0000000e003aa23423215508697930f0de9115974923ecbb6c27b0dc8ce11ddf1f217a0552cefc54b3ad857968711ddec7b8aea1950b4c90a7b97fd9be31783bb7e4913bfc2f6411aadfff8669cca885f61ae0a12ea1c91bedf1ffbd01b321448cd8185110eb94105c1205b21fee34c065a1c0131618eddd153cf8a56b4dba0672baf73993e356c5ec8c584221812c25da852e5a71a8516756fd7a6cb99794dfa11a5c1fa10970136e951734fc9503f3256ed490766fe3e97cf4e447f6f5670a4a9880f000000641ce11f4d5e820020aad121e9f050dea843bca88fb91bae63ca404f32"], &(0x7f00000009c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x0, 0x2, "f40500", "0c1d1635"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0xd, 0xf0, 0x0, 0x1, 0x1}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0xf, 0x6, "01f598b99cdf"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9c}, &(0x7f00000005c0)={0x20, 0x0, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0xb68, 0x22}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "ead1"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "e62b"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x2b}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x5f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0xd, '\x00', @buffer={"21e109bbd40fa1070000000000000000000004903e9583d9fa9372c5ef3d00", 0x20}, 0x12}, {0xc, '\x00', @data=0x5, 0x4}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) 10m3.009785718s ago: executing program 1 (id=1212): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r0, 0x3) setreuid(0xee00, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 10m2.886379899s ago: executing program 2 (id=1213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x5393, &(0x7f0000000000)) renameat2(r2, &(0x7f0000000280)='./cgroup\x00', r1, &(0x7f0000000000)='./file0/file0\x00', 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) move_mount(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', r2, &(0x7f0000000340)='./cgroup\x00', 0x154) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffdbd, 0xfa00, {0x20000008, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @mcast2, 0x2}, {0xa, 0x4e25, 0x7, @loopback, 0x3}, r4, 0x7}}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socket(0x2, 0x3, 0x101) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2000) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r13, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r14, 0x1}}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r12, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r15 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r15, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r12, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={r7, r8+60000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 10m1.909650263s ago: executing program 2 (id=1214): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:\xe2\x00\xf7\x8a'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000080)={0x9e, "961b7658ab7b31d84deb79c56dd9e410be1e3c79a65e789dca165461c65cd2dc", 0x200, 0x3, 0x3, 0x8}) close(r1) socket$kcm(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000001c0)={'lo\x00'}) 10m1.820018336s ago: executing program 1 (id=1215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x34}}, 0x4004850) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x5e94479dcf0d00e7, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0xd24, 0x40000) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x5}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 10m1.456812112s ago: executing program 2 (id=1216): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='ntfs3\x00', 0x0, &(0x7f00000001c0)='acl') r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000006040)=[{{&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}, {{&(0x7f0000001e00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000003300)=[{&(0x7f0000000980)='\x00 ', 0x2}], 0x1}}], 0x2, 0x48000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x14, 0x4, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r6}, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 10m1.433300307s ago: executing program 0 (id=1217): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x1000, 0x4cf5, 0xfffd}, 0x3, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x503, 0x4, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x1a8, 0x0, 0x10001, 0x7, 0x0, 0xfffffffe, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2004, 0xfffffffc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x10000], [0x0, 0x0, 0x3, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0xfffffff4, 0xd0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x689, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x3, 0x0, 0x81, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffd, 0xb7, 0x807ffff, 0x0, 0x0, 0x0, 0x5b7f28b1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x7, 0x3, 0x20000, 0xe13, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffff45, 0x200], [0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x5, 0x54, 0x5e68, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x80, 0x0, 0x0, 0xfffffffb, 0xfffffffe, 0x85, 0xfffffffc, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="88", 0x1}], 0x1) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r4, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x22, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53"}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) close_range(r1, 0xffffffffffffffff, 0x0) 9m48.108105511s ago: executing program 32 (id=1211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x2000c001) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0xf3, {0xf3, 0x1, "942c3bc0fd08517265b1ddb475a9362c55753de03ebc79fefeff5ae2075b58ef5fe8736ca9e1a8ddb58da9969d40223fcb382dc0c91c25c86b4db18acdbd125fba271896e764647ecede2dfea275d75247892d92ad6b9d299a621524c82601f04eaa3f3d1e122048b874665baa43f6e42178d3b97ae21a7d67423893a9c8dba6e00651257af26add3634069eb410f1bad1d0e949a392f1d8a3fc721f5893a17eced8862508811fb20d903631e6a58055068b1bebb602bd9155b3a1409106b8279ec2dd0fede8ce6ec56507dcc13fd482c38c15a24a209543286da555e4b7c2d25b8beb9593c1f0352c7143b8837c0eb906"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003e0000000e003aa23423215508697930f0de9115974923ecbb6c27b0dc8ce11ddf1f217a0552cefc54b3ad857968711ddec7b8aea1950b4c90a7b97fd9be31783bb7e4913bfc2f6411aadfff8669cca885f61ae0a12ea1c91bedf1ffbd01b321448cd8185110eb94105c1205b21fee34c065a1c0131618eddd153cf8a56b4dba0672baf73993e356c5ec8c584221812c25da852e5a71a8516756fd7a6cb99794dfa11a5c1fa10970136e951734fc9503f3256ed490766fe3e97cf4e447f6f5670a4a9880f000000641ce11f4d5e820020aad121e9f050dea843bca88fb91bae63ca404f32"], &(0x7f00000009c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x0, 0x2, "f40500", "0c1d1635"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0xd, 0xf0, 0x0, 0x1, 0x1}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0xf, 0x6, "01f598b99cdf"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9c}, &(0x7f00000005c0)={0x20, 0x0, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0xb68, 0x22}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "ead1"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "e62b"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x2b}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x5f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0xd, '\x00', @buffer={"21e109bbd40fa1070000000000000000000004903e9583d9fa9372c5ef3d00", 0x20}, 0x12}, {0xc, '\x00', @data=0x5, 0x4}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) 9m46.414375186s ago: executing program 33 (id=1215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x34}}, 0x4004850) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x5e94479dcf0d00e7, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0xd24, 0x40000) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x5}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 9m46.250630809s ago: executing program 34 (id=1217): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x1000, 0x4cf5, 0xfffd}, 0x3, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x503, 0x4, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x1a8, 0x0, 0x10001, 0x7, 0x0, 0xfffffffe, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2004, 0xfffffffc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x10000], [0x0, 0x0, 0x3, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0xfffffff4, 0xd0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x689, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x3, 0x0, 0x81, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffd, 0xb7, 0x807ffff, 0x0, 0x0, 0x0, 0x5b7f28b1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x7, 0x3, 0x20000, 0xe13, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffff45, 0x200], [0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x5, 0x54, 0x5e68, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x80, 0x0, 0x0, 0xfffffffb, 0xfffffffe, 0x85, 0xfffffffc, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="88", 0x1}], 0x1) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r4, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x22, "5c76276f6c86622447099377e66e2e9d40f7cb08a213db2d0bab5fbe9cc1cb0a2d53"}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) close_range(r1, 0xffffffffffffffff, 0x0) 9m46.001610015s ago: executing program 35 (id=1216): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='ntfs3\x00', 0x0, &(0x7f00000001c0)='acl') r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000006040)=[{{&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}, {{&(0x7f0000001e00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000003300)=[{&(0x7f0000000980)='\x00 ', 0x2}], 0x1}}], 0x2, 0x48000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x14, 0x4, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r6}, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 3m58.683789707s ago: executing program 7 (id=2308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x81ef}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xa}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 3m58.332407013s ago: executing program 7 (id=2311): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000040)={0x7, 0x6, 0x8, 0x2, 0x5c, 0x8, 0x4}) 3m58.298299525s ago: executing program 7 (id=2313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000480)={r4, 0x4, 0x5f, 0x6, 0x3, [r5, 0x0, 0x0, r6], [0x7, 0x1, 0x200, 0x8], [0x800000, 0xd2d0, 0x9], [0x1, 0xe06, 0x9, 0x7]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000000c0)={r2, 0x0, r4, 0xa46a, 0x2, 0x9, 0x40, 0xfffffff9, 0x3, 0xc0, 0xadc, 0x400}) 3m58.152973649s ago: executing program 7 (id=2314): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521", 0x1d}], 0x1}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400000000000002, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0xa462}, 0x0, &(0x7f0000000100)={0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="de", 0x1) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000040)=0x80000000) 3m55.460592583s ago: executing program 7 (id=2320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x200541) munlockall() r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x40, 0x24, 0x7f, {0x7f, 0x0, "2164123321483441591cfdd4f98cbe3000b2f6747893fec726e921b886b256aabade2d530e7e4f7ff5a3459927499c597f75a324fcafc964214ad1557bb7f93b46b0c7d19a99d5fb795ab556b3aee529b9943101e54681e83c78dc2f2cce951146c2cd34ba1a37f3c5339f875683b0341f8f0c05b065b0d2855cf3b0cf"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f00000006c0)={0x40, 0x1, 0xf9, "bfc271f979cef64ace67bc15ea1a32833590078ecfe7be0c4774b8ebbca65ada3cdd421601b57d160f99aae64a973ee4775d803b5585a2adbfb38a9e8aab19fd05958e0175a07e7339a0d4b359d95216d3d1bb558d9fe39fefd24e24d22e4fe03dc952537879fe1c8d090d68c3b971e304f0a4c1802fd2252deeff8a1e9da06cd7cc839ced0b26948edf7374a79135a43634511e926d22c18764229a014fdde72c5519e16e75be261763c24ff7e7ef4afc7ae8d2368ee5de70da26521ae61103350d4538db623f0bc2fa99c9c8a01f25f43b4f7a1dd91e036077ed29754c08865dc5f7fdda523c45a9c463ebaba0a2a6d420679912a4ba61b6"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x3}}) sendmmsg$inet(r5, &(0x7f0000004300)=[{{&(0x7f0000001800)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}}, {{&(0x7f0000002f00)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000004100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xab}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11}}], 0x30}}], 0x2, 0x24044000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d8000000030000000d00007f0000000a020000000e0000000000000204000000020000000000000c0100000010000000000000110500000007000000060000000000000b010000000700000007000093000000001000000003"], 0x0, 0xf3, 0x0, 0x0, 0x5f94}, 0x28) unshare(0x22020600) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m50.513302966s ago: executing program 7 (id=2332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@deltclass={0xc8, 0x29, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8c4696f2810341fa, 0xfff0}, {0xe, 0xfff1}, {0xffe0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xa}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x70, 0x6}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}, @TCA_RATE={0x6, 0x5, {0x39, 0x5}}, @tclass_kind_options=@c_qfq={{0x8}, {0x54, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xd}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80000000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xeb6}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xa}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}, @tclass_kind_options=@c_multiq={0xb}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r8, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) close(r7) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r9, 0x80e85411, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x10000, 0x0, 0x800, 0xffffffffffffffff, 0x135, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8650bf77ffef8b55}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m35.400514948s ago: executing program 36 (id=2332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@deltclass={0xc8, 0x29, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8c4696f2810341fa, 0xfff0}, {0xe, 0xfff1}, {0xffe0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xa}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x70, 0x6}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}, @TCA_RATE={0x6, 0x5, {0x39, 0x5}}, @tclass_kind_options=@c_qfq={{0x8}, {0x54, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xd}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80000000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xeb6}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xa}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}, @tclass_kind_options=@c_multiq={0xb}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r8, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) close(r7) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r9, 0x80e85411, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x10000, 0x0, 0x800, 0xffffffffffffffff, 0x135, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8650bf77ffef8b55}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.256609178s ago: executing program 9 (id=3403): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000c40), 0x0, 0x400) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000d00)={0x0, 0x5, 0x4, 0xffffff81, 0x1, 0x81, 0x7}) rseq(0x0, 0x0, 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0xffff000000000000, 0x0, 0x1}, 0x8080) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) 11.821127404s ago: executing program 5 (id=3407): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x15) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x400000009) kexec_load(0xd0ffbd, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 11.743220954s ago: executing program 9 (id=3408): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4000400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008800}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ff011f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020090"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x268, 0x33a, 0x150, 0x268, 0x288, 0x460, 0x460, 0x288, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0xd8000000, {0x9402}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xdf1b, 'syz1\x00', {0x40}}}}, {{@ipv6={@remote, @empty, [], [], 'pim6reg0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) syz_usb_connect$midi(0x0, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x3b, &(0x7f0000000040)=@string={0x3b, 0x3, "20db7b8076822a68a251ac16217605820d91f6717a380a5906ff52a2217a0d85f6cd19afa47f4b38feb941734f37668e61012b9a841f18f6f3"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x406}}, {0x84, &(0x7f0000000440)=@string={0x84, 0x3, "92100e6375331a2d4c2d7697ce2b629bdac6d06acc9f7aae9683d494b7742357756de9fe2bf6964da7d4116d7d6852c8af9a64f7248d297dd1695dcc63aeb126c1cabcc55fb0c17c20e8e8ddd526038b31f647b711f43f30443c92c21d326010832fbb37e1d64aa538fb5861e246fadc9109224d089dcce7ca8b2848004632a6940d"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x447}}, {0x30, &(0x7f00000005c0)=@string={0x30, 0x3, "90455c78f99f904cdd571018520befceb762ca344d417d27f045b1d7b01787ac479cfac87c5f168aabff3fb75902"}}]}) syz_emit_ethernet(0x9b, &(0x7f0000000680)={@remote, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x65, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, {[@fragment={0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0x67}, @routing={0x84, 0x0, 0x2, 0x8}, @dstopts={0x2b, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @enc_lim]}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x4, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0xfffffffffffffff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) 8.989746815s ago: executing program 5 (id=3416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x7) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x8041) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x20004) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x44) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) 8.60163136s ago: executing program 9 (id=3417): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r1, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7b3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'sh\x00', 0x0, 0x4, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44) 7.828557567s ago: executing program 8 (id=3418): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000c00)={0x5, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8000000000000000, 0x7f}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000020601000000000600000000030000000e0003006269740005000400000200000900020073797a30000000001c0e07800c00020c08000140000000000c0001800c000140ffffffff05000520020000000500010006", @ANYRESOCT=r1], 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 7.421965373s ago: executing program 5 (id=3419): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="2000000010000107003f0000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) 7.202297805s ago: executing program 8 (id=3420): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) r3 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f00000000c0)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r6, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fbf52ee4507000002000000250600000ee60000bf250000000000001f010000000000006507040002000000070700004c0000001f75000000000000bf540000000000000704000004000bffbd350100000000009500000000000000050000000000000095000000000000001f1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb600100000a4911fe82664d775cdb9dfc83fa32db39b636c1866b526ffff00005172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416b5d6902e7db826e6dffda3aabdc5b5ce08ca4ee6035f1b7dc6b3b4672f7c22efa6d633473cd548789f8ab5a654106888aff6f3eb7e962160dac2c68c044584bb50e9c0952bab14c2c65176c7e40faaea21457d5f2d6f40c4d3390a1e14561cbf0a6ccd15f45c52753e24c6488b23ec9a3261c7706cecfc37b25b382c76631983e053efde84f80c5483d26bfaa66bf477cca77d399c76469551913f98a26fa0363ebb7f861a3d53d4dd6d91f7dcefb0748cd20346878bc0759851cd32ba781d6e62e8eee022be7fb6fff27871a5a7a723e5e330f454f0c568fbfc9b901bd6cc3af8355e5ecf3f74a472c7861beeeba7d5d25208a2e1d4c0b8e4f82ce05ffe1c69aaea312bbb3656c873b26161dccd130823e87d0b411e6fdb2cc4def13ecdf4217b647803c9dbaba0cd1036081842b7fc3a30759c24058ad22001bc2817d4604bc2d49bf41894e61356ddf6d394a397c67321a0dd4ac4082ee583de98e8a89535050054d40a4dbd809d0ce9c444286b5d5a51d933d35714d8ca7fb49b5329107825926fd5caaf4ddd1e81e616fc56e47d30e51cd558d630f665a88da23e96c45a0a4ccd554a92628336eb43de1022d60e5ffe41b6bef61ea28c5ea09a832f9f84b10aa4b6350930b11865184fce06bb8bf64b578e8477d3440526aa2055daa7945db10e7c2cf517d954fc2db6cdee34cff68b43fef6205f2cf390e1bc4ee8ee0b5f204bf14c30a54196863eb6c707de3b344a6f84b47be3012b55d41da4c0bc43af548ee4b98c8599008d140e106138c6469cbc3857beddafd53fd1ba63b4786d5efec1942049aae281112e43477f0bf74ce9f2acc9bc6dd58a434eb41ad1a5cd4f753c32f2a40ff3c0c25a6f7833acfee9fc332eca2a41a97e832240b574a6413334f8b1ce08f6b560569355cac2d81191aaa6f3849433ed3f4617a04e22917c889f878486657fc6c001d90dc4e3d609f0ee78305143c60140a2396e959d8430fdcd7ccfaa0b0ba1dcb130f25714a191dbe2efeab57746e44a4344eaaf95c70d7043145f560b2e633f546a8c6b1aca8fa92ddd95b5aeade2ca2bb39a19e9250ae15e3a083914ec19605f13b7f1dedb7d26a9713f920d9b83b038863f066ef0e0cef0b63927773078a6c9187881b96c14bcfb475a6cb07fc2e434ecd4c58b8dd7e8282d966d7d184dc1513c4fa2e161c26742d7c7a5afcb85291c9393206729cc9aa027814b03cbb598c5bd01fd63478d10e9a6c94a211be56e5b8bd4d6777eafa4fa777695b941bb65be7651828c9c7f6b68cd7e1b62f4d6a3b5cacbb7d340d76"], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @remote, @multicast1}, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) bind$packet(r7, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/46, 0x2e}], 0x1, 0x144f, 0x4) 7.140432582s ago: executing program 5 (id=3421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000280)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd, 0x7}, {0x3}, @note={0x81}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}, {0x4, 0xcf, 0xb9, 0x3, @tick=0x9, {0x7, 0x7}, {0x1, 0x2}, @ext={0x0, 0x0}}], 0x70) close(0x3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 6.958037502s ago: executing program 3 (id=3422): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0x0, 0xee00, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) dup2(r1, r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d30000020010680"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x8000000) socket$inet6_sctp(0xa, 0x5, 0x84) ptrace(0x10, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) 6.748317835s ago: executing program 5 (id=3423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4f, 0x408d5) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000840)={0x1, 0x0, 0x7, 0x8}, &(0x7f00000008c0)=0x10) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000340)=@can, 0x80, &(0x7f0000002800)=[{&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000002540)=""/178, 0xb2}, {&(0x7f0000002600)=""/235, 0xeb}, {&(0x7f0000002700)=""/250, 0xfa}], 0x9, &(0x7f00000028c0)=""/40, 0x28}, 0x3}, {{&(0x7f0000002900)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002980)=""/232, 0xe8}, {&(0x7f0000002a80)=""/1, 0x1}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/200, 0xc8}, {&(0x7f0000003bc0)=""/159, 0x9f}, {&(0x7f0000000780)=""/157, 0x9d}], 0x6, &(0x7f0000003dc0)=""/109, 0x6d}, 0xfffffffd}], 0x2, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="11a9b50f6a7086af9d3f4605796b9df80000ff", @ANYRES16=0x0, @ANYBLOB="0400fdffffffffdbff250b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000046000000"], 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, &(0x7f0000000300)) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78082, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040) socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) 6.685051072s ago: executing program 3 (id=3424): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x100000000000000, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.624390152s ago: executing program 9 (id=3425): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 6.461637951s ago: executing program 9 (id=3427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x800) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x24, 0x0, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r6, 0x54a6) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)="4757bcf1") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 6.317690757s ago: executing program 3 (id=3428): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0xb, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @local}}, 0x3}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000027c00000400c280140001800600060088470000060017"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000040)={0xc, 0x10a, 0x800, 0x6, 0x5ba}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000c80)=""/102392, 0x18ff8) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) sendfile(r6, r6, 0x0, 0x400000000000000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x318, 0x0, 0x298, 0xfeffffff, 0x298, 0x0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @private=0xa010102, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x67, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 5.680825969s ago: executing program 5 (id=3429): symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:mtrr_device_t:s0\x00', 0x23, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) unshare(0x62020600) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x17f) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x20000050}, 0x24040854) r7 = socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x11, r1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000301010300000000000000000a0040020c000093080001001dbe977190586d010000300001800c000180140003002001000010000000000000000000000214000400fc00"/84], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000300000000000000000000000000000200000000000000"], 0x0, 0x56}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 5.140821229s ago: executing program 3 (id=3430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f0000001c80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000003cc0)={0x20080522, r6}, &(0x7f0000003d00)={0x8, 0x42ec, 0x81, 0x3, 0x0, 0x7fffffff}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.768055947s ago: executing program 6 (id=3431): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) getpid() ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201110100000008050b431740000102030109021200010106f00b0904000000010300809448ea"], &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$PPPIOCSACTIVE(r2, 0x40047459, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28280, 0x0) syz_clone(0x10100000000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.633197193s ago: executing program 9 (id=3432): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000200)='m', 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400000000000002, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0xa462}, 0x0, &(0x7f0000000100)={0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r6, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f0000000040)=0x80000000) 3.844949269s ago: executing program 6 (id=3433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000055a60701000000001000000018100100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'xfrm0\x00', @multicast}) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010017733336088dee1adb23610000000109024a0001000000000904000003fe03010009cd8d1f000200000009050502"], 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) 3.567400794s ago: executing program 8 (id=3434): setuid(0xee01) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz1\x00', 0x53}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r1, 0x1) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setpgid(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) flock(0xffffffffffffffff, 0xc) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) ioctl$UI_SET_RELBIT(r0, 0x4008556c, 0x7) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) 3.349960426s ago: executing program 3 (id=3435): ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x1bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x16b}, 0x50) r1 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r2 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x1}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) 3.065747214s ago: executing program 6 (id=3436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c000180"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0xf000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) 2.976854376s ago: executing program 8 (id=3437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0xc8}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x410fd, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x20044044) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000001080)) syz_open_dev$MSR(&(0x7f0000001280), 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r10, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff}, {0xd}}}, 0x24}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) getsockname$packet(r12, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002c00)=@delchain={0x48, 0x2c, 0xf31, 0x0, 0x25dbdbfe, {0x0, 0x0, 0x0, r10, {0x4}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x10}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008854}, 0x4008004) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r4, r13, &(0x7f0000000580)={0x0, 0x1d8c, 0x8, 0x0, 0x111, 0x0, r4}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x100, 0x3, 0x81, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x8, 0x3, 0x8e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x2, 0x2, 0x16a, 0x0, r4}}], 0x4, &(0x7f0000002f00)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x3, 0xc0, 0x0, 0x0}}, &(0x7f0000002f80)) listen(0xffffffffffffffff, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r14, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r14, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r15, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) 2.803605092s ago: executing program 6 (id=3438): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0x51) (async) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x92ed, 0x3}, {0xffff, 0x2}]}, 0x14, 0x0) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x801, 0x10) fsetxattr(r3, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080006"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000140)={{}, 'port1\x00', 0x99, 0x810, 0x0, 0x5, 0x5, 0x9, 0x2, 0x0, 0x3, 0x78}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 2.495560263s ago: executing program 6 (id=3439): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x4044094}, 0x14) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/84, 0x54}], 0x1}, 0x40012001) socket$qrtr(0x2a, 0x2, 0x0) 2.387370857s ago: executing program 3 (id=3440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x100, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff8, 0xa, 0xd, 0x6, 0x4, 0x6df, 0xb5, 0x0, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x28, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffff6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}}}, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth0_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioperm(0x5, 0x6, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfd86}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8040) r7 = socket(0x2, 0x80805, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)="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", 0x176}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 1.12494287s ago: executing program 8 (id=3441): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) socket(0x11, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2054) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/67, 0x43, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x125e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 588.597291ms ago: executing program 8 (id=3442): syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000040b4040b93400001020301090271000301023092080b010c0105209809040000008301200009240102000311000008240a08f8960e020904010000010220000904010101010220000905010908000807550825018000ff0002090402000001022000090402010101022000820900020505f7082501000f05470a0000"], &(0x7f0000000500)={0x0, 0x0, 0x38, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f3800040a100300020007090200fe0f"]}) 0s ago: executing program 6 (id=3443): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) memfd_create(0x0, 0xc) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x40000000, 0x2400002}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000500)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000000)={r1}) kernel console output (not intermixed with test programs): /msr' to dns_resolver key: bad/missing value [ 843.629441][ T29] audit: type=1400 audit(1780855394.770:1888): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 843.693144][T15936] audit: audit_backlog=65 > audit_backlog_limit=64 [ 843.700114][ T29] audit: type=1400 audit(1780855394.820:1889): avc: denied { create } for pid=15934 comm="syz.6.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 843.729510][T15936] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 843.745717][T15936] audit: backlog limit exceeded [ 843.757961][T15936] audit: audit_backlog=65 > audit_backlog_limit=64 [ 843.772999][T15936] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 844.465474][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2496'. [ 844.699741][T15974] FAULT_INJECTION: forcing a failure. [ 844.699741][T15974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.743415][T15974] CPU: 1 UID: 0 PID: 15974 Comm: syz.8.2500 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.743438][T15974] Tainted: [L]=SOFTLOCKUP [ 844.743442][T15974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.743449][T15974] Call Trace: [ 844.743453][T15974] [ 844.743458][T15974] dump_stack_lvl+0x100/0x190 [ 844.743475][T15974] should_fail_ex.cold+0x5/0xa [ 844.743491][T15974] _copy_from_user+0x2e/0xd0 [ 844.743507][T15974] kstrtouint_from_user+0xd6/0x1d0 [ 844.743524][T15974] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 844.743541][T15974] ? __lock_acquire+0x4a5/0x2630 [ 844.743563][T15974] ? lock_acquire+0x1b1/0x370 [ 844.743587][T15974] proc_fail_nth_write+0x83/0x220 [ 844.743606][T15974] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 844.743631][T15974] vfs_write+0x2aa/0x1070 [ 844.743647][T15974] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 844.743661][T15974] ? __pfx_vfs_write+0x10/0x10 [ 844.743673][T15974] ? __fget_files+0x215/0x3d0 [ 844.743691][T15974] ? __fget_files+0x21f/0x3d0 [ 844.743709][T15974] ksys_write+0x12a/0x250 [ 844.743722][T15974] ? __pfx_ksys_write+0x10/0x10 [ 844.743737][T15974] ? rcu_is_watching+0x12/0xc0 [ 844.743756][T15974] do_syscall_64+0x115/0x870 [ 844.743771][T15974] ? clear_bhb_loop+0x40/0x90 [ 844.743785][T15974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.743797][T15974] RIP: 0033:0x7f4bf175d68e [ 844.743807][T15974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 844.743818][T15974] RSP: 002b:00007f4bf2681fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 844.743830][T15974] RAX: ffffffffffffffda RBX: 00007f4bf26826c0 RCX: 00007f4bf175d68e [ 844.743837][T15974] RDX: 0000000000000001 RSI: 00007f4bf26820a0 RDI: 0000000000000003 [ 844.743844][T15974] RBP: 00007f4bf2682090 R08: 0000000000000000 R09: 0000000000000000 [ 844.743850][T15974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.743857][T15974] R13: 00007f4bf1a16038 R14: 00007f4bf1a15fa0 R15: 00007fffa5203278 [ 844.743871][T15974] [ 846.203466][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2511'. [ 846.280911][T16007] netlink: 'syz.9.2511': attribute type 7 has an invalid length. [ 846.280944][T16007] netlink: 'syz.9.2511': attribute type 8 has an invalid length. [ 846.280970][T16007] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2511'. [ 846.875111][T16029] IPVS: lc: FWM 3 0x00000003 - no destination available [ 847.298543][T16039] xt_NFQUEUE: number of total queues is 0 [ 848.425102][ T29] kauditd_printk_skb: 602 callbacks suppressed [ 848.425119][ T29] audit: type=1400 audit(1780855399.635:2491): avc: denied { create } for pid=16063 comm="syz.8.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 848.453412][T16064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16064 comm=syz.8.2528 [ 848.485309][ T29] audit: type=1400 audit(1780855399.685:2492): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 848.547324][ T29] audit: type=1400 audit(1780855399.735:2493): avc: denied { write } for pid=16065 comm="syz.8.2529" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 848.571530][ T29] audit: type=1400 audit(1780855399.735:2494): avc: denied { write } for pid=16065 comm="syz.8.2529" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 848.595179][ T29] audit: type=1400 audit(1780855399.735:2495): avc: denied { read } for pid=16065 comm="syz.8.2529" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 848.685437][ T29] audit: type=1400 audit(1780855399.735:2496): avc: denied { create } for pid=16065 comm="syz.8.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 848.750200][ T29] audit: type=1400 audit(1780855399.735:2497): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 848.913739][ T29] audit: type=1400 audit(1780855400.085:2498): avc: denied { execmem } for pid=16068 comm="syz.8.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 849.123402][ T29] audit: type=1400 audit(1780855400.295:2499): avc: denied { read write } for pid=10497 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 849.206841][ T29] audit: type=1400 audit(1780855400.425:2500): avc: denied { read write } for pid=16072 comm="syz.5.2531" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 852.378353][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2562'. [ 852.458268][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2563'. [ 852.535829][T16157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 852.584864][T16160] ipvlan2: entered allmulticast mode [ 852.596072][T16160] bond1: entered allmulticast mode [ 852.624934][T16157] bridge1: entered allmulticast mode [ 852.631083][T16157] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 852.724221][T16172] Option ' /msr' to dns_resolver key: bad/missing value [ 853.446238][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 853.456713][ T29] audit: type=1400 audit(1780855404.655:2758): avc: denied { create } for pid=16192 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 853.484035][ T29] audit: type=1400 audit(1780855404.665:2759): avc: denied { create } for pid=16195 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 853.517293][ T29] audit: type=1400 audit(1780855404.725:2760): avc: denied { create } for pid=16195 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 853.546999][ T29] audit: type=1400 audit(1780855404.725:2761): avc: denied { read } for pid=16195 comm="syz.5.2576" dev="nsfs" ino=4026532791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 853.622748][ T29] audit: type=1400 audit(1780855404.725:2762): avc: denied { create } for pid=16195 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 853.660860][ T29] audit: type=1400 audit(1780855404.725:2763): avc: denied { create } for pid=16195 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 853.721954][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 853.739536][ T29] audit: type=1400 audit(1780855404.725:2764): avc: denied { read write } for pid=16195 comm="syz.5.2576" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 853.764919][ T29] audit: type=1400 audit(1780855404.725:2765): avc: denied { create } for pid=16195 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 853.796536][ T29] audit: type=1400 audit(1780855404.725:2766): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 853.822909][ T29] audit: type=1400 audit(1780855404.725:2767): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 853.858544][T10349] Bluetooth: hci6: Frame reassembly failed (-84) [ 853.937563][T16199] FAULT_INJECTION: forcing a failure. [ 853.937563][T16199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.967891][T16199] CPU: 0 UID: 0 PID: 16199 Comm: syz.8.2579 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.967923][T16199] Tainted: [L]=SOFTLOCKUP [ 853.967930][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.967945][T16199] Call Trace: [ 853.967951][T16199] [ 853.967958][T16199] dump_stack_lvl+0x100/0x190 [ 853.967985][T16199] should_fail_ex.cold+0x5/0xa [ 853.968010][T16199] _copy_to_user+0x32/0xd0 [ 853.968034][T16199] simple_read_from_buffer+0xcb/0x170 [ 853.968058][T16199] proc_fail_nth_read+0x1af/0x230 [ 853.968078][T16199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.968099][T16199] ? rw_verify_area+0xce/0x6d0 [ 853.968116][T16199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.968134][T16199] vfs_read+0x1e4/0xb30 [ 853.968155][T16199] ? __pfx_vfs_read+0x10/0x10 [ 853.968173][T16199] ? __fget_files+0x215/0x3d0 [ 853.968199][T16199] ? __fget_files+0x21f/0x3d0 [ 853.968227][T16199] ksys_read+0x12a/0x250 [ 853.968245][T16199] ? __pfx_ksys_read+0x10/0x10 [ 853.968266][T16199] ? rcu_is_watching+0x12/0xc0 [ 853.968294][T16199] do_syscall_64+0x115/0x870 [ 853.968316][T16199] ? clear_bhb_loop+0x40/0x90 [ 853.968337][T16199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.968354][T16199] RIP: 0033:0x7f4bf175d68e [ 853.968368][T16199] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 853.968384][T16199] RSP: 002b:00007f4bf2681fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.968402][T16199] RAX: ffffffffffffffda RBX: 00007f4bf26826c0 RCX: 00007f4bf175d68e [ 853.968413][T16199] RDX: 000000000000000f RSI: 00007f4bf26820a0 RDI: 0000000000000007 [ 853.968423][T16199] RBP: 00007f4bf2682090 R08: 0000000000000000 R09: 0000000000000000 [ 853.968433][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.968443][T16199] R13: 00007f4bf1a16038 R14: 00007f4bf1a15fa0 R15: 00007fffa5203278 [ 853.968467][T16199] [ 855.712265][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 855.876600][ T5620] Bluetooth: hci6: command 0x1003 tx timeout [ 855.876835][T10524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 855.938287][T16263] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2599'. [ 857.779958][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2618'. [ 857.837570][T16315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16315 comm=syz.3.2618 [ 858.387133][T16320] netlink: 'syz.9.2620': attribute type 1 has an invalid length. [ 858.467465][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 858.467480][ T29] audit: type=1400 audit(1780855409.685:2991): avc: denied { read write } for pid=16319 comm="syz.9.2620" name="vbi6" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 858.475905][ T29] audit: type=1400 audit(1780855409.685:2992): avc: denied { read } for pid=16319 comm="syz.9.2620" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 858.509952][ T29] audit: type=1400 audit(1780855409.715:2993): avc: denied { name_bind } for pid=16319 comm="syz.9.2620" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 858.598658][T16320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 858.779340][ T29] audit: type=1400 audit(1780855409.995:2994): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 858.820064][ T29] audit: type=1400 audit(1780855410.035:2995): avc: denied { read write } for pid=10497 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 858.856176][ T29] audit: type=1400 audit(1780855410.065:2996): avc: denied { create } for pid=16328 comm="syz.5.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 858.878656][ T29] audit: type=1400 audit(1780855410.095:2997): avc: denied { execmem } for pid=16328 comm="syz.5.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 858.880942][ T29] audit: type=1400 audit(1780855410.095:2998): avc: denied { read } for pid=16328 comm="syz.5.2623" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 858.882206][ T29] audit: type=1400 audit(1780855410.095:2999): avc: denied { map_create } for pid=16330 comm="syz.9.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 858.889300][ T29] audit: type=1400 audit(1780855410.105:3000): avc: denied { create } for pid=16328 comm="syz.5.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 859.548002][T16345] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 860.305065][T16359] x_tables: duplicate underflow at hook 3 [ 860.327805][T16359] netlink: 'syz.6.2633': attribute type 4 has an invalid length. [ 860.663533][T16368] xt_nfacct: accounting object `syz1' does not exist [ 862.303027][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2649'. [ 862.366037][T16399] batadv0: entered promiscuous mode [ 862.420144][T16399] macsec1: entered promiscuous mode [ 862.444041][T16399] macsec1: entered allmulticast mode [ 862.450748][T16399] batadv0: entered allmulticast mode [ 862.493723][T16399] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 862.562111][T16399] batadv0: left allmulticast mode [ 862.578262][T16399] batadv0: left promiscuous mode [ 862.763541][T16415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2654'. [ 862.799455][T16412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 862.815334][T16412] block device autoloading is deprecated and will be removed. [ 863.374708][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2660'. [ 863.486594][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 863.486623][ T29] audit: type=1400 audit(1780855414.695:3252): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 863.531207][ T29] audit: type=1400 audit(1780855414.705:3253): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 863.567792][ T29] audit: type=1400 audit(1780855414.745:3254): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 863.651106][ T29] audit: type=1400 audit(1780855414.815:3255): avc: denied { read write } for pid=10497 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 863.771140][ T29] audit: type=1400 audit(1780855414.845:3256): avc: denied { read } for pid=16437 comm="syz.8.2664" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 863.895887][ T29] audit: type=1400 audit(1780855414.845:3257): avc: denied { read } for pid=16437 comm="syz.8.2664" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 863.930080][ T29] audit: type=1400 audit(1780855414.845:3258): avc: denied { read } for pid=16437 comm="syz.8.2664" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 864.014778][ T29] audit: type=1400 audit(1780855414.855:3259): avc: denied { create } for pid=16440 comm="syz.9.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 864.110327][ T29] audit: type=1400 audit(1780855414.865:3260): avc: denied { create } for pid=16437 comm="syz.8.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 864.193028][ T29] audit: type=1400 audit(1780855414.905:3261): avc: denied { create } for pid=16442 comm="syz.5.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 864.668166][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.819060][T16480] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 865.825616][T16480] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 865.860817][T16480] vhci_hcd vhci_hcd.0: Device attached [ 865.874106][T16486] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(6) [ 865.880662][T16486] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 865.947885][T16486] vhci_hcd vhci_hcd.0: Device attached [ 866.058347][T16483] vhci_hcd: connection closed [ 866.060094][ T8968] vhci_hcd vhci_hcd.9: stop threads [ 866.060251][T16487] vhci_hcd: connection closed [ 866.064820][ T8968] vhci_hcd vhci_hcd.9: release socket [ 866.064962][ T8968] vhci_hcd vhci_hcd.9: disconnect device [ 866.104680][ T8968] vhci_hcd vhci_hcd.9: stop threads [ 866.109965][ T8968] vhci_hcd vhci_hcd.9: release socket [ 866.115462][ T8968] vhci_hcd vhci_hcd.9: disconnect device [ 866.956395][T10855] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 868.538211][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 868.538227][ T29] audit: type=1400 audit(1780855419.755:3410): avc: denied { read write } for pid=15013 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 868.651505][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2699'. [ 868.711655][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2699'. [ 868.815773][ T29] audit: type=1400 audit(1780855420.025:3411): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 868.972003][ T29] audit: type=1400 audit(1780855420.185:3412): avc: denied { prog_load } for pid=16541 comm="syz.8.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 869.039032][ T29] audit: type=1400 audit(1780855420.215:3413): avc: denied { prog_load } for pid=16541 comm="syz.8.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 869.120361][ T29] audit: type=1400 audit(1780855420.215:3414): avc: denied { prog_load } for pid=16541 comm="syz.8.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 869.214605][ T29] audit: type=1400 audit(1780855420.215:3415): avc: denied { prog_load } for pid=16541 comm="syz.8.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 869.313434][ T29] audit: type=1400 audit(1780855420.295:3416): avc: denied { prog_load } for pid=16541 comm="syz.8.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 869.386604][ T29] audit: type=1400 audit(1780855420.295:3417): avc: denied { read write } for pid=16541 comm="syz.8.2700" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 869.484457][T16537] batman_adv: batadv0: Interface deactivated: bridge_slave_0 [ 869.486946][ T29] audit: type=1400 audit(1780855420.415:3418): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 869.620794][ T29] audit: type=1400 audit(1780855420.505:3419): avc: denied { create } for pid=16544 comm="syz.8.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 869.776151][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.839936][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.507844][ T8970] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.531579][ T8970] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.570490][ T8970] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.621062][ T8970] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.033460][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2715'. [ 872.055273][T16584] bridge_slave_1: left allmulticast mode [ 872.065330][T16584] bridge_slave_1: left promiscuous mode [ 872.084201][T16584] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.122300][T16584] bridge_slave_0: left allmulticast mode [ 872.141799][T16584] bridge_slave_0: left promiscuous mode [ 872.159504][T16584] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.292468][T16593] trusted_key: encrypted_key: insufficient parameters specified [ 873.346930][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2725'. [ 873.548397][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 873.548419][ T29] audit: type=1400 audit(1780855424.765:3577): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 873.629791][ T29] audit: type=1400 audit(1780855424.845:3578): avc: denied { read write } for pid=16616 comm="syz.9.2727" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 873.683867][ T29] audit: type=1400 audit(1780855424.845:3579): avc: denied { execute } for pid=16616 comm="syz.9.2727" name="file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 873.785840][ T29] audit: type=1400 audit(1780855424.995:3580): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 873.869370][ T29] audit: type=1400 audit(1780855425.005:3581): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 873.978322][ T29] audit: type=1400 audit(1780855425.035:3582): avc: denied { read } for pid=16614 comm="syz.3.2726" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 874.079708][ T29] audit: type=1400 audit(1780855425.055:3583): avc: denied { create } for pid=16614 comm="syz.3.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 874.170603][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2729'. [ 874.196504][ T29] audit: type=1400 audit(1780855425.055:3584): avc: denied { write } for pid=16614 comm="syz.3.2726" name="qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 874.319898][ T29] audit: type=1400 audit(1780855425.125:3585): avc: denied { mounton } for pid=16614 comm="syz.3.2726" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 874.438563][ T29] audit: type=1400 audit(1780855425.185:3586): avc: denied { prog_load } for pid=16625 comm="syz.6.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 875.863468][T16667] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 875.863468][T16667] The task syz.6.2742 (16667) triggered the difference, watch for misbehavior. [ 878.015328][T16707] team0 (unregistering): Port device team_slave_0 removed [ 878.018996][T16718] FAULT_INJECTION: forcing a failure. [ 878.018996][T16718] name failslab, interval 1, probability 0, space 0, times 0 [ 878.025500][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2759'. [ 878.089395][T16707] team0 (unregistering): Port device team_slave_1 removed [ 878.116565][T16718] CPU: 1 UID: 0 PID: 16718 Comm: syz.3.2760 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.116597][T16718] Tainted: [L]=SOFTLOCKUP [ 878.116603][T16718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 878.116613][T16718] Call Trace: [ 878.116618][T16718] [ 878.116625][T16718] dump_stack_lvl+0x100/0x190 [ 878.116643][T16718] should_fail_ex.cold+0x5/0xa [ 878.116659][T16718] should_failslab+0xc2/0x120 [ 878.116673][T16718] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 878.116690][T16718] ? do_getname+0x35/0x390 [ 878.116707][T16718] ? fput+0x79/0x100 [ 878.116724][T16718] do_getname+0x35/0x390 [ 878.116743][T16718] __x64_sys_execveat+0xc5/0x130 [ 878.116756][T16718] do_syscall_64+0x115/0x870 [ 878.116772][T16718] ? clear_bhb_loop+0x40/0x90 [ 878.116786][T16718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.116797][T16718] RIP: 0033:0x7fa1c159ce59 [ 878.116808][T16718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.116819][T16718] RSP: 002b:00007fa1c240c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 878.116831][T16718] RAX: ffffffffffffffda RBX: 00007fa1c1815fa0 RCX: 00007fa1c159ce59 [ 878.116838][T16718] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 878.116845][T16718] RBP: 00007fa1c240c090 R08: 1f00000000000000 R09: 0000000000000000 [ 878.116852][T16718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.116858][T16718] R13: 00007fa1c1816038 R14: 00007fa1c1815fa0 R15: 00007ffdaa1588f8 [ 878.116872][T16718] [ 878.347727][T16724] xt_connbytes: Forcing CT accounting to be enabled [ 878.354617][T16724] set match dimension is over the limit! [ 878.630849][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 878.630876][ T29] audit: type=1400 audit(1780855429.845:3760): avc: denied { prog_load } for pid=16727 comm="syz.3.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 878.707981][ T29] audit: type=1400 audit(1780855429.875:3761): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 878.828701][ T29] audit: type=1400 audit(1780855429.895:3762): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 878.940510][ T29] audit: type=1400 audit(1780855429.965:3763): avc: denied { create } for pid=16730 comm="syz.8.2765" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 879.027738][ T29] audit: type=1400 audit(1780855429.985:3764): avc: denied { read write } for pid=16730 comm="syz.8.2765" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 879.091301][ T29] audit: type=1400 audit(1780855429.985:3765): avc: denied { create } for pid=16730 comm="syz.8.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 879.152622][ T29] audit: type=1400 audit(1780855429.985:3766): avc: denied { create } for pid=16730 comm="syz.8.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 879.226969][ T29] audit: type=1400 audit(1780855429.985:3767): avc: denied { name_bind } for pid=16727 comm="syz.3.2762" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 879.281456][ T29] audit: type=1400 audit(1780855429.995:3768): avc: denied { allowed } for pid=16727 comm="syz.3.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 879.348419][ T29] audit: type=1400 audit(1780855429.995:3769): avc: denied { read write } for pid=16729 comm="syz.9.2764" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 880.105940][T16753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16753 comm=syz.3.2768 [ 880.215314][T16755] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2770'. [ 881.800187][T16780] Cannot find set identified by id 0 to match [ 882.459731][T16792] netlink: 'syz.8.2782': attribute type 12 has an invalid length. [ 882.508748][T16792] netlink: 'syz.8.2782': attribute type 29 has an invalid length. [ 882.538313][T16792] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2782'. [ 882.563365][T16792] netlink: 'syz.8.2782': attribute type 1 has an invalid length. [ 882.614470][T16792] netlink: 'syz.8.2782': attribute type 2 has an invalid length. [ 882.657231][T16792] netlink: 11 bytes leftover after parsing attributes in process `syz.8.2782'. [ 883.576586][T16812] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x91 [ 883.671730][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 883.671747][ T29] audit: type=1400 audit(1780855434.885:3910): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 883.770180][ T29] audit: type=1400 audit(1780855434.985:3911): avc: denied { read write } for pid=15013 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 883.883447][ T29] audit: type=1400 audit(1780855435.015:3912): avc: denied { name_bind } for pid=16813 comm="syz.9.2789" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 883.955811][ T29] audit: type=1400 audit(1780855435.065:3913): avc: denied { read } for pid=16818 comm="syz.3.2790" dev="nsfs" ino=4026532787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 884.020409][ T29] audit: type=1400 audit(1780855435.085:3914): avc: denied { create } for pid=16818 comm="syz.3.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 884.105108][ T29] audit: type=1400 audit(1780855435.085:3915): avc: denied { read } for pid=16818 comm="syz.3.2790" dev="nsfs" ino=4026532787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 884.182043][ T29] audit: type=1400 audit(1780855435.165:3916): avc: denied { read } for pid=16807 comm="syz.6.2786" dev="nsfs" ino=4026534295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 884.277095][ T29] audit: type=1400 audit(1780855435.205:3917): avc: denied { read write } for pid=10497 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 884.365506][ T29] audit: type=1400 audit(1780855435.235:3918): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 884.487528][ T29] audit: type=1400 audit(1780855435.265:3919): avc: denied { read write } for pid=15013 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 884.517127][T16829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.605759][T16873] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 888.676766][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 888.676797][ T29] audit: type=1400 audit(1780855439.895:4011): avc: denied { create } for pid=16872 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 888.706392][T16874] syz.8.2806 (16874): /proc/16872/oom_adj is deprecated, please use /proc/16872/oom_score_adj instead. [ 888.796581][ T29] audit: type=1400 audit(1780855440.005:4012): avc: denied { prog_load } for pid=16872 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 888.875915][ T29] audit: type=1400 audit(1780855440.015:4013): avc: denied { create } for pid=16872 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 888.965139][ T29] audit: type=1400 audit(1780855440.035:4014): avc: denied { create } for pid=16872 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 889.045169][ T29] audit: type=1400 audit(1780855440.075:4015): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 889.118546][T16878] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 889.125086][T16878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 889.149195][ T29] audit: type=1400 audit(1780855440.075:4016): avc: denied { create } for pid=16872 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 889.235411][ T29] audit: type=1400 audit(1780855440.085:4017): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 889.307758][T16878] vhci_hcd vhci_hcd.0: Device attached [ 889.336660][ T29] audit: type=1400 audit(1780855440.325:4018): avc: denied { create } for pid=16877 comm="syz.6.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 889.418749][ T29] audit: type=1400 audit(1780855440.385:4019): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 889.421673][T16879] vhci_hcd: connection closed [ 889.541881][ T8968] vhci_hcd vhci_hcd.6: stop threads [ 889.556501][T15753] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 889.565880][ T29] audit: type=1400 audit(1780855440.415:4020): avc: denied { write } for pid=16877 comm="syz.6.2808" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 889.615660][ T8968] vhci_hcd vhci_hcd.6: release socket [ 889.628734][ T8968] vhci_hcd vhci_hcd.6: disconnect device [ 889.672133][T15753] usb 45-1: enqueue for inactive port 0 [ 889.766443][T15753] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 891.827430][T16839] Process accounting resumed [ 892.240623][T16908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 892.282897][T16908] block device autoloading is deprecated and will be removed. [ 893.299062][T16925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2824'. [ 893.699465][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 893.699493][ T29] audit: type=1400 audit(1780855444.915:4119): avc: denied { read } for pid=16924 comm="syz.3.2824" dev="nsfs" ino=4026532787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 893.782636][ T29] audit: type=1400 audit(1780855444.955:4120): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 893.861848][ T29] audit: type=1400 audit(1780855444.955:4121): avc: denied { read write } for pid=10497 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 893.954892][ T29] audit: type=1400 audit(1780855444.955:4122): avc: denied { create } for pid=16924 comm="syz.3.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 894.020882][ T29] audit: type=1400 audit(1780855445.155:4123): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 894.124817][ T29] audit: type=1400 audit(1780855445.205:4124): avc: denied { read } for pid=16935 comm="syz.9.2827" dev="nsfs" ino=4026533260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 894.220558][ T29] audit: type=1400 audit(1780855445.225:4125): avc: denied { read } for pid=16935 comm="syz.9.2827" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 894.313155][ T29] audit: type=1400 audit(1780855445.225:4126): avc: denied { create } for pid=16935 comm="syz.9.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 894.381812][ T29] audit: type=1400 audit(1780855445.235:4127): avc: denied { create } for pid=16935 comm="syz.9.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 894.451855][ T29] audit: type=1400 audit(1780855445.265:4128): avc: denied { create } for pid=16935 comm="syz.9.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 894.554767][T16937] netlink: 'syz.5.2828': attribute type 10 has an invalid length. [ 894.604629][T16937] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2828'. [ 895.493618][T16956] Cannot find set identified by id 0 to match [ 895.645506][T16965] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2838'. [ 896.335713][T10345] Bluetooth: hci6: Frame reassembly failed (-84) [ 897.786678][T15660] Bluetooth: hci4: command 0x1003 tx timeout [ 897.790195][T10524] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 898.346456][T10524] Bluetooth: hci6: command 0x1003 tx timeout [ 898.346472][ T5620] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 898.585880][T16983] syz.8.2843 (16983): drop_caches: 2 [ 898.714325][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 898.714357][ T29] audit: type=1400 audit(1780855449.925:4383): avc: denied { create } for pid=17012 comm="syz.9.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 898.776759][ T29] audit: type=1400 audit(1780855449.935:4384): avc: denied { read write } for pid=17013 comm="syz.8.2856" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 898.817286][ T29] audit: type=1400 audit(1780855449.975:4385): avc: denied { execmem } for pid=17012 comm="syz.9.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 898.868930][ T29] audit: type=1400 audit(1780855450.025:4386): avc: denied { create } for pid=17012 comm="syz.9.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 898.906721][ T29] audit: type=1400 audit(1780855450.035:4387): avc: denied { create } for pid=17012 comm="syz.9.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 898.955870][ T29] audit: type=1400 audit(1780855450.145:4388): avc: denied { read write } for pid=10497 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 899.009543][ T29] audit: type=1400 audit(1780855450.165:4389): avc: denied { create } for pid=17018 comm="syz.5.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 899.047920][ T29] audit: type=1400 audit(1780855450.205:4390): avc: denied { create } for pid=17018 comm="syz.5.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 899.088425][ T29] audit: type=1400 audit(1780855450.205:4391): avc: denied { read write } for pid=17018 comm="syz.5.2857" name="vbi1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 899.176235][ T29] audit: type=1400 audit(1780855450.215:4392): avc: denied { read write } for pid=17018 comm="syz.5.2857" name="vbi1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 899.775105][T17041] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 899.781651][T17041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 899.809734][T10345] Bluetooth: hci4: Frame reassembly failed (-84) [ 899.820775][T17041] vhci_hcd vhci_hcd.0: Device attached [ 899.886580][T17042] usbip_core: unknown command [ 899.893794][T17042] vhci_hcd: unknown pdu 0 [ 899.905170][T17042] usbip_core: unknown command [ 899.916879][T10345] vhci_hcd vhci_hcd.6: stop threads [ 899.923662][T10345] vhci_hcd vhci_hcd.6: release socket [ 899.929468][T10345] vhci_hcd vhci_hcd.6: disconnect device [ 899.980271][T17047] Cannot find set identified by id 0 to match [ 900.663692][T17071] Option ' /msr' to dns_resolver key: bad/missing value [ 901.866440][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 901.866971][T10524] Bluetooth: hci4: command 0x1003 tx timeout [ 901.981200][T10855] libceph: connect (1)[c::]:6789 error -101 [ 901.988782][T10855] libceph: mon0 (1)[c::]:6789 connect error [ 902.268366][T10855] libceph: connect (1)[c::]:6789 error -101 [ 902.281642][T10855] libceph: mon0 (1)[c::]:6789 connect error [ 902.787885][T17110] ceph: No mds server is up or the cluster is laggy [ 902.809443][ T10] libceph: connect (1)[c::]:6789 error -101 [ 902.837163][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 902.919096][T17136] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 902.925613][T17136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 902.960864][T17136] vhci_hcd vhci_hcd.0: Device attached [ 902.976439][T17137] vhci_hcd: connection closed [ 902.981345][ T9153] vhci_hcd vhci_hcd.6: stop threads [ 902.991952][T17135] netlink: 'syz.8.2902': attribute type 2 has an invalid length. [ 903.040834][ T9153] vhci_hcd vhci_hcd.6: release socket [ 903.054398][ T9153] vhci_hcd vhci_hcd.6: disconnect device [ 903.766547][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 903.766566][ T29] audit: type=1400 audit(1780855454.985:4675): avc: denied { create } for pid=17147 comm="syz.8.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 903.831393][ T29] audit: type=1400 audit(1780855454.985:4676): avc: denied { create } for pid=17145 comm="syz.9.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 903.872123][ T29] audit: type=1400 audit(1780855454.985:4677): avc: denied { create } for pid=17145 comm="syz.9.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 903.910147][ T29] audit: type=1400 audit(1780855454.985:4678): avc: denied { create } for pid=17145 comm="syz.9.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 903.961860][ T29] audit: type=1400 audit(1780855454.985:4679): avc: denied { create } for pid=17145 comm="syz.9.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 904.003584][ T29] audit: type=1400 audit(1780855454.985:4680): avc: denied { create } for pid=17145 comm="syz.9.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 904.056793][ T29] audit: type=1400 audit(1780855454.985:4681): avc: denied { name_bind } for pid=17145 comm="syz.9.2908" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 904.096484][ T29] audit: type=1400 audit(1780855454.985:4682): avc: denied { read } for pid=17145 comm="syz.9.2908" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 904.128837][ T29] audit: type=1400 audit(1780855455.075:4683): avc: denied { create } for pid=17147 comm="syz.8.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 904.174421][ T29] audit: type=1400 audit(1780855455.075:4684): avc: denied { execmem } for pid=17147 comm="syz.8.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 904.443534][T10344] Bluetooth: hci4: Frame reassembly failed (-84) [ 904.942259][T17169] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 904.948802][T17169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 904.961042][T17169] vhci_hcd vhci_hcd.0: Device attached [ 904.971163][T17170] vhci_hcd: connection closed [ 904.972582][ T56] vhci_hcd vhci_hcd.9: stop threads [ 904.985261][ T56] vhci_hcd vhci_hcd.9: release socket [ 904.994611][ T56] vhci_hcd vhci_hcd.9: disconnect device [ 905.735795][T17180] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 905.742344][T17180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 905.788819][T17180] vhci_hcd vhci_hcd.0: Device attached [ 905.841372][T17181] vhci_hcd: connection closed [ 905.842856][ T56] vhci_hcd vhci_hcd.5: stop threads [ 905.865997][ T56] vhci_hcd vhci_hcd.5: release socket [ 905.879129][ T56] vhci_hcd vhci_hcd.5: disconnect device [ 906.452659][T17189] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2922'. [ 906.506565][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 906.734254][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 906.743249][T17196] Bluetooth: hci4: Frame reassembly failed (-84) [ 906.763214][T10345] Bluetooth: hci4: Frame reassembly failed (-84) [ 906.778499][T17197] netlink: 288 bytes leftover after parsing attributes in process `syz.8.2923'. [ 907.219295][T17208] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 907.225853][T17208] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 907.250570][T17208] vhci_hcd vhci_hcd.0: Device attached [ 907.272174][T17209] vhci_hcd: connection closed [ 907.276056][T10344] vhci_hcd vhci_hcd.9: stop threads [ 907.297558][T10344] vhci_hcd vhci_hcd.9: release socket [ 907.313083][T10344] vhci_hcd vhci_hcd.9: disconnect device [ 907.698708][T17230] xt_socket: unknown flags 0x4 [ 907.752372][T17230] syzkaller0: entered promiscuous mode [ 907.758364][T17230] syzkaller0: entered allmulticast mode [ 908.470070][ T56] Bluetooth: hci6: Frame reassembly failed (-84) [ 908.746741][ T5620] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 908.756775][T15660] Bluetooth: hci4: command 0xfc11 tx timeout [ 908.862443][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 908.862459][ T29] audit: type=1400 audit(1780855460.075:4836): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 908.932936][ T29] audit: type=1400 audit(1780855460.145:4837): avc: denied { create } for pid=17264 comm="syz.6.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 908.954049][ T29] audit: type=1400 audit(1780855460.145:4838): avc: denied { read append } for pid=17264 comm="syz.6.2939" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=0 [ 908.991819][ T29] audit: type=1400 audit(1780855460.145:4839): avc: denied { read } for pid=17264 comm="syz.6.2939" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 909.048380][ T29] audit: type=1400 audit(1780855460.195:4840): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 909.106539][ T29] audit: type=1400 audit(1780855460.255:4841): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 909.160901][ T29] audit: type=1400 audit(1780855460.295:4842): avc: denied { map_create } for pid=17266 comm="syz.6.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 909.306111][ T29] audit: type=1400 audit(1780855460.515:4843): avc: denied { read write } for pid=17269 comm="syz.9.2940" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 909.499753][ T29] audit: type=1400 audit(1780855460.715:4844): avc: denied { read write } for pid=15013 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 909.591330][ T29] audit: type=1400 audit(1780855460.805:4845): avc: denied { read } for pid=17272 comm="syz.3.2942" dev="nsfs" ino=4026532787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 910.314667][T17283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 910.321216][T17283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 910.355580][T17283] vhci_hcd vhci_hcd.0: Device attached [ 910.507051][ T5620] Bluetooth: hci6: command 0x1003 tx timeout [ 910.520725][T10524] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 910.541141][T17286] vhci_hcd: connection closed [ 910.541429][ T56] vhci_hcd vhci_hcd.3: stop threads [ 910.599371][T10855] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 910.633220][ T56] vhci_hcd vhci_hcd.3: release socket [ 910.641303][ T56] vhci_hcd vhci_hcd.3: disconnect device [ 910.909862][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2948'. [ 910.943642][T17292] macsec1: entered promiscuous mode [ 910.960590][T17292] batadv0: entered promiscuous mode [ 910.978226][T17292] macsec1: entered allmulticast mode [ 910.985240][T17292] batadv0: entered allmulticast mode [ 911.025726][T17292] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 911.055955][T17292] batadv0: left allmulticast mode [ 911.064255][T17292] batadv0: left promiscuous mode [ 913.661246][T17334] FAULT_INJECTION: forcing a failure. [ 913.661246][T17334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.702679][T17334] CPU: 1 UID: 0 PID: 17334 Comm: syz.6.2959 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.702702][T17334] Tainted: [L]=SOFTLOCKUP [ 913.702706][T17334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.702713][T17334] Call Trace: [ 913.702717][T17334] [ 913.702722][T17334] dump_stack_lvl+0x100/0x190 [ 913.702739][T17334] should_fail_ex.cold+0x5/0xa [ 913.702755][T17334] _copy_to_user+0x32/0xd0 [ 913.702771][T17334] simple_read_from_buffer+0xcb/0x170 [ 913.702787][T17334] proc_fail_nth_read+0x1af/0x230 [ 913.702801][T17334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.702814][T17334] ? rw_verify_area+0xce/0x6d0 [ 913.702825][T17334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.702837][T17334] vfs_read+0x1e4/0xb30 [ 913.702852][T17334] ? __pfx_vfs_read+0x10/0x10 [ 913.702863][T17334] ? __fget_files+0x215/0x3d0 [ 913.702881][T17334] ? __fget_files+0x21f/0x3d0 [ 913.702906][T17334] ksys_read+0x12a/0x250 [ 913.702924][T17334] ? __pfx_ksys_read+0x10/0x10 [ 913.702945][T17334] ? rcu_is_watching+0x12/0xc0 [ 913.702970][T17334] do_syscall_64+0x115/0x870 [ 913.702986][T17334] ? clear_bhb_loop+0x40/0x90 [ 913.703000][T17334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.703012][T17334] RIP: 0033:0x7fc2b155d68e [ 913.703023][T17334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 913.703034][T17334] RSP: 002b:00007fc2b24e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 913.703045][T17334] RAX: ffffffffffffffda RBX: 00007fc2b24e96c0 RCX: 00007fc2b155d68e [ 913.703052][T17334] RDX: 000000000000000f RSI: 00007fc2b24e90a0 RDI: 0000000000000005 [ 913.703059][T17334] RBP: 00007fc2b24e9090 R08: 0000000000000000 R09: 0000000000000000 [ 913.703066][T17334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.703072][T17334] R13: 00007fc2b1816128 R14: 00007fc2b1816090 R15: 00007fff4ca50be8 [ 913.703087][T17334] [ 913.982012][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 913.982029][ T29] audit: type=1400 audit(1780855465.125:4944): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 914.232830][ T29] audit: type=1400 audit(1780855465.405:4945): avc: denied { kexec_image_load } for pid=17335 comm="syz.6.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=0 [ 914.275596][ T29] audit: type=1400 audit(1780855465.425:4946): avc: denied { read write } for pid=17335 comm="syz.6.2961" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 914.334415][ T29] audit: type=1400 audit(1780855465.425:4947): avc: denied { read } for pid=17335 comm="syz.6.2961" name="ubi_ctrl" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 914.415348][ T29] audit: type=1400 audit(1780855465.425:4948): avc: denied { create } for pid=17335 comm="syz.6.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 914.478851][ T29] audit: type=1400 audit(1780855465.425:4949): avc: denied { read append } for pid=17335 comm="syz.6.2961" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 914.544271][ T9153] Bluetooth: hci4: Frame reassembly failed (-84) [ 914.587110][ T29] audit: type=1400 audit(1780855465.495:4950): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 914.611407][ T29] audit: type=1400 audit(1780855465.675:4951): avc: denied { read write } for pid=17337 comm="syz.6.2962" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 914.787874][ T29] audit: type=1400 audit(1780855465.855:4952): avc: denied { mounton } for pid=17337 comm="syz.6.2962" path="/352/bus" dev="tmpfs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 914.893255][ T29] audit: type=1400 audit(1780855465.855:4953): avc: denied { mounton } for pid=17337 comm="syz.6.2962" path="/352" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 915.786900][T10855] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 915.895667][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2966'. [ 915.971984][T17353] batadv0: entered promiscuous mode [ 916.009990][T17353] macsec1: entered promiscuous mode [ 916.031333][T17353] macsec1: entered allmulticast mode [ 916.039516][T17353] batadv0: entered allmulticast mode [ 916.177149][T17353] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 916.270368][T17353] batadv0: left allmulticast mode [ 916.286835][T17353] batadv0: left promiscuous mode [ 916.586899][ T5620] Bluetooth: hci4: command 0x1003 tx timeout [ 916.598657][T10524] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 918.909135][T17401] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 918.998662][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 918.998683][ T29] audit: type=1400 audit(1780855470.215:5052): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 919.154020][ T29] audit: type=1400 audit(1780855470.365:5053): avc: denied { name_bind } for pid=17402 comm="syz.9.2981" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 919.483586][ T29] audit: type=1400 audit(1780855470.695:5054): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 919.600662][ T29] audit: type=1400 audit(1780855470.785:5055): avc: denied { read append } for pid=17404 comm="syz.6.2982" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 919.705836][ T29] audit: type=1400 audit(1780855470.795:5056): avc: denied { allowed } for pid=17404 comm="syz.6.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 919.822958][ T29] audit: type=1400 audit(1780855470.795:5057): avc: denied { read } for pid=17404 comm="syz.6.2982" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 919.909096][ T29] audit: type=1400 audit(1780855470.795:5058): avc: denied { read } for pid=17404 comm="syz.6.2982" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 920.012378][ T29] audit: type=1400 audit(1780855470.795:5059): avc: denied { map_create } for pid=17404 comm="syz.6.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 920.128870][ T29] audit: type=1400 audit(1780855470.795:5060): avc: denied { create } for pid=17404 comm="syz.6.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 920.212539][ T29] audit: type=1400 audit(1780855470.795:5061): avc: denied { create } for pid=17404 comm="syz.6.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 920.264611][T17410] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001 [ 921.718402][T17430] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 921.724952][T17430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 921.746113][T17430] vhci_hcd vhci_hcd.0: Device attached [ 921.764190][T17431] vhci_hcd: connection closed [ 921.764842][ T8968] vhci_hcd vhci_hcd.5: stop threads [ 921.778544][ T8968] vhci_hcd vhci_hcd.5: release socket [ 921.788390][ T8968] vhci_hcd vhci_hcd.5: disconnect device [ 921.917480][T17434] netlink: 'syz.8.2991': attribute type 2 has an invalid length. [ 922.714463][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2996'. [ 922.875009][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 922.899909][T17452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17452 comm=syz.3.2999 [ 923.704306][T17466] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 923.710871][T17466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 923.766669][T17466] vhci_hcd vhci_hcd.0: Device attached [ 923.793389][T17467] vhci_hcd: connection closed [ 923.798721][ T56] vhci_hcd vhci_hcd.3: stop threads [ 923.843636][ T56] vhci_hcd vhci_hcd.3: release socket [ 923.864316][ T56] vhci_hcd vhci_hcd.3: disconnect device [ 924.059025][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 924.059041][ T29] audit: type=1400 audit(1780855475.275:5191): avc: denied { create } for pid=17474 comm="syz.5.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 924.244508][ T29] audit: type=1400 audit(1780855475.455:5192): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 924.309649][ T29] audit: type=1400 audit(1780855475.515:5193): avc: denied { read } for pid=17480 comm="syz.8.3007" name="video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 924.367013][ T29] audit: type=1400 audit(1780855475.565:5194): avc: denied { read } for pid=17472 comm="syz.6.3005" dev="nsfs" ino=4026534295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 924.447547][ T29] audit: type=1400 audit(1780855475.615:5195): avc: denied { read write } for pid=15013 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 924.548616][ T29] audit: type=1400 audit(1780855475.615:5196): avc: denied { create } for pid=17472 comm="syz.6.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 924.633019][ T29] audit: type=1400 audit(1780855475.625:5197): avc: denied { create } for pid=17480 comm="syz.8.3007" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 924.687537][ T29] audit: type=1400 audit(1780855475.655:5198): avc: denied { read write } for pid=17484 comm="syz.3.3008" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 924.816513][ T29] audit: type=1400 audit(1780855475.705:5199): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 924.924965][ T29] audit: type=1400 audit(1780855475.715:5200): avc: denied { allowed } for pid=17484 comm="syz.3.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 925.896060][T17516] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 925.902614][T17516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 925.981670][T17516] vhci_hcd vhci_hcd.0: Device attached [ 926.010326][T17519] vhci_hcd: connection closed [ 926.010587][ T56] vhci_hcd vhci_hcd.6: stop threads [ 926.038640][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.050656][ T56] vhci_hcd vhci_hcd.6: release socket [ 926.068763][ T56] vhci_hcd vhci_hcd.6: disconnect device [ 926.342163][T17531] FAULT_INJECTION: forcing a failure. [ 926.342163][T17531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.376998][T17531] CPU: 1 UID: 0 PID: 17531 Comm: syz.5.3023 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.377030][T17531] Tainted: [L]=SOFTLOCKUP [ 926.377037][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 926.377047][T17531] Call Trace: [ 926.377053][T17531] [ 926.377059][T17531] dump_stack_lvl+0x100/0x190 [ 926.377083][T17531] should_fail_ex.cold+0x5/0xa [ 926.377106][T17531] _copy_from_user+0x2e/0xd0 [ 926.377127][T17531] copy_msghdr_from_user+0x9f/0x4f0 [ 926.377149][T17531] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 926.377180][T17531] ___sys_sendmsg+0x106/0x1e0 [ 926.377202][T17531] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.377249][T17531] __sys_sendmsg+0x170/0x220 [ 926.377278][T17531] ? __pfx___sys_sendmsg+0x10/0x10 [ 926.377315][T17531] ? rcu_is_watching+0x12/0xc0 [ 926.377345][T17531] do_syscall_64+0x115/0x870 [ 926.377368][T17531] ? clear_bhb_loop+0x40/0x90 [ 926.377390][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.377408][T17531] RIP: 0033:0x7fc4a079ce59 [ 926.377424][T17531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.377455][T17531] RSP: 002b:00007fc4a16a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.377472][T17531] RAX: ffffffffffffffda RBX: 00007fc4a0a16090 RCX: 00007fc4a079ce59 [ 926.377484][T17531] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000005 [ 926.377493][T17531] RBP: 00007fc4a16a9090 R08: 0000000000000000 R09: 0000000000000000 [ 926.377503][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.377513][T17531] R13: 00007fc4a0a16128 R14: 00007fc4a0a16090 R15: 00007ffc00cf9f38 [ 926.377533][T17531] [ 927.635309][T17567] FAULT_INJECTION: forcing a failure. [ 927.635309][T17567] name failslab, interval 1, probability 0, space 0, times 0 [ 927.648736][T17567] CPU: 1 UID: 0 PID: 17567 Comm: syz.5.3035 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.648756][T17567] Tainted: [L]=SOFTLOCKUP [ 927.648761][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 927.648768][T17567] Call Trace: [ 927.648775][T17567] [ 927.648781][T17567] dump_stack_lvl+0x100/0x190 [ 927.648801][T17567] should_fail_ex.cold+0x5/0xa [ 927.648819][T17567] should_failslab+0xc2/0x120 [ 927.648833][T17567] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 927.648853][T17567] ? sidtab_sid2str_get+0x17a/0x670 [ 927.648867][T17567] kmemdup_noprof+0x29/0x60 [ 927.648880][T17567] sidtab_sid2str_get+0x17a/0x670 [ 927.648892][T17567] security_sid_to_context_core+0x35a/0x6d0 [ 927.648912][T17567] avc_audit_post_callback+0x109/0x900 [ 927.648926][T17567] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 927.648944][T17567] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 927.648955][T17567] ? skb_put+0x138/0x180 [ 927.648969][T17567] ? audit_log_n_string+0x256/0x550 [ 927.648985][T17567] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 927.648996][T17567] common_lsm_audit+0x23f/0x2b0 [ 927.649014][T17567] ? __pfx_common_lsm_audit+0x10/0x10 [ 927.649035][T17567] slow_avc_audit+0x186/0x210 [ 927.649049][T17567] ? __pfx_slow_avc_audit+0x10/0x10 [ 927.649069][T17567] audit_inode_permission+0x1ea/0x2a0 [ 927.649090][T17567] ? __pfx_audit_inode_permission+0x10/0x10 [ 927.649113][T17567] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 927.649133][T17567] ? avc_has_perm_noaudit+0x145/0x3b0 [ 927.649156][T17567] selinux_inode_permission+0x7ed/0x1130 [ 927.649183][T17567] ? __pfx_selinux_inode_permission+0x10/0x10 [ 927.649201][T17567] ? find_held_lock+0x2b/0x80 [ 927.649230][T17567] ? devcgroup_check_permission+0x174/0x440 [ 927.649258][T17567] ? match_exception_partial+0x239/0x2d0 [ 927.649284][T17567] security_inode_permission+0xda/0x250 [ 927.649309][T17567] inode_permission+0x36c/0x620 [ 927.649332][T17567] may_open+0x2b8/0x480 [ 927.649344][T17567] path_openat+0x136b/0x31a0 [ 927.649365][T17567] ? __pfx_path_openat+0x10/0x10 [ 927.649387][T17567] do_file_open+0x20e/0x430 [ 927.649404][T17567] ? __pfx_do_file_open+0x10/0x10 [ 927.649430][T17567] ? alloc_fd+0x476/0x790 [ 927.649448][T17567] ? do_getname+0x191/0x390 [ 927.649468][T17567] do_sys_openat2+0x10d/0x1e0 [ 927.649487][T17567] ? __pfx_do_sys_openat2+0x10/0x10 [ 927.649510][T17567] __x64_sys_openat+0x12d/0x210 [ 927.649529][T17567] ? __pfx___x64_sys_openat+0x10/0x10 [ 927.649550][T17567] ? rcu_is_watching+0x12/0xc0 [ 927.649570][T17567] do_syscall_64+0x115/0x870 [ 927.649593][T17567] ? clear_bhb_loop+0x40/0x90 [ 927.649608][T17567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.649621][T17567] RIP: 0033:0x7fc4a075d68e [ 927.649632][T17567] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 927.649644][T17567] RSP: 002b:00007fc4a16c7ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 927.649658][T17567] RAX: ffffffffffffffda RBX: 00007fc4a16ca6c0 RCX: 00007fc4a075d68e [ 927.649665][T17567] RDX: 0000000000000002 RSI: 00007fc4a083210a RDI: ffffffffffffff9c [ 927.649673][T17567] RBP: 00007fc4a16ca090 R08: 0000000000000000 R09: 0000000000000000 [ 927.649681][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 927.649688][T17567] R13: 0000200000000080 R14: 0000000000000000 R15: 00007ffc00cf9f38 [ 927.649703][T17567] [ 928.043881][T17570] netlink: 'syz.9.3036': attribute type 2 has an invalid length. [ 928.302008][T17580] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3039'. [ 928.312178][T17580] netlink: 'syz.6.3039': attribute type 7 has an invalid length. [ 928.320038][T17580] netlink: 'syz.6.3039': attribute type 8 has an invalid length. [ 928.327851][T17580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3039'. [ 928.798205][T17599] netlink: 'syz.5.3047': attribute type 2 has an invalid length. [ 929.115477][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 929.115496][ T29] audit: type=1400 audit(1780855480.325:5448): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 929.156233][ T29] audit: type=1400 audit(1780855480.365:5449): avc: denied { read } for pid=17609 comm="syz.8.3051" dev="nsfs" ino=4026533978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 929.178653][ T29] audit: type=1400 audit(1780855480.375:5450): avc: denied { create } for pid=17609 comm="syz.8.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 929.202952][ T29] audit: type=1400 audit(1780855480.375:5451): avc: denied { mount } for pid=17609 comm="syz.8.3051" name="/" dev="ramfs" ino=60327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 929.270710][ T29] audit: type=1400 audit(1780855480.485:5452): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 929.331023][ T29] audit: type=1400 audit(1780855480.545:5453): avc: denied { read write } for pid=17613 comm="syz.9.3052" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 929.355715][ T29] audit: type=1400 audit(1780855480.545:5454): avc: denied { create } for pid=17613 comm="syz.9.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 929.377037][ T29] audit: type=1400 audit(1780855480.555:5455): avc: denied { create } for pid=17613 comm="syz.9.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 929.432029][ T29] audit: type=1400 audit(1780855480.635:5456): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 929.461642][ T29] audit: type=1400 audit(1780855480.635:5457): avc: denied { create } for pid=17613 comm="syz.9.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 929.490333][T17617] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3053'. [ 930.036190][T17642] netlink: 'syz.8.3061': attribute type 2 has an invalid length. [ 930.088113][T17642] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3061'. [ 930.148847][T17645] netlink: 'syz.6.3062': attribute type 4 has an invalid length. [ 930.356736][T17647] Cannot find set identified by id 0 to match [ 931.015547][T17661] netlink: 'syz.3.3068': attribute type 6 has an invalid length. [ 931.069603][T17661] IPv6: NLM_F_CREATE should be specified when creating new route [ 934.206712][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 934.206744][ T29] audit: type=1400 audit(1780855485.425:5649): avc: denied { create } for pid=17702 comm="syz.8.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 934.316137][ T29] audit: type=1400 audit(1780855485.455:5650): avc: denied { read } for pid=17702 comm="syz.8.3083" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 934.406640][ T29] audit: type=1400 audit(1780855485.455:5651): avc: denied { read } for pid=17702 comm="syz.8.3083" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 934.476392][ T29] audit: type=1400 audit(1780855485.485:5652): avc: denied { create } for pid=17702 comm="syz.8.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 934.546489][ T29] audit: type=1400 audit(1780855485.485:5653): avc: denied { create } for pid=17702 comm="syz.8.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 934.646467][ T29] audit: type=1400 audit(1780855485.845:5654): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 935.078826][ T29] audit: type=1400 audit(1780855486.285:5655): avc: denied { map_create } for pid=17707 comm="syz.8.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 935.157931][ T29] audit: type=1400 audit(1780855486.285:5656): avc: denied { create } for pid=17707 comm="syz.8.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 935.210194][T17708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 935.226805][ T29] audit: type=1400 audit(1780855486.285:5657): avc: denied { create } for pid=17707 comm="syz.8.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 935.294393][ T29] audit: type=1400 audit(1780855486.285:5658): avc: denied { create } for pid=17707 comm="syz.8.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 938.346450][T10524] Bluetooth: hci1: command 0x0406 tx timeout [ 939.167126][T17748] Cannot find add_set index 0 as target [ 939.338089][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 939.338102][ T29] audit: type=1400 audit(1780855490.525:5722): avc: denied { read } for pid=17751 comm="syz.6.3097" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 939.497657][ T29] audit: type=1400 audit(1780855490.635:5723): avc: denied { read } for pid=17751 comm="syz.6.3097" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 939.611192][ T29] audit: type=1400 audit(1780855490.635:5724): avc: denied { read } for pid=17751 comm="syz.6.3097" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 939.723155][ T29] audit: type=1400 audit(1780855490.635:5725): avc: denied { read } for pid=17751 comm="syz.6.3097" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 939.878530][ T29] audit: type=1400 audit(1780855491.085:5726): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 940.067444][ T29] audit: type=1400 audit(1780855491.275:5727): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 940.180741][ T29] audit: type=1400 audit(1780855491.345:5728): avc: denied { read write } for pid=15013 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 940.284277][ T29] audit: type=1400 audit(1780855491.375:5729): avc: denied { read write } for pid=10509 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 940.385609][ T29] audit: type=1400 audit(1780855491.385:5730): avc: denied { execmem } for pid=17744 comm="syz.5.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 940.471041][ T29] audit: type=1400 audit(1780855491.555:5731): avc: denied { read write } for pid=17755 comm="syz.6.3101" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 943.058962][T17784] CUSE: unknown device info "" [ 943.089600][T17784] CUSE: unknown device info "" [ 943.122504][T17784] CUSE: unknown device info "" [ 943.171025][T17784] CUSE: unknown device info "" [ 943.221563][T17784] CUSE: unknown device info "ÿ" [ 943.276417][T17784] CUSE: unknown device info "" [ 943.339819][T17784] CUSE: unknown device info "" [ 943.366889][T17784] CUSE: unknown device info "ÿ" [ 943.421387][T17784] CUSE: DEVNAME unspecified [ 943.834506][T17794] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 944.543985][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 944.544004][ T29] audit: type=1400 audit(1780855495.755:5845): avc: denied { read } for pid=17800 comm="syz.9.3115" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 944.649011][ T29] audit: type=1400 audit(1780855495.765:5846): avc: denied { read } for pid=17800 comm="syz.9.3115" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 944.735468][ T29] audit: type=1400 audit(1780855495.775:5847): avc: denied { read write } for pid=17800 comm="syz.9.3115" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 945.202783][ T29] audit: type=1400 audit(1780855496.415:5848): avc: denied { read write } for pid=10497 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 945.303134][ T29] audit: type=1400 audit(1780855496.515:5849): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 945.420687][ T29] audit: type=1400 audit(1780855496.635:5850): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 945.516676][ T29] audit: type=1400 audit(1780855496.645:5851): avc: denied { create } for pid=17803 comm="syz.5.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 945.677922][ T29] audit: type=1400 audit(1780855496.655:5852): avc: denied { prog_load } for pid=17803 comm="syz.5.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 945.857761][ T29] audit: type=1400 audit(1780855496.665:5853): avc: denied { allowed } for pid=17803 comm="syz.5.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 945.929140][ T29] audit: type=1400 audit(1780855496.675:5854): avc: denied { read } for pid=17803 comm="syz.5.3116" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 946.454533][T17821] ÿ: renamed from dummy0 (while UP) [ 947.201008][T17833] FAULT_INJECTION: forcing a failure. [ 947.201008][T17833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.304970][T17833] CPU: 0 UID: 0 PID: 17833 Comm: syz.8.3127 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.305001][T17833] Tainted: [L]=SOFTLOCKUP [ 947.305008][T17833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 947.305018][T17833] Call Trace: [ 947.305024][T17833] [ 947.305032][T17833] dump_stack_lvl+0x100/0x190 [ 947.305058][T17833] should_fail_ex.cold+0x5/0xa [ 947.305083][T17833] _copy_from_user+0x2e/0xd0 [ 947.305107][T17833] do_ip_getsockopt+0x2241/0x2520 [ 947.305137][T17833] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 947.305168][T17833] ? find_held_lock+0x2b/0x80 [ 947.305184][T17833] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 947.305214][T17833] ? __lock_acquire+0x4a5/0x2630 [ 947.305235][T17833] ? avc_has_perm+0x135/0x1e0 [ 947.305254][T17833] ? __pfx_avc_has_perm+0x10/0x10 [ 947.305281][T17833] ? find_held_lock+0x2b/0x80 [ 947.305302][T17833] ip_getsockopt+0xa1/0x1e0 [ 947.305329][T17833] ? __pfx_ip_getsockopt+0x10/0x10 [ 947.305354][T17833] ? _copy_from_user+0x59/0xd0 [ 947.305375][T17833] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 947.305401][T17833] tcp_getsockopt+0xa1/0x110 [ 947.305419][T17833] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 947.305441][T17833] do_sock_getsockopt+0x50a/0x6e0 [ 947.305466][T17833] ? __lock_acquire+0x4a5/0x2630 [ 947.305490][T17833] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 947.305508][T17833] ? find_held_lock+0x2b/0x80 [ 947.305523][T17833] ? ksys_write+0x190/0x250 [ 947.305548][T17833] ? find_held_lock+0x2b/0x80 [ 947.305572][T17833] ? __fget_files+0x21f/0x3d0 [ 947.305601][T17833] __sys_getsockopt+0x148/0x260 [ 947.305634][T17833] ? __x64_sys_getsockopt+0xbd/0x160 [ 947.305657][T17833] __x64_sys_getsockopt+0xbd/0x160 [ 947.305681][T17833] ? do_syscall_64+0x90/0x870 [ 947.305702][T17833] ? lockdep_hardirqs_on+0x78/0x100 [ 947.305724][T17833] do_syscall_64+0x115/0x870 [ 947.305744][T17833] ? clear_bhb_loop+0x40/0x90 [ 947.305767][T17833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.305784][T17833] RIP: 0033:0x7f4bf179ce59 [ 947.305800][T17833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.305815][T17833] RSP: 002b:00007f4bf2682028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 947.305833][T17833] RAX: ffffffffffffffda RBX: 00007f4bf1a15fa0 RCX: 00007f4bf179ce59 [ 947.305844][T17833] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 947.305854][T17833] RBP: 00007f4bf2682090 R08: 0000200000695ffc R09: 0000000000000000 [ 947.305865][T17833] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.305875][T17833] R13: 00007f4bf1a16038 R14: 00007f4bf1a15fa0 R15: 00007fffa5203278 [ 947.305900][T17833] [ 947.867346][T17838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17838 comm=syz.5.3128 [ 948.040043][T17847] FAULT_INJECTION: forcing a failure. [ 948.040043][T17847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.086683][T17847] CPU: 0 UID: 0 PID: 17847 Comm: syz.3.3130 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.086713][T17847] Tainted: [L]=SOFTLOCKUP [ 948.086719][T17847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 948.086728][T17847] Call Trace: [ 948.086735][T17847] [ 948.086742][T17847] dump_stack_lvl+0x100/0x190 [ 948.086768][T17847] should_fail_ex.cold+0x5/0xa [ 948.086792][T17847] _copy_from_user+0x2e/0xd0 [ 948.086814][T17847] kstrtouint_from_user+0xd6/0x1d0 [ 948.086839][T17847] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 948.086863][T17847] ? __lock_acquire+0x4a5/0x2630 [ 948.086888][T17847] ? lock_acquire+0x1b1/0x370 [ 948.086913][T17847] proc_fail_nth_write+0x83/0x220 [ 948.086933][T17847] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 948.086957][T17847] vfs_write+0x2aa/0x1070 [ 948.086978][T17847] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 948.086998][T17847] ? __pfx_vfs_write+0x10/0x10 [ 948.087015][T17847] ? __fget_files+0x215/0x3d0 [ 948.087042][T17847] ? __fget_files+0x21f/0x3d0 [ 948.087069][T17847] ksys_write+0x12a/0x250 [ 948.087088][T17847] ? __pfx_ksys_write+0x10/0x10 [ 948.087108][T17847] ? rcu_is_watching+0x12/0xc0 [ 948.087141][T17847] do_syscall_64+0x115/0x870 [ 948.087163][T17847] ? clear_bhb_loop+0x40/0x90 [ 948.087184][T17847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.087201][T17847] RIP: 0033:0x7fa1c155d68e [ 948.087216][T17847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 948.087232][T17847] RSP: 002b:00007fa1c240bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.087249][T17847] RAX: ffffffffffffffda RBX: 00007fa1c240c6c0 RCX: 00007fa1c155d68e [ 948.087260][T17847] RDX: 0000000000000001 RSI: 00007fa1c240c0a0 RDI: 0000000000000005 [ 948.087270][T17847] RBP: 00007fa1c240c090 R08: 0000000000000000 R09: 0000000000000000 [ 948.087279][T17847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.087289][T17847] R13: 00007fa1c1816038 R14: 00007fa1c1815fa0 R15: 00007ffdaa1588f8 [ 948.087312][T17847] [ 949.707044][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 949.707062][ T29] audit: type=1400 audit(1780855500.925:5969): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 949.862853][ T29] audit: type=1400 audit(1780855501.075:5970): avc: denied { read write } for pid=15013 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 949.943926][ T29] audit: type=1400 audit(1780855501.125:5971): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 950.046134][T17873] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3140'. [ 950.056469][ T29] audit: type=1400 audit(1780855501.205:5972): avc: denied { create } for pid=17871 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 950.056519][ T29] audit: type=1400 audit(1780855501.215:5973): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 950.056557][ T29] audit: type=1400 audit(1780855501.215:5974): avc: denied { create } for pid=17871 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 950.056592][ T29] audit: type=1400 audit(1780855501.215:5975): avc: denied { create } for pid=17871 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 950.056625][ T29] audit: type=1400 audit(1780855501.235:5976): avc: denied { create } for pid=17871 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 950.239780][ T29] audit: type=1400 audit(1780855501.245:5977): avc: denied { create } for pid=17871 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 950.320523][ T29] audit: type=1400 audit(1780855501.255:5978): avc: denied { module_request } for pid=17871 comm="syz.3.3140" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 950.421011][T17879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 951.129200][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3144'. [ 951.197853][T17887] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3146'. [ 951.902196][T17904] Option ' /msr' to dns_resolver key: bad/missing value [ 952.458554][T17928] netlink: 'syz.6.3158': attribute type 3 has an invalid length. [ 953.718909][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 953.726898][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 953.738848][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 953.744958][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 954.055622][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 954.061730][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 954.493100][T17952] ceph: No mds server is up or the cluster is laggy [ 954.727143][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 954.727160][ T29] audit: type=1400 audit(1780855505.945:6173): avc: denied { read write } for pid=17960 comm="syz.8.3169" name="video1" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 954.819903][ T29] audit: type=1400 audit(1780855505.975:6174): avc: denied { prog_load } for pid=17960 comm="syz.8.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 954.880317][ T29] audit: type=1400 audit(1780855505.985:6175): avc: denied { create } for pid=17959 comm="syz.6.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 954.918031][ T29] audit: type=1400 audit(1780855505.985:6176): avc: denied { read } for pid=17959 comm="syz.6.3168" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 954.978117][ T29] audit: type=1400 audit(1780855505.985:6177): avc: denied { read } for pid=17960 comm="syz.8.3169" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 955.029864][ T29] audit: type=1400 audit(1780855505.995:6178): avc: denied { execmem } for pid=17959 comm="syz.6.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 955.076161][ T29] audit: type=1400 audit(1780855505.995:6179): avc: denied { prog_load } for pid=17959 comm="syz.6.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 955.174642][ T29] audit: type=1400 audit(1780855506.075:6180): avc: denied { execmem } for pid=17963 comm="syz.3.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 955.250901][ T29] audit: type=1400 audit(1780855506.185:6181): avc: denied { read write } for pid=15373 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 955.278647][ T29] audit: type=1400 audit(1780855506.235:6182): avc: denied { create } for pid=17970 comm="syz.9.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 955.386093][T17965] bond2 (unregistering): Released all slaves [ 955.845438][T17982] netlink: 'syz.8.3175': attribute type 49 has an invalid length. [ 956.003599][T17982] bond0: (slave bond_slave_0): Releasing backup interface [ 956.199761][T17982] bond_slave_0: entered promiscuous mode [ 956.210637][T17982] bond_slave_0: entered allmulticast mode [ 958.110908][T18012] team0 (unregistering): Port device team_slave_0 removed [ 958.188598][T18012] team0 (unregistering): Port device team_slave_1 removed [ 958.540611][T18015] Cannot find set identified by id 0 to match [ 959.818627][ T29] kauditd_printk_skb: 4164 callbacks suppressed [ 959.818657][ T29] audit: type=1400 audit(1780855510.785:10347): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.818726][ T29] audit: type=1400 audit(1780855511.035:10348): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.818791][ T29] audit: type=1400 audit(1780855511.035:10349): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.818864][ T29] audit: type=1400 audit(1780855511.035:10350): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.818985][ T29] audit: type=1400 audit(1780855511.035:10351): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.819114][ T29] audit: type=1400 audit(1780855511.035:10352): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.819340][ T29] audit: type=1400 audit(1780855511.035:10353): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.819407][ T29] audit: type=1400 audit(1780855511.035:10354): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.826413][ T29] audit: type=1400 audit(1780855511.035:10355): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 959.826461][ T29] audit: type=1400 audit(1780855511.035:10356): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 960.020022][T18035] Cannot find set identified by id 0 to match [ 963.542442][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 964.832125][ T29] kauditd_printk_skb: 5416 callbacks suppressed [ 964.832159][ T29] audit: type=1400 audit(1780855516.035:15773): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 964.918163][ T29] audit: type=1400 audit(1780855516.035:15774): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 964.933142][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 965.011707][ T5278] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 965.044906][ T5278] audit: backlog limit exceeded [ 965.062938][ T29] audit: type=1400 audit(1780855516.035:15775): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 965.068185][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 965.134308][ T29] audit: type=1400 audit(1780855516.035:15776): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 965.138989][T18097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18097 comm=syz.9.3218 [ 965.201891][ T29] audit: type=1400 audit(1780855516.035:15777): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 965.223063][ T29] audit: type=1400 audit(1780855516.045:15778): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 965.550223][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 965.557691][T10524] Bluetooth: hci4: command 0x1003 tx timeout [ 967.707431][T18127] Cannot find set identified by id 0 to match [ 969.349959][T10344] Bluetooth: hci4: Frame reassembly failed (-84) [ 969.836844][ T29] kauditd_printk_skb: 8464 callbacks suppressed [ 969.836886][ T29] audit: type=1400 audit(1780855521.045:21310): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 969.948062][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 969.968091][ T29] audit: type=1400 audit(1780855521.045:21311): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 970.016276][ T5278] audit: audit_lost=986 audit_rate_limit=0 audit_backlog_limit=64 [ 970.056551][ T5278] audit: backlog limit exceeded [ 970.076174][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 970.094665][T10497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 970.104321][ T5278] audit: audit_lost=987 audit_rate_limit=0 audit_backlog_limit=64 [ 970.136510][ T5278] audit: backlog limit exceeded [ 970.147378][T10497] audit: audit_lost=988 audit_rate_limit=0 audit_backlog_limit=64 [ 970.344915][T18156] geneve2: entered promiscuous mode [ 970.398165][T18156] geneve2: entered allmulticast mode [ 970.591540][ T9153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 970.622242][ T9153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 970.659332][ T9153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 970.692162][ T9153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 971.386766][T10524] Bluetooth: hci4: command 0x1003 tx timeout [ 971.397065][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 971.995605][T18176] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 972.143359][T18176] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 974.496032][T18213] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 974.502672][T18213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 974.549762][T18213] vhci_hcd vhci_hcd.0: Device attached [ 974.615913][T18214] vhci_hcd: connection closed [ 974.616353][ T9153] vhci_hcd vhci_hcd.3: stop threads [ 974.645161][ T9153] vhci_hcd vhci_hcd.3: release socket [ 974.664353][T10344] Bluetooth: hci4: Frame reassembly failed (-84) [ 974.684025][ T9153] vhci_hcd vhci_hcd.3: disconnect device [ 974.726394][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 974.847585][ T29] kauditd_printk_skb: 4943 callbacks suppressed [ 974.847601][ T29] audit: type=1400 audit(1780855526.055:25957): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 974.948440][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 974.949582][T18216] audit: audit_backlog=65 > audit_backlog_limit=64 [ 974.955639][ T5278] audit: audit_lost=1088 audit_rate_limit=0 audit_backlog_limit=64 [ 974.971846][ T29] audit: type=1400 audit(1780855526.065:25958): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 974.972019][ T5278] audit: backlog limit exceeded [ 975.019367][T18216] audit: audit_lost=1089 audit_rate_limit=0 audit_backlog_limit=64 [ 975.040357][T10497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 975.047354][T18216] audit: backlog limit exceeded [ 975.052599][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 976.521639][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3264'. [ 976.666443][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 978.248927][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3271'. [ 978.291108][T18258] netlink: 75 bytes leftover after parsing attributes in process `syz.3.3271'. [ 978.551458][T18265] Bluetooth: hci4: Frame reassembly failed (-90) [ 979.625344][ T5349] libceph: connect (1)[c::]:6789 error -101 [ 979.653606][ T5349] libceph: mon0 (1)[c::]:6789 connect error [ 979.660505][T18276] ceph: No mds server is up or the cluster is laggy [ 979.667038][ T5349] libceph: connect (1)[c::]:6789 error -101 [ 979.667191][ T5349] libceph: mon0 (1)[c::]:6789 connect error [ 979.779619][T18272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.821655][T18272] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.855335][T18272] batman_adv: batadv0: Interface activated: dummy0 [ 979.855365][T18272] batadv0: mtu less than device minimum [ 979.858473][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.859516][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.860469][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.861405][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.862321][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.863235][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.864166][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.865071][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.867869][T18272] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.887758][ T29] kauditd_printk_skb: 5170 callbacks suppressed [ 979.887797][ T29] audit: type=1400 audit(1780855531.095:30789): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.889920][ T29] audit: type=1400 audit(1780855531.105:30790): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.890722][ T29] audit: type=1400 audit(1780855531.105:30791): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.890851][ T29] audit: type=1400 audit(1780855531.105:30792): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.890982][ T29] audit: type=1400 audit(1780855531.105:30793): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.891148][ T29] audit: type=1400 audit(1780855531.105:30794): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.891335][ T29] audit: type=1400 audit(1780855531.105:30795): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.891475][ T29] audit: type=1400 audit(1780855531.105:30796): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.891639][ T29] audit: type=1400 audit(1780855531.105:30797): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.891803][ T29] audit: type=1400 audit(1780855531.105:30798): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 979.926523][T15753] libceph: connect (1)[c::]:6789 error -101 [ 979.928469][T15753] libceph: mon0 (1)[c::]:6789 connect error [ 980.066526][T18272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.407220][T18272] wireguard: wg2: Could not create IPv4 socket [ 980.664133][T18273] wireguard: wg2: Could not create IPv4 socket [ 980.826544][T10524] Bluetooth: hci4: command 0x1003 tx timeout [ 980.826717][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 981.104548][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 982.359667][T18304] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 982.359696][T18304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 982.359775][T18304] vhci_hcd vhci_hcd.0: Device attached [ 982.367074][T18305] vhci_hcd: connection closed [ 982.373242][ T56] vhci_hcd vhci_hcd.5: stop threads [ 982.373267][ T56] vhci_hcd vhci_hcd.5: release socket [ 982.373285][ T56] vhci_hcd vhci_hcd.5: disconnect device [ 982.637255][T18312] netlink: 'syz.6.3286': attribute type 2 has an invalid length. [ 982.958795][T18315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3287'. [ 983.146441][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 983.153840][T10524] Bluetooth: hci4: command 0x1003 tx timeout [ 983.995192][T18335] syzkaller0: entered promiscuous mode [ 984.006854][T18335] syzkaller0: entered allmulticast mode [ 984.303356][T18340] blkio.reset_stats is deprecated [ 984.759961][T18345] batman_adv: batadv0: Interface deactivated: dummy0 [ 984.896392][ T29] kauditd_printk_skb: 7965 callbacks suppressed [ 984.896409][ T29] audit: type=1400 audit(1780855536.105:38764): avc: denied { read write } for pid=10517 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 984.946147][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 984.958289][ T5278] audit: audit_lost=1204 audit_rate_limit=0 audit_backlog_limit=64 [ 984.966944][ T5278] audit: backlog limit exceeded [ 984.972940][ T29] audit: type=1400 audit(1780855536.115:38765): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 985.000024][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.016427][ T5278] audit: audit_lost=1205 audit_rate_limit=0 audit_backlog_limit=64 [ 985.026001][T15013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.033739][ T5278] audit: backlog limit exceeded [ 985.039906][T15013] audit: audit_lost=1206 audit_rate_limit=0 audit_backlog_limit=64 [ 985.421281][T18352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3300'. [ 985.450338][T10344] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 985.484279][T10344] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 985.521513][T10344] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 985.537948][T10344] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 985.676652][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 987.236294][T18392] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3316'. [ 987.471238][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.484650][T18394] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3317'. [ 987.700376][T18396] FAULT_INJECTION: forcing a failure. [ 987.700376][T18396] name failslab, interval 1, probability 0, space 0, times 0 [ 987.718468][T10524] Bluetooth: hci4: command 0x1003 tx timeout [ 987.726439][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 987.743658][T18396] CPU: 0 UID: 0 PID: 18396 Comm: syz.9.3318 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.743688][T18396] Tainted: [L]=SOFTLOCKUP [ 987.743695][T18396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 987.743705][T18396] Call Trace: [ 987.743711][T18396] [ 987.743718][T18396] dump_stack_lvl+0x100/0x190 [ 987.743744][T18396] should_fail_ex.cold+0x5/0xa [ 987.743769][T18396] should_failslab+0xc2/0x120 [ 987.743793][T18396] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 987.743820][T18396] ? sidtab_sid2str_get+0x17a/0x670 [ 987.743842][T18396] kmemdup_noprof+0x29/0x60 [ 987.743859][T18396] sidtab_sid2str_get+0x17a/0x670 [ 987.743879][T18396] security_sid_to_context_core+0x35a/0x6d0 [ 987.743904][T18396] ? avc_audit_post_callback+0x115/0x900 [ 987.743924][T18396] avc_audit_post_callback+0x1aa/0x900 [ 987.743942][T18396] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 987.743967][T18396] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 987.743983][T18396] ? skb_put+0x138/0x180 [ 987.744003][T18396] ? audit_log_n_string+0x256/0x550 [ 987.744026][T18396] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 987.744043][T18396] common_lsm_audit+0x23f/0x2b0 [ 987.744068][T18396] ? __pfx_common_lsm_audit+0x10/0x10 [ 987.744092][T18396] ? __lock_acquire+0x4a5/0x2630 [ 987.744119][T18396] slow_avc_audit+0x186/0x210 [ 987.744138][T18396] ? __pfx_slow_avc_audit+0x10/0x10 [ 987.744157][T18396] ? find_held_lock+0x2b/0x80 [ 987.744177][T18396] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 987.744194][T18396] ? avc_denied+0x14a/0x190 [ 987.744212][T18396] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 987.744235][T18396] avc_has_perm+0x1a6/0x1e0 [ 987.744255][T18396] ? __pfx_avc_has_perm+0x10/0x10 [ 987.744282][T18396] inode_has_perm+0x166/0x1d0 [ 987.744303][T18396] selinux_path_notify+0x2ec/0x660 [ 987.744331][T18396] ? __pfx_selinux_path_notify+0x10/0x10 [ 987.744359][T18396] ? proc_fail_nth_write+0x9f/0x220 [ 987.744388][T18396] security_path_notify+0x9b/0x230 [ 987.744412][T18396] fcntl_dirnotify+0x1f3/0xb00 [ 987.744431][T18396] ? __pfx_vfs_write+0x10/0x10 [ 987.744450][T18396] ? do_sys_openat2+0x157/0x1e0 [ 987.744476][T18396] do_fcntl+0x996/0x1670 [ 987.744502][T18396] ? __pfx_do_fcntl+0x10/0x10 [ 987.744534][T18396] ? selinux_file_fcntl+0xea/0x170 [ 987.744561][T18396] __x64_sys_fcntl+0x163/0x200 [ 987.744589][T18396] do_syscall_64+0x115/0x870 [ 987.744611][T18396] ? clear_bhb_loop+0x40/0x90 [ 987.744632][T18396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.744649][T18396] RIP: 0033:0x7f3eb839ce59 [ 987.744664][T18396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.744679][T18396] RSP: 002b:00007f3eb65ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 987.744696][T18396] RAX: ffffffffffffffda RBX: 00007f3eb8615fa0 RCX: 00007f3eb839ce59 [ 987.744707][T18396] RDX: 000000000000005d RSI: 0000000000000402 RDI: 0000000000000004 [ 987.744717][T18396] RBP: 00007f3eb65ee090 R08: 0000000000000000 R09: 0000000000000000 [ 987.744727][T18396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.744737][T18396] R13: 00007f3eb8616038 R14: 00007f3eb8615fa0 R15: 00007fff0629db98 [ 987.744760][T18396] [ 988.753311][T18398] netlink: 'syz.9.3319': attribute type 4 has an invalid length. [ 989.909218][ T29] kauditd_printk_skb: 5261 callbacks suppressed [ 989.909250][ T29] audit: type=1400 audit(1780855541.115:43996): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 989.977266][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.010632][ T5278] audit: audit_lost=1217 audit_rate_limit=0 audit_backlog_limit=64 [ 990.029836][ T29] audit: type=1400 audit(1780855541.125:43997): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 990.062184][ T5278] audit: backlog limit exceeded [ 990.073425][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 990.102310][ T5278] audit: audit_lost=1218 audit_rate_limit=0 audit_backlog_limit=64 [ 990.144489][ T29] audit: type=1400 audit(1780855541.155:43998): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 990.178009][ T5278] audit: backlog limit exceeded [ 990.190538][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 991.666611][T18431] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3328'. [ 992.324894][ T8970] Bluetooth: hci4: Frame reassembly failed (-84) [ 992.378788][ T8970] Bluetooth: hci4: Frame reassembly failed (-84) [ 994.356615][T10524] Bluetooth: hci4: command 0x1003 tx timeout [ 994.365994][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 994.923983][ T29] kauditd_printk_skb: 5542 callbacks suppressed [ 994.924007][ T29] audit: type=1400 audit(1780855546.125:49221): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 995.006599][ T29] audit: type=1400 audit(1780855546.125:49222): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 995.052931][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 995.111467][T10509] audit: audit_backlog=65 > audit_backlog_limit=64 [ 995.123614][ T5278] audit: audit_lost=1326 audit_rate_limit=0 audit_backlog_limit=64 [ 995.160103][T10509] audit: audit_lost=1327 audit_rate_limit=0 audit_backlog_limit=64 [ 995.169841][ T5278] audit: backlog limit exceeded [ 995.176790][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 995.186187][T10509] audit: backlog limit exceeded [ 995.217083][ T5278] audit: audit_lost=1328 audit_rate_limit=0 audit_backlog_limit=64 [ 997.268997][T18489] sit0: Caught tx_queue_len zero misconfig [ 997.904489][T10344] Bluetooth: hci4: Frame reassembly failed (-84) [ 999.804323][T18507] netlink: 'syz.5.3352': attribute type 2 has an invalid length. [ 999.926586][ T29] kauditd_printk_skb: 4766 callbacks suppressed [ 999.926603][ T29] audit: type=1400 audit(1780855551.135:53988): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 999.946413][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1000.017177][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1000.017196][ T5278] audit: audit_lost=1329 audit_rate_limit=0 audit_backlog_limit=64 [ 1000.017208][ T5278] audit: backlog limit exceeded [ 1000.017258][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1000.017277][ T5278] audit: audit_lost=1330 audit_rate_limit=0 audit_backlog_limit=64 [ 1000.017289][ T5278] audit: backlog limit exceeded [ 1000.017335][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1000.017347][ T5278] audit: audit_lost=1331 audit_rate_limit=0 audit_backlog_limit=64 [ 1000.017359][ T5278] audit: backlog limit exceeded [ 1001.120853][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1001.304043][T18526] syzkaller0: entered promiscuous mode [ 1001.325820][T18526] syzkaller0: entered allmulticast mode [ 1002.690817][ T8970] Bluetooth: hci4: Frame reassembly failed (-84) [ 1004.102924][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3375'. [ 1004.749869][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1004.759095][T10524] Bluetooth: hci4: command 0x1003 tx timeout [ 1004.972310][ T29] kauditd_printk_skb: 7481 callbacks suppressed [ 1004.972324][ T29] audit: type=1400 audit(1780855556.135:60534): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1005.039175][ T29] audit: type=1400 audit(1780855556.135:60535): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1005.108674][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.120335][T18595] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.139977][ T5278] audit: audit_lost=1644 audit_rate_limit=0 audit_backlog_limit=64 [ 1005.166552][T18595] audit: audit_lost=1645 audit_rate_limit=0 audit_backlog_limit=64 [ 1005.196617][T18596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.210468][ T5278] audit: backlog limit exceeded [ 1005.223237][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.231209][T18595] audit: backlog limit exceeded [ 1007.623340][T18617] syz.6.3387 (18617): drop_caches: 2 [ 1008.116004][T18637] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1008.122535][T18637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1008.136828][T18637] vhci_hcd vhci_hcd.0: Device attached [ 1008.185191][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 1008.196770][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 1008.223688][T18638] vhci_hcd: connection closed [ 1008.227443][ T56] vhci_hcd vhci_hcd.6: stop threads [ 1008.237305][ T56] vhci_hcd vhci_hcd.6: release socket [ 1008.242653][ T56] vhci_hcd vhci_hcd.6: disconnect device [ 1009.978570][ T29] kauditd_printk_skb: 6137 callbacks suppressed [ 1009.978586][ T29] audit: type=1400 audit(1780855561.195:66549): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1010.010220][ T29] audit: type=1400 audit(1780855561.195:66550): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1010.032630][ T29] audit: type=1400 audit(1780855561.195:66551): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1010.099108][ T29] audit: type=1400 audit(1780855561.195:66552): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1010.103994][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.122044][T10497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.128898][T18666] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.142809][T18666] audit: audit_lost=1688 audit_rate_limit=0 audit_backlog_limit=64 [ 1010.151922][T18666] audit: backlog limit exceeded [ 1010.152044][T18664] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.186800][T15660] Bluetooth: hci4: command 0x1003 tx timeout [ 1010.187935][ T5620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1011.468971][T10524] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1012.506666][T10524] Bluetooth: hci4: command 0xfc11 tx timeout [ 1012.507258][ T5620] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1014.990652][ T29] kauditd_printk_skb: 7399 callbacks suppressed [ 1014.990669][ T29] audit: type=1400 audit(1780855566.205:73358): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1015.097356][ T29] audit: type=1400 audit(1780855566.205:73359): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1015.131300][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1015.136312][T18716] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1015.164595][T18716] audit: audit_lost=1888 audit_rate_limit=0 audit_backlog_limit=64 [ 1015.178578][T15013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1015.193033][T15013] audit: audit_lost=1889 audit_rate_limit=0 audit_backlog_limit=64 [ 1015.202273][ T5278] audit: audit_lost=1890 audit_rate_limit=0 audit_backlog_limit=64 [ 1015.204441][ T29] audit: type=1400 audit(1780855566.205:73360): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1015.232287][T18716] audit: backlog limit exceeded [ 1019.473994][T18775] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3437'. [ 1019.579634][T18781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18781 comm=syz.8.3437 [ 1020.001306][ T29] kauditd_printk_skb: 6124 callbacks suppressed [ 1020.001334][ T29] audit: type=1400 audit(1780855571.215:79114): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1020.135754][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1020.135772][ T5278] audit: audit_lost=2014 audit_rate_limit=0 audit_backlog_limit=64 [ 1020.135786][ T5278] audit: backlog limit exceeded [ 1020.135841][ T5278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1020.135852][ T5278] audit: audit_lost=2015 audit_rate_limit=0 audit_backlog_limit=64 [ 1020.135864][ T5278] audit: backlog limit exceeded [ 1020.144061][ T29] audit: type=1400 audit(1780855571.225:79115): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1020.144101][ T29] audit: type=1400 audit(1780855571.225:79116): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1020.144132][ T29] audit: type=1400 audit(1780855571.225:79117): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1020.232007][T18788] veth0_to_batadv: entered allmulticast mode [ 1127.296183][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1127.303157][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18760/1:b..l [ 1127.311714][ C0] rcu: (detected by 0, t=10502 jiffies, g=127573, q=196 ncpus=2) [ 1127.319505][ C0] task:syz.9.3432 state:R running task stack:25912 pid:18760 tgid:18759 ppid:15373 task_flags:0x400140 flags:0x00080002 [ 1127.333727][ C0] Call Trace: [ 1127.337011][ C0] [ 1127.339939][ C0] __schedule+0x1295/0x67a0 [ 1127.344444][ C0] ? find_held_lock+0x2b/0x80 [ 1127.349130][ C0] ? __pfx___schedule+0x10/0x10 [ 1127.353976][ C0] ? mark_held_locks+0x40/0x70 [ 1127.358752][ C0] preempt_schedule_irq+0x50/0x90 [ 1127.363792][ C0] irqentry_exit+0x205/0x970 [ 1127.368399][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1127.374373][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 1127.379567][ C0] Code: 05 fb 03 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 8e f2 0e 0f 82 a4 02 00 00 8b 35 8e c1 f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 03 25 12 0f 85 ed 02 00 00 48 83 c4 [ 1127.399171][ C0] RSP: 0018:ffffc9000d636be8 EFLAGS: 00000206 [ 1127.405320][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 1127.413295][ C0] RDX: 0000000000000000 RSI: ffffffff8deea69a RDI: ffffffff8c1c4780 [ 1127.421258][ C0] RBP: ffffffff8e7e5560 R08: 00000000dacd92cc R09: 0000000000000007 [ 1127.429304][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1127.437260][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1127.445234][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 1127.450445][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1127.456605][ C0] unwind_next_frame+0xd1/0x2090 [ 1127.461562][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1127.466673][ C0] ? stack_trace_save+0x8e/0xc0 [ 1127.471512][ C0] ? __unwind_start+0x3d1/0x7f0 [ 1127.476358][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1127.482504][ C0] arch_stack_walk+0x94/0xf0 [ 1127.487095][ C0] ? stack_trace_save+0x8e/0xc0 [ 1127.491937][ C0] stack_trace_save+0x8e/0xc0 [ 1127.496602][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1127.501963][ C0] ? _copy_from_user+0x98/0xd0 [ 1127.506723][ C0] save_stack+0x162/0x1e0 [ 1127.511048][ C0] ? __pfx_save_stack+0x10/0x10 [ 1127.515904][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1127.520839][ C0] __set_page_owner+0x8c/0x540 [ 1127.525595][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1127.530970][ C0] ? bad_range+0x257/0x3f0 [ 1127.535382][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1127.540578][ C0] ? get_page_from_freelist+0x1185/0x3410 [ 1127.546303][ C0] post_alloc_hook+0xfd/0x120 [ 1127.550980][ C0] get_page_from_freelist+0x11a6/0x3410 [ 1127.556529][ C0] ? __pfx___might_resched+0x10/0x10 [ 1127.561825][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1127.567733][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1127.572928][ C0] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 1127.579078][ C0] ? debug_object_assert_init+0x1c4/0x300 [ 1127.584972][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1127.591299][ C0] ? mark_held_locks+0x40/0x70 [ 1127.596055][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1127.601246][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1127.606458][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1127.611403][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1127.616337][ C0] ? __css_rstat_updated+0x1ce/0x5a0 [ 1127.621635][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1127.627522][ C0] ? policy_nodemask+0xed/0x4f0 [ 1127.632369][ C0] alloc_pages_mpol+0x1fb/0x540 [ 1127.637215][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1127.642580][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1127.647537][ C0] folio_alloc_mpol_noprof+0x36/0x260 [ 1127.652936][ C0] vma_alloc_folio_noprof+0xed/0x1d0 [ 1127.658233][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1127.664150][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1127.668932][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1127.673698][ C0] do_wp_page+0xd75/0x4350 [ 1127.678119][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1127.682980][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1127.688356][ C0] __handle_mm_fault+0x1ab6/0x2a00 [ 1127.693469][ C0] ? mt_find+0x45e/0x8e0 [ 1127.697709][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1127.703163][ C0] ? __pfx_mt_find+0x10/0x10 [ 1127.707763][ C0] ? find_vma+0xbf/0x140 [ 1127.711997][ C0] ? __pfx_find_vma+0x10/0x10 [ 1127.716673][ C0] handle_mm_fault+0x37b/0xa30 [ 1127.721441][ C0] do_user_addr_fault+0x74c/0x12f0 [ 1127.726565][ C0] ? trace_page_fault_kernel+0x7a/0x200 [ 1127.732114][ C0] exc_page_fault+0x6f/0xd0 [ 1127.736611][ C0] asm_exc_page_fault+0x26/0x30 [ 1127.741480][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1127.747196][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 47 d9 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1127.766793][ C0] RSP: 0018:ffffc9000d6379d8 EFLAGS: 00050246 [ 1127.772853][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000c11030 [ 1127.780813][ C0] RDX: 0000000000080000 RSI: ffffffff89543c71 RDI: ffff888036640000 [ 1127.788773][ C0] RBP: ffffc9000d637d78 R08: 0000000000000005 R09: 0000000000000000 [ 1127.796735][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 1127.804693][ C0] R13: 0000200000c11000 R14: ffffc9000d637dbc R15: 0000000000000002 [ 1127.812669][ C0] ? ____sys_recvmsg+0x2e1/0x640 [ 1127.817623][ C0] ____sys_recvmsg+0x2ec/0x640 [ 1127.822382][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1127.827927][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1127.833213][ C0] ? rcu_is_watching+0x12/0xc0 [ 1127.837975][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 1127.842818][ C0] ? kfree+0x1dd/0x6c0 [ 1127.846887][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 1127.851561][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1127.856768][ C0] ? __pfx___might_resched+0x10/0x10 [ 1127.862079][ C0] do_recvmmsg+0x301/0x760 [ 1127.866494][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1127.871433][ C0] ? do_futex+0x192/0x350 [ 1127.875771][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 1127.880709][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 1127.885734][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1127.891280][ C0] ? rcu_is_watching+0x12/0xc0 [ 1127.896044][ C0] do_syscall_64+0x115/0x870 [ 1127.900629][ C0] ? clear_bhb_loop+0x40/0x90 [ 1127.905304][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.911191][ C0] RIP: 0033:0x7f3eb839ce59 [ 1127.915685][ C0] RSP: 002b:00007f3eb65ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1127.924090][ C0] RAX: ffffffffffffffda RBX: 00007f3eb8615fa0 RCX: 00007f3eb839ce59 [ 1127.932062][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 1127.940023][ C0] RBP: 00007f3eb8432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1127.947982][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1127.955947][ C0] R13: 00007f3eb8616038 R14: 00007f3eb8615fa0 R15: 00007fff0629db98 [ 1127.963921][ C0] [ 1127.966931][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g127573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1127.979341][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=60219 [ 1127.987212][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g127573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1127.998651][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1128.008606][ C0] rcu: RCU grace-period kthread stack dump: [ 1128.014490][ C0] task:rcu_preempt state:I stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1128.026404][ C0] Call Trace: [ 1128.029670][ C0] [ 1128.032594][ C0] __schedule+0x1295/0x67a0 [ 1128.037112][ C0] ? __pfx___schedule+0x10/0x10 [ 1128.041968][ C0] ? find_held_lock+0x2b/0x80 [ 1128.046636][ C0] ? schedule+0x2bf/0x390 [ 1128.050960][ C0] schedule+0xdd/0x390 [ 1128.055029][ C0] schedule_timeout+0x127/0x280 [ 1128.059888][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1128.065254][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1128.070532][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1128.076332][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1128.081793][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1128.086550][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1128.091831][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 1128.097283][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1128.102216][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1128.107431][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1128.113233][ C0] rcu_gp_kthread+0x179/0x230 [ 1128.117903][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1128.123092][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1128.128894][ C0] ? __kthread_parkme+0x18c/0x230 [ 1128.133924][ C0] ? kthread+0x13a/0x450 [ 1128.138156][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1128.143344][ C0] kthread+0x370/0x450 [ 1128.147408][ C0] ? __pfx_kthread+0x10/0x10 [ 1128.151989][ C0] ret_from_fork+0x72b/0xd50 [ 1128.156576][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.161687][ C0] ? __switch_to+0x800/0x1100 [ 1128.166368][ C0] ? __pfx_kthread+0x10/0x10 [ 1128.170953][ C0] ret_from_fork_asm+0x1a/0x30 [ 1128.175726][ C0] [ 1128.178738][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1128.185044][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1128.190237][ C1] NMI backtrace for cpu 1 [ 1128.190252][ C1] CPU: 1 UID: 0 PID: 18795 Comm: syz.6.3443 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.190271][ C1] Tainted: [L]=SOFTLOCKUP [ 1128.190276][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1128.190284][ C1] RIP: 0010:lock_acquire+0x2f4/0x370 [ 1128.190303][ C1] Code: 0e 85 c0 0f 85 8b fd ff ff 48 8d 74 24 08 b9 0a 00 00 00 ba 08 00 00 00 65 48 8b 3d 2e 01 25 12 e8 11 c7 ff ff e9 6a fd ff ff f7 64 08 00 84 c0 0f 85 4f fd ff ff 48 8d 3d 78 f8 f5 0e 67 48 [ 1128.190315][ C1] RSP: 0018:ffffc90000a08e00 EFLAGS: 00000097 [ 1128.190327][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 1128.190335][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b85284d8 [ 1128.190343][ C1] RBP: ffff8880b85284d8 R08: 0000000000000001 R09: 0000000000000000 [ 1128.190352][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1128.190360][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1128.190368][ C1] FS: 0000555584de7500(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 1128.190382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1128.190391][ C1] CR2: 0000200000fb7030 CR3: 000000006533d000 CR4: 00000000003526f0 [ 1128.190400][ C1] Call Trace: [ 1128.190405][ C1] [ 1128.190414][ C1] _raw_spin_lock_irq+0x36/0x50 [ 1128.190429][ C1] ? __hrtimer_run_queues+0x1bd/0xa00 [ 1128.190447][ C1] __hrtimer_run_queues+0x1bd/0xa00 [ 1128.190470][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1128.190493][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1128.190511][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1128.190529][ C1] [ 1128.190533][ C1] [ 1128.190538][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1128.190553][ C1] RIP: 0010:finish_task_switch.isra.0+0x2d3/0x1010 [ 1128.190574][ C1] Code: 2f 0a 00 00 41 c7 87 e0 0d 00 00 00 00 00 00 e9 0f 04 00 00 49 8d 7f 48 e8 ba 1a b7 09 e8 45 9e 3b 00 fb 48 8d bb c8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1128.190586][ C1] RSP: 0018:ffffc9000d8d7930 EFLAGS: 00000202 [ 1128.190597][ C1] RAX: 0000000000000485 RBX: ffff88803291ca80 RCX: 0000000000000000 [ 1128.190605][ C1] RDX: 0000000000000000 RSI: ffffffff8df0fbf5 RDI: ffff88803291e148 [ 1128.190614][ C1] RBP: ffffc9000d8d7988 R08: 0000000000000001 R09: 0000000000000000 [ 1128.190622][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029dbca80 [ 1128.190631][ C1] R13: 0000000000000001 R14: ffffffff90d74de4 R15: ffff8880b853b480 [ 1128.190648][ C1] __schedule+0x129d/0x67a0 [ 1128.190669][ C1] ? __pfx___schedule+0x10/0x10 [ 1128.190685][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1128.190705][ C1] preempt_schedule_common+0x42/0xc0 [ 1128.190721][ C1] preempt_schedule_thunk+0x16/0x30 [ 1128.190742][ C1] try_to_wake_up+0x5f6/0x1900 [ 1128.190762][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 1128.190781][ C1] ? find_held_lock+0x2b/0x80 [ 1128.190793][ C1] ? futex_wake+0x456/0x530 [ 1128.190806][ C1] wake_up_q+0xa1/0x130 [ 1128.190826][ C1] futex_wake+0x460/0x530 [ 1128.190839][ C1] ? __pfx_futex_wake+0x10/0x10 [ 1128.190851][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1128.190867][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1128.190885][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 1128.190903][ C1] do_futex+0x32b/0x350 [ 1128.190921][ C1] ? __pfx_do_futex+0x10/0x10 [ 1128.190937][ C1] ? find_held_lock+0x2b/0x80 [ 1128.190948][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1128.190962][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1128.190979][ C1] __x64_sys_futex+0x34f/0x4d0 [ 1128.190998][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1128.191017][ C1] ? rcu_is_watching+0x12/0xc0 [ 1128.191037][ C1] do_syscall_64+0x115/0x870 [ 1128.191052][ C1] ? clear_bhb_loop+0x40/0x90 [ 1128.191068][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.191081][ C1] RIP: 0033:0x7fc2b159ce59 [ 1128.191092][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.191104][ C1] RSP: 002b:00007fff4ca50d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1128.191122][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2b159ce59 [ 1128.191130][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc2b1815fa8 [ 1128.191138][ C1] RBP: 00000000000000f1 R08: 0000000000000009 R09: 0000000000000000 [ 1128.191145][ C1] R10: 00007fc2b1815fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1128.191153][ C1] R13: 00007fc2b1815fac R14: 00007fc2b1815fa8 R15: 00007fc2b1815fa0 [ 1128.191167][ C1]