last executing test programs: 20m26.952475279s ago: executing program 1 (id=196): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2ea3c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x1, 0x1, 0x80d8, 0x3f, 0x15, "3eccee2b69e20900"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000380)='exfat\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = fsmount(r3, 0x0, 0x80) setreuid(0xee01, 0xee01) r5 = openat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000200)={0x2b0859100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10d00, 0xf) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x5000000, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r7) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 20m23.818700192s ago: executing program 1 (id=199): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "338e3468c0ad2a4f4813347ed3e1c0bf"}) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) 20m22.67161126s ago: executing program 1 (id=204): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x9, 0x2, 0x9, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) socket(0x10, 0x80002, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = gettid() ioprio_set$pid(0x3, r3, 0x6000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000540001000400", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000000e100"/16], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0xa000, 0x0) ioctl$COMEDI_BUFINFO(r7, 0xc02c640e, &(0x7f00000000c0)={0x1, 0x5, 0xcc, 0x6, 0x0, 0x3, 0x5}) 20m21.379441643s ago: executing program 1 (id=206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:clock_device_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x40800) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_pidfd_open(r2, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) shutdown(r6, 0x1) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'ni_daq_700\x00', [0xd00, 0x6, 0x0, 0x2, 0x88d7, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) 20m20.779041053s ago: executing program 1 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x4000000) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@lsrr={0x83, 0x3, 0xd1}, @timestamp_prespec={0x44, 0x3c, 0xab, 0x3, 0x6, [{@rand_addr=0x64010100, 0x1}, {@private=0xa010100, 0x401}, {@remote, 0x11c}, {@loopback, 0x9}, {@private=0xa010101, 0xc2}, {@local, 0x5}, {@empty, 0x4}]}]}}}}}}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000001c0)=""/4096) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = dup(r9) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="3d00009d000000", @ANYRESHEX=r10, @ANYBLOB=',k']) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f00000011c0)={0x0, 0x6, 0x2, 0xffffffffffffffff, 0x1, 0x140, 0x3, 0x4, 0xffff, 0x4, 0xffffffff, 0x3}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index, 0x3, &(0x7f0000001280)="d1ec9c58089ae928a7ef684808282c06fe7b450e002c639f76d2972fdd8d3c3a015c49048731aa9b56edd0715fda66237612c2b77cce8dee132f81634bbb7795614e7e0bdd0c28a49522b85135b5ab078bc47451c2c3aabf484ca6135fbe783b2cad3aab357fad8428666280e462bb0fc98e625a4855e226e7c28ee3367c1c67559a6e999170a8d4768e38c185f2ea5a620238483864f06a701f66fa699a60b44b", 0xa1, 0xc, 0x1}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) 20m20.328473645s ago: executing program 1 (id=212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{}], 0x1}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r9, 0xffff, 0x2, r9}) ioctl$KVM_RUN(r8, 0xae80, 0x0) read(r5, &(0x7f0000000340)=""/4096, 0x1000) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="58010000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="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"/320], 0x158}}, 0x0) 20m19.419835772s ago: executing program 32 (id=212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{}], 0x1}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r9, 0xffff, 0x2, r9}) ioctl$KVM_RUN(r8, 0xae80, 0x0) read(r5, &(0x7f0000000340)=""/4096, 0x1000) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="58010000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="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"/320], 0x158}}, 0x0) 14m12.708101613s ago: executing program 2 (id=1089): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 14m11.558641229s ago: executing program 2 (id=1090): r0 = gettid() clock_nanosleep(0xfffffff2, 0x100000000000000, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 14m10.869412809s ago: executing program 2 (id=1091): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}]}, 0x44}}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 14m9.61250794s ago: executing program 2 (id=1096): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000098a000000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x100) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="4e3f261e29a7fa764a1131a77b8a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000040)={{@any, 0xffffffff}, 0x0, 0x0, 0x401, 0x7}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000000200)={0x7fff, 0x8, '\x00', 0x0, &(0x7f0000000180)=[0x0]}) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 14m8.532556998s ago: executing program 2 (id=1100): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r4 = socket$inet6(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 14m8.366013745s ago: executing program 4 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100)=""/220, &(0x7f0000000000)=0xdc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) (async) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100)=""/220, &(0x7f0000000000)=0xdc) (async) 14m7.896160572s ago: executing program 2 (id=1104): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000500)='./file0\x00', 0x4001, 0x3) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) listxattr(&(0x7f0000000100)='./bus\x00', &(0x7f00000002c0)=""/117, 0x75) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1, 0x2000000}, 0x20) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b340c89c86e708e4290fc1ed911103b0e27f4d600f9bf674a2f9593b7f276d131a46a0cc4b15016bbf55f918cf945eda622d79d5190bca5baf4d0635ca2b9793545546779ece51058e257f9db08a79b521b5356a6f57a734fc3027b9479b1d56d708e241970cf38d72880700"/139], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x20, 0xb, 0x90, {0x90, 0x24, "595ae35e4ba3b08dfb2f2d505bf3e281701d547a5f19d996acb9bd84cc4ccf77511e935bbdb0cb6eb31cc22d62ce59a80e1f30cb8155e923bd8d05d854eb1a8a08c7befe9783db0ccca6d5d03e1adeba2b9d3d3ae4d40624444e3a88706e6e0b71c817aa61e6cb2bbbf083281e9fc81ab70399539107f4c6ee959c190e29c69efe63e070f4daffe865ccce4cd385"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000304000000fa024504"], 0x0, 0x0}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0x17, 0xb8, "6da6d166c9063f90e1e404936773db98b82f0025b1ff1cc8ce6d727c9dba8a907342036564b5aa2e8c9ebcb5397df9a391cfd011a8ffa88103d078a055a822af09f093ef5aa8ab4e7fbd9944ce7b82dca0ecd858ce59503e1754ba7dd5d4f2e61fc08bbf324bf27f8c29bb8c836b0b1bc31988750422b95961cbdc3002fb5678aeb148bc3aaf2125709e3ab19daa72cb9c9a5ac38aaa6469b1a683d0ca6ae1f76eeaf059fd9ac04c1480165577c731e2415f7837f3b01c2f"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x1, 0x5c, "3e1a0191c622c4c4e5d185a1de14d194fc05f7730786b3ad72e603a12cc58b8b65bd325d0ba761b6076c042edcfa645b2b65ff1228d93508119016402fb7ad4f95b0bbc3b335a097527bbac1b104ec4a3d07f6f12f4a9474fccbdecf"}, &(0x7f00000004c0)={0x20, 0x3, 0x1}}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000040)={0x3, 0x1, 0x4000b}) 14m7.253969823s ago: executing program 33 (id=1104): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000500)='./file0\x00', 0x4001, 0x3) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) listxattr(&(0x7f0000000100)='./bus\x00', &(0x7f00000002c0)=""/117, 0x75) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1, 0x2000000}, 0x20) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b340c89c86e708e4290fc1ed911103b0e27f4d600f9bf674a2f9593b7f276d131a46a0cc4b15016bbf55f918cf945eda622d79d5190bca5baf4d0635ca2b9793545546779ece51058e257f9db08a79b521b5356a6f57a734fc3027b9479b1d56d708e241970cf38d72880700"/139], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x20, 0xb, 0x90, {0x90, 0x24, "595ae35e4ba3b08dfb2f2d505bf3e281701d547a5f19d996acb9bd84cc4ccf77511e935bbdb0cb6eb31cc22d62ce59a80e1f30cb8155e923bd8d05d854eb1a8a08c7befe9783db0ccca6d5d03e1adeba2b9d3d3ae4d40624444e3a88706e6e0b71c817aa61e6cb2bbbf083281e9fc81ab70399539107f4c6ee959c190e29c69efe63e070f4daffe865ccce4cd385"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000304000000fa024504"], 0x0, 0x0}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0x17, 0xb8, "6da6d166c9063f90e1e404936773db98b82f0025b1ff1cc8ce6d727c9dba8a907342036564b5aa2e8c9ebcb5397df9a391cfd011a8ffa88103d078a055a822af09f093ef5aa8ab4e7fbd9944ce7b82dca0ecd858ce59503e1754ba7dd5d4f2e61fc08bbf324bf27f8c29bb8c836b0b1bc31988750422b95961cbdc3002fb5678aeb148bc3aaf2125709e3ab19daa72cb9c9a5ac38aaa6469b1a683d0ca6ae1f76eeaf059fd9ac04c1480165577c731e2415f7837f3b01c2f"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x1, 0x5c, "3e1a0191c622c4c4e5d185a1de14d194fc05f7730786b3ad72e603a12cc58b8b65bd325d0ba761b6076c042edcfa645b2b65ff1228d93508119016402fb7ad4f95b0bbc3b335a097527bbac1b104ec4a3d07f6f12f4a9474fccbdecf"}, &(0x7f00000004c0)={0x20, 0x3, 0x1}}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000040)={0x3, 0x1, 0x4000b}) 14m7.241628421s ago: executing program 4 (id=1106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mlxsw_sp_acl_tcam_vregion_migrate\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) dup3(r3, r4, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r2}}, 0xff08) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x9e8d, 0xfffe]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c840}, 0x840) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 14m5.461101189s ago: executing program 4 (id=1109): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000c0000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x42) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x44885) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendfile(r3, r3, 0x0, 0x4) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 14m4.427245996s ago: executing program 4 (id=1113): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 14m3.877903343s ago: executing program 4 (id=1115): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]}) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0x6, "030be4", "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"}}, 0x110) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timerfd_create(0x7, 0x800) 14m2.964723234s ago: executing program 4 (id=1117): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]}) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0x6, "030be4", "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"}}, 0x110) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timerfd_create(0x7, 0x800) 14m2.446403519s ago: executing program 34 (id=1117): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]}) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0x6, "030be4", "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"}}, 0x110) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timerfd_create(0x7, 0x800) 5m26.461702278s ago: executing program 5 (id=2243): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20311}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x8810) 5m26.190818941s ago: executing program 5 (id=2247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) unshare(0x22020400) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000340)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) (async) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="b3c761", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) syz_io_uring_setup(0x1f4d, &(0x7f0000000200)={0x0, 0x19096, 0x400, 0x4, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00'}) (async) r7 = io_uring_setup(0x363c, &(0x7f00000000c0)={0x0, 0xb26c, 0x4000, 0x3, 0x1a7}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0xffffffffffffffe5) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r8, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) (async) r10 = socket(0x1d, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) (async) lstat(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x4}, [{0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x4}, {}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x2, r8}, {0x2, 0x7, r9}, {0x2, 0x2, r11}], {0x4, 0x4}, [{0x8, 0x1, r12}, {0x8, 0x3, r13}, {0x8, 0x2, r14}], {0x10, 0x1}, {0x20, 0x2}}, 0x7c, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) 5m24.831855971s ago: executing program 5 (id=2255): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0xb, 0x102, 0xe, 0x0, 0x3}, 0x1c) 5m24.613965129s ago: executing program 5 (id=2256): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = getpid() kcmp(r1, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000440)={{0x6, 0x3, 0x927d, 0x6, 'syz1\x00', 0x3}, 0x6, 0x1, 0x400000, r1, 0x5, 0xffff, 'syz0\x00', &(0x7f0000000680)=['/)\\,-({\x00', '[-[@[[\x00\xdd+\x9e\xbc\a\xccw\xec\x96\r31\xc3\x14\x97\xf8\xfd+\xcd1\x9c\xc7\xec\xe8\t-\xd5\x8b\x8a\xe4n@$\xff?\x11&\xf5\x9e\xf8g\x94\xa9\xb7/\x87\xde|\x12S\xcd\xd1 \xf2@\xb0\x86\xd4\xe2\"\xf5\xec\xd6\xe5\'O\x04F\x816\xb2M\xf6\x92\xc0\xe3$\xc0\xf5\xf8v\xc1\xf4\xf5\xed\x88n\xd5\xe7\xc6\xcf\xba\x0f\x8b\xcf&V)\xd4yL]\x17:\xfb<', '\x00', '\x00', 'fd/3\x00'], 0x80}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x891008, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000340)={0x1, 0x0, @pic={0xcf, 0x0, 0x2, 0xbb, 0x9, 0x7, 0x5, 0x4, 0x8, 0x6, 0x5, 0xa, 0x3, 0x26, 0x1, 0x7}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000009, 0x11, r2, 0x180000000) 5m23.97283732s ago: executing program 5 (id=2259): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009400c0ffffffffff9500000000000000264708a7bbd864687d924f589f3f93154b37f7dee0ea8495182324db19eedd31811f83923dbeaf624dd3dc2e00e44f43c425786e02f623944ab8a96c820bd0e67d6130d4e84e7a1a7a759e0c0b3b77471ce3bf0f22e1b80ce7c5ac98f761f1fe2c014c5103bd34d8278c734f84b0040c0850fd9f7c0f963ab6dc026aadbefece6847bf0704e438bd62539eaad06897561959dd20eec8031ba8997690bc95ff3339fab0bca2e6b74f64cb221024de00eb01f26c2739f9b150df"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) mount$nfs4(&(0x7f0000000200)=')::\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x201004, &(0x7f0000000640)={[], [{@audit}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@hash}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10d00, 0xf) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r7) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 5m23.420510862s ago: executing program 5 (id=2261): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_gettime(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x80000003}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x45) shutdown(r2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e00054dbe9abc89b6f5bec000000", 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x8) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)=@multiplanar_mmap={0x4, 0x13, 0x4, 0x20, 0x80000001, {}, {0x2, 0x0, 0x10, 0x4, 0x7, 0x6, "1d558e4a"}, 0x1b47, 0x1, {0x0}, 0x8001, 0x0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r7, 0x414, 0x0) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000640)={0x28, 0x10000, 0x0, 0x0, 0x28b6bb, 0x1552, 0x1, 0x27b103}) 5m21.847798735s ago: executing program 35 (id=2261): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_gettime(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x80000003}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x45) shutdown(r2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e00054dbe9abc89b6f5bec000000", 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x8) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)=@multiplanar_mmap={0x4, 0x13, 0x4, 0x20, 0x80000001, {}, {0x2, 0x0, 0x10, 0x4, 0x7, 0x6, "1d558e4a"}, 0x1b47, 0x1, {0x0}, 0x8001, 0x0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r7, 0x414, 0x0) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000640)={0x28, 0x10000, 0x0, 0x0, 0x28b6bb, 0x1552, 0x1, 0x27b103}) 2m52.063075938s ago: executing program 8 (id=2659): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810b6120000000000010902240001000000000904000001eaff0000092100000001220700090581"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001600)={0x0, [{0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x2, 0x118, 0x6, &(0x7f0000001040)="bdb981efffc4e2ebbbbfc63928212d63736548a52ae5f464c69e5990f7dec561a6edf7"}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x71, &(0x7f0000001100)}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0xf8, 0x0, &(0x7f0000001240)="e9de47d304382dc56ccaf7c28cb02adfe61acd75998ac74e346d8e71a89907"}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0xa8, 0x10, &(0x7f0000000100)="409eabd6241e6650404495d164a53cc90496758a9e"}, {0x1, 0x0, 0x8, &(0x7f00000013c0)}, {0x2, 0x0, 0x800, &(0x7f0000001400)}, {0x2, 0x248, 0x6, &(0x7f0000001500)="cebc25b65e5385a72dcf936daf03c72f176a743fa9314e6dbf44ae4cd2322bc52f5462bc78b2065e4e2393e58b6cabc77219d337ed28be36085d7fce280f99d2bec93051be8f8f1a8b"}, {0x2, 0x0, 0x8000, 0x0}]}) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0xffffffffffffff7e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xc, 0x4, @tid=r5}, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffff", @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010) r6 = socket(0x2, 0x3, 0x6) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) 2m48.267378848s ago: executing program 8 (id=2669): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x2000000000000000}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x45) shutdown(r2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e00054dbe9abc89b6f5bec000000", 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x8) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)=@multiplanar_mmap={0x4, 0x13, 0x4, 0x20, 0x80000001, {}, {0x2, 0x0, 0x10, 0x4, 0x7, 0x6, "1d558e4a"}, 0x1b47, 0x1, {0x0}, 0x8001, 0x0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r8, 0x414, 0x0) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000640)={0x28, 0x10000, 0x0, 0x0, 0x28b6bb, 0x1552, 0x1, 0x27b103}) 2m46.296056762s ago: executing program 8 (id=2671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000b80)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {}, @control={0x9, 0xffffffff, 0xa}}], 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m43.670887962s ago: executing program 8 (id=2680): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWMDB={0x18, 0x54, 0x100, 0x70bd27, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc850) syz_usb_connect(0x4, 0x2c0, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0xf1, 0x62, 0x20, 0xeb1a, 0x8179, 0x1e73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ae, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x5, 0xf9, 0xca, 0xb4, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x2, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc}, @generic={0x9c, 0x21, "d92dc6d1c32e6aef20e42b80634656d887340dd570238e18e0ad19b34f0cd6160529793fb0a2694157fe9c05499aa4dcb0145acd36641c4867b47fb36d35778f75c08fdb7d39093d0a754dc4dfe19f9e4164e42a778c2dbc9edb0a0097bda2917e86908e943bd349452f888cda38cc94ab4fb024a8bb387907bed8a3152cb1f04ed3d9f53d35ed7baef35a6ae6d821c172a7eb2640f8512c4cce"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6e, 0xff}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x5, 0xcc, 0x3, [@generic={0x9a, 0x24, "8a14fe79fbcfaf694654197e1f50c420000c1c0872821becd425efbafe5700c3ec846ac0c56596aa72db2ae938fc8e7612a4c1b1af8cbea5bbd9caed1cbc2ad8ede7cf2e7a71bed922ec31da44420a3be29271febe9cdb3c714455e935277056cd18aa82c7e1d53d7db2fdb8c6be1516c17daa919d3fa3f367d9c4bc96e41adca82aff28e36cf9aa0c1f30d5beac4667b366b1b812d67ff0"}]}}, {{0x9, 0x5, 0x1d, 0x0, 0x400, 0x7, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}, @generic={0xb5, 0x21, "29769dd398d991314956ae4ab57adc96a7fbf7b4bf249beebf347b5f2f9e2ed9537a55d6c7b4bd4ce023a585b372b2d4a2a40d291bf3b6b582df55129290dbb5871cf45f646b42b6f6bb622c851ad9f4dad0d7e7620bb7e5acad0ccfb60c86dd7b94189a1d82b463f5fcd265edfdf817ebe5469e42d1db6d275b8755ca3eaf3189bb41dad390dfb5cb2811c0b153d20002a0b48ab349dd9c31e6caf2043996a564e76a87b6f3a23b0fd5ea9aab7163606e0ee3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x9, 0x9, [@generic={0x76, 0x9, "88c35f0355190d71c977728c9d9015ddd2c50c62eac4b942be4c8a615ff950da24784263770efc4cd4517e766d16aaa1428219f3b641549c5eee53fdbfe20221656b6916ea5a9a669f8551e075ff7298c7b01b7124ca3309946c0e41f504ca211ea32502e5172c9e99f3ccf4d05af7301b7f19f5"}]}}]}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x2, 0x1}, {0x60, 0x2}, @period={0x58, 0x96, 0x6, 0x1, 0x8001, {0x5, 0x10, 0x0, 0x5}, 0x0, 0x0}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) write$char_usb(r3, 0x0, 0x0) r9 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) 2m38.985155995s ago: executing program 8 (id=2692): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) clock_gettime(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2000000000000000}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x45) shutdown(r1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e00054dbe9abc89b6f5bec000000", 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x8) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000380)=@multiplanar_mmap={0x4, 0x13, 0x4, 0x20, 0x80000001, {}, {0x2, 0x0, 0x10, 0x4, 0x7, 0x6, "1d558e4a"}, 0x1b47, 0x1, {0x0}, 0x8001, 0x0, r0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r7, 0x414, 0x0) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000640)={0x28, 0x10000, 0x0, 0x0, 0x28b6bb, 0x1552, 0x1, 0x27b103}) 2m38.300892405s ago: executing program 8 (id=2695): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="c300741300000800c400030000000000"], 0x2c}}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa000905ff8a"], 0x0) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "c6bde966e85b00a1", "5c0e8eddc9fea711758c1cf7501d8b090701005000000000bcda99614f97ed42", "d8da80c1", "1a5a9f7b4c608a5f"}, 0x38) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) close(0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0xc, {"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", 0x102c}}, 0x1006) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r9}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffff7, 0x2}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2m22.799800272s ago: executing program 36 (id=2695): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="c300741300000800c400030000000000"], 0x2c}}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa000905ff8a"], 0x0) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "c6bde966e85b00a1", "5c0e8eddc9fea711758c1cf7501d8b090701005000000000bcda99614f97ed42", "d8da80c1", "1a5a9f7b4c608a5f"}, 0x38) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) close(0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0xc, {"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", 0x102c}}, 0x1006) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r9}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffff7, 0x2}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) 16.488237979s ago: executing program 0 (id=3083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x208000, 0x8}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x11, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x401}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x4, 0x1, {0x0}, {0xee01}, 0x1000, 0x7}) sched_setscheduler(r4, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, &(0x7f0000000080)) r7 = syz_open_dev$audion(&(0x7f0000000100), 0x3ff, 0x401) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x4, 0x1b6b, 0x1000, &(0x7f00000009c0)="ab81a57c2b009e49ef1d0ce5bb4724a596e3e0eb74f23e2ba96e224630aff875dd843ad6897c4b34f5cb07210ac2dd1275e5fb6ff84e0df4e81160da738a9aa167f53c6b3b14f7c295a228aea3730bd363a63fac8ae6746619ba69ba31fefb757ddbfaefa5ec05a14f6521571d260fcf402a2f348d01e91b324aab6c8f2ab6062092ac7952d46c343d606cf72ed6430da25c7731a35da1884abb901287f50b8ce3ecd1a804f98e24489955b45ab006ff957864f9f55d74de3e7ef8d6f47372a147b5eafba3b217245abd5e83dfd749724bb76c9196562cc80cdc9c0d4234c720092ec7070f8eb5594646125179a0343c2d17c673fc83d040d4a2d2aa2b521e5793533d1ea70950d55ddced80e968326f2b50dfd95d333e76cfd53cddf07927396bb914b29d1f331cca8653dd160a454cf44b0a95a10c09b69ebd4f868541ad0dde5a37dc39d46e461d94c9ad08767c4e09a40afe7588a15e7c88e715e0247bde46c001c48e1e36be7f8b76710e26a360c518e74929fe8ebfceb059711a784ca1bce6d6c6739378db6fbbcccc63c6de10258d63cb410449c2047f5b213baef33f1df6d1f2a0ad7033b4ca5b9bac8da1d64fffef69e5aff32266b0fbff54f54aeefd0d1b0e3c2859353892d05d3a354e4ffc85300dd4e5327024ac000192a4a078c4da46b1202c1d7dd8ed02ec6f58391b8921bb1346e5267e8a5bf16ee0be52f71165683e9bd7063474b62bded882a5fa47902bfa93a2c62575a4bc377f4d0044e40546347537e6eb32ccd5c7b879c26388d7042bc79e8e3baf80737172c4914b94dda7d3a76955fb4a1679807364e493925d3363f4e67a53d37bbea052c2a227cfaf2135fe13d1917b896da35c05c911c127ab75b6cc49e02ca2d1a721069b80e4ffef70c57532848bd6d26333f78bc186b856ce14808760edd0954056fd68460661f99ee039c7df652c2efe94478257e65ca25cd815138aee1d848c9aa7021eb14aee9555eb5043888807182564c48b192c41a90f25448c80e3fe6087f03c6ee2a9fe83e2411a6fd190a32fd7d5b143d43b0cea0fc2b5683868ff8ae27ae51d075acabf0cd4096e18e0104c1ee7bee770765e5d9b10b644b26d8c1f514a24ecaf318ccfadabc621e3d3289b0ec9bf4cfb5197dc8ba100f2c8ced918fc8099cb924fdf13b97cf7d481c1d2ec12a701be625b50a45677aa299d1cc0a4d292bb77e6cf7cdb6c44bcd82fc0fca7088432ce78af887f693d8aa166b8675e1d843f34cbd6d94994e9e914667f7fe7b2675390ccef95907dcf2bd141da5d57a5e005691bbe958fa283c7a5f5b67e9db7d34b71eb105f6f26819744674c420e220f25c818e721317a0fd49315658f92b33d08c73798941893e4ab1ff4e1f9229171068172eff3b43c8700b3474caf6126660161fc457540882b041fee2cb2dfddcb15ce39a62dad9780f56a329403ac178350351cf7c3af6f00f76f1e13df644169d5bcf48c849b86f446eed683cac654a09a2172e03e60b5df1beacde4d4ba40af4183274203b709a91ed8e0cbbb4871369b23ed4d6225f8dffb8130732fb2ab649e1224ca99ec7c5cac1edfc8fb9927788c030712ca107d336a327cecf77bf409c817d4bee3fdb75029bd6d3c8020d7dfe8c70cd001a1e723249894d9f1f1ac44b2e86d74c23cfad2cb75e7ba5bd1bb897397c74f2289761dd69a20b357d06059fb1a210c465e82f81212ced5f09f14ec21e7f0c35dd7fdc4ef0035e70cb0994fbdedc726095a8dc66936f6c6452d1a1c328c39c8be0835c4e8ee84dc8c065f8eac07c2f6e4557a4f0a694c1c2b46266022fc2bdb0206c2ab0ae488b6209d531aa2027f0b8c199ac0447ff7262c05c906f4eee8363594c1ca80c6d1d5e352b7910f7ccb716321a2d04eed7b7113ac90f1f216bf332c127abf115740e0559dc35653a37eb70d6ffa024d146240bf4e996a4b0e89832834fd32a05f8c6be84ce44b653c3494e277bb43554e05a5880644b455c4696b9b6f9fb742f18b46547ca071ab7a16ebe3ba1edef8a65a67c60398ad021443be1819b3a5fc6892a75f2d6377015a66442a8fce33f5065a1c5a6055932774c9a98baf9b0d9979ca35330e235321edbdca0df2c1e7d85680b4cfbf17ecdf8add5cb7862ab997aa11531dea0d1f864e4bce58608bfc69dea5027a44d9aa00971821650bd7119472b68e2b4e564c293ae34c0c7d16963e20491749d4da5be1d99a132320fe45e03861f148be76cf8766dedceb711cc27dc81381370ab9b8f20bc241b2eb4ca6ef3d192d51f178a6c02bbcede1c492702944eb448c6c21148b6f9a41677d70f1726b2742a501b76f26409b0d1eae29432077e256323ced7e6dd71c73f59756d72e2332da5fc8b586387c076c23a518be8f23bc478ec5b33c9498c87911dc991960281a8a19726737c027dfdcaa94755fc4dc318d4086a6f07a086c3154a8c2386572f352984f691eaafc32ada74300c4ca06b54a550aee0b1a2dbdbf6bf416e67f6d3071a67b03c9d44dfea098b159f52f7f656c24d87481b64d9e6d58ce7e62968991fcd3da9dd5c521a45e7fe803ea246247a62d3f3a783319fe41240a410697740856c8e2239848a9ffa36eb0e7677cd6fea71e62dba95cc12f9ce4203504b001a4a088969865bfb402a7972c3b570f3c5a447477519aa2ec06bff4a46f9d54b2fb0ce2df86c3160a7a265b023db4716a9254476e07ac5d0f77d0a2e078aa0af24cc6a8e9cdfcfb39497f949767a5c4aa944587efbaa79df7b0347e9d642a15d00412e5521c06df1250d6e90cdee72ec368dad8b3dcb34649aa0711a8c716be504819da25d20b2cae9c4ea810ec18866b177b58dd03bee31367ce1c46fa42b6564c09c7f67b99853119a17989d30e8cdad4f7743f2906de170b16b94b56555ec126c49a884f75db1d91c8fc26027469f0a6ec5d286ec5498fcb300e1bf59c63ee987ab451925b66f0e30b34e5f1195d1828d715e0cf02222505b62a98697e128d2a1b922c8261f7a89087fd701c9fe355041fe4624199fdd7d667b26e3dd0cac5ca8592cbc37ad58638133c0b3baebd9dc945e0bc3b689cb01e9e4759471dedd35bdb13be3e8f123beb6242bea2f6721d7484d062a1c008be7afb6be13e57e2ded7e637ff957ad25ae491f8100d8e6e0114907e0666a7767a54b7535afe505355050edb8f2203f4e157c9b63aece78ea1a67a56c7a440e2482291e6ffe81a3bb94576440e643b3bea7f8a7334058966739edbcf7a3210314eab2a7d13a33437a764ee6adc76ea2dbef3b6ab2fab1a318f4f674b4078ca7e484ee671bf5f67e65c433e3cc64618c17c3c72730ee0c0a21939ed85a35dad8924b04e004acb71878e89cf5219aaa44f21c59d68838d98fe77fa4ef406ad38af9515e9567bd3b2297452d7fa823707baa236564fb5596133116cf8c5cc44f794d4c75d1d7d11d222c5f49228045584119c548c4e2ec1c3f4eb7a7a3eee679b5142d8d08277c352f817bdfc1b69c761740a651127a7394e933c224c5e889a3766d919d93568ad61406a0ef67005c97db2f1a0b0b9900e6fbae5aa4c7de33b80126bb1faa92ee5f6dadb684f6424c49f792cc8b7294da4adc5cffecc66feb50133ec1efe27d85f1b5a6a85832eeb811222822494365cfad1f7a0813ca2468fbd33d8c6055e72466a6a7aa82a8d1d4ba4791b97f7f75dd7e6d2fed79c1b3f852a2c294a58b96d519617ef2201e4013ce3dfa2c529d8d359584b5c85fe0e7b1f89bb5b377fe9bfd8eb5a243c94d6447c8956405e120f58ef3ca3cf61af006848809685d245714551bd50cb8c214a5828aae778e0fc430f976eea4b9c0973f70678aa17527e25b8acd3511e070ca6c04f5f43e2cad5409e17a6a8fc36a25e5c02c5394b711880657803145ec2b51822036fbd9fec56e470166bff0aafefb3ac6e662ed18fe70901aefc4216c1bd0abb734ebcfecdf3b84b2457144e5f38b105e4cc5ef327339967a5878b9db636ccfb79885b187d170f3566ce1c6efb048a9593f88c773a77ee34ad4e27fdae5dcbc54a839e8ba17c3f4a5ad40b11f4fef2315d2eec9bad7df6df78129f18751caa7f7bc115acb3be8dbff7b80ab6cbf27b16116e318acd433d7b0790ffaf4befda85654d47af11e3ae95d90a7baa8c87d54e0efad2a427d0d26ebfd698e60d9d7647810afcd2f845545106f4d68ab912c4a705b1ce98c6e0460e811ffd741aef231d9b56996fb4ba02b250ab4a4b6dfc1354f9fef459cb20501451401bfad431249663bd676fa1c1cddac7ab15805687825c19984485fc0ad3f6433931f39dd7f309308002835ede16cac5a2e7bd90ffac7257c49194ce4f6b7c9e1c6fd14b7aa2796759d6c4044fdbd2b638c3aee914be6633df6175f1b37fbc97a7382b656c09531245e92d27f408fda46733d2492b4007465cee50854aab244134af73615923b6d0d75bb453d6cb9a8d3de29de5db1a5f81aead34aadb96edda51238f39f9ddfd2934f0551f049f384cff3081eced366a4299250eb47055f4ff448423d419a521f387156a9c1e2da95492d4708329ddfb71ad33472bb2b2a5e81de4f98b9d13008ae45394c29eb4a067cc7b8272286b42a657b1d1ef9e79da9eabcf86e0434190de4f3f536bda784050f40f7da9d4996c17fa4239b512061f971876a1a2a1dfaa06011024813f196b652e84cefd10cffa81da9755018396c39e16c1efca36bffcd19aa65b6a0fee83224619a673aad7a53fa0a447dc85b553d5ca9686630136c2d5f07f4ecbd624962897b1e81b191878b94116791531f5b6f9e77ef59054e7b356025abc443e96d07c55830eac125f07822fca83e8ec3e702119da98d4b1d793e8dcc62a4bba11fdbbf7c01e94c38e71f5b5ac2acd0d394d8674fcdedeb7b380eee125c68bf4bbb0c90b567922c74a0350df23c2e892fea5bcf3aa498c2da859bc865ae705b971aa5ef2d3afec07b4256fbc6f20d7ff1abb30677cc6724dadd190ee07c3b49e3353e519555c0eb5924f8ab0f467233d493816e9db1d1b1f1b1a7613cd3b7e09640c146ea330b46748e55bd599d604c84e9b8a62a29ebd212d6b501b4a4c0f0335e76ee8622eebde8bb9fac6f4717bbb233fc33e41edd798403b62a6104508a95f7cfeeb4bed0de55e4f5a1a767b589fcc67cf598b4ebf0e2249f8bcc475572bfcbb59e1a50ef43cc63e78e797290cb0ba35edec27cf894f8cc66059f3cfd2c3bff4a9e5c7c4ad92170a734952b8decb77a8a4f322268b9e17a1b6dee2d31fd50bddb4ba46460a1fbff9dddd31ab113619fce5787fb7d2457d1bdaab947699b32c8ce39f919025a78d29076aba05c29ca64bfb81820da8ca04dd595f118e24773867bb61e868b4a9b8f06bb5fdbc330a9233986a3d2a76b3d686d7a01a908651e79ecaeb5a5e46f91b8dc8aa5bf9ed31af4c2af8682ecdc768d3caae695b75b868b66806e515c72964d4c302ec39ea89ded4923e6f42722c6e69083a1a5f4cf4fb7434d3bbebc171045735a5e0c6580fc9f795758ced8eed9065506a3ef8bb720a31955427885f8f09a3248f11c6f8edee9ad11ad06f45b43898d91e420238fa33dd7c06929b7a60f4cb6704a0cf54871695bf3f6b2bc6e355edfbf2971d8e02629f3f56db3d3fa316d1e2cd58f805158c05c532b0d69bf1d215fc389976eaa806965269872cca314d004ba52e7c63d8244ea5be386541fc3b7506ce9506bfd4996242bca017d1373bfa92068ade9c5ec4bfdbb840c720672aa6d1907c88", 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r9, 0x2}}, 0x18) 15.636868812s ago: executing program 9 (id=3085): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810b6120000000000010902240001000000000904000001eaff0000092100000001220700090581"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001600)={0x0, [{0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x2, 0x118, 0x6, &(0x7f0000001040)="bdb981efffc4e2ebbbbfc63928212d63736548a52ae5f464c69e5990f7dec561a6edf7"}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x71, &(0x7f0000001100)}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0xf8, 0x0, &(0x7f0000001240)="e9de47d304382dc56ccaf7c28cb02adfe61acd75998ac74e346d8e71a89907"}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0xa8, 0x10, &(0x7f0000000100)="409eabd6241e6650404495d164a53cc90496758a9e"}, {0x1, 0x0, 0x8, &(0x7f00000013c0)}, {0x2, 0x0, 0x800, &(0x7f0000001400)}, {0x2, 0x248, 0x6, &(0x7f0000001500)="cebc25b65e5385a72dcf936daf03c72f176a743fa9314e6dbf44ae4cd2322bc52f5462bc78b2065e4e2393e58b6cabc77219d337ed28be36085d7fce280f99d2bec93051be8f8f1a8b"}, {0x2, 0x0, 0x8000, 0x0}]}) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0xffffffffffffff7e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffff", @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010) r6 = socket(0x2, 0x3, 0x6) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) 15.406473231s ago: executing program 0 (id=3087): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41de22573d6bfffb7f11c72b", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) add_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) read(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x54) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000600)={0x18, 0xfffffffffffffff5, 0x0, {0x5}}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) fsetxattr$security_ima(r2, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x3, 0x2e7, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xee, 0xce, 0x10, 0x9022, 0xd630, 0x97a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d5, 0x4, 0x6, 0x0, 0xc0, 0xc, [{{0x9, 0x4, 0x1c, 0x0, 0x2, 0x35, 0xc2, 0x69, 0x63, [@generic={0x16, 0xe, "a6e0c681e2bd48ae3570ecb50c35ce2ab4aa7251"}], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x10, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x628, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x4, 0x5, 0x1, 0x84, 0xa0, 0x9a, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xb73, 0x3ff, 0x7}}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x19, 0x4, 0xa4}}]}}, {{0x9, 0x4, 0x56, 0x9, 0x7, 0xff, 0x96, 0x46, 0xf8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "e6b8"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5cae, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@dmm={0x7, 0x24, 0x14, 0xa5, 0x6}, @obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8d}, @dmm={0x7, 0x24, 0x14, 0x400, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "a3974f97a5c4"}, {0x5, 0x24, 0x0, 0xbb0}, {0xd, 0x24, 0xf, 0x1, 0x6dd4, 0x2, 0x8}, {0x6}, [@mdlm_detail={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xf, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x5, 0x0, 0xb9}, @mdlm={0x15, 0x24, 0x12, 0xc5}]}], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x4, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0xb9, 0x3, "883cc6f6d4c4918c1872d889b6039339738e118cc3c2dcb97dba1d85b4760abb43914c32f14d34e4c1152265c5b9785fe2863dd781a1bd28d2e40df4c576ae3c302d32aaa3b84883e76d275b0f2e10bbe02b93443bc232758fa0adfb01e80f93b28adf3bd2b44f5b3d3df619526aa1ee1d6da1a183ee57410e07e9a25266ae4f824ae8dc43a08d289f2a411f2c8e4cdce1d58f56102afe5aff46f90390d5767a452f6ba724d7a9f7c33f9f211abda94007ef43d34dd59a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0xff, 0x7, 0x69}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0xe, 0x6, 0x1, [@generic={0x17, 0x7, "d3952b0dafb23e7da2c1ed83601678014e9785d465"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x80, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x28, 0x9}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0x86, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0x1}]}}]}}, {{0x9, 0x4, 0xbf, 0x7, 0x2, 0xe0, 0xaa, 0x5e, 0xfb, [@generic={0x2a, 0x24, "7919a87fbea9c206ce95bb2a2ff4c1fdef8d92bba92271af2a4601a1e81e892e1c35d98475f7d167"}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x3, "241e9158494c5a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x2, "9d58cc"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x2, 0xf9, "360cee43a8"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0xa, 0x3, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0xf, 0xe, [@generic={0x38, 0xe, "a2abdde1729358e3b3ebeddf97f74295e373f958589f3fff2bb4084aa9c341b279eeea145be0f0c53c401b83551e9320ce1d283a27c8"}]}}]}}]}}]}}, 0x0) 13.318576526s ago: executing program 7 (id=3090): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/130, 0x82}], 0x1}, 0x977}], 0x1, 0x120, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x1000000d}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x5}, 0x4004) 13.003438699s ago: executing program 7 (id=3091): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x3a, 0xffff, [0x4, 0x80]}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x40) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r9, &(0x7f0000000000)=[{0x1e, 0x0, 0xa, 0xfd, @tick=0x4, {}, {}, @result}], 0x1c) 12.300444598s ago: executing program 0 (id=3096): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2(&(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x25) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f00000004c0)) 12.126415741s ago: executing program 9 (id=3097): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="0100000000", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@dev, 0x0}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@mpls_getnetconf={0x1c, 0x52, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20044000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @random="e63f2ca76465", {0xb, 0x8}, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x40, @val={0x8c, 0x10, {0x546, "bb1cf594c2cd", @short="11b8f6506fa03ce5"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x8, 0x4, 0xb, 0xf91f, 0x39, 0x4, 0x5]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) close(r0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xfe33) write$cgroup_pid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000f060108000000060000000007000007050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r10 = fsmount(0xffffffffffffffff, 0x1, 0x182) close_range(r9, r10, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) socket$vsock_stream(0x28, 0x1, 0x0) 11.306269052s ago: executing program 9 (id=3099): socket$pppl2tp(0x18, 0x1, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x0, 0x46, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x5008, 0x0) 11.245961714s ago: executing program 7 (id=3100): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000006c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x0) dup2(r8, r6) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r8, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() 9.959039325s ago: executing program 3 (id=3101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c680f2e3099edf8f9d5a3a3e83d9a78c4b9e8c4324c327477723fc69642803d0ed4f42e83d068a0cbe1038c574676809bcd3eb9c8abe84cf07e74bc76c679f56293ca909551c6bc396200608271a4cc09e0c90c686fe2d3b5ecbcffbcde51f51ef184793dccaa40c9a0edc00a09274506ec60853df9ca40b59166853c6019bd046e19", 0x92}, {&(0x7f0000003cc0)="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", 0xf6e}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) 8.94647599s ago: executing program 3 (id=3102): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7f, 0x8, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x700, 0x0, 0x8001}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)=@deltfilter={0xdf0, 0x2d, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {0xb, 0x6}, {0x9, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xdbc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_HASH={0x8}, @TCA_U32_HASH={0x8, 0x2, 0xffffff53}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xd}}, @TCA_U32_SEL={0x94, 0x5, {0x6, 0x9, 0x2, 0x1, 0xc, 0x2, 0x6, 0x0, [{0xffffffff, 0x81, 0x4, 0x7}, {0x2400, 0x9, 0x81, 0x9}, {0x6, 0xd8, 0x6, 0x8001}, {0x9, 0x7, 0xe15, 0x9}, {0x81, 0x3, 0x5, 0x7}, {0x80000001, 0x6, 0x7, 0x9}, {0x3ff, 0x6, 0x3, 0xffff}, {0xffffffff, 0xd1e, 0x5, 0x7}]}}, @TCA_U32_HASH={0x8, 0x2, 0x1000}, @TCA_U32_POLICE={0xcdc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0xb, 0x400, 0x8, 0x2, 0x8, 0xffffd50f, 0x5, 0xb, 0x1, 0x7f7916d4, 0x6, 0x7, 0x5, 0x1, 0x2, 0xfffffff7, 0x6, 0x8, 0x6, 0x10001, 0x8001, 0x7, 0x101, 0x6, 0x400, 0x1, 0x8, 0x3ff, 0x40, 0x1, 0x0, 0x6, 0x1, 0x7, 0x0, 0x4, 0x9, 0x7f, 0xfff, 0xfffffffd, 0x4, 0xc, 0x80000000, 0x2e, 0x3ff, 0xf42, 0x7ff, 0xef7, 0x7f, 0x4, 0x0, 0x80401, 0xe, 0x6fc, 0xfffffffa, 0x3, 0x6, 0x80000000, 0xfffffff8, 0x18000000, 0x4, 0x1ff, 0x4, 0x51, 0x7fff, 0x8, 0x8001, 0x266aef76, 0xef2, 0xc032, 0x7, 0x9, 0x9, 0x6, 0x3, 0x1b, 0x6, 0x0, 0xfffffffc, 0x2, 0x7, 0x8000, 0xb43, 0x1, 0x8, 0x9, 0x7, 0x6, 0x3, 0x8, 0x0, 0x2, 0x1000, 0x8000, 0x9, 0x0, 0x0, 0x6, 0xa, 0x3ff, 0x3, 0x40, 0xcc, 0x81, 0xfffffff7, 0x89a, 0x0, 0xffffff64, 0x2, 0x6, 0x5, 0x7fffffff, 0x0, 0x8, 0x1, 0x2, 0x1ff, 0x33, 0x0, 0x10001, 0xd, 0x7, 0x7, 0x38000, 0x2, 0x7fffffff, 0xfffffffe, 0x7f, 0x4, 0x0, 0x7, 0x8000, 0x4, 0x6c, 0x2, 0x400, 0x800, 0x2, 0x0, 0x800, 0x8, 0x4, 0x3, 0x9, 0x3, 0x80, 0x9, 0x7, 0x4, 0xb3, 0xc, 0x8c09, 0x401, 0x5, 0x2, 0xffffff7f, 0xa, 0x3, 0x7, 0x7, 0x80000000, 0x8001, 0x101, 0x9984, 0x5, 0x7fffffff, 0x6, 0x400, 0x2, 0x4222, 0x1000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x9, 0x1, 0x9325, 0x4, 0x9, 0x1ff, 0x5, 0xcde3, 0x8, 0x1, 0x40, 0x7, 0x800, 0x2, 0x8, 0x3, 0x8, 0x15, 0x4, 0x8c, 0xfff, 0x0, 0x2, 0x6, 0xfff, 0xfe, 0x5, 0xb687, 0x3, 0xb, 0x5, 0x5, 0x9, 0x5a8b, 0x5, 0x80000001, 0x10001, 0x0, 0xffffffff, 0x223762f7, 0x4, 0x1, 0x1, 0xc, 0x4, 0x6, 0x5, 0x8, 0x2, 0x3, 0x200, 0x0, 0x400, 0x8, 0x40, 0x7fff, 0x8, 0x1ff, 0x4, 0x9, 0x2, 0xe141, 0x3, 0x2, 0x200, 0x5, 0x5, 0x5, 0x401, 0x7, 0x11b, 0x8, 0x6, 0x7ff, 0x8, 0x0, 0x287f5fde, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0xdd, 0x8, 0x4, 0x7, 0x0, 0x49, 0x1, 0x0, 0x5, 0xffffff90, 0xf, 0xe6, 0xe5, 0x4f24, 0xc1a, 0x7, 0x2, 0xa, 0xa2, 0x2, 0x2, 0x401, 0x4, 0x7ff, 0x6, 0x9, 0x9, 0x7f, 0x2, 0x2, 0x5, 0x4, 0x8, 0x3, 0x8, 0x1, 0xffff, 0x9500, 0x2, 0x80000000, 0x4, 0x5, 0x7, 0xfffffe00, 0x2, 0x7fffffff, 0x10, 0x9, 0xffffffff, 0x8, 0x4, 0x29, 0x7f, 0x0, 0x3, 0x7, 0x5c2, 0x5, 0xfffffffb, 0x10000, 0x2, 0x6, 0x10001, 0xdcbd, 0x7, 0x6b, 0x10000, 0x2, 0x13c, 0xb797, 0x8, 0x1, 0x6, 0x3, 0x1, 0x9, 0x4, 0x6, 0x7fff, 0xffffffff, 0x1, 0x0, 0x5, 0x800, 0xffff, 0xb76d, 0x10, 0x80000000, 0x2, 0x7fffffff, 0x0, 0x56, 0xb7, 0x15, 0x4, 0xa, 0x1, 0x10001, 0x6, 0x9, 0x2, 0x40, 0x4, 0x4, 0x5, 0x49f9, 0xa, 0x5, 0x4, 0x5e, 0x4, 0x1, 0x3, 0x7, 0xfff, 0x1, 0x3, 0x18, 0x1f9, 0xb6, 0x3, 0x5, 0x6, 0x7, 0x9, 0x0, 0xfffffff9, 0x8, 0x8001, 0x1, 0x1, 0xe0, 0x943, 0x800, 0x8, 0x8, 0x7, 0x3, 0xfff, 0x5, 0x3, 0x7, 0x4, 0x2, 0x4, 0x8001, 0x1000, 0x0, 0x31bf, 0x6, 0x3, 0xa5, 0x2, 0x8, 0xe09, 0x1, 0x404, 0x39, 0x19ba, 0x888, 0x1, 0x3, 0xfffffffa, 0x3, 0x80, 0x1, 0x60b, 0x400, 0xfffffffd, 0x3a4d5538, 0x5, 0xfffffffc, 0x200, 0x3, 0x6, 0x63e, 0xffffffff, 0x5200, 0x18, 0x42d0820f, 0xd014, 0x6, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf256, 0xfffffff3, 0x0, 0x8, 0x401, 0x5, 0x4, 0x8, 0x1, 0xff, 0x7, 0x9, 0x53b, 0x0, 0x4, 0x6, 0xc1b2, 0x9, 0x3, 0x8, 0x8, 0x4, 0x800007, 0xfffffff3, 0x1699, 0x4, 0xffffffa6, 0x9, 0x5, 0xffff93bf, 0x5, 0xf3, 0x6, 0x8000, 0x5, 0x4, 0xf8d9, 0x51, 0x0, 0x80000001, 0x2, 0x7ff, 0xfae, 0x2, 0x2, 0x0, 0x2, 0x7, 0x8000, 0x4, 0x2, 0x5, 0x80000001, 0x81, 0xca, 0x1, 0x99, 0x10001, 0x1, 0x8, 0x10000, 0x8, 0x9, 0x81, 0x7, 0x8, 0x40, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x4, 0x4, 0xc62c, {0x6, 0x0, 0x0, 0x1, 0x1, 0x4}, {0xf, 0x0, 0x0, 0x800, 0x8, 0xf9e5}, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x2, 0x8000, 0x9, {0x2, 0x2, 0xc, 0xf800, 0x3, 0x8}, {0x4, 0x0, 0x8, 0x8, 0x7, 0x9}, 0xffff, 0x90f6, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x2, 0x4, 0x7fffffff, 0x2, 0x7ff, 0x3, 0x8, 0x101, 0x6, 0x200, 0x5eb4, 0x6, 0x82, 0x1, 0x0, 0x3, 0x3, 0x0, 0x6, 0x8, 0x401, 0x9, 0x1, 0x1, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x7, 0x5, 0x1, 0x10001, 0xa31, 0x6, 0x9, 0x7, 0x7, 0xb61, 0x2, 0x800, 0x7224, 0x1, 0x200, 0x10, 0x5, 0x9, 0x8000, 0xd, 0x100, 0x0, 0x0, 0x7be, 0x2, 0x2, 0x8, 0xf, 0x3000000, 0xffff, 0x4, 0x4, 0x195a, 0x80000001, 0x9, 0xd7a, 0xb15, 0x80000001, 0x3, 0x4, 0x5, 0xd7, 0x6, 0x2, 0xd3, 0x9f, 0x6, 0x0, 0x9, 0x0, 0xe86, 0x6, 0xb, 0xdd94, 0x6, 0x4, 0xdf, 0xfffffffe, 0x1, 0x101, 0x80000000, 0x7, 0x4, 0x6, 0xa, 0x0, 0x400, 0x7, 0x608, 0x5, 0x7, 0x8, 0x4, 0xfffffffc, 0x6, 0x7fff, 0x8, 0xe40, 0x6f, 0x800, 0x33f, 0x7, 0x0, 0x1, 0x3, 0xfff, 0x8001, 0x1, 0x7, 0x401, 0x7, 0xfffffffa, 0x27000000, 0x0, 0x1, 0x401, 0x2, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x1000, 0x8, 0x8, 0x62, 0x93ca, 0x2, 0x1, 0x9, 0x2a, 0x2, 0x8, 0x3, 0x81, 0xc, 0x9, 0x8, 0x9, 0x7fff, 0x2, 0x6, 0x400, 0x7fffffff, 0x8, 0x496d, 0xb1, 0xa, 0x0, 0x100, 0x1, 0x2, 0x3, 0x2, 0x1, 0x1000, 0x200, 0x1000, 0x80000001, 0xe2d, 0x33f9, 0x5, 0x45, 0x1000, 0x1, 0x0, 0x2, 0xc, 0xfffffb12, 0x1, 0x4, 0x3, 0xfffffff8, 0x2, 0x1, 0xfffffffc, 0x9, 0x3, 0x400, 0xd5b4, 0xa8, 0xffffff7f, 0x8, 0x80000001, 0x40, 0x80000000, 0x100, 0x0, 0x0, 0x7bc1, 0x7, 0x2, 0x4, 0x5, 0x2, 0x8, 0x100, 0x4, 0x81, 0xfffffffa, 0x5, 0x2, 0xe3ac, 0x1ff, 0x2, 0xe4f1, 0x5, 0x5, 0x8, 0xa72f, 0xa33e, 0x3, 0x4, 0x48d7, 0xffffffff, 0x1, 0x4, 0x6, 0xb, 0x3, 0x8, 0x0, 0x1, 0xfffffffd, 0x6454, 0x6, 0x0, 0x5, 0x80000001, 0x2, 0x6, 0x1000, 0x6, 0x1, 0x8f5, 0x8, 0x1000, 0x5b01, 0x7, 0x0, 0xff, 0xc3, 0xf, 0xffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x29, 0x5, 0x3ff, 0x1, 0x5, {0x4, 0x1, 0xacb, 0x6d3b, 0x85, 0x9}, {0x1, 0x1, 0x200, 0x0, 0x5, 0x2}, 0x4, 0x6cbeb261, 0x7}}]}, @TCA_U32_LINK={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xea}}]}, 0xdf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810004d0000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x4000, 0x0, 'queue1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 8.917136582s ago: executing program 6 (id=3103): io_setup(0x8, &(0x7f0000004200)=0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) socket$kcm(0x10, 0x7, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) unshare(0x28020480) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x10320) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.692601423s ago: executing program 0 (id=3104): socket(0x10, 0x2, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x2, 0x0}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000001100)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 7.731063212s ago: executing program 3 (id=3105): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x27}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x36d}, {0x8, 0x0, 0x400}, {0x8}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x26}, {0x8, 0x0, 0xff2a}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x7}}]}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x20000085) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000000008010040"]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read$eventfd(r8, 0x0, 0x0) 7.481817803s ago: executing program 7 (id=3106): arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x1) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x29, r0, {0x10007bc}}, './file0\x00'}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) ptrace$getregs(0xc, r7, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r8, 0x0, 0x201f00) 7.427287085s ago: executing program 6 (id=3107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) r5 = fcntl$dupfd(r1, 0x406, r1) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) 7.412449296s ago: executing program 9 (id=3108): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') prlimit64(0x0, 0xd, &(0x7f0000000140)={0x4, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x54, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x47f4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x36fc}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r7, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x14, 0x1, 0x70bd29, 0x0, "", [@typed={0x8, 0xae, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r10, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r8, 0x3b8d, &(0x7f0000000280)={0x20, r12, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x82, &(0x7f0000001c80)=ANY=[], 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000028000180140003000000006b953af9000000ffffe000000106"], 0x3c}}, 0x0) 4.829257279s ago: executing program 7 (id=3109): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000700)={0x1020000, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f00000003c0), {0x16}, &(0x7f0000000580)=""/169, 0xa9, &(0x7f0000000640)=""/150, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}, 0x58) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x38, 0x8001, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xff, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x30, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket(0x2b, 0x80801, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r6}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0xfffffffffffffca1, 0xfa00, @id_afonly={&(0x7f00000002c0)=0x4, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000004b46feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000300000000000a00100001"], 0xc4}}, 0x0) sendto$inet6(r7, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 4.766803314s ago: executing program 6 (id=3110): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) 4.566721269s ago: executing program 3 (id=3111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x208000, 0x8}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x11, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x401}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x4, 0x1, {0x0}, {0xee01}, 0x1000, 0x7}) sched_setscheduler(r4, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, &(0x7f0000000080)) r7 = syz_open_dev$audion(&(0x7f0000000100), 0x3ff, 0x401) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x4, 0x1b6b, 0x1000, &(0x7f00000009c0)="ab81a57c2b009e49ef1d0ce5bb4724a596e3e0eb74f23e2ba96e224630aff875dd843ad6897c4b34f5cb07210ac2dd1275e5fb6ff84e0df4e81160da738a9aa167f53c6b3b14f7c295a228aea3730bd363a63fac8ae6746619ba69ba31fefb757ddbfaefa5ec05a14f6521571d260fcf402a2f348d01e91b324aab6c8f2ab6062092ac7952d46c343d606cf72ed6430da25c7731a35da1884abb901287f50b8ce3ecd1a804f98e24489955b45ab006ff957864f9f55d74de3e7ef8d6f47372a147b5eafba3b217245abd5e83dfd749724bb76c9196562cc80cdc9c0d4234c720092ec7070f8eb5594646125179a0343c2d17c673fc83d040d4a2d2aa2b521e5793533d1ea70950d55ddced80e968326f2b50dfd95d333e76cfd53cddf07927396bb914b29d1f331cca8653dd160a454cf44b0a95a10c09b69ebd4f868541ad0dde5a37dc39d46e461d94c9ad08767c4e09a40afe7588a15e7c88e715e0247bde46c001c48e1e36be7f8b76710e26a360c518e74929fe8ebfceb059711a784ca1bce6d6c6739378db6fbbcccc63c6de10258d63cb410449c2047f5b213baef33f1df6d1f2a0ad7033b4ca5b9bac8da1d64fffef69e5aff32266b0fbff54f54aeefd0d1b0e3c2859353892d05d3a354e4ffc85300dd4e5327024ac000192a4a078c4da46b1202c1d7dd8ed02ec6f58391b8921bb1346e5267e8a5bf16ee0be52f71165683e9bd7063474b62bded882a5fa47902bfa93a2c62575a4bc377f4d0044e40546347537e6eb32ccd5c7b879c26388d7042bc79e8e3baf80737172c4914b94dda7d3a76955fb4a1679807364e493925d3363f4e67a53d37bbea052c2a227cfaf2135fe13d1917b896da35c05c911c127ab75b6cc49e02ca2d1a721069b80e4ffef70c57532848bd6d26333f78bc186b856ce14808760edd0954056fd68460661f99ee039c7df652c2efe94478257e65ca25cd815138aee1d848c9aa7021eb14aee9555eb5043888807182564c48b192c41a90f25448c80e3fe6087f03c6ee2a9fe83e2411a6fd190a32fd7d5b143d43b0cea0fc2b5683868ff8ae27ae51d075acabf0cd4096e18e0104c1ee7bee770765e5d9b10b644b26d8c1f514a24ecaf318ccfadabc621e3d3289b0ec9bf4cfb5197dc8ba100f2c8ced918fc8099cb924fdf13b97cf7d481c1d2ec12a701be625b50a45677aa299d1cc0a4d292bb77e6cf7cdb6c44bcd82fc0fca7088432ce78af887f693d8aa166b8675e1d843f34cbd6d94994e9e914667f7fe7b2675390ccef95907dcf2bd141da5d57a5e005691bbe958fa283c7a5f5b67e9db7d34b71eb105f6f26819744674c420e220f25c818e721317a0fd49315658f92b33d08c73798941893e4ab1ff4e1f9229171068172eff3b43c8700b3474caf6126660161fc457540882b041fee2cb2dfddcb15ce39a62dad9780f56a329403ac178350351cf7c3af6f00f76f1e13df644169d5bcf48c849b86f446eed683cac654a09a2172e03e60b5df1beacde4d4ba40af4183274203b709a91ed8e0cbbb4871369b23ed4d6225f8dffb8130732fb2ab649e1224ca99ec7c5cac1edfc8fb9927788c030712ca107d336a327cecf77bf409c817d4bee3fdb75029bd6d3c8020d7dfe8c70cd001a1e723249894d9f1f1ac44b2e86d74c23cfad2cb75e7ba5bd1bb897397c74f2289761dd69a20b357d06059fb1a210c465e82f81212ced5f09f14ec21e7f0c35dd7fdc4ef0035e70cb0994fbdedc726095a8dc66936f6c6452d1a1c328c39c8be0835c4e8ee84dc8c065f8eac07c2f6e4557a4f0a694c1c2b46266022fc2bdb0206c2ab0ae488b6209d531aa2027f0b8c199ac0447ff7262c05c906f4eee8363594c1ca80c6d1d5e352b7910f7ccb716321a2d04eed7b7113ac90f1f216bf332c127abf115740e0559dc35653a37eb70d6ffa024d146240bf4e996a4b0e89832834fd32a05f8c6be84ce44b653c3494e277bb43554e05a5880644b455c4696b9b6f9fb742f18b46547ca071ab7a16ebe3ba1edef8a65a67c60398ad021443be1819b3a5fc6892a75f2d6377015a66442a8fce33f5065a1c5a6055932774c9a98baf9b0d9979ca35330e235321edbdca0df2c1e7d85680b4cfbf17ecdf8add5cb7862ab997aa11531dea0d1f864e4bce58608bfc69dea5027a44d9aa00971821650bd7119472b68e2b4e564c293ae34c0c7d16963e20491749d4da5be1d99a132320fe45e03861f148be76cf8766dedceb711cc27dc81381370ab9b8f20bc241b2eb4ca6ef3d192d51f178a6c02bbcede1c492702944eb448c6c21148b6f9a41677d70f1726b2742a501b76f26409b0d1eae29432077e256323ced7e6dd71c73f59756d72e2332da5fc8b586387c076c23a518be8f23bc478ec5b33c9498c87911dc991960281a8a19726737c027dfdcaa94755fc4dc318d4086a6f07a086c3154a8c2386572f352984f691eaafc32ada74300c4ca06b54a550aee0b1a2dbdbf6bf416e67f6d3071a67b03c9d44dfea098b159f52f7f656c24d87481b64d9e6d58ce7e62968991fcd3da9dd5c521a45e7fe803ea246247a62d3f3a783319fe41240a410697740856c8e2239848a9ffa36eb0e7677cd6fea71e62dba95cc12f9ce4203504b001a4a088969865bfb402a7972c3b570f3c5a447477519aa2ec06bff4a46f9d54b2fb0ce2df86c3160a7a265b023db4716a9254476e07ac5d0f77d0a2e078aa0af24cc6a8e9cdfcfb39497f949767a5c4aa944587efbaa79df7b0347e9d642a15d00412e5521c06df1250d6e90cdee72ec368dad8b3dcb34649aa0711a8c716be504819da25d20b2cae9c4ea810ec18866b177b58dd03bee31367ce1c46fa42b6564c09c7f67b99853119a17989d30e8cdad4f7743f2906de170b16b94b56555ec126c49a884f75db1d91c8fc26027469f0a6ec5d286ec5498fcb300e1bf59c63ee987ab451925b66f0e30b34e5f1195d1828d715e0cf02222505b62a98697e128d2a1b922c8261f7a89087fd701c9fe355041fe4624199fdd7d667b26e3dd0cac5ca8592cbc37ad58638133c0b3baebd9dc945e0bc3b689cb01e9e4759471dedd35bdb13be3e8f123beb6242bea2f6721d7484d062a1c008be7afb6be13e57e2ded7e637ff957ad25ae491f8100d8e6e0114907e0666a7767a54b7535afe505355050edb8f2203f4e157c9b63aece78ea1a67a56c7a440e2482291e6ffe81a3bb94576440e643b3bea7f8a7334058966739edbcf7a3210314eab2a7d13a33437a764ee6adc76ea2dbef3b6ab2fab1a318f4f674b4078ca7e484ee671bf5f67e65c433e3cc64618c17c3c72730ee0c0a21939ed85a35dad8924b04e004acb71878e89cf5219aaa44f21c59d68838d98fe77fa4ef406ad38af9515e9567bd3b2297452d7fa823707baa236564fb5596133116cf8c5cc44f794d4c75d1d7d11d222c5f49228045584119c548c4e2ec1c3f4eb7a7a3eee679b5142d8d08277c352f817bdfc1b69c761740a651127a7394e933c224c5e889a3766d919d93568ad61406a0ef67005c97db2f1a0b0b9900e6fbae5aa4c7de33b80126bb1faa92ee5f6dadb684f6424c49f792cc8b7294da4adc5cffecc66feb50133ec1efe27d85f1b5a6a85832eeb811222822494365cfad1f7a0813ca2468fbd33d8c6055e72466a6a7aa82a8d1d4ba4791b97f7f75dd7e6d2fed79c1b3f852a2c294a58b96d519617ef2201e4013ce3dfa2c529d8d359584b5c85fe0e7b1f89bb5b377fe9bfd8eb5a243c94d6447c8956405e120f58ef3ca3cf61af006848809685d245714551bd50cb8c214a5828aae778e0fc430f976eea4b9c0973f70678aa17527e25b8acd3511e070ca6c04f5f43e2cad5409e17a6a8fc36a25e5c02c5394b711880657803145ec2b51822036fbd9fec56e470166bff0aafefb3ac6e662ed18fe70901aefc4216c1bd0abb734ebcfecdf3b84b2457144e5f38b105e4cc5ef327339967a5878b9db636ccfb79885b187d170f3566ce1c6efb048a9593f88c773a77ee34ad4e27fdae5dcbc54a839e8ba17c3f4a5ad40b11f4fef2315d2eec9bad7df6df78129f18751caa7f7bc115acb3be8dbff7b80ab6cbf27b16116e318acd433d7b0790ffaf4befda85654d47af11e3ae95d90a7baa8c87d54e0efad2a427d0d26ebfd698e60d9d7647810afcd2f845545106f4d68ab912c4a705b1ce98c6e0460e811ffd741aef231d9b56996fb4ba02b250ab4a4b6dfc1354f9fef459cb20501451401bfad431249663bd676fa1c1cddac7ab15805687825c19984485fc0ad3f6433931f39dd7f309308002835ede16cac5a2e7bd90ffac7257c49194ce4f6b7c9e1c6fd14b7aa2796759d6c4044fdbd2b638c3aee914be6633df6175f1b37fbc97a7382b656c09531245e92d27f408fda46733d2492b4007465cee50854aab244134af73615923b6d0d75bb453d6cb9a8d3de29de5db1a5f81aead34aadb96edda51238f39f9ddfd2934f0551f049f384cff3081eced366a4299250eb47055f4ff448423d419a521f387156a9c1e2da95492d4708329ddfb71ad33472bb2b2a5e81de4f98b9d13008ae45394c29eb4a067cc7b8272286b42a657b1d1ef9e79da9eabcf86e0434190de4f3f536bda784050f40f7da9d4996c17fa4239b512061f971876a1a2a1dfaa06011024813f196b652e84cefd10cffa81da9755018396c39e16c1efca36bffcd19aa65b6a0fee83224619a673aad7a53fa0a447dc85b553d5ca9686630136c2d5f07f4ecbd624962897b1e81b191878b94116791531f5b6f9e77ef59054e7b356025abc443e96d07c55830eac125f07822fca83e8ec3e702119da98d4b1d793e8dcc62a4bba11fdbbf7c01e94c38e71f5b5ac2acd0d394d8674fcdedeb7b380eee125c68bf4bbb0c90b567922c74a0350df23c2e892fea5bcf3aa498c2da859bc865ae705b971aa5ef2d3afec07b4256fbc6f20d7ff1abb30677cc6724dadd190ee07c3b49e3353e519555c0eb5924f8ab0f467233d493816e9db1d1b1f1b1a7613cd3b7e09640c146ea330b46748e55bd599d604c84e9b8a62a29ebd212d6b501b4a4c0f0335e76ee8622eebde8bb9fac6f4717bbb233fc33e41edd798403b62a6104508a95f7cfeeb4bed0de55e4f5a1a767b589fcc67cf598b4ebf0e2249f8bcc475572bfcbb59e1a50ef43cc63e78e797290cb0ba35edec27cf894f8cc66059f3cfd2c3bff4a9e5c7c4ad92170a734952b8decb77a8a4f322268b9e17a1b6dee2d31fd50bddb4ba46460a1fbff9dddd31ab113619fce5787fb7d2457d1bdaab947699b32c8ce39f919025a78d29076aba05c29ca64bfb81820da8ca04dd595f118e24773867bb61e868b4a9b8f06bb5fdbc330a9233986a3d2a76b3d686d7a01a908651e79ecaeb5a5e46f91b8dc8aa5bf9ed31af4c2af8682ecdc768d3caae695b75b868b66806e515c72964d4c302ec39ea89ded4923e6f42722c6e69083a1a5f4cf4fb7434d3bbebc171045735a5e0c6580fc9f795758ced8eed9065506a3ef8bb720a31955427885f8f09a3248f11c6f8edee9ad11ad06f45b43898d91e420238fa33dd7c06929b7a60f4cb6704a0cf54871695bf3f6b2bc6e355edfbf2971d8e02629f3f56db3d3fa316d1e2cd58f805158c05c532b0d69bf1d215fc389976eaa806965269872cca314d004ba52e7c63d8244ea5be386541fc3b7506ce9506bfd4996242bca017d1373bfa92068ade9c5ec4bfdbb840c720672aa6d1907c88", 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r9, 0x2}}, 0x18) 4.503899468s ago: executing program 6 (id=3112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0xbcaca8d8eab778ad, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}}, 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 4.110487941s ago: executing program 6 (id=3113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c680f2e3099edf8f9d5a3a3e83d9a78c4b9e8c4324c327477723fc69642803d0ed4f42e83d068a0cbe1038c574676809bcd3eb9c8abe84cf07e74bc76c679f56293ca909551c6bc396200608271a4cc09e0c90c686fe2d3b5ecbcffbcde51f51ef184793dccaa40c9a0edc00a09274506ec60853df9ca40b59166853c6019bd046e19", 0x92}, {&(0x7f0000003cc0)="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", 0xf6e}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) 2.828932316s ago: executing program 9 (id=3114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 2.827263696s ago: executing program 3 (id=3115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7f, 0x8, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x700, 0x0, 0x8001}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)=@deltfilter={0xdf0, 0x2d, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {0xb, 0x6}, {0x9, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xdbc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_HASH={0x8}, @TCA_U32_HASH={0x8, 0x2, 0xffffff53}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xd}}, @TCA_U32_SEL={0x94, 0x5, {0x6, 0x9, 0x2, 0x1, 0xc, 0x2, 0x6, 0x0, [{0xffffffff, 0x81, 0x4, 0x7}, {0x2400, 0x9, 0x81, 0x9}, {0x6, 0xd8, 0x6, 0x8001}, {0x9, 0x7, 0xe15, 0x9}, {0x81, 0x3, 0x5, 0x7}, {0x80000001, 0x6, 0x7, 0x9}, {0x3ff, 0x6, 0x3, 0xffff}, {0xffffffff, 0xd1e, 0x5, 0x7}]}}, @TCA_U32_HASH={0x8, 0x2, 0x1000}, @TCA_U32_POLICE={0xcdc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0xb, 0x400, 0x8, 0x2, 0x8, 0xffffd50f, 0x5, 0xb, 0x1, 0x7f7916d4, 0x6, 0x7, 0x5, 0x1, 0x2, 0xfffffff7, 0x6, 0x8, 0x6, 0x10001, 0x8001, 0x7, 0x101, 0x6, 0x400, 0x1, 0x8, 0x3ff, 0x40, 0x1, 0x0, 0x6, 0x1, 0x7, 0x0, 0x4, 0x9, 0x7f, 0xfff, 0xfffffffd, 0x4, 0xc, 0x80000000, 0x2e, 0x3ff, 0xf42, 0x7ff, 0xef7, 0x7f, 0x4, 0x0, 0x80401, 0xe, 0x6fc, 0xfffffffa, 0x3, 0x6, 0x80000000, 0xfffffff8, 0x18000000, 0x4, 0x1ff, 0x4, 0x51, 0x7fff, 0x8, 0x8001, 0x266aef76, 0xef2, 0xc032, 0x7, 0x9, 0x9, 0x6, 0x3, 0x1b, 0x6, 0x0, 0xfffffffc, 0x2, 0x7, 0x8000, 0xb43, 0x1, 0x8, 0x9, 0x7, 0x6, 0x3, 0x8, 0x0, 0x2, 0x1000, 0x8000, 0x9, 0x0, 0x0, 0x6, 0xa, 0x3ff, 0x3, 0x40, 0xcc, 0x81, 0xfffffff7, 0x89a, 0x0, 0xffffff64, 0x2, 0x6, 0x5, 0x7fffffff, 0x0, 0x8, 0x1, 0x2, 0x1ff, 0x33, 0x0, 0x10001, 0xd, 0x7, 0x7, 0x38000, 0x2, 0x7fffffff, 0xfffffffe, 0x7f, 0x4, 0x0, 0x7, 0x8000, 0x4, 0x6c, 0x2, 0x400, 0x800, 0x2, 0x0, 0x800, 0x8, 0x4, 0x3, 0x9, 0x3, 0x80, 0x9, 0x7, 0x4, 0xb3, 0xc, 0x8c09, 0x401, 0x5, 0x2, 0xffffff7f, 0xa, 0x3, 0x7, 0x7, 0x80000000, 0x8001, 0x101, 0x9984, 0x5, 0x7fffffff, 0x6, 0x400, 0x2, 0x4222, 0x1000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x9, 0x1, 0x9325, 0x4, 0x9, 0x1ff, 0x5, 0xcde3, 0x8, 0x1, 0x40, 0x7, 0x800, 0x2, 0x8, 0x3, 0x8, 0x15, 0x4, 0x8c, 0xfff, 0x0, 0x2, 0x6, 0xfff, 0xfe, 0x5, 0xb687, 0x3, 0xb, 0x5, 0x5, 0x9, 0x5a8b, 0x5, 0x80000001, 0x10001, 0x0, 0xffffffff, 0x223762f7, 0x4, 0x1, 0x1, 0xc, 0x4, 0x6, 0x5, 0x8, 0x2, 0x3, 0x200, 0x0, 0x400, 0x8, 0x40, 0x7fff, 0x8, 0x1ff, 0x4, 0x9, 0x2, 0xe141, 0x3, 0x2, 0x200, 0x5, 0x5, 0x5, 0x401, 0x7, 0x11b, 0x8, 0x6, 0x7ff, 0x8, 0x0, 0x287f5fde, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0xdd, 0x8, 0x4, 0x7, 0x0, 0x49, 0x1, 0x0, 0x5, 0xffffff90, 0xf, 0xe6, 0xe5, 0x4f24, 0xc1a, 0x7, 0x2, 0xa, 0xa2, 0x2, 0x2, 0x401, 0x4, 0x7ff, 0x6, 0x9, 0x9, 0x7f, 0x2, 0x2, 0x5, 0x4, 0x8, 0x3, 0x8, 0x1, 0xffff, 0x9500, 0x2, 0x80000000, 0x4, 0x5, 0x7, 0xfffffe00, 0x2, 0x7fffffff, 0x10, 0x9, 0xffffffff, 0x8, 0x4, 0x29, 0x7f, 0x0, 0x3, 0x7, 0x5c2, 0x5, 0xfffffffb, 0x10000, 0x2, 0x6, 0x10001, 0xdcbd, 0x7, 0x6b, 0x10000, 0x2, 0x13c, 0xb797, 0x8, 0x1, 0x6, 0x3, 0x1, 0x9, 0x4, 0x6, 0x7fff, 0xffffffff, 0x1, 0x0, 0x5, 0x800, 0xffff, 0xb76d, 0x10, 0x80000000, 0x2, 0x7fffffff, 0x0, 0x56, 0xb7, 0x15, 0x4, 0xa, 0x1, 0x10001, 0x6, 0x9, 0x2, 0x40, 0x4, 0x4, 0x5, 0x49f9, 0xa, 0x5, 0x4, 0x5e, 0x4, 0x1, 0x3, 0x7, 0xfff, 0x1, 0x3, 0x18, 0x1f9, 0xb6, 0x3, 0x5, 0x6, 0x7, 0x9, 0x0, 0xfffffff9, 0x8, 0x8001, 0x1, 0x1, 0xe0, 0x943, 0x800, 0x8, 0x8, 0x7, 0x3, 0xfff, 0x5, 0x3, 0x7, 0x4, 0x2, 0x4, 0x8001, 0x1000, 0x0, 0x31bf, 0x6, 0x3, 0xa5, 0x2, 0x8, 0xe09, 0x1, 0x404, 0x39, 0x19ba, 0x888, 0x1, 0x3, 0xfffffffa, 0x3, 0x80, 0x1, 0x60b, 0x400, 0xfffffffd, 0x3a4d5538, 0x5, 0xfffffffc, 0x200, 0x3, 0x6, 0x63e, 0xffffffff, 0x5200, 0x18, 0x42d0820f, 0xd014, 0x6, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf256, 0xfffffff3, 0x0, 0x8, 0x401, 0x5, 0x4, 0x8, 0x1, 0xff, 0x7, 0x9, 0x53b, 0x0, 0x4, 0x6, 0xc1b2, 0x9, 0x3, 0x8, 0x8, 0x4, 0x800007, 0xfffffff3, 0x1699, 0x4, 0xffffffa6, 0x9, 0x5, 0xffff93bf, 0x5, 0xf3, 0x6, 0x8000, 0x5, 0x4, 0xf8d9, 0x51, 0x0, 0x80000001, 0x2, 0x7ff, 0xfae, 0x2, 0x2, 0x0, 0x2, 0x7, 0x8000, 0x4, 0x2, 0x5, 0x80000001, 0x81, 0xca, 0x1, 0x99, 0x10001, 0x1, 0x8, 0x10000, 0x8, 0x9, 0x81, 0x7, 0x8, 0x40, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x4, 0x4, 0xc62c, {0x6, 0x0, 0x0, 0x1, 0x1, 0x4}, {0xf, 0x0, 0x0, 0x800, 0x8, 0xf9e5}, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x2, 0x8000, 0x9, {0x2, 0x2, 0xc, 0xf800, 0x3, 0x8}, {0x4, 0x0, 0x8, 0x8, 0x7, 0x9}, 0xffff, 0x90f6, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x2, 0x4, 0x7fffffff, 0x2, 0x7ff, 0x3, 0x8, 0x101, 0x6, 0x200, 0x5eb4, 0x6, 0x82, 0x1, 0x0, 0x3, 0x3, 0x0, 0x6, 0x8, 0x401, 0x9, 0x1, 0x1, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x7, 0x5, 0x1, 0x10001, 0xa31, 0x6, 0x9, 0x7, 0x7, 0xb61, 0x2, 0x800, 0x7224, 0x1, 0x200, 0x10, 0x5, 0x9, 0x8000, 0xd, 0x100, 0x0, 0x0, 0x7be, 0x2, 0x2, 0x8, 0xf, 0x3000000, 0xffff, 0x4, 0x4, 0x195a, 0x80000001, 0x9, 0xd7a, 0xb15, 0x80000001, 0x3, 0x4, 0x5, 0xd7, 0x6, 0x2, 0xd3, 0x9f, 0x6, 0x0, 0x9, 0x0, 0xe86, 0x6, 0xb, 0xdd94, 0x6, 0x4, 0xdf, 0xfffffffe, 0x1, 0x101, 0x80000000, 0x7, 0x4, 0x6, 0xa, 0x0, 0x400, 0x7, 0x608, 0x5, 0x7, 0x8, 0x4, 0xfffffffc, 0x6, 0x7fff, 0x8, 0xe40, 0x6f, 0x800, 0x33f, 0x7, 0x0, 0x1, 0x3, 0xfff, 0x8001, 0x1, 0x7, 0x401, 0x7, 0xfffffffa, 0x27000000, 0x0, 0x1, 0x401, 0x2, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x1000, 0x8, 0x8, 0x62, 0x93ca, 0x2, 0x1, 0x9, 0x2a, 0x2, 0x8, 0x3, 0x81, 0xc, 0x9, 0x8, 0x9, 0x7fff, 0x2, 0x6, 0x400, 0x7fffffff, 0x8, 0x496d, 0xb1, 0xa, 0x0, 0x100, 0x1, 0x2, 0x3, 0x2, 0x1, 0x1000, 0x200, 0x1000, 0x80000001, 0xe2d, 0x33f9, 0x5, 0x45, 0x1000, 0x1, 0x0, 0x2, 0xc, 0xfffffb12, 0x1, 0x4, 0x3, 0xfffffff8, 0x2, 0x1, 0xfffffffc, 0x9, 0x3, 0x400, 0xd5b4, 0xa8, 0xffffff7f, 0x8, 0x80000001, 0x40, 0x80000000, 0x100, 0x0, 0x0, 0x7bc1, 0x7, 0x2, 0x4, 0x5, 0x2, 0x8, 0x100, 0x4, 0x81, 0xfffffffa, 0x5, 0x2, 0xe3ac, 0x1ff, 0x2, 0xe4f1, 0x5, 0x5, 0x8, 0xa72f, 0xa33e, 0x3, 0x4, 0x48d7, 0xffffffff, 0x1, 0x4, 0x6, 0xb, 0x3, 0x8, 0x0, 0x1, 0xfffffffd, 0x6454, 0x6, 0x0, 0x5, 0x80000001, 0x2, 0x6, 0x1000, 0x6, 0x1, 0x8f5, 0x8, 0x1000, 0x5b01, 0x7, 0x0, 0xff, 0xc3, 0xf, 0xffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x29, 0x5, 0x3ff, 0x1, 0x5, {0x4, 0x1, 0xacb, 0x6d3b, 0x85, 0x9}, {0x1, 0x1, 0x200, 0x0, 0x5, 0x2}, 0x4, 0x6cbeb261, 0x7}}]}, @TCA_U32_LINK={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xea}}]}, 0xdf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810004d0000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x4000, 0x0, 'queue1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 2.468833795s ago: executing program 0 (id=3116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7f, 0x8, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x700, 0x0, 0x8001}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)=@deltfilter={0xdf0, 0x2d, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {0xb, 0x6}, {0x9, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xdbc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_HASH={0x8}, @TCA_U32_HASH={0x8, 0x2, 0xffffff53}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xd}}, @TCA_U32_SEL={0x94, 0x5, {0x6, 0x9, 0x2, 0x1, 0xc, 0x2, 0x6, 0x0, [{0xffffffff, 0x81, 0x4, 0x7}, {0x2400, 0x9, 0x81, 0x9}, {0x6, 0xd8, 0x6, 0x8001}, {0x9, 0x7, 0xe15, 0x9}, {0x81, 0x3, 0x5, 0x7}, {0x80000001, 0x6, 0x7, 0x9}, {0x3ff, 0x6, 0x3, 0xffff}, {0xffffffff, 0xd1e, 0x5, 0x7}]}}, @TCA_U32_HASH={0x8, 0x2, 0x1000}, @TCA_U32_POLICE={0xcdc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0xb, 0x400, 0x8, 0x2, 0x8, 0xffffd50f, 0x5, 0xb, 0x1, 0x7f7916d4, 0x6, 0x7, 0x5, 0x1, 0x2, 0xfffffff7, 0x6, 0x8, 0x6, 0x10001, 0x8001, 0x7, 0x101, 0x6, 0x400, 0x1, 0x8, 0x3ff, 0x40, 0x1, 0x0, 0x6, 0x1, 0x7, 0x0, 0x4, 0x9, 0x7f, 0xfff, 0xfffffffd, 0x4, 0xc, 0x80000000, 0x2e, 0x3ff, 0xf42, 0x7ff, 0xef7, 0x7f, 0x4, 0x0, 0x80401, 0xe, 0x6fc, 0xfffffffa, 0x3, 0x6, 0x80000000, 0xfffffff8, 0x18000000, 0x4, 0x1ff, 0x4, 0x51, 0x7fff, 0x8, 0x8001, 0x266aef76, 0xef2, 0xc032, 0x7, 0x9, 0x9, 0x6, 0x3, 0x1b, 0x6, 0x0, 0xfffffffc, 0x2, 0x7, 0x8000, 0xb43, 0x1, 0x8, 0x9, 0x7, 0x6, 0x3, 0x8, 0x0, 0x2, 0x1000, 0x8000, 0x9, 0x0, 0x0, 0x6, 0xa, 0x3ff, 0x3, 0x40, 0xcc, 0x81, 0xfffffff7, 0x89a, 0x0, 0xffffff64, 0x2, 0x6, 0x5, 0x7fffffff, 0x0, 0x8, 0x1, 0x2, 0x1ff, 0x33, 0x0, 0x10001, 0xd, 0x7, 0x7, 0x38000, 0x2, 0x7fffffff, 0xfffffffe, 0x7f, 0x4, 0x0, 0x7, 0x8000, 0x4, 0x6c, 0x2, 0x400, 0x800, 0x2, 0x0, 0x800, 0x8, 0x4, 0x3, 0x9, 0x3, 0x80, 0x9, 0x7, 0x4, 0xb3, 0xc, 0x8c09, 0x401, 0x5, 0x2, 0xffffff7f, 0xa, 0x3, 0x7, 0x7, 0x80000000, 0x8001, 0x101, 0x9984, 0x5, 0x7fffffff, 0x6, 0x400, 0x2, 0x4222, 0x1000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x9, 0x1, 0x9325, 0x4, 0x9, 0x1ff, 0x5, 0xcde3, 0x8, 0x1, 0x40, 0x7, 0x800, 0x2, 0x8, 0x3, 0x8, 0x15, 0x4, 0x8c, 0xfff, 0x0, 0x2, 0x6, 0xfff, 0xfe, 0x5, 0xb687, 0x3, 0xb, 0x5, 0x5, 0x9, 0x5a8b, 0x5, 0x80000001, 0x10001, 0x0, 0xffffffff, 0x223762f7, 0x4, 0x1, 0x1, 0xc, 0x4, 0x6, 0x5, 0x8, 0x2, 0x3, 0x200, 0x0, 0x400, 0x8, 0x40, 0x7fff, 0x8, 0x1ff, 0x4, 0x9, 0x2, 0xe141, 0x3, 0x2, 0x200, 0x5, 0x5, 0x5, 0x401, 0x7, 0x11b, 0x8, 0x6, 0x7ff, 0x8, 0x0, 0x287f5fde, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0xdd, 0x8, 0x4, 0x7, 0x0, 0x49, 0x1, 0x0, 0x5, 0xffffff90, 0xf, 0xe6, 0xe5, 0x4f24, 0xc1a, 0x7, 0x2, 0xa, 0xa2, 0x2, 0x2, 0x401, 0x4, 0x7ff, 0x6, 0x9, 0x9, 0x7f, 0x2, 0x2, 0x5, 0x4, 0x8, 0x3, 0x8, 0x1, 0xffff, 0x9500, 0x2, 0x80000000, 0x4, 0x5, 0x7, 0xfffffe00, 0x2, 0x7fffffff, 0x10, 0x9, 0xffffffff, 0x8, 0x4, 0x29, 0x7f, 0x0, 0x3, 0x7, 0x5c2, 0x5, 0xfffffffb, 0x10000, 0x2, 0x6, 0x10001, 0xdcbd, 0x7, 0x6b, 0x10000, 0x2, 0x13c, 0xb797, 0x8, 0x1, 0x6, 0x3, 0x1, 0x9, 0x4, 0x6, 0x7fff, 0xffffffff, 0x1, 0x0, 0x5, 0x800, 0xffff, 0xb76d, 0x10, 0x80000000, 0x2, 0x7fffffff, 0x0, 0x56, 0xb7, 0x15, 0x4, 0xa, 0x1, 0x10001, 0x6, 0x9, 0x2, 0x40, 0x4, 0x4, 0x5, 0x49f9, 0xa, 0x5, 0x4, 0x5e, 0x4, 0x1, 0x3, 0x7, 0xfff, 0x1, 0x3, 0x18, 0x1f9, 0xb6, 0x3, 0x5, 0x6, 0x7, 0x9, 0x0, 0xfffffff9, 0x8, 0x8001, 0x1, 0x1, 0xe0, 0x943, 0x800, 0x8, 0x8, 0x7, 0x3, 0xfff, 0x5, 0x3, 0x7, 0x4, 0x2, 0x4, 0x8001, 0x1000, 0x0, 0x31bf, 0x6, 0x3, 0xa5, 0x2, 0x8, 0xe09, 0x1, 0x404, 0x39, 0x19ba, 0x888, 0x1, 0x3, 0xfffffffa, 0x3, 0x80, 0x1, 0x60b, 0x400, 0xfffffffd, 0x3a4d5538, 0x5, 0xfffffffc, 0x200, 0x3, 0x6, 0x63e, 0xffffffff, 0x5200, 0x18, 0x42d0820f, 0xd014, 0x6, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf256, 0xfffffff3, 0x0, 0x8, 0x401, 0x5, 0x4, 0x8, 0x1, 0xff, 0x7, 0x9, 0x53b, 0x0, 0x4, 0x6, 0xc1b2, 0x9, 0x3, 0x8, 0x8, 0x4, 0x800007, 0xfffffff3, 0x1699, 0x4, 0xffffffa6, 0x9, 0x5, 0xffff93bf, 0x5, 0xf3, 0x6, 0x8000, 0x5, 0x4, 0xf8d9, 0x51, 0x0, 0x80000001, 0x2, 0x7ff, 0xfae, 0x2, 0x2, 0x0, 0x2, 0x7, 0x8000, 0x4, 0x2, 0x5, 0x80000001, 0x81, 0xca, 0x1, 0x99, 0x10001, 0x1, 0x8, 0x10000, 0x8, 0x9, 0x81, 0x7, 0x8, 0x40, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x4, 0x4, 0xc62c, {0x6, 0x0, 0x0, 0x1, 0x1, 0x4}, {0xf, 0x0, 0x0, 0x800, 0x8, 0xf9e5}, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x2, 0x8000, 0x9, {0x2, 0x2, 0xc, 0xf800, 0x3, 0x8}, {0x4, 0x0, 0x8, 0x8, 0x7, 0x9}, 0xffff, 0x90f6, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x2, 0x4, 0x7fffffff, 0x2, 0x7ff, 0x3, 0x8, 0x101, 0x6, 0x200, 0x5eb4, 0x6, 0x82, 0x1, 0x0, 0x3, 0x3, 0x0, 0x6, 0x8, 0x401, 0x9, 0x1, 0x1, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x7, 0x5, 0x1, 0x10001, 0xa31, 0x6, 0x9, 0x7, 0x7, 0xb61, 0x2, 0x800, 0x7224, 0x1, 0x200, 0x10, 0x5, 0x9, 0x8000, 0xd, 0x100, 0x0, 0x0, 0x7be, 0x2, 0x2, 0x8, 0xf, 0x3000000, 0xffff, 0x4, 0x4, 0x195a, 0x80000001, 0x9, 0xd7a, 0xb15, 0x80000001, 0x3, 0x4, 0x5, 0xd7, 0x6, 0x2, 0xd3, 0x9f, 0x6, 0x0, 0x9, 0x0, 0xe86, 0x6, 0xb, 0xdd94, 0x6, 0x4, 0xdf, 0xfffffffe, 0x1, 0x101, 0x80000000, 0x7, 0x4, 0x6, 0xa, 0x0, 0x400, 0x7, 0x608, 0x5, 0x7, 0x8, 0x4, 0xfffffffc, 0x6, 0x7fff, 0x8, 0xe40, 0x6f, 0x800, 0x33f, 0x7, 0x0, 0x1, 0x3, 0xfff, 0x8001, 0x1, 0x7, 0x401, 0x7, 0xfffffffa, 0x27000000, 0x0, 0x1, 0x401, 0x2, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x1000, 0x8, 0x8, 0x62, 0x93ca, 0x2, 0x1, 0x9, 0x2a, 0x2, 0x8, 0x3, 0x81, 0xc, 0x9, 0x8, 0x9, 0x7fff, 0x2, 0x6, 0x400, 0x7fffffff, 0x8, 0x496d, 0xb1, 0xa, 0x0, 0x100, 0x1, 0x2, 0x3, 0x2, 0x1, 0x1000, 0x200, 0x1000, 0x80000001, 0xe2d, 0x33f9, 0x5, 0x45, 0x1000, 0x1, 0x0, 0x2, 0xc, 0xfffffb12, 0x1, 0x4, 0x3, 0xfffffff8, 0x2, 0x1, 0xfffffffc, 0x9, 0x3, 0x400, 0xd5b4, 0xa8, 0xffffff7f, 0x8, 0x80000001, 0x40, 0x80000000, 0x100, 0x0, 0x0, 0x7bc1, 0x7, 0x2, 0x4, 0x5, 0x2, 0x8, 0x100, 0x4, 0x81, 0xfffffffa, 0x5, 0x2, 0xe3ac, 0x1ff, 0x2, 0xe4f1, 0x5, 0x5, 0x8, 0xa72f, 0xa33e, 0x3, 0x4, 0x48d7, 0xffffffff, 0x1, 0x4, 0x6, 0xb, 0x3, 0x8, 0x0, 0x1, 0xfffffffd, 0x6454, 0x6, 0x0, 0x5, 0x80000001, 0x2, 0x6, 0x1000, 0x6, 0x1, 0x8f5, 0x8, 0x1000, 0x5b01, 0x7, 0x0, 0xff, 0xc3, 0xf, 0xffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x29, 0x5, 0x3ff, 0x1, 0x5, {0x4, 0x1, 0xacb, 0x6d3b, 0x85, 0x9}, {0x1, 0x1, 0x200, 0x0, 0x5, 0x2}, 0x4, 0x6cbeb261, 0x7}}]}, @TCA_U32_LINK={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xea}}]}, 0xdf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810004d0000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x4000, 0x0, 'queue1\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001cc0), 0x20040, 0x0) 1.091223985s ago: executing program 9 (id=3117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="0100000000", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@dev, 0x0}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@mpls_getnetconf={0x1c, 0x52, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20044000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @random="e63f2ca76465", {0xb, 0x8}, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x40, @val={0x8c, 0x10, {0x546, "bb1cf594c2cd", @short="11b8f6506fa03ce5"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x8, 0x4, 0xb, 0xf91f, 0x39, 0x4, 0x5]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) close(r0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xfe33) write$cgroup_pid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000f060108000000060000000007000007050001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r10 = fsmount(0xffffffffffffffff, 0x1, 0x182) close_range(r9, r10, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) socket$vsock_stream(0x28, 0x1, 0x0) 1.033818928s ago: executing program 3 (id=3118): socket$pppl2tp(0x18, 0x1, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x0, 0x46, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x5008, 0x0) 965.791929ms ago: executing program 6 (id=3119): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0x20200) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x2e9) r2 = geteuid() setuid(r2) r3 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x100) r4 = syz_io_uring_setup(0x372f, &(0x7f0000000100)={0x0, 0xb47f, 0x400, 0x3, 0x1b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000000200)=0x4, 0x0, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg(r6, &(0x7f0000000880)={&(0x7f0000000240)=@generic={0xf, "98707c20f20e71c266337e263b050bccb7458c126bda05e4e9965b9bf9ed58cb75bb559d7d42c4fc5e6cc02bd21c439082a20d3d479fcec14e13dfd40c6f0e832498272b8e185d01b77502e7bd57fbdf54090bdfc22d0d4739ba9beb49138c8239b666a8d23737a5faee1d6d9972a4b0aea1fa9fe86bf1e7543f574331ff"}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xfa}], 0x1, &(0x7f0000000400)=[{0xe8, 0x1, 0x4, "f549464ae14d668240a52924ecf52eaf231e944b055c14f48e63f260a50f7a6055e3d62842f61335cf435c39c62a0140dcc67e57d0805fa1a3c6a707c2e7efbeac1894098035575c85b6102c29679becd0d190c9912808cfd5aeaa9eb535a2fed4d8c6ea94a217235bc14105dc2e2cbe10a644813fa82a79cc4e2ef2190bcdeee241c26802b3476b03e9f821b666dc1b54a93b8d367683f2a5bd872f1f4468ad15b46096fe81b6ade8ab918940dd89b88238b6885f5b67fab86a1065db2d1296c58ce903a555c7c6e2c918460db14768eb0d30bfb7"}, {0x98, 0x116, 0x4, "57c6eb678da8576c07d71d7dd701453a6fcbd3b8f35e7a373671d6c2e6231c7aa902b955cd06e68daecebd8625a46a3096e0768f2a596620d45190ffa8deca154c9ef763aa7cad7adda27b93dfc1181fad763922087f225a418b3198ee16274601dd17329ca68751f1e4928a67d0f395eb25414f4791e12f86917d2897213c812b991b"}, {0xe0, 0x0, 0x2, "10ccace8d2e21345f17479aefa0e7edd7785b3b9b5d4bbea577a7948221ef3b4228667793dd07a116d63841d25dee113daf59ef3e34f9ad9f4ccbadf91254484258da94cbd7a715888993d35126f9f7001cb96d46393c4b93bedd82f7919a49424630022a1b3bea80926b04db9644b1e331f55982180898ce12baaa319c54f01025648fb85647ecb7e37d9682af573054677754a4b8668c2ddd4e65a1bf63d85ba63e582b0f1cf5c978ef73e2f15faaacac746d719209cc737a60cd1c03ab05fd09a96135b602afec1e5"}, {0x28, 0x116, 0x7, "fa32774c9135b006a189ec1c8f4827f9800229c7"}, {0x90, 0x109, 0x3, "7046ab5c856f9378f223381282916402c25d51ec028b542f3fabaecc51a972662ab293a592173f5501d166cc3531cc4ebf55f041b3002f584f485a500e5638090661a3193d3832c7c49316b5d9ca77bacee43cf018287b20970173b0e39d4f913eb91a8202658b630589ab3ef0aed797cb967800a7f1c2279bcf0a7040b7aa"}, {0x100, 0x0, 0x0, "838f87e13509f9b87f0a438e145634a2052c8abbd880b20dc4d93279f0437990d1a017dd3d02334f2cbd89a3b6af726204efcd224ef2b26fa97ed3de36fafe211f9e03ec125d83a72d7a44d2051d5db307ba5553f15dfec2edd3552deddf7314541eb29374ddaadbcd737569aebd68f89629be04951f489df5ff6690d796b5a12e23eac516f62b0f9aa0117c59c024789a020228ce2f5c656cdafe66e02dcfc31f6cc7ebfe20ac893232b6ffd4a371eef0e78d12370fe3815bfb7793a5e4c2e3b6184de5fa7c7a594df38449c3cab0f05cb4523605649215a6b1f702eb2e5fa46111405ccc7032a483"}, {0x48, 0x0, 0x1, "f2a963ac52b5edf379f014e01b50f291d7b9f47bd8405798af18f24cb5fc5e8525d51959939174d7fd6ea57b79262bba34"}, {0x18, 0x111, 0x5, "b21900"}], 0x478}, 0x21) r7 = socket$inet6(0xa, 0x3, 0x6bccfeb2) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$FUSE_STATFS(r8, &(0x7f0000000940)={0x60, 0x0, 0x0, {{0x0, 0xffffffffffffffff, 0x1, 0xb, 0xffffffffffff7fff, 0x6, 0x3, 0x86d6}}}, 0x60) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000009c0)=0x3ff, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x3, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r9, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) socket$inet(0x2, 0x4, 0x2) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000b80)=0x4) r11 = accept4$x25(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00)=0x12, 0x80800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a, 0x40010, r11, 0x44d46000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r3) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r12, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000d80)={0x3, 'hsr0\x00', {0x7}, 0x7ff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000e00)) 668.636721ms ago: executing program 7 (id=3120): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009400c0ffffffffff9500000000000000264708a7bbd864687d924f589f3f93154b37f7dee0ea8495182324db19eedd31811f83923dbeaf624dd3dc2e00e44f43c425786e02f623944ab8a96c820bd0e67d6130d4e84e7a1a7a759e0c0b3b77471ce3bf0f22e1b80ce7c5ac98f761f1fe2c014c5103bd34d8278c734f84b0040c0850fd9f7c0f963ab6dc026aadbefece6847bf0704e438bd62539eaad06897561959dd20eec8031ba8997690bc95ff3339fab0bca2e6b74f64cb221024de00eb01f26c2739f9b150df"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) mount$nfs4(&(0x7f0000000200)=')::\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x201004, &(0x7f0000000640)={[{'!{]-'}, {'police\x00'}, {'\x00'}, {'}*-\x19(\\'}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@hash}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10d00, 0xf) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r7) execve(0x0, 0x0, 0x0) 0s ago: executing program 0 (id=3121): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x27}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x36d}, {0x8, 0x0, 0x400}, {0x8}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x26}, {0x8, 0x0, 0xff2a}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x7}}]}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x20000085) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000000008010040"]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read$eventfd(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): omedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 1231.304248][T17737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.153316][T17746] team0: Device gtp0 is of different type [ 1232.781561][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 1232.781578][ T30] audit: type=1400 audit(1753995938.706:61138): avc: denied { map_create } for pid=17743 comm="syz.7.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1232.854197][ T30] audit: type=1400 audit(1753995938.796:61139): avc: denied { create } for pid=17742 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1232.879730][ T30] audit: type=1400 audit(1753995938.806:61140): avc: denied { write } for pid=17742 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1232.900525][ T30] audit: type=1400 audit(1753995938.816:61141): avc: denied { write } for pid=17742 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1232.924959][ T30] audit: type=1400 audit(1753995939.436:61142): avc: denied { map_read map_write } for pid=17743 comm="syz.7.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1232.986628][ T30] audit: type=1400 audit(1753995939.446:61143): avc: denied { prog_run } for pid=17743 comm="syz.7.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1233.016145][ T30] audit: type=1400 audit(1753995939.516:61144): avc: denied { accept } for pid=17743 comm="syz.7.2740" path="/301/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1233.078141][ T30] audit: type=1400 audit(1753995939.516:61145): avc: denied { setopt } for pid=17743 comm="syz.7.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1233.158769][ T30] audit: type=1400 audit(1753995939.526:61146): avc: denied { read write } for pid=17743 comm="syz.7.2740" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1233.197610][ T30] audit: type=1400 audit(1753995939.526:61147): avc: denied { read write open } for pid=17743 comm="syz.7.2740" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1233.285446][T17752] comedi comedi0: Minor 3 could not be opened [ 1233.556742][T17762] wg1 speed is unknown, defaulting to 1000 [ 1233.582281][T17762] wg1 speed is unknown, defaulting to 1000 [ 1234.219034][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2746'. [ 1234.234689][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'. [ 1234.306231][T17770] batadv0 (unregistering): left promiscuous mode [ 1234.341001][T17763] input: syz0 as /devices/virtual/input/input26 [ 1234.660003][T17778] input: syz1 as /devices/virtual/input/input27 [ 1235.199515][T15951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1235.213851][T15951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1235.222922][T15951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1235.246834][T17786] FAULT_INJECTION: forcing a failure. [ 1235.246834][T17786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.260002][T17786] CPU: 1 UID: 0 PID: 17786 Comm: syz.3.2752 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1235.260019][T17786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1235.260026][T17786] Call Trace: [ 1235.260030][T17786] [ 1235.260034][T17786] dump_stack_lvl+0x16c/0x1f0 [ 1235.260056][T17786] should_fail_ex+0x512/0x640 [ 1235.260074][T17786] _copy_from_user+0x2e/0xd0 [ 1235.260092][T17786] copy_msghdr_from_user+0x98/0x160 [ 1235.260110][T17786] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1235.260134][T17786] ___sys_sendmsg+0xfe/0x1d0 [ 1235.260151][T17786] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.260167][T17786] ? __lock_acquire+0x622/0x1c90 [ 1235.260196][T17786] ? __mutex_unlock_slowpath+0xa0/0x800 [ 1235.260211][T17786] __sys_sendmsg+0x16d/0x220 [ 1235.260229][T17786] ? __pfx___sys_sendmsg+0x10/0x10 [ 1235.260254][T17786] do_syscall_64+0xcd/0x4c0 [ 1235.260266][T17786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.260278][T17786] RIP: 0033:0x7fb9a5d8eb69 [ 1235.260288][T17786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.260299][T17786] RSP: 002b:00007fb9a6c01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.260309][T17786] RAX: ffffffffffffffda RBX: 00007fb9a5fb5fa0 RCX: 00007fb9a5d8eb69 [ 1235.260316][T17786] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000007 [ 1235.260323][T17786] RBP: 00007fb9a6c01090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.260330][T17786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.260336][T17786] R13: 0000000000000000 R14: 00007fb9a5fb5fa0 R15: 00007ffcd2e06168 [ 1235.260350][T17786] [ 1235.602557][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2752'. [ 1235.639942][T15951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1235.649327][T15951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1235.917455][T17787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2752'. [ 1236.488851][T17789] wg1 speed is unknown, defaulting to 1000 [ 1236.506200][T17789] wg1 speed is unknown, defaulting to 1000 [ 1237.728757][ T51] Bluetooth: hci5: command tx timeout [ 1237.906361][ T30] kauditd_printk_skb: 356 callbacks suppressed [ 1237.906382][ T30] audit: type=1400 audit(2000000004.740:61504): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1237.981864][ T30] audit: type=1400 audit(2000000004.780:61505): avc: denied { read write } for pid=10711 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1238.072226][ T30] audit: type=1400 audit(2000000004.780:61506): avc: denied { read write open } for pid=10711 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1238.215243][ T30] audit: type=1400 audit(2000000004.780:61507): avc: denied { ioctl } for pid=10711 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1238.298463][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.141356][ T30] audit: type=1400 audit(2000000004.860:61508): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1239.176341][ T30] audit: type=1400 audit(2000000004.870:61509): avc: denied { read write open } for pid=5820 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1239.189117][T17789] chnl_net:caif_netlink_parms(): no params data found [ 1239.339490][ T30] audit: type=1400 audit(2000000004.870:61510): avc: denied { ioctl } for pid=5820 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1239.444078][ T30] audit: type=1400 audit(2000000004.980:61511): avc: denied { create } for pid=17820 comm="syz.6.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1239.483769][ T30] audit: type=1400 audit(2000000004.980:61512): avc: denied { read write } for pid=5829 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1239.527171][ T30] audit: type=1400 audit(2000000004.980:61513): avc: denied { read write open } for pid=5829 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1239.772581][ T51] Bluetooth: hci5: command tx timeout [ 1239.795153][T17840] FAULT_INJECTION: forcing a failure. [ 1239.795153][T17840] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.808063][T17840] CPU: 1 UID: 0 PID: 17840 Comm: syz.0.2762 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1239.808089][T17840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1239.808099][T17840] Call Trace: [ 1239.808106][T17840] [ 1239.808113][T17840] dump_stack_lvl+0x16c/0x1f0 [ 1239.808146][T17840] should_fail_ex+0x512/0x640 [ 1239.808169][T17840] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1239.808192][T17840] should_failslab+0xc2/0x120 [ 1239.808214][T17840] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1239.808234][T17840] ? copy_process+0x4b6/0x7690 [ 1239.808258][T17840] ? _raw_spin_unlock_irq+0x23/0x50 [ 1239.808286][T17840] copy_process+0x4b6/0x7690 [ 1239.808310][T17840] ? find_held_lock+0x2b/0x80 [ 1239.808340][T17840] ? __pfx_copy_process+0x10/0x10 [ 1239.808376][T17840] kernel_clone+0xfc/0x930 [ 1239.808400][T17840] ? __pfx___schedule+0x10/0x10 [ 1239.808426][T17840] ? __pfx_kernel_clone+0x10/0x10 [ 1239.808459][T17840] ? __mutex_unlock_slowpath+0x163/0x800 [ 1239.808481][T17840] __do_sys_clone+0xce/0x120 [ 1239.808506][T17840] ? __pfx___do_sys_clone+0x10/0x10 [ 1239.808541][T17840] ? ksys_write+0x1ac/0x250 [ 1239.808558][T17840] ? __pfx_ksys_write+0x10/0x10 [ 1239.808583][T17840] do_syscall_64+0xcd/0x4c0 [ 1239.808602][T17840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.808621][T17840] RIP: 0033:0x7f5316f8eb69 [ 1239.808636][T17840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.808653][T17840] RSP: 002b:00007f5317da8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1239.808670][T17840] RAX: ffffffffffffffda RBX: 00007f53171b6080 RCX: 00007f5316f8eb69 [ 1239.808682][T17840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.808692][T17840] RBP: 00007f5317da9090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.808703][T17840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.808713][T17840] R13: 0000000000000000 R14: 00007f53171b6080 R15: 00007ffe3d665ae8 [ 1239.808736][T17840] [ 1240.860572][T17789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.877126][T17789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.891235][T17789] bridge_slave_0: entered allmulticast mode [ 1240.902990][T17789] bridge_slave_0: entered promiscuous mode [ 1240.916450][T17789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.936329][T17789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.953031][T17789] bridge_slave_1: entered allmulticast mode [ 1240.967916][T17789] bridge_slave_1: entered promiscuous mode [ 1241.426979][T17789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.463944][T17789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.477444][T17847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1241.861333][ T51] Bluetooth: hci5: command tx timeout [ 1242.659148][T17789] team0: Port device team_slave_0 added [ 1242.709610][T17789] team0: Port device team_slave_1 added [ 1242.913568][ T30] kauditd_printk_skb: 246 callbacks suppressed [ 1242.913589][ T30] audit: type=1400 audit(2000000009.750:61760): avc: denied { bpf } for pid=17868 comm="syz.3.2772" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1243.848999][ T30] audit: type=1400 audit(2000000010.030:61761): avc: denied { sys_module } for pid=17853 comm="syz.0.2769" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1243.870410][ T30] audit: type=1400 audit(2000000010.070:61762): avc: denied { module_request } for pid=17853 comm="syz.0.2769" kmod="batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1243.928764][ T51] Bluetooth: hci5: command tx timeout [ 1243.938294][ T30] audit: type=1400 audit(2000000010.760:61763): avc: denied { read } for pid=17868 comm="syz.3.2772" dev="nsfs" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1243.961527][T17789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.988095][ T30] audit: type=1400 audit(2000000010.780:61764): avc: denied { read write } for pid=10767 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1244.018152][T17789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.078101][ T30] audit: type=1400 audit(2000000010.780:61765): avc: denied { read write open } for pid=10767 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1244.198076][T17789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.228127][ T30] audit: type=1400 audit(2000000010.780:61766): avc: denied { ioctl } for pid=10767 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1244.262353][T17789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.302803][T17789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.375985][ T30] audit: type=1400 audit(2000000010.830:61767): avc: denied { read open } for pid=17868 comm="syz.3.2772" path="net:[4026533196]" dev="nsfs" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1244.790673][T17789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.910632][ T30] audit: type=1400 audit(2000000010.830:61768): avc: denied { create } for pid=17868 comm="syz.3.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1245.022576][T17789] hsr_slave_0: entered promiscuous mode [ 1245.062296][T17789] hsr_slave_1: entered promiscuous mode [ 1245.082178][T17789] debugfs: 'hsr0' already exists in 'hsr' [ 1245.087929][T17789] Cannot create hsr debugfs directory [ 1245.089666][ T30] audit: type=1400 audit(2000000010.860:61769): avc: denied { write } for pid=17868 comm="syz.3.2772" path="socket:[60331]" dev="sockfs" ino=60331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1245.307909][T17888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.360806][T17888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.466651][T17888] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 1246.062374][T17789] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1246.085543][T17789] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1246.117553][T17789] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1246.182215][T17789] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1247.337061][T17912] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1247.718941][ T5877] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1247.894354][T17789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.940526][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 1247.940550][ T30] audit: type=1400 audit(2000000014.780:61954): avc: denied { setopt } for pid=17909 comm="syz.6.2782" laddr=::ffff:172.20.20.20 lport=20001 faddr=::ffff:172.20.20.20 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1247.989094][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 1248.104418][ T30] audit: type=1400 audit(2000000014.940:61955): avc: denied { ioctl } for pid=17907 comm="syz.3.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1248.121075][ T30] audit: type=1400 audit(2000000014.960:61956): avc: denied { ioctl } for pid=17907 comm="syz.3.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1248.121309][ T30] audit: type=1400 audit(2000000014.960:61957): avc: denied { ioctl } for pid=17907 comm="syz.3.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1249.134758][ T30] audit: type=1400 audit(2000000015.970:61958): avc: denied { ioctl } for pid=17907 comm="syz.3.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1249.160006][T17789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.171595][ T30] audit: type=1400 audit(2000000016.000:61959): avc: denied { create } for pid=17915 comm="syz.0.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1249.173210][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.173336][T10095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.185529][ T5877] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1249.185557][ T5877] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1249.185576][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1249.185597][ T5877] usb 4-1: config 1 has no interface number 0 [ 1249.185632][ T5877] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1249.185655][ T5877] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1249.185692][ T5877] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1249.185711][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.187963][ T30] audit: type=1400 audit(2000000016.020:61960): avc: denied { ioctl } for pid=17907 comm="syz.3.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1249.202741][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.202822][T10095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.232412][ T30] audit: type=1400 audit(2000000016.070:61961): avc: denied { ioctl } for pid=17907 comm="syz.3.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1249.634795][T17789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1249.639615][ T5877] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1249.825110][ T30] audit: type=1400 audit(2000000016.070:61962): avc: denied { ioctl } for pid=17907 comm="syz.3.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1249.825157][ T30] audit: type=1400 audit(2000000016.070:61963): avc: denied { ioctl } for pid=17907 comm="syz.3.2781" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.872237][ T5877] snd_usb_pod 4-1:1.1: set_interface failed [ 1251.878387][ T5877] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1251.923560][ T5877] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1252.002384][ T5877] usb 4-1: USB disconnect, device number 69 [ 1253.084330][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 1253.084349][ T30] audit: type=1400 audit(2000000019.850:62107): avc: denied { write } for pid=17952 comm="syz.3.2792" path="socket:[61806]" dev="sockfs" ino=61806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1253.187048][T17789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.244888][ T30] audit: type=1400 audit(2000000019.860:62108): avc: denied { write } for pid=17952 comm="syz.3.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1253.325720][ T30] audit: type=1400 audit(2000000019.870:62109): avc: denied { setopt } for pid=17952 comm="syz.3.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1253.352304][ T30] audit: type=1400 audit(2000000020.050:62110): avc: denied { read } for pid=17946 comm="syz.6.2790" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1253.379933][ T30] audit: type=1400 audit(2000000020.050:62111): avc: denied { read open } for pid=17946 comm="syz.6.2790" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1253.404756][ T30] audit: type=1400 audit(2000000020.080:62112): avc: denied { module_request } for pid=17789 comm="syz-executor" kmod="netdev-netdevsim9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1253.427717][ T30] audit: type=1400 audit(2000000020.110:62113): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1253.458207][ T30] audit: type=1400 audit(2000000020.110:62114): avc: denied { read write open } for pid=5820 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1253.495642][ T30] audit: type=1400 audit(2000000020.110:62115): avc: denied { read write } for pid=17946 comm="syz.6.2790" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1253.529471][T17963] No control pipe specified [ 1253.572739][ T30] audit: type=1400 audit(2000000020.110:62116): avc: denied { read write open } for pid=17946 comm="syz.6.2790" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1253.937689][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2793'. [ 1253.947180][T17969] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1253.954875][T17969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1254.356477][T17956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.500670][T17956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.857819][T17976] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2794'. [ 1255.079829][T17977] netlink: 'syz.3.2795': attribute type 1 has an invalid length. [ 1255.118437][T17977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1255.340044][T17977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1255.347582][T17977] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1255.359328][T17977] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1255.401329][T17982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2795'. [ 1255.429779][T17979] batadv_slave_1: entered promiscuous mode [ 1255.495618][T17982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1256.360139][T17789] veth0_vlan: entered promiscuous mode [ 1256.587094][T17789] veth1_vlan: entered promiscuous mode [ 1256.640772][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 1256.834434][T17789] veth0_macvtap: entered promiscuous mode [ 1256.975823][T17789] veth1_macvtap: entered promiscuous mode [ 1257.022642][T17789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.134512][T17789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.336714][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.376995][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.436432][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.481014][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.053389][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.098155][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.121641][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 1258.121658][ T30] audit: type=1400 audit(2000000024.960:62283): avc: denied { read } for pid=18002 comm="syz.7.2800" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1258.202830][ T30] audit: type=1400 audit(2000000024.960:62284): avc: denied { read open } for pid=18002 comm="syz.7.2800" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1258.247431][ T30] audit: type=1400 audit(2000000025.000:62285): avc: denied { read write } for pid=18006 comm="syz.6.2801" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1258.334239][ T30] audit: type=1400 audit(2000000025.000:62286): avc: denied { read write open } for pid=18006 comm="syz.6.2801" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1258.373981][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.396212][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.442483][ T30] audit: type=1400 audit(2000000025.000:62287): avc: denied { ioctl } for pid=18006 comm="syz.6.2801" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1258.524368][ T30] audit: type=1400 audit(2000000025.030:62288): avc: denied { read } for pid=18002 comm="syz.7.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1258.599043][ T30] audit: type=1400 audit(2000000025.030:62289): avc: denied { read } for pid=18002 comm="syz.7.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1258.626046][ T30] audit: type=1400 audit(2000000025.040:62290): avc: denied { read } for pid=17789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1258.691637][ T30] audit: type=1400 audit(2000000025.040:62291): avc: denied { write } for pid=17789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1258.732856][ T9698] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1258.740447][ T5826] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1258.786804][ T30] audit: type=1400 audit(2000000025.070:62292): avc: denied { create } for pid=18002 comm="syz.7.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1258.811175][ T9698] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1258.855847][ T9698] usb 7-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 1258.882260][ T5826] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1258.902287][ T9698] usb 7-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 1258.976845][T18022] No control pipe specified [ 1259.755765][T18032] mkiss: ax0: crc mode is auto. [ 1261.024272][T18046] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2808'. [ 1262.645237][T18060] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2813'. [ 1262.968643][T18060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.238404][T18060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.249043][ T30] kauditd_printk_skb: 233 callbacks suppressed [ 1263.249062][ T30] audit: type=1400 audit(2000000030.080:62526): avc: denied { ioctl } for pid=18056 comm="syz.7.2813" path="/dev/v4l-subdev7" dev="devtmpfs" ino=947 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1263.443526][T18060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.454507][T18060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.548339][ T30] audit: type=1400 audit(2000000030.160:62527): avc: denied { prog_load } for pid=18068 comm="syz.3.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1263.658244][ T30] audit: type=1400 audit(2000000030.160:62528): avc: denied { bpf } for pid=18068 comm="syz.3.2816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1263.767260][ T30] audit: type=1400 audit(2000000030.160:62529): avc: denied { create } for pid=18068 comm="syz.3.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1263.787879][ C0] vkms_vblank_simulate: vblank timer overrun [ 1263.821416][T18082] No control pipe specified [ 1263.829737][ T30] audit: type=1400 audit(2000000030.160:62530): avc: denied { write } for pid=18068 comm="syz.3.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1263.888521][ T30] audit: type=1400 audit(2000000030.200:62531): avc: denied { prog_load } for pid=18068 comm="syz.3.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1263.909218][ T30] audit: type=1400 audit(2000000030.200:62532): avc: denied { bpf } for pid=18068 comm="syz.3.2816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1263.932182][ T30] audit: type=1400 audit(2000000030.200:62533): avc: denied { perfmon } for pid=18068 comm="syz.3.2816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1263.955320][ T30] audit: type=1400 audit(2000000030.200:62534): avc: denied { perfmon } for pid=18068 comm="syz.3.2816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1263.988827][ T30] audit: type=1400 audit(2000000030.200:62535): avc: denied { perfmon } for pid=18068 comm="syz.3.2816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1264.262487][T18060] batadv0 (unregistering): left promiscuous mode [ 1265.999440][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 1267.932396][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 1267.941450][T18114] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1267.949062][T18114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.285173][ T30] kauditd_printk_skb: 356 callbacks suppressed [ 1268.285203][ T30] audit: type=1400 audit(2000000035.120:62766): avc: denied { read write } for pid=10767 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1268.663844][ T30] audit: type=1400 audit(2000000035.180:62767): avc: denied { read write } for pid=18117 comm="syz.3.2828" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1268.703684][ T30] audit: type=1400 audit(2000000035.180:62768): avc: denied { read write open } for pid=18117 comm="syz.3.2828" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1268.816778][T18126] mkiss: ax0: crc mode is auto. [ 1268.902379][ T30] audit: type=1400 audit(2000000035.190:62769): avc: denied { ioctl } for pid=18117 comm="syz.3.2828" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1268.929733][ T30] audit: type=1400 audit(2000000035.200:62770): avc: denied { ioctl } for pid=18117 comm="syz.3.2828" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1268.973660][ T30] audit: type=1400 audit(2000000035.210:62771): avc: denied { ioctl } for pid=18117 comm="syz.3.2828" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1269.083842][ T30] audit: type=1400 audit(2000000035.220:62772): avc: denied { ioctl } for pid=18117 comm="syz.3.2828" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1269.185075][ T30] audit: type=1400 audit(2000000035.230:62773): avc: denied { ioctl } for pid=18117 comm="syz.3.2828" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1269.298086][ T30] audit: type=1400 audit(2000000035.230:62774): avc: denied { ioctl } for pid=18117 comm="syz.3.2828" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1269.415519][ T30] audit: type=1400 audit(2000000035.250:62775): avc: denied { read write open } for pid=10767 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1270.515633][T18131] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1270.529654][T12241] IPVS: starting estimator thread 0... [ 1270.618977][T18147] IPVS: using max 39 ests per chain, 93600 per kthread [ 1271.669950][T18164] hub 2-0:1.0: USB hub found [ 1271.707486][T18164] hub 2-0:1.0: 1 port detected [ 1271.788129][ T5945] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1271.968772][ T5945] usb 10-1: Using ep0 maxpacket: 8 [ 1272.277622][ T5945] usb 10-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1272.298238][ T5945] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.306364][ T5945] usb 10-1: Product: syz [ 1272.332633][ T5945] usb 10-1: Manufacturer: syz [ 1272.337360][ T5945] usb 10-1: SerialNumber: syz [ 1272.354426][ T5945] usb 10-1: config 0 descriptor?? [ 1272.424718][ T5945] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1272.892397][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2837'. [ 1272.977971][ T5945] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1273.106899][ T5945] sq905 10-1:0.0: probe with driver sq905 failed with error -71 [ 1273.729322][ T30] kauditd_printk_skb: 439 callbacks suppressed [ 1273.729347][ T30] audit: type=1400 audit(2000000040.270:63198): avc: denied { setopt } for pid=18182 comm="syz.7.2845" laddr=::ffff:172.20.20.20 lport=20001 faddr=::ffff:172.20.20.20 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1273.877243][T18177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.507474][ T30] audit: type=1400 audit(2000000040.100:63195): avc: denied { write } for pid=18163 comm="syz.3.2839" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1274.528314][ T5945] usb 10-1: USB disconnect, device number 2 [ 1274.575199][ T30] audit: type=1400 audit(2000000040.620:63199): avc: denied { read write } for pid=18169 comm="syz.0.2841" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1274.637073][T18177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.711867][ T30] audit: type=1400 audit(2000000040.620:63200): avc: denied { read write open } for pid=18169 comm="syz.0.2841" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1274.753175][T18168] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1274.760811][T18168] audit: audit_lost=3671 audit_rate_limit=0 audit_backlog_limit=64 [ 1274.770571][T18168] audit: backlog limit exceeded [ 1274.819976][ T30] audit: type=1400 audit(2000000040.620:63201): avc: denied { ioctl } for pid=18169 comm="syz.0.2841" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1274.849266][T18168] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1274.858949][T18168] audit: audit_lost=3672 audit_rate_limit=0 audit_backlog_limit=64 [ 1275.341125][T18194] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present [ 1275.923421][T18196] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present [ 1276.830607][T18203] FAULT_INJECTION: forcing a failure. [ 1276.830607][T18203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.898453][T18203] CPU: 0 UID: 0 PID: 18203 Comm: syz.6.2851 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1276.898480][T18203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1276.898490][T18203] Call Trace: [ 1276.898503][T18203] [ 1276.898515][T18203] dump_stack_lvl+0x16c/0x1f0 [ 1276.898550][T18203] should_fail_ex+0x512/0x640 [ 1276.898578][T18203] _copy_to_user+0x32/0xd0 [ 1276.898608][T18203] simple_read_from_buffer+0xcb/0x170 [ 1276.898639][T18203] proc_fail_nth_read+0x197/0x240 [ 1276.898660][T18203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1276.898681][T18203] ? rw_verify_area+0xcf/0x680 [ 1276.898705][T18203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1276.898725][T18203] vfs_read+0x1e4/0xc60 [ 1276.898755][T18203] ? __pfx___mutex_lock+0x10/0x10 [ 1276.898774][T18203] ? __pfx_vfs_read+0x10/0x10 [ 1276.898808][T18203] ? __fget_files+0x20e/0x3c0 [ 1276.898835][T18203] ksys_read+0x12a/0x250 [ 1276.898852][T18203] ? __pfx_ksys_read+0x10/0x10 [ 1276.898869][T18203] ? fdget+0x187/0x210 [ 1276.898891][T18203] do_syscall_64+0xcd/0x4c0 [ 1276.898911][T18203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.898930][T18203] RIP: 0033:0x7fd097f8d57c [ 1276.898946][T18203] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1276.898963][T18203] RSP: 002b:00007fd098d9c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1276.898981][T18203] RAX: ffffffffffffffda RBX: 00007fd0981b6080 RCX: 00007fd097f8d57c [ 1276.898993][T18203] RDX: 000000000000000f RSI: 00007fd098d9c0a0 RDI: 0000000000000004 [ 1276.899004][T18203] RBP: 00007fd098d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.899015][T18203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.899025][T18203] R13: 0000000000000000 R14: 00007fd0981b6080 R15: 00007fffd44eafa8 [ 1276.899051][T18203] [ 1278.270085][T18215] comedi comedi0: Minor 14 could not be opened [ 1278.294145][T15951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1278.448318][T15951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1278.458167][T15951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1278.470301][T15951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1278.485470][T15951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1278.496645][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2855'. [ 1278.505589][T18219] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1278.513304][T18219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1278.566253][T18216] wg1 speed is unknown, defaulting to 1000 [ 1278.585135][T18216] wg1 speed is unknown, defaulting to 1000 [ 1278.741257][ T30] kauditd_printk_skb: 797 callbacks suppressed [ 1278.741272][ T30] audit: type=1400 audit(2000000045.580:63887): avc: denied { write } for pid=18163 comm="syz.3.2839" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1278.852064][T18168] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1278.896078][T18168] audit: audit_lost=3710 audit_rate_limit=0 audit_backlog_limit=64 [ 1278.902948][T18222] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1278.911677][ T30] audit: type=1400 audit(2000000045.580:63888): avc: denied { write } for pid=18163 comm="syz.3.2839" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1278.919508][T18168] audit: backlog limit exceeded [ 1278.951053][T18222] audit: audit_lost=3711 audit_rate_limit=0 audit_backlog_limit=64 [ 1278.966971][T18224] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1278.988305][T18222] audit: backlog limit exceeded [ 1278.989559][T18224] audit: audit_lost=3712 audit_rate_limit=0 audit_backlog_limit=64 [ 1279.326468][T17871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.428159][T12241] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1279.462045][ T5899] wg1 speed is unknown, defaulting to 1000 [ 1279.467883][ T5899] \yz0: Port: 1 Link DOWN [ 1279.543274][ T5899] wg1 speed is unknown, defaulting to 1000 [ 1279.558307][T12241] usb 10-1: device descriptor read/64, error -71 [ 1279.808219][T12241] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1279.867410][T17871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.948219][T12241] usb 10-1: device descriptor read/64, error -71 [ 1279.993203][T18216] chnl_net:caif_netlink_parms(): no params data found [ 1280.090136][T12241] usb usb10-port1: attempt power cycle [ 1280.149444][T17871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.433013][T12241] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1280.501876][T12241] usb 10-1: device descriptor read/8, error -71 [ 1280.570387][ T51] Bluetooth: hci4: command tx timeout [ 1280.758147][T12241] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1281.019976][T18216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.083456][T18216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.100741][T12241] usb 10-1: device descriptor read/8, error -71 [ 1281.120425][T18216] bridge_slave_0: entered allmulticast mode [ 1281.128920][T18216] bridge_slave_0: entered promiscuous mode [ 1281.145716][T18216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.261352][T12241] usb usb10-port1: unable to enumerate USB device [ 1281.303883][T18216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.328667][T18216] bridge_slave_1: entered allmulticast mode [ 1281.349704][T18216] bridge_slave_1: entered promiscuous mode [ 1281.381815][T18246] Falling back ldisc for ptm1. [ 1282.656065][ T51] Bluetooth: hci4: command tx timeout [ 1283.317671][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2864'. [ 1283.371430][T18216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.762374][ T30] kauditd_printk_skb: 589 callbacks suppressed [ 1283.762390][ T30] audit: type=1400 audit(2000000050.600:64477): avc: denied { read } for pid=18263 comm="syz.6.2868" dev="nsfs" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1283.790652][ T30] audit: type=1400 audit(2000000050.600:64478): avc: denied { read open } for pid=18263 comm="syz.6.2868" path="net:[4026533271]" dev="nsfs" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1283.873983][ T30] audit: type=1400 audit(2000000050.600:64479): avc: denied { create } for pid=18263 comm="syz.6.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1283.898527][ T30] audit: type=1400 audit(2000000050.610:64480): avc: denied { ioctl } for pid=18261 comm="syz.7.2866" path="socket:[63813]" dev="sockfs" ino=63813 ioctlcmd=0xae60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1283.955980][T18273] 9pnet_fd: Insufficient options for proto=fd [ 1283.970958][ T30] audit: type=1400 audit(2000000050.610:64481): avc: denied { ioctl } for pid=18261 comm="syz.7.2866" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1284.001068][ T30] audit: type=1400 audit(2000000050.630:64482): avc: denied { bind } for pid=18263 comm="syz.6.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1284.021865][ T30] audit: type=1400 audit(2000000050.640:64483): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1284.046977][ T30] audit: type=1400 audit(2000000050.640:64484): avc: denied { read write open } for pid=5820 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1284.089252][ T30] audit: type=1400 audit(2000000050.640:64485): avc: denied { ioctl } for pid=5820 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1284.127256][ T6304] Bluetooth: hci6: Frame reassembly failed (-84) [ 1284.165059][ T30] audit: type=1400 audit(2000000050.650:64486): avc: denied { map_create } for pid=18263 comm="syz.6.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1284.670227][T17871] bond0 (unregistering): left promiscuous mode [ 1284.687586][T17871] bond0 (unregistering): Released all slaves [ 1284.704865][T18216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.813066][T15951] Bluetooth: hci4: command tx timeout [ 1285.027091][T17871] tipc: Disabling bearer [ 1285.061324][T17871] tipc: Left network mode [ 1285.067440][T18216] team0: Port device team_slave_0 added [ 1285.097678][T18216] team0: Port device team_slave_1 added [ 1285.507005][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2871'. [ 1285.516393][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2871'. [ 1285.607390][T17941] Process accounting resumed [ 1285.743215][T18216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.760498][T18216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.821696][T18279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1285.838919][T18279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1285.843619][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2871'. [ 1285.844981][T18279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1285.854745][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2871'. [ 1285.867475][T18216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.914280][T18279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1285.932659][T18279] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1285.961755][T18279] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1286.050675][T18216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.076898][T18279] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1286.103431][T18216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.173477][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1286.174828][T18279] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1286.210923][T18216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.247158][T18279] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1286.293683][T18279] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1287.128253][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 1287.638755][T17871] hsr_slave_0: left promiscuous mode [ 1287.726843][T17871] hsr_slave_1: left promiscuous mode [ 1287.841008][T17871] veth1_macvtap: left promiscuous mode [ 1287.841060][T17871] veth0_macvtap: left promiscuous mode [ 1287.841136][T17871] veth1_vlan: left promiscuous mode [ 1287.848460][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 1287.929619][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 1288.008201][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 1288.009853][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1288.258501][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1288.522285][T17871] pim6reg (unregistering): left allmulticast mode [ 1288.776435][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 1288.776452][ T30] audit: type=1400 audit(2000000055.540:64662): avc: denied { ioctl } for pid=5820 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1288.903691][ T30] audit: type=1400 audit(2000000055.610:64663): avc: denied { read write } for pid=18306 comm="syz.9.2878" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1289.067783][ T30] audit: type=1400 audit(2000000055.610:64664): avc: denied { read write open } for pid=18306 comm="syz.9.2878" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1289.206361][ T30] audit: type=1400 audit(2000000055.610:64665): avc: denied { ioctl } for pid=18306 comm="syz.9.2878" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1289.232152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.375361][T18326] overlayfs: overlapping lowerdir path [ 1289.418726][T17871] team0 (unregistering): Port device vlan0 removed [ 1289.575016][ T30] audit: type=1400 audit(2000000055.610:64666): avc: denied { create } for pid=18306 comm="syz.9.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1289.594738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.637130][ T30] audit: type=1400 audit(2000000055.730:64667): avc: denied { connect } for pid=18306 comm="syz.9.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1289.651205][T18328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1289.678243][ T30] audit: type=1400 audit(2000000055.740:64668): avc: denied { read } for pid=18322 comm="syz.3.2880" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1289.819802][ T30] audit: type=1400 audit(2000000055.740:64669): avc: denied { read open } for pid=18322 comm="syz.3.2880" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1289.863346][ T30] audit: type=1400 audit(2000000055.780:64670): avc: denied { ioctl } for pid=18322 comm="syz.3.2880" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1289.900686][ T30] audit: type=1400 audit(2000000055.900:64671): avc: denied { read write } for pid=10767 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1290.014466][T18334] FAULT_INJECTION: forcing a failure. [ 1290.014466][T18334] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.027221][T18334] CPU: 1 UID: 0 PID: 18334 Comm: syz.7.2883 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1290.027247][T18334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1290.027254][T18334] Call Trace: [ 1290.027258][T18334] [ 1290.027263][T18334] dump_stack_lvl+0x16c/0x1f0 [ 1290.027285][T18334] should_fail_ex+0x512/0x640 [ 1290.027300][T18334] ? fs_reclaim_acquire+0xae/0x150 [ 1290.027318][T18334] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1290.027331][T18334] should_failslab+0xc2/0x120 [ 1290.027344][T18334] __kmalloc_noprof+0xd2/0x510 [ 1290.027359][T18334] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1290.027373][T18334] ? tomoyo_profile+0x47/0x60 [ 1290.027388][T18334] tomoyo_path_number_perm+0x245/0x580 [ 1290.027405][T18334] ? tomoyo_path_number_perm+0x237/0x580 [ 1290.027424][T18334] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1290.027442][T18334] ? find_held_lock+0x2b/0x80 [ 1290.027468][T18334] ? find_held_lock+0x2b/0x80 [ 1290.027481][T18334] ? hook_file_ioctl_common+0x145/0x410 [ 1290.027501][T18334] ? __fget_files+0x20e/0x3c0 [ 1290.027515][T18334] security_file_ioctl+0x9b/0x240 [ 1290.027528][T18334] __x64_sys_ioctl+0xb7/0x210 [ 1290.027546][T18334] do_syscall_64+0xcd/0x4c0 [ 1290.027557][T18334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.027569][T18334] RIP: 0033:0x7f8e2e98eb69 [ 1290.027579][T18334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1290.027589][T18334] RSP: 002b:00007f8e2f717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1290.027601][T18334] RAX: ffffffffffffffda RBX: 00007f8e2ebb5fa0 RCX: 00007f8e2e98eb69 [ 1290.027608][T18334] RDX: 0000200000000480 RSI: 00000000c1105517 RDI: 0000000000000007 [ 1290.027614][T18334] RBP: 00007f8e2f717090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.027621][T18334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.027627][T18334] R13: 0000000000000000 R14: 00007f8e2ebb5fa0 R15: 00007ffc793e2a78 [ 1290.027641][T18334] [ 1290.027646][T18334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1290.234929][T18334] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present [ 1290.249673][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1290.328103][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1290.931572][T10095] smc: removing ib device \yz0 [ 1292.078768][T18216] hsr_slave_0: entered promiscuous mode [ 1292.085316][T18216] hsr_slave_1: entered promiscuous mode [ 1292.096611][T18216] debugfs: 'hsr0' already exists in 'hsr' [ 1292.105969][T18216] Cannot create hsr debugfs directory [ 1292.224590][T18331] veth3: entered promiscuous mode [ 1292.236055][T18331] veth3: entered allmulticast mode [ 1292.328379][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1292.408974][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1293.224135][T17871] IPVS: stop unused estimator thread 0... [ 1293.266808][T18360] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1293.288700][T18352] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1293.294736][T18352] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1293.303035][T18352] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1293.309241][T18352] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1293.315384][T18352] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1293.321709][T18352] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1293.499572][T18362] futex_wake_op: syz.6.2890 tries to shift op by 144; fix this program [ 1293.780619][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 1293.780634][ T30] audit: type=1400 audit(2000000060.620:64847): avc: denied { read write } for pid=18364 comm="syz.9.2891" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1293.789864][T18368] 9pnet_fd: Insufficient options for proto=fd [ 1294.326391][ T30] audit: type=1400 audit(2000000060.630:64848): avc: denied { mounton } for pid=18364 comm="syz.9.2891" path="/21" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1294.413515][ T30] audit: type=1400 audit(2000000060.660:64849): avc: denied { read write open } for pid=18364 comm="syz.9.2891" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1294.517618][ T30] audit: type=1400 audit(2000000060.670:64850): avc: denied { read } for pid=18363 comm="syz.3.2892" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1294.528140][T17941] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1294.720762][ T30] audit: type=1400 audit(2000000060.670:64851): avc: denied { read open } for pid=18363 comm="syz.3.2892" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1294.745901][ T30] audit: type=1400 audit(2000000060.680:64852): avc: denied { prog_load } for pid=18363 comm="syz.3.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1295.134144][T18378] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1295.140787][T18378] audit: audit_lost=3713 audit_rate_limit=0 audit_backlog_limit=64 [ 1295.148930][T18378] audit: backlog limit exceeded [ 1295.158827][T18378] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1295.308502][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1295.368842][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 1295.384424][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 1295.446847][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 1295.455911][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 1295.463026][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1295.628491][T17941] usb 4-1: Using ep0 maxpacket: 16 [ 1295.711732][T18373] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2893'. [ 1295.748438][T17941] usb 4-1: config 6 has an invalid interface number: 28 but max is 3 [ 1295.760464][T17941] usb 4-1: config 6 has an invalid interface number: 4 but max is 3 [ 1295.800974][T17941] usb 4-1: config 6 has an invalid interface number: 86 but max is 3 [ 1295.809015][T18216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1295.820394][T17941] usb 4-1: config 6 has an invalid interface number: 191 but max is 3 [ 1295.843336][T17941] usb 4-1: config 6 has no interface number 0 [ 1295.850447][T17941] usb 4-1: config 6 has no interface number 1 [ 1295.862384][T18216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1295.874584][T17941] usb 4-1: config 6 has no interface number 2 [ 1295.881134][T17941] usb 4-1: config 6 has no interface number 3 [ 1295.885623][T18216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1295.887356][T17941] usb 4-1: config 6 interface 28 altsetting 0 endpoint 0x2 has invalid maxpacket 1576, setting to 64 [ 1295.911032][T17941] usb 4-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1295.922478][T17941] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1295.944610][T18216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1295.965073][T17941] usb 4-1: config 6 interface 86 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1295.993562][T17941] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 1296.006900][T17941] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 1296.017396][T17941] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 1296.029216][T12241] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1296.041541][T17941] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1296.075024][T17941] usb 4-1: config 6 interface 86 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1296.096154][T17941] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1296.213762][T17941] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1296.227509][T17941] usb 4-1: config 6 interface 4 has no altsetting 0 [ 1296.238831][T17941] usb 4-1: config 6 interface 86 has no altsetting 0 [ 1296.245632][T17941] usb 4-1: config 6 interface 191 has no altsetting 0 [ 1296.264018][T17941] usb 4-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 1296.350203][T12241] usb 10-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 1296.359668][T12241] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.367719][T12241] usb 10-1: Product: syz [ 1296.408162][T12241] usb 10-1: Manufacturer: syz [ 1296.414741][T17941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.428426][T12241] usb 10-1: SerialNumber: syz [ 1296.448628][T17941] usb 4-1: Product: syz [ 1296.452846][T17941] usb 4-1: Manufacturer: syz [ 1296.463153][T12241] usb 10-1: config 0 descriptor?? [ 1296.470266][T17941] usb 4-1: SerialNumber: syz [ 1296.484162][T18216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.484729][T12241] ttusb_dec_send_command: command bulk message failed: error -22 [ 1296.516648][T12241] ttusb-dec 10-1:0.0: probe with driver ttusb-dec failed with error -22 [ 1296.581907][T17941] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1296.828456][T18216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.895475][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.902616][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.104120][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.111362][T10095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.231470][ T5945] usb 10-1: USB disconnect, device number 7 [ 1297.615899][T18406] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2899'. [ 1298.451017][T18407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1298.520279][T18407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1298.722046][T18407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1298.805701][ T30] kauditd_printk_skb: 336 callbacks suppressed [ 1298.805754][ T30] audit: type=1400 audit(2000000065.620:65142): avc: denied { prog_load } for pid=18411 comm="syz.6.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1299.065984][T18407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1299.108290][T18407] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1299.109157][ T30] audit: type=1400 audit(2000000065.620:65143): avc: denied { bpf } for pid=18411 comm="syz.6.2902" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1299.114345][T18407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1299.174353][ T30] audit: type=1400 audit(2000000065.620:65144): avc: denied { perfmon } for pid=18411 comm="syz.6.2902" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1299.320892][ T30] audit: type=1400 audit(2000000065.620:65145): avc: denied { perfmon } for pid=18411 comm="syz.6.2902" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1299.428109][ T30] audit: type=1400 audit(2000000065.620:65146): avc: denied { perfmon } for pid=18411 comm="syz.6.2902" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1299.585737][ T30] audit: type=1400 audit(2000000065.620:65147): avc: denied { perfmon } for pid=18411 comm="syz.6.2902" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1299.718920][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.832575][ T30] audit: type=1400 audit(2000000065.620:65148): avc: denied { perfmon } for pid=18411 comm="syz.6.2902" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1299.854081][T18380] Bluetooth: hci0: command 0x0406 tx timeout [ 1299.872757][ T30] audit: type=1400 audit(2000000065.620:65149): avc: denied { bpf } for pid=18411 comm="syz.6.2902" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1299.946805][ T30] audit: type=1400 audit(2000000065.620:65150): avc: denied { bpf } for pid=18411 comm="syz.6.2902" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1300.139558][T18434] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1300.578831][T18380] Bluetooth: hci3: command 0x0406 tx timeout [ 1300.728558][T18380] Bluetooth: hci1: command 0x0406 tx timeout [ 1300.954857][T18216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.128381][T18380] Bluetooth: hci2: command 0x0c1a tx timeout [ 1301.210304][T18216] veth0_vlan: entered promiscuous mode [ 1301.219413][T18380] Bluetooth: hci4: command 0x0c1a tx timeout [ 1301.225413][T15951] Bluetooth: hci5: command 0x0c1a tx timeout [ 1301.274673][T18216] veth1_vlan: entered promiscuous mode [ 1302.711519][T18216] veth0_macvtap: entered promiscuous mode [ 1302.741654][T18216] veth1_macvtap: entered promiscuous mode [ 1302.997192][T18216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.073892][T18216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.136560][ T6304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.163910][T17871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.226274][T17871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.315921][T17871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.761173][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 1304.761189][ T30] audit: type=1400 audit(2000000071.610:65352): avc: denied { prog_load } for pid=18450 comm="syz.7.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1304.806036][ T30] audit: type=1400 audit(2000000071.640:65353): avc: denied { bpf } for pid=18450 comm="syz.7.2909" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1304.893233][ T30] audit: type=1400 audit(2000000071.640:65354): avc: denied { perfmon } for pid=18450 comm="syz.7.2909" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1304.954324][ T30] audit: type=1400 audit(2000000071.640:65355): avc: denied { perfmon } for pid=18450 comm="syz.7.2909" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1305.076425][T17871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.078973][ T30] audit: type=1400 audit(2000000071.640:65356): avc: denied { perfmon } for pid=18450 comm="syz.7.2909" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1305.131623][T17871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.288176][ T30] audit: type=1400 audit(2000000071.640:65357): avc: denied { perfmon } for pid=18450 comm="syz.7.2909" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1305.331056][T10092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.353979][ T30] audit: type=1400 audit(2000000071.640:65358): avc: denied { bpf } for pid=18450 comm="syz.7.2909" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1305.387866][T10092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.497764][ T30] audit: type=1400 audit(2000000071.640:65359): avc: denied { bpf } for pid=18450 comm="syz.7.2909" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1305.675063][ T30] audit: type=1400 audit(2000000071.640:65360): avc: denied { perfmon } for pid=18450 comm="syz.7.2909" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1305.898509][T10767] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1308.321946][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'. [ 1309.707551][T18513] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2923'. [ 1309.717499][T18513] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2923'. [ 1309.769610][ T30] kauditd_printk_skb: 250 callbacks suppressed [ 1309.769627][ T30] audit: type=1400 audit(2000000076.610:65607): avc: denied { create } for pid=18503 comm="syz.6.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1309.886128][ T30] audit: type=1400 audit(2000000076.610:65608): avc: denied { write } for pid=18503 comm="syz.6.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1309.906850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.145798][ T30] audit: type=1400 audit(2000000076.570:65604): avc: denied { ioctl } for pid=10767 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1310.197021][ T30] audit: type=1400 audit(2000000076.640:65609): avc: denied { read } for pid=18503 comm="syz.6.2923" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1310.355590][ T30] audit: type=1400 audit(2000000076.640:65610): avc: denied { read open } for pid=18503 comm="syz.6.2923" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1310.461719][ T30] audit: type=1400 audit(2000000076.640:65611): avc: denied { read open } for pid=18511 comm="syz.3.2924" path="net:[4026533196]" dev="nsfs" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1310.746744][ T30] audit: type=1400 audit(2000000076.670:65612): avc: denied { read write } for pid=18516 comm="syz.0.2925" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1310.890267][ T30] audit: type=1400 audit(2000000076.680:65613): avc: denied { read write open } for pid=18516 comm="syz.0.2925" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1310.942741][ T30] audit: type=1400 audit(2000000076.680:65614): avc: denied { read } for pid=18511 comm="syz.3.2924" dev="nsfs" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1311.004438][ T30] audit: type=1400 audit(2000000076.680:65615): avc: denied { read open } for pid=18511 comm="syz.3.2924" path="net:[4026533196]" dev="nsfs" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1311.747619][T18507] Process accounting resumed [ 1313.758569][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2931'. [ 1313.777741][T18544] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2931'. [ 1313.845848][T18544] netlink: 'syz.9.2931': attribute type 19 has an invalid length. [ 1313.862466][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2931'. [ 1314.148529][ T5945] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1314.365624][ T5945] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.377707][ T5945] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1314.411400][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.432082][ T5945] usb 10-1: config 0 descriptor?? [ 1314.798150][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 1314.798168][ T30] audit: type=1400 audit(2000000081.620:65752): avc: denied { perfmon } for pid=18546 comm="syz.6.2933" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1314.828922][ T30] audit: type=1400 audit(2000000081.630:65753): avc: denied { bpf } for pid=18546 comm="syz.6.2933" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1314.891034][ T30] audit: type=1400 audit(2000000081.700:65754): avc: denied { perfmon } for pid=18546 comm="syz.6.2933" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1314.961939][ T30] audit: type=1400 audit(2000000081.710:65755): avc: denied { bpf } for pid=18546 comm="syz.6.2933" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1315.057698][ T30] audit: type=1400 audit(2000000081.720:65756): avc: denied { perfmon } for pid=18546 comm="syz.6.2933" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1315.179935][ T30] audit: type=1400 audit(2000000081.760:65757): avc: denied { bpf } for pid=18546 comm="syz.6.2933" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1315.245367][ T5945] lenovo 0003:17EF:6047.0017: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0 [ 1315.422638][ T30] audit: type=1400 audit(2000000081.780:65758): avc: denied { perfmon } for pid=18546 comm="syz.6.2933" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1315.525531][ T30] audit: type=1400 audit(2000000081.790:65759): avc: denied { bpf } for pid=18546 comm="syz.6.2933" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1315.650525][ T5945] lenovo 0003:17EF:6047.0017: Failed to switch F7/9/11 mode: -71 [ 1315.673326][ T5945] lenovo 0003:17EF:6047.0017: Failed to switch middle button: -71 [ 1315.674789][ T30] audit: type=1400 audit(2000000081.790:65760): avc: denied { perfmon } for pid=18546 comm="syz.6.2933" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1315.778777][ T5945] lenovo 0003:17EF:6047.0017: Fn-lock setting failed: -71 [ 1315.821732][ T5945] lenovo 0003:17EF:6047.0017: Sensitivity setting failed: -71 [ 1315.947882][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 1315.956971][T18563] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1315.964548][T18563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.979899][ T5945] usb 10-1: USB disconnect, device number 8 [ 1315.996126][ T30] audit: type=1400 audit(2000000081.800:65761): avc: denied { ioctl } for pid=18539 comm="syz.9.2931" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.092055][T18558] fido_id[18558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1319.016056][T15951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1319.035597][T15951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1319.045523][T15951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1319.047395][T18597] tipc: Started in network mode [ 1319.074690][T18597] tipc: Node identity 6ace5a17010f, cluster identity 4711 [ 1319.088467][T15951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1319.096452][T15951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1319.113292][T18597] tipc: Enabled bearer , priority 0 [ 1319.189770][T18597] syzkaller0: entered promiscuous mode [ 1319.243811][T18597] syzkaller0: entered allmulticast mode [ 1319.379532][T18597] tipc: Resetting bearer [ 1319.394863][T18598] wg1 speed is unknown, defaulting to 1000 [ 1319.434083][T18593] tipc: Resetting bearer [ 1319.533728][T18593] tipc: Disabling bearer [ 1319.829837][ T30] kauditd_printk_skb: 272 callbacks suppressed [ 1319.829853][ T30] audit: type=1400 audit(2000000086.670:66034): avc: denied { read write } for pid=18613 comm="syz.0.2952" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1320.007777][ T30] audit: type=1400 audit(2000000086.680:66035): avc: denied { bpf } for pid=18608 comm="syz.7.2951" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1320.127453][ T30] audit: type=1400 audit(2000000086.680:66036): avc: denied { perfmon } for pid=18608 comm="syz.7.2951" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1320.190970][T18624] Invalid ELF section header size [ 1320.194527][ T30] audit: type=1400 audit(2000000086.680:66037): avc: denied { bpf } for pid=18608 comm="syz.7.2951" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1320.226388][ T5826] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.227215][ T9698] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.242561][T17941] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.277002][ T5826] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1320.291188][ T5826] usb 8-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 1320.329971][T18624] Invalid ELF section header size [ 1320.345229][ T30] audit: type=1400 audit(2000000086.680:66038): avc: denied { perfmon } for pid=18608 comm="syz.7.2951" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1320.349288][T17941] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1320.384091][ T5826] usb 8-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 1320.660954][T18616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1320.667488][T18616] audit: audit_lost=3738 audit_rate_limit=0 audit_backlog_limit=64 [ 1320.675488][T18616] audit: backlog limit exceeded [ 1320.682210][T18616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1320.688767][T18616] audit: audit_lost=3739 audit_rate_limit=0 audit_backlog_limit=64 [ 1320.808520][ T9698] usb 7-1: USB disconnect, device number 28 [ 1320.972809][T18598] chnl_net:caif_netlink_parms(): no params data found [ 1321.208828][T18380] Bluetooth: hci0: command tx timeout [ 1321.710827][T18598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.719725][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.741901][T18598] bridge_slave_0: entered allmulticast mode [ 1322.121230][T18598] bridge_slave_0: entered promiscuous mode [ 1322.244113][T18598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.266903][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.275717][T18598] bridge_slave_1: entered allmulticast mode [ 1322.286236][T18598] bridge_slave_1: entered promiscuous mode [ 1322.430186][T18598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.523174][T18598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.639700][T18598] team0: Port device team_slave_0 added [ 1322.658095][T18598] team0: Port device team_slave_1 added [ 1322.723158][T18598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.732333][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.761936][T18598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.830600][T18598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.837752][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.867733][T18598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.040792][T18656] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2961'. [ 1323.050097][T18656] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2961'. [ 1323.289685][T18380] Bluetooth: hci0: command tx timeout [ 1323.495414][T18656] Process accounting resumed [ 1323.749643][T18598] hsr_slave_0: entered promiscuous mode [ 1323.941615][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2963'. [ 1323.950826][T18663] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1323.958483][T18663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1324.769282][T18598] hsr_slave_1: entered promiscuous mode [ 1324.797201][T18598] debugfs: 'hsr0' already exists in 'hsr' [ 1324.843360][T18598] Cannot create hsr debugfs directory [ 1324.887670][ T30] kauditd_printk_skb: 227 callbacks suppressed [ 1324.887686][ T30] audit: type=1400 audit(2000000091.720:66229): avc: denied { read write } for pid=10711 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1324.994438][ T30] audit: type=1400 audit(2000000091.740:66230): avc: denied { read write open } for pid=10711 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.030830][ T30] audit: type=1400 audit(2000000091.740:66231): avc: denied { ioctl } for pid=10711 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.070874][ T30] audit: type=1400 audit(2000000091.790:66232): avc: denied { create } for pid=18667 comm="syz.9.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1325.105446][ T30] audit: type=1400 audit(2000000091.800:66233): avc: denied { write } for pid=18667 comm="syz.9.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1325.127735][ T30] audit: type=1400 audit(2000000091.810:66234): avc: denied { prog_load } for pid=18668 comm="syz.6.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1325.208448][ T30] audit: type=1400 audit(2000000091.810:66235): avc: denied { execmem } for pid=18667 comm="syz.9.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1325.274021][T18674] overlayfs: failed to resolve './file0': -2 [ 1325.368070][T18380] Bluetooth: hci0: command tx timeout [ 1325.441821][ T30] audit: type=1400 audit(2000000091.810:66236): avc: denied { bpf } for pid=18668 comm="syz.6.2966" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1325.462842][ T30] audit: type=1400 audit(2000000091.820:66237): avc: denied { perfmon } for pid=18668 comm="syz.6.2966" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1325.573576][ T30] audit: type=1400 audit(2000000091.820:66238): avc: denied { perfmon } for pid=18668 comm="syz.6.2966" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1326.181757][T18598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1326.244722][T18598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.426141][T18598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1326.453027][T18598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.448069][T18380] Bluetooth: hci0: command tx timeout [ 1327.702187][T18598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.755442][T18598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.863555][T18598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.878860][T18598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.671826][T18692] No control pipe specified [ 1328.828291][T18598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1329.102932][T18598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1329.638687][T18598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1329.948143][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 1329.948162][ T30] audit: type=1400 audit(2000000096.540:66477): avc: denied { create } for pid=18707 comm="syz.9.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1329.995844][T18598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1330.056676][ T30] audit: type=1400 audit(2000000096.540:66478): avc: denied { create } for pid=18707 comm="syz.9.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1330.086362][ T30] audit: type=1400 audit(2000000096.540:66479): avc: denied { connect } for pid=18707 comm="syz.9.2976" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1330.112673][ T30] audit: type=1400 audit(2000000096.540:66480): avc: denied { write } for pid=18707 comm="syz.9.2976" path="socket:[66616]" dev="sockfs" ino=66616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1330.142614][ T30] audit: type=1400 audit(2000000096.550:66481): avc: denied { write } for pid=18707 comm="syz.9.2976" laddr=fe80::16 lport=255 faddr=fe80::35 fport=19489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1330.249944][ T30] audit: type=1400 audit(2000000096.550:66482): avc: denied { create } for pid=18707 comm="syz.9.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1330.364849][ T30] audit: type=1400 audit(2000000096.550:66483): avc: denied { setopt } for pid=18707 comm="syz.9.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1331.197180][ T30] audit: type=1400 audit(2000000096.550:66484): avc: denied { ioctl } for pid=18707 comm="syz.9.2976" path="socket:[66618]" dev="sockfs" ino=66618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1331.371764][ T30] audit: type=1400 audit(2000000096.550:66485): avc: denied { write } for pid=18707 comm="syz.9.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1331.425997][ T30] audit: type=1400 audit(2000000096.560:66486): avc: denied { ioctl } for pid=18707 comm="syz.9.2976" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1331.694170][T18598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.844103][T18598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.943359][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.950544][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.024700][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.031812][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.367527][T18767] sock: sock_set_timeout: `syz.0.2990' (pid 18767) tries to set negative timeout [ 1334.992664][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 1334.992680][ T30] audit: type=1400 audit(2000000101.830:66742): avc: denied { module_request } for pid=18598 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1335.091510][ T30] audit: type=1400 audit(2000000101.890:66743): avc: denied { unlink } for pid=18770 comm="syz.0.2991" name="#4c" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1335.161428][ T30] audit: type=1400 audit(2000000101.900:66744): avc: denied { read write } for pid=10711 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1335.268831][ T30] audit: type=1400 audit(2000000101.900:66745): avc: denied { read write open } for pid=10711 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1335.388107][ T30] audit: type=1400 audit(2000000101.900:66746): avc: denied { ioctl } for pid=10711 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1335.477133][ T30] audit: type=1400 audit(2000000101.950:66747): avc: denied { allowed } for pid=18773 comm="syz.9.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1335.540577][ T30] audit: type=1400 audit(2000000101.950:66748): avc: denied { create } for pid=18773 comm="syz.9.2992" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1335.586230][T18598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.604915][ T30] audit: type=1400 audit(2000000101.960:66749): avc: denied { map } for pid=18773 comm="syz.9.2992" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1335.690969][ T30] audit: type=1400 audit(2000000101.960:66750): avc: denied { read write } for pid=18773 comm="syz.9.2992" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1335.758376][ T30] audit: type=1400 audit(2000000101.960:66751): avc: denied { map } for pid=18773 comm="syz.9.2992" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1335.782126][T18598] veth0_vlan: entered promiscuous mode [ 1335.846970][T18789] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.2996'. [ 1335.883147][T18598] veth1_vlan: entered promiscuous mode [ 1336.003689][T18598] veth0_macvtap: entered promiscuous mode [ 1336.057375][T18598] veth1_macvtap: entered promiscuous mode [ 1336.370672][T18598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.413056][T18598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.557670][T10092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.571962][T10092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.590284][T10092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.073653][T10092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.202625][T18763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.215457][T10095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.242612][T10095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.401873][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.438157][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.223654][T18810] FAULT_INJECTION: forcing a failure. [ 1338.223654][T18810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.236817][T18810] CPU: 0 UID: 0 PID: 18810 Comm: syz.7.3003 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1338.236833][T18810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1338.236840][T18810] Call Trace: [ 1338.236844][T18810] [ 1338.236849][T18810] dump_stack_lvl+0x16c/0x1f0 [ 1338.236871][T18810] should_fail_ex+0x512/0x640 [ 1338.236889][T18810] _copy_from_user+0x2e/0xd0 [ 1338.236910][T18810] move_addr_to_kernel+0x65/0x170 [ 1338.236926][T18810] __sys_bind+0x11b/0x260 [ 1338.236941][T18810] ? __pfx___sys_bind+0x10/0x10 [ 1338.236954][T18810] ? __fget_files+0x20e/0x3c0 [ 1338.236972][T18810] ? __pfx_ksys_write+0x10/0x10 [ 1338.236985][T18810] __x64_sys_bind+0x72/0xb0 [ 1338.236998][T18810] ? lockdep_hardirqs_on+0x7c/0x110 [ 1338.237015][T18810] do_syscall_64+0xcd/0x4c0 [ 1338.237027][T18810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.237039][T18810] RIP: 0033:0x7f8e2e98eb69 [ 1338.237048][T18810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1338.237059][T18810] RSP: 002b:00007f8e2f717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1338.237069][T18810] RAX: ffffffffffffffda RBX: 00007f8e2ebb5fa0 RCX: 00007f8e2e98eb69 [ 1338.237077][T18810] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000006 [ 1338.237083][T18810] RBP: 00007f8e2f717090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.237089][T18810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.237096][T18810] R13: 0000000000000000 R14: 00007f8e2ebb5fa0 R15: 00007ffc793e2a78 [ 1338.237110][T18810] [ 1340.255983][ T30] kauditd_printk_skb: 327 callbacks suppressed [ 1340.256017][ T30] audit: type=1400 audit(2000000106.800:67079): avc: denied { read write } for pid=18842 comm="syz.3.3011" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1340.518378][ T30] audit: type=1400 audit(2000000106.800:67080): avc: denied { read write open } for pid=18842 comm="syz.3.3011" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1340.577466][ T30] audit: type=1400 audit(2000000106.810:67081): avc: denied { mounton } for pid=18842 comm="syz.3.3011" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1340.653676][ T30] audit: type=1400 audit(2000000106.830:67082): avc: denied { mount } for pid=18842 comm="syz.3.3011" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1340.730697][ T30] audit: type=1400 audit(2000000106.860:67083): avc: denied { perfmon } for pid=18820 comm="syz.7.3006" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1340.835406][ T30] audit: type=1400 audit(2000000107.020:67084): avc: denied { prog_load } for pid=18842 comm="syz.3.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1340.914488][ T30] audit: type=1400 audit(2000000107.030:67085): avc: denied { bpf } for pid=18842 comm="syz.3.3011" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1340.965868][ T30] audit: type=1400 audit(2000000107.040:67086): avc: denied { create } for pid=18842 comm="syz.3.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1341.049178][ T30] audit: type=1400 audit(2000000107.050:67087): avc: denied { read } for pid=18842 comm="syz.3.3011" dev="nsfs" ino=4026532945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1341.102386][ T30] audit: type=1400 audit(2000000107.060:67088): avc: denied { read open } for pid=18842 comm="syz.3.3011" path="net:[4026532945]" dev="nsfs" ino=4026532945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1341.734013][ T8066] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1342.018160][ T8066] usb 7-1: Using ep0 maxpacket: 16 [ 1342.033904][ T8066] usb 7-1: config 6 has an invalid interface number: 28 but max is 3 [ 1342.042178][ T8066] usb 7-1: config 6 has an invalid interface number: 4 but max is 3 [ 1342.052931][ T8066] usb 7-1: config 6 has an invalid interface number: 86 but max is 3 [ 1342.063321][ T8066] usb 7-1: config 6 has an invalid interface number: 191 but max is 3 [ 1342.072232][ T8066] usb 7-1: config 6 has no interface number 0 [ 1342.108895][ T8066] usb 7-1: config 6 has no interface number 1 [ 1342.115104][ T8066] usb 7-1: config 6 has no interface number 2 [ 1342.126586][ T8066] usb 7-1: config 6 has no interface number 3 [ 1342.139437][ T8066] usb 7-1: config 6 interface 28 altsetting 0 endpoint 0x2 has invalid maxpacket 1576, setting to 64 [ 1342.168103][ T8066] usb 7-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1342.227530][ T8066] usb 7-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1342.372989][ T8066] usb 7-1: config 6 interface 86 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1342.386811][ T8066] usb 7-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 1342.647722][T18879] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3020'. [ 1342.657721][T18879] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3020'. [ 1342.834200][ T8066] usb 7-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 1342.845770][ T8066] usb 7-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 1342.862015][ T8066] usb 7-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1342.875935][ T8066] usb 7-1: config 6 interface 86 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1342.886990][ T8066] usb 7-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1342.903934][ T8066] usb 7-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1342.914806][ T8066] usb 7-1: config 6 interface 4 has no altsetting 0 [ 1342.921985][ T8066] usb 7-1: config 6 interface 86 has no altsetting 0 [ 1342.928893][ T8066] usb 7-1: config 6 interface 191 has no altsetting 0 [ 1342.945035][ T8066] usb 7-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 1342.954850][ T8066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.115260][ T8066] usb 7-1: Product: syz [ 1343.125774][ T8066] usb 7-1: Manufacturer: syz [ 1343.132329][ T8066] usb 7-1: SerialNumber: syz [ 1343.384429][ T8066] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1344.755207][T18902] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1344.764504][T18902] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1344.859693][ T5939] Process accounting resumed [ 1345.835498][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 1345.835531][ T30] audit: type=1400 audit(2000000112.360:67358): avc: denied { prog_load } for pid=18907 comm="syz.7.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1345.949130][ T30] audit: type=1400 audit(2000000112.360:67359): avc: denied { bpf } for pid=18907 comm="syz.7.3028" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.208042][ T30] audit: type=1400 audit(2000000112.370:67360): avc: denied { perfmon } for pid=18907 comm="syz.7.3028" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.273456][ T30] audit: type=1400 audit(2000000112.370:67361): avc: denied { perfmon } for pid=18907 comm="syz.7.3028" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.559381][ T30] audit: type=1400 audit(2000000112.380:67362): avc: denied { perfmon } for pid=18907 comm="syz.7.3028" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.580836][ T30] audit: type=1400 audit(2000000112.380:67363): avc: denied { perfmon } for pid=18907 comm="syz.7.3028" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.612791][ T30] audit: type=1400 audit(2000000112.390:67364): avc: denied { bpf } for pid=18907 comm="syz.7.3028" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1346.633795][ T30] audit: type=1400 audit(2000000112.490:67365): avc: denied { read write } for pid=18907 comm="syz.7.3028" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1346.638885][T18926] netlink: 1492 bytes leftover after parsing attributes in process `syz.6.3030'. [ 1346.678114][ T30] audit: type=1400 audit(2000000112.490:67366): avc: denied { read write open } for pid=18907 comm="syz.7.3028" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1346.908103][ T30] audit: type=1400 audit(2000000112.740:67367): avc: denied { map_create } for pid=18906 comm="syz.3.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1347.029041][T18923] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1349.458382][T18964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3040'. [ 1349.467636][T18964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3040'. [ 1349.554118][ T5959] Process accounting resumed [ 1350.433937][T18980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3045'. [ 1350.443222][T18980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3045'. [ 1350.687352][ T5959] Process accounting resumed [ 1350.824120][T18984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1350.841352][ T30] kauditd_printk_skb: 304 callbacks suppressed [ 1350.841363][ T30] audit: type=1400 audit(2000000117.680:67672): avc: denied { ioctl } for pid=18976 comm="syz.9.3046" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1350.921432][ T30] audit: type=1400 audit(2000000117.710:67673): avc: denied { ioctl } for pid=18976 comm="syz.9.3046" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1351.141949][ T30] audit: type=1400 audit(2000000117.720:67674): avc: denied { ioctl } for pid=18976 comm="syz.9.3046" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1351.882027][ T30] audit: type=1400 audit(2000000117.800:67675): avc: denied { ioctl } for pid=18976 comm="syz.9.3046" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1351.916712][ T30] audit: type=1400 audit(2000000117.810:67676): avc: denied { read write } for pid=18598 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.012701][ T30] audit: type=1400 audit(2000000117.810:67677): avc: denied { read write open } for pid=18598 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.126271][ T30] audit: type=1400 audit(2000000117.810:67678): avc: denied { ioctl } for pid=18598 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.198173][ T30] audit: type=1400 audit(2000000117.890:67679): avc: denied { read write } for pid=18216 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.222605][ T30] audit: type=1400 audit(2000000117.890:67680): avc: denied { read write open } for pid=18216 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.250242][ T30] audit: type=1400 audit(2000000117.890:67681): avc: denied { ioctl } for pid=18216 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1354.383926][T19034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3059'. [ 1354.393217][T19034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3059'. [ 1354.483737][ T5959] Process accounting resumed [ 1354.773015][T19036] ieee802154 phy1 wpan1: encryption failed: -22 [ 1354.836725][T19039] ieee802154 phy1 wpan1: encryption failed: -22 [ 1355.325321][T19043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1355.779953][T19058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19058 comm=syz.6.3064 [ 1355.858072][ T30] kauditd_printk_skb: 319 callbacks suppressed [ 1355.858086][ T30] audit: type=1400 audit(2000000122.670:68001): avc: denied { map_create } for pid=19054 comm="syz.3.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1355.888304][ T30] audit: type=1400 audit(2000000122.670:68002): avc: denied { map_read map_write } for pid=19054 comm="syz.3.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1356.107272][ T30] audit: type=1400 audit(2000000122.840:68003): avc: denied { prog_load } for pid=19054 comm="syz.3.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1356.121162][T19058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19058 comm=syz.6.3064 [ 1356.207118][ T30] audit: type=1400 audit(2000000122.840:68004): avc: denied { bpf } for pid=19054 comm="syz.3.3066" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1356.324089][ T30] audit: type=1400 audit(2000000122.850:68005): avc: denied { read } for pid=19054 comm="syz.3.3066" dev="nsfs" ino=4026532945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1356.374385][ T30] audit: type=1400 audit(2000000122.850:68006): avc: denied { read open } for pid=19054 comm="syz.3.3066" path="net:[4026532945]" dev="nsfs" ino=4026532945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1356.403557][ T30] audit: type=1400 audit(2000000122.850:68007): avc: denied { create } for pid=19054 comm="syz.3.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1356.428776][ T30] audit: type=1400 audit(2000000122.850:68008): avc: denied { write } for pid=19054 comm="syz.3.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1356.514840][T19064] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1356.603844][ T30] audit: type=1400 audit(2000000123.000:68009): avc: denied { map_create } for pid=19045 comm="syz.6.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1356.852205][ T30] audit: type=1400 audit(2000000123.080:68010): avc: denied { create } for pid=19045 comm="syz.6.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1356.875397][T19068] netlink: 4860 bytes leftover after parsing attributes in process `syz.0.3068'. [ 1357.768301][ T919] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1358.031922][T19093] sp0: Synchronizing with TNC [ 1358.127567][ T919] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1358.152279][ T919] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1358.162291][ T919] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1358.187872][ T919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.571855][T19084] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1358.587203][ T919] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1358.995582][T12241] usb 10-1: USB disconnect, device number 9 [ 1360.466918][T19082] delete_channel: no stack [ 1360.767483][T19124] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3082'. [ 1360.903759][ T30] kauditd_printk_skb: 301 callbacks suppressed [ 1360.903770][ T30] audit: type=1400 audit(2000000127.730:68312): avc: denied { allowed } for pid=19116 comm="syz.7.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1361.145983][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.346105][ T30] audit: type=1400 audit(2000000127.780:68313): avc: denied { create } for pid=19116 comm="syz.7.3082" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1361.545235][ T30] audit: type=1400 audit(2000000127.780:68314): avc: denied { read } for pid=19128 comm="syz.3.3084" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1361.568125][ T30] audit: type=1400 audit(2000000127.780:68315): avc: denied { read open } for pid=19128 comm="syz.3.3084" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1361.596214][ T30] audit: type=1400 audit(2000000127.910:68316): avc: denied { read write } for pid=19116 comm="syz.7.3082" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1361.648526][ T30] audit: type=1400 audit(2000000127.920:68317): avc: denied { read write open } for pid=19116 comm="syz.7.3082" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1361.829357][ T30] audit: type=1400 audit(2000000127.920:68318): avc: denied { ioctl } for pid=19116 comm="syz.7.3082" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1361.871122][T19138] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1361.877846][T19138] audit: audit_lost=3754 audit_rate_limit=0 audit_backlog_limit=64 [ 1361.886186][T19138] audit: backlog limit exceeded [ 1362.048066][T19079] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1362.396444][T19079] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.431482][T19079] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1362.458045][T19079] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.549960][T19079] usb 10-1: config 0 descriptor?? [ 1362.792368][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'. [ 1362.802756][T19144] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1362.810493][T19144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1363.160731][T19147] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3085'. [ 1363.811224][T19150] netlink: 364 bytes leftover after parsing attributes in process `syz.7.3090'. [ 1363.842387][T19151] FAULT_INJECTION: forcing a failure. [ 1363.842387][T19151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.858414][T19151] CPU: 1 UID: 0 PID: 19151 Comm: syz.6.3089 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1363.858439][T19151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1363.858449][T19151] Call Trace: [ 1363.858455][T19151] [ 1363.858462][T19151] dump_stack_lvl+0x16c/0x1f0 [ 1363.858495][T19151] should_fail_ex+0x512/0x640 [ 1363.858524][T19151] _copy_from_user+0x2e/0xd0 [ 1363.858553][T19151] move_addr_to_kernel+0x65/0x170 [ 1363.858575][T19151] __copy_msghdr+0x386/0x470 [ 1363.858602][T19151] copy_msghdr_from_user+0xc1/0x160 [ 1363.858629][T19151] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1363.858668][T19151] ___sys_sendmsg+0xfe/0x1d0 [ 1363.858696][T19151] ? __pfx____sys_sendmsg+0x10/0x10 [ 1363.858720][T19151] ? __lock_acquire+0x622/0x1c90 [ 1363.858770][T19151] ? __mutex_unlock_slowpath+0xa0/0x800 [ 1363.858795][T19151] __sys_sendmsg+0x16d/0x220 [ 1363.858831][T19151] ? __pfx___sys_sendmsg+0x10/0x10 [ 1363.858878][T19151] do_syscall_64+0xcd/0x4c0 [ 1363.858898][T19151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.858915][T19151] RIP: 0033:0x7fd097f8eb69 [ 1363.858930][T19151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.858946][T19151] RSP: 002b:00007fd098dbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.858964][T19151] RAX: ffffffffffffffda RBX: 00007fd0981b5fa0 RCX: 00007fd097f8eb69 [ 1363.858976][T19151] RDX: 00000000200008c0 RSI: 0000200000000140 RDI: 0000000000000004 [ 1363.858987][T19151] RBP: 00007fd098dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.858998][T19151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.859009][T19151] R13: 0000000000000000 R14: 00007fd0981b5fa0 R15: 00007fffd44eafa8 [ 1363.859034][T19151] [ 1364.201431][T19156] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3092'. [ 1364.229916][T19156] gretap0: entered promiscuous mode [ 1364.275889][T19156] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3092'. [ 1364.309493][T19156] 0ªî{X¹¦: renamed from gretap0 [ 1364.324411][T19156] 0ªî{X¹¦: left promiscuous mode [ 1364.334808][T19161] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3092'. [ 1364.337724][T19156] 0ªî{X¹¦: entered allmulticast mode [ 1364.352740][T19156] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1365.201843][ T9698] usb 10-1: USB disconnect, device number 10 [ 1365.934793][ T30] kauditd_printk_skb: 352 callbacks suppressed [ 1365.944996][ T30] audit: type=1400 audit(2000000132.770:68560): avc: denied { create } for pid=19176 comm="syz.6.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1366.040758][ T30] audit: type=1400 audit(2000000132.770:68561): avc: denied { bind } for pid=19176 comm="syz.6.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1366.118697][ T30] audit: type=1400 audit(2000000132.770:68562): avc: denied { accept } for pid=19176 comm="syz.6.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1366.403378][ T30] audit: type=1400 audit(2000000132.780:68563): avc: denied { create } for pid=19176 comm="syz.6.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1366.501955][ T30] audit: type=1400 audit(2000000132.780:68564): avc: denied { setopt } for pid=19176 comm="syz.6.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1366.673715][ T30] audit: type=1400 audit(2000000132.880:68565): avc: denied { allowed } for pid=19182 comm="syz.7.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1366.724993][ T30] audit: type=1400 audit(2000000132.930:68566): avc: denied { create } for pid=19182 comm="syz.7.3100" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1366.827017][ T30] audit: type=1400 audit(2000000132.980:68567): avc: denied { map } for pid=19182 comm="syz.7.3100" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1366.973890][ T30] audit: type=1400 audit(2000000132.990:68568): avc: denied { read write } for pid=19182 comm="syz.7.3100" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1367.050669][ T30] audit: type=1400 audit(2000000132.990:68569): avc: denied { map } for pid=19182 comm="syz.7.3100" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1368.716094][T19200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3102'. [ 1368.725378][T19200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3102'. [ 1368.810606][T12241] Process accounting resumed [ 1371.554031][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 1371.554070][ T30] audit: type=1400 audit(2000000137.430:68704): avc: denied { bpf } for pid=19197 comm="syz.0.3104" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1371.795746][T19219] mkiss: ax0: crc mode is auto. [ 1372.131329][ T30] audit: type=1400 audit(2000000137.750:68705): avc: denied { read } for pid=19209 comm="syz.6.3107" dev="nsfs" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1372.232748][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 1372.251964][T19215] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1372.274270][T19215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1372.283816][ T30] audit: type=1400 audit(2000000137.790:68706): avc: denied { read open } for pid=19209 comm="syz.6.3107" path="net:[4026533271]" dev="nsfs" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1372.358530][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3108'. [ 1372.411939][ T30] audit: type=1400 audit(2000000138.020:68707): avc: denied { create } for pid=19209 comm="syz.6.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1372.435450][T19213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.524061][ T30] audit: type=1400 audit(2000000138.840:68708): avc: denied { prog_load } for pid=19211 comm="syz.7.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1372.594234][ T30] audit: type=1400 audit(2000000138.840:68709): avc: denied { bpf } for pid=19211 comm="syz.7.3106" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1372.706122][ T30] audit: type=1400 audit(2000000138.850:68710): avc: denied { perfmon } for pid=19211 comm="syz.7.3106" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1372.842340][ T30] audit: type=1400 audit(2000000138.850:68711): avc: denied { perfmon } for pid=19211 comm="syz.7.3106" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1372.923720][T19233] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1372.967732][T10711] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1374.435141][T19231] syz.7.3109 (19231) used greatest stack depth: 20616 bytes left [ 1374.965190][T19244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3115'. [ 1374.974529][T19244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3115'. [ 1375.060412][ T5959] Process accounting resumed [ 1376.562030][ T5959] Process accounting resumed [ 1376.635951][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 1376.635982][ T30] audit: type=1400 audit(2000000143.280:68883): avc: denied { prog_load } for pid=19247 comm="syz.0.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1376.636185][ T30] audit: type=1400 audit(2000000143.290:68884): avc: denied { bpf } for pid=19247 comm="syz.0.3116" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1376.636339][ T30] audit: type=1400 audit(2000000143.290:68885): avc: denied { perfmon } for pid=19247 comm="syz.0.3116" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1376.636483][ T30] audit: type=1400 audit(2000000143.300:68886): avc: denied { perfmon } for pid=19247 comm="syz.0.3116" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1376.636624][ T30] audit: type=1400 audit(2000000143.310:68887): avc: denied { perfmon } for pid=19247 comm="syz.0.3116" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1376.636768][ T30] audit: type=1400 audit(2000000143.310:68888): avc: denied { perfmon } for pid=19247 comm="syz.0.3116" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1376.636922][ T30] audit: type=1400 audit(2000000143.320:68889): avc: denied { perfmon } for pid=19247 comm="syz.0.3116" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1376.637077][ T30] audit: type=1400 audit(2000000143.320:68890): avc: denied { bpf } for pid=19247 comm="syz.0.3116" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1376.637218][ T30] audit: type=1400 audit(2000000143.450:68891): avc: denied { create } for pid=19247 comm="syz.0.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1376.637360][ T30] audit: type=1400 audit(2000000143.460:68892): avc: denied { write } for pid=19247 comm="syz.0.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1377.128535][ T31] INFO: task syz.8.2695:17612 blocked for more than 143 seconds. [ 1377.128557][ T31] Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 [ 1377.128568][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1377.128577][ T31] task:syz.8.2695 state:D stack:26984 pid:17612 tgid:17589 ppid:15947 task_flags:0x400040 flags:0x00004004 [ 1377.128636][ T31] Call Trace: [ 1377.128643][ T31] [ 1377.128655][ T31] __schedule+0x1190/0x5df0 [ 1377.128692][ T31] ? __lock_acquire+0x622/0x1c90 [ 1377.128723][ T31] ? __pfx___schedule+0x10/0x10 [ 1377.128759][ T31] ? find_held_lock+0x2b/0x80 [ 1377.128780][ T31] ? schedule+0x2d7/0x3a0 [ 1377.128806][ T31] schedule+0xe7/0x3a0 [ 1377.128832][ T31] schedule_preempt_disabled+0x13/0x30 [ 1377.128859][ T31] __mutex_lock+0x81a/0x1070 [ 1377.128878][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1377.128908][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1377.128930][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1377.128948][ T31] ? kobject_put+0xab/0x5a0 [ 1377.128968][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 1377.128997][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1377.129035][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1377.129060][ T31] usbdev_open+0x1b6/0x8b0 [ 1377.129089][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 1377.129109][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1377.129138][ T31] ? chrdev_open+0x10b/0x6a0 [ 1377.129164][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1377.129192][ T31] chrdev_open+0x231/0x6a0 [ 1377.129212][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1377.129234][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1377.129259][ T31] do_dentry_open+0x744/0x1c10 [ 1377.129278][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1377.129304][ T31] vfs_open+0x82/0x3f0 [ 1377.129329][ T31] path_openat+0x1de4/0x2cb0 [ 1377.129356][ T31] ? __pfx_path_openat+0x10/0x10 [ 1377.129378][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1377.129408][ T31] do_filp_open+0x20b/0x470 [ 1377.129429][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1377.129469][ T31] ? alloc_fd+0x471/0x7d0 [ 1377.129496][ T31] do_sys_openat2+0x11b/0x1d0 [ 1377.129521][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1377.129556][ T31] __x64_sys_openat+0x174/0x210 [ 1377.129580][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1377.129616][ T31] do_syscall_64+0xcd/0x4c0 [ 1377.129637][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.129656][ T31] RIP: 0033:0x7f612dd8d4d0 [ 1377.129673][ T31] RSP: 002b:00007f612ec76b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1377.129692][ T31] RAX: ffffffffffffffda RBX: 0000000000001701 RCX: 00007f612dd8d4d0 [ 1377.129705][ T31] RDX: 0000000000001701 RSI: 00007f612ec76c10 RDI: 00000000ffffff9c [ 1377.129718][ T31] RBP: 00007f612ec76c10 R08: 0000000000000000 R09: 0000000000000000 [ 1377.129731][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1377.129750][ T31] R13: 0000000000000000 R14: 00007f612dfb6240 R15: 00007ffceda4e1b8 [ 1377.129775][ T31] [ 1377.129807][ T31] [ 1377.129807][ T31] Showing all locks held in the system: [ 1377.129817][ T31] 1 lock held by khungtaskd/31: [ 1377.129828][ T31] #0: ffffffff8e5c1060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1377.129882][ T31] 3 locks held by kworker/u8:2/36: [ 1377.129910][ T31] 2 locks held by kworker/u8:7/3520: [ 1377.129922][ T31] 2 locks held by getty/5588: [ 1377.129932][ T31] #0: ffff888036dee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1377.129980][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1377.130041][ T31] 6 locks held by kworker/1:3/5826: [ 1377.130052][ T31] #0: ffff888022e84548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1377.130100][ T31] #1: ffffc9000218fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1377.130147][ T31] #2: ffff8881447d6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1377.130202][ T31] #3: ffff888029252198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1377.130250][ T31] #4: ffff888053669160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1377.130298][ T31] #5: ffffffff8e475070 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250 [ 1377.130347][ T31] 2 locks held by kworker/u8:9/5982: [ 1377.130359][ T31] #0: ffff8881456dd948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1377.130404][ T31] #1: ffffc9000479fd10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1377.130449][ T31] 2 locks held by kworker/u8:13/6304: [ 1377.130461][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1377.130506][ T31] #1: ffffc9000b917d10 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1377.130552][ T31] 5 locks held by kworker/1:8/8066: [ 1377.130563][ T31] #0: ffff888022e84548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1377.130610][ T31] #1: ffffc900032c7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1377.130657][ T31] #2: ffff88802a246198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1377.130708][ T31] #3: ffff888077464198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1377.130761][ T31] #4: ffff88807a466160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1377.130813][ T31] 4 locks held by udevd/11471: [ 1377.130824][ T31] #0: ffff88802fdaad58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 1377.130878][ T31] #1: ffff8880577a9888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 1377.130938][ T31] #2: ffff88806702d0f8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 1377.130998][ T31] #3: ffff888029252198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1377.131045][ T31] 4 locks held by udevd/12254: [ 1377.131055][ T31] #0: ffff888076384540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 1377.131109][ T31] #1: ffff8880474d4088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 1377.131167][ T31] #2: ffff8880217323c8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 1377.131225][ T31] #3: ffff888044fda198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1377.131277][ T31] 1 lock held by syz.8.2695/17612: [ 1377.131288][ T31] #0: ffff8881447d6198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 1377.131343][ T31] 5 locks held by kworker/1:1/17941: [ 1377.131354][ T31] #0: ffff888022e84548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1377.131402][ T31] #1: ffffc9000f627d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1377.131450][ T31] #2: ffff8881447c6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1377.131497][ T31] #3: ffff888044fda198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1377.131545][ T31] #4: ffff88807ac91160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1377.131594][ T31] 6 locks held by syz.9.3117/19255: [ 1377.131605][ T31] 1 lock held by modprobe/19263: [ 1377.131617][ T31] 1 lock held by modprobe/19268: [ 1377.131628][ T31] [ 1377.131633][ T31] ============================================= [ 1377.131633][ T31] [ 1377.131641][ T31] NMI backtrace for cpu 1 [ 1377.131652][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1377.131673][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1377.131684][ T31] Call Trace: [ 1377.131695][ T31] [ 1377.131702][ T31] dump_stack_lvl+0x116/0x1f0 [ 1377.131730][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1377.131759][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1377.131786][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1377.131812][ T31] watchdog+0xf0e/0x1260 [ 1377.131838][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.131855][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1377.131883][ T31] ? __kthread_parkme+0x19e/0x250 [ 1377.131909][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.131928][ T31] kthread+0x3c5/0x780 [ 1377.131946][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.131965][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.131987][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.132005][ T31] ret_from_fork+0x5d4/0x6f0 [ 1377.132021][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.132038][ T31] ret_from_fork_asm+0x1a/0x30 [ 1377.132069][ T31] [ 1377.132075][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1377.132097][ C0] NMI backtrace for cpu 0 [ 1377.132107][ C0] CPU: 0 UID: 0 PID: 10767 Comm: syz-executor Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1377.132123][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1377.132130][ C0] RIP: 0010:find_held_lock+0x2b/0x80 [ 1377.132147][ C0] Code: 56 41 89 d6 41 55 49 89 cd 41 54 49 89 f4 55 8d 6a ff 48 63 c5 53 48 8d 04 80 48 8d 9c c7 f0 0a 00 00 48 89 df e8 35 3a f5 09 <85> c0 75 37 48 83 eb 28 41 83 ee 02 44 89 f5 79 1d eb 26 4c 89 e6 [ 1377.132158][ C0] RSP: 0018:ffffc900164af978 EFLAGS: 00000046 [ 1377.132169][ C0] RAX: 0000000000000001 RBX: ffff88807959d3e8 RCX: ffffc900164af9b4 [ 1377.132177][ C0] RDX: 0000000000000004 RSI: ffffffff9af67120 RDI: ffff88807959d3e8 [ 1377.132185][ C0] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 1377.132193][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff9af67120 [ 1377.132201][ C0] R13: ffffc900164af9b4 R14: 0000000000000004 R15: 0000000000000004 [ 1377.132209][ C0] FS: 000055555d368500(0000) GS:ffff888124719000(0000) knlGS:0000000000000000 [ 1377.132223][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1377.132232][ C0] CR2: 000055555d3835c8 CR3: 000000005df97000 CR4: 00000000003526f0 [ 1377.132240][ C0] Call Trace: [ 1377.132245][ C0] [ 1377.132250][ C0] ? avc_alloc_node+0x420/0x6a0 [ 1377.132267][ C0] lock_release+0xe4/0x2f0 [ 1377.132286][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 1377.132304][ C0] avc_alloc_node+0x420/0x6a0 [ 1377.132319][ C0] ? avc_alloc_node+0xe0/0x6a0 [ 1377.132334][ C0] avc_compute_av+0x100/0x7f0 [ 1377.132351][ C0] avc_perm_nonode+0xab/0x180 [ 1377.132367][ C0] ? __pfx_avc_perm_nonode+0x10/0x10 [ 1377.132384][ C0] ? find_held_lock+0x2b/0x80 [ 1377.132399][ C0] ? avc_has_perm_noaudit+0x2bd/0x3b0 [ 1377.132417][ C0] avc_has_perm_noaudit+0x2de/0x3b0 [ 1377.132434][ C0] avc_has_perm+0xbe/0x1f0 [ 1377.132450][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 1377.132469][ C0] may_link+0x39c/0x520 [ 1377.132482][ C0] ? __pfx_may_link+0x10/0x10 [ 1377.132501][ C0] ? down_write+0x14d/0x200 [ 1377.132514][ C0] ? __pfx_down_write+0x10/0x10 [ 1377.132527][ C0] ? may_delete+0x56b/0x820 [ 1377.132545][ C0] security_inode_unlink+0xfd/0x290 [ 1377.132559][ C0] vfs_unlink+0x18f/0x9b0 [ 1377.132577][ C0] do_unlinkat+0x4c5/0x6a0 [ 1377.132591][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 1377.132608][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 1377.132625][ C0] __x64_sys_unlink+0xc5/0x110 [ 1377.132639][ C0] do_syscall_64+0xcd/0x4c0 [ 1377.132652][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.132664][ C0] RIP: 0033:0x7f8e2e98e117 [ 1377.132675][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.132687][ C0] RSP: 002b:00007ffc793e1d08 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1377.132699][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e2e98e117 [ 1377.132707][ C0] RDX: 00007ffc793e1d30 RSI: 00007ffc793e1dc0 RDI: 00007ffc793e1dc0 [ 1377.132716][ C0] RBP: 00007ffc793e1dc0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.132724][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc793e2e50 [ 1377.132733][ C0] R13: 00007f8e2ea11bdd R14: 0000000000150310 R15: 00007ffc793e2e90 [ 1377.132746][ C0] [ 1377.133095][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1377.133106][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 1377.133127][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1377.133137][ T31] Call Trace: [ 1377.133143][ T31] [ 1377.133150][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1377.133176][ T31] vpanic+0x6a3/0x780 [ 1377.133203][ T31] ? __pfx_vpanic+0x10/0x10 [ 1377.133229][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1377.133259][ T31] panic+0xca/0xd0 [ 1377.133283][ T31] ? __pfx_panic+0x10/0x10 [ 1377.133306][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1377.133341][ T31] ? irq_work_queue+0xce/0x100 [ 1377.133361][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1377.133388][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1377.133408][ T31] ? watchdog+0xd78/0x1260 [ 1377.133427][ T31] ? watchdog+0xd6b/0x1260 [ 1377.133448][ T31] watchdog+0xd89/0x1260 [ 1377.133473][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.133490][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1377.133518][ T31] ? __kthread_parkme+0x19e/0x250 [ 1377.133544][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.133564][ T31] kthread+0x3c5/0x780 [ 1377.133582][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.133601][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.133622][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.133641][ T31] ret_from_fork+0x5d4/0x6f0 [ 1377.133657][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.133675][ T31] ret_from_fork_asm+0x1a/0x30 [ 1377.133708][ T31] [ 1377.133920][ T31] Kernel Offset: disabled