last executing test programs: 48m45.448107836s ago: executing program 32 (id=181): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8050) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x54, 0x8001, 0x8000, 0x9, 0x200000000, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="11032bbddf250000000014000200776732000000f2bdbc4fe195ffa3a913c700000000e3ba1ccbf78400"/51], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r0) 48m39.250515715s ago: executing program 33 (id=182): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@access_uid}]}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000019080), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r7, 0x406855c9, &(0x7f0000019140)={0x8, 0xc5, {0x55, 0x7, 0xb1, {0x2, 0x7}, {0xa8a, 0x8}, @ramp={0x4, 0x1, {0x5, 0x4, 0x7f, 0xffff}}}, {0x51, 0x81, 0x8, {0x9, 0x2000}, {0x13, 0xc}, @period={0x5a, 0x3b2, 0x9, 0x200, 0x101, {0x6, 0x4, 0x81, 0xb}, 0x4, &(0x7f0000019100)=[0xfffa, 0x8, 0x997, 0x9]}}}) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 48m25.434857881s ago: executing program 34 (id=190): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xa0c0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @empty}}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28) sendto$inet6(r2, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x4008840) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) 46m44.569668401s ago: executing program 35 (id=261): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x41) mmap(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x3000003, 0x8010, r0, 0xb04bd000) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xc31fa41e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xd00, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x20800) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x29a}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 45m53.406632771s ago: executing program 36 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000080), 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 45m23.864913919s ago: executing program 5 (id=315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0x4, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, 0x0, 0x0) r3 = epoll_create(0x2) setfsgid(0xee00) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x3000200a}) sendto$inet6(r1, &(0x7f00000004c0)="4747135f6fc2e0d41231cb53d9200128da8c2299af14b35b05219d463b6bc7b36d9626a6ff517591f014fb5fee2cd82055aa05a8cf03ef2635ba467a92ac0cbf3dafaffff6008ae6dd78da314d7ec7c3f89a91afc0dd4abfeb5270f4198e5d310ccdae130cccd7314b0065121c375d81ccc78032a86ff9514531e98fbe151254d48a85e2fc5703d1a3bd7328d1bb4a17ef1177a31518c1229a1077cb96f3df95e27f5fc4882b5fb39ad7b9c1201b08513d02dede7eed54511ed663faba48a329490854d2a4ec9db6b96c4e5c7afb9d8236b4a7eb91d3f28b6cdf348c5e344b2076bedc8f3685ede7e260d96fb46bd0f3fc604fdb", 0xf4, 0x408a1, 0x0, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280)) socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 45m18.342647891s ago: executing program 5 (id=316): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 45m18.068912696s ago: executing program 5 (id=317): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000280), 0x8) getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, &(0x7f00000005c0)) r4 = dup(r2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r5, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 45m16.438748782s ago: executing program 5 (id=318): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$P9_RAUTH(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r2, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "b17c8c7e702ee4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "c351d28f96101cc039f19623f4547d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x12, 0x4, "cbe8f06e3c60cb66cfdfada47fd1"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b6e947dcc2"}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x5, 0x2, 0x4, 0x40, 0x6, {}, {0x4, 0xa, 0x3, 0x80, 0x2, 0xef, "a1ba6e84"}, 0x557, 0x4, {&(0x7f0000000040)=[{0x6, 0x3, {r0}, 0x8}, {0x8, 0x2, {r0}}]}, 0x8}) 45m16.113367088s ago: executing program 5 (id=319): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "0cef36a06df4793b", "1f452497aacd01578c82bf5307ae458096a2755cfd793f957122698f46ed6707", "579c75a7", "410c2324d8c8810c"}, 0x38) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_dev$media(&(0x7f00000000c0), 0x4, 0x8002) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 45m2.455693632s ago: executing program 5 (id=320): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xa0c0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @empty}}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x4008840) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) 44m49.849993463s ago: executing program 8 (id=272): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @private}}}}) write$FUSE_DIRENT(r0, &(0x7f0000002100)={0x10, 0x0, r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket$phonet(0x23, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x9, 0x61, 0x100, &(0x7f00000000c0)="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"}) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14) 44m47.075542813s ago: executing program 37 (id=320): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xa0c0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @empty}}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x4008840) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) 44m46.235730065s ago: executing program 7 (id=196): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8050) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x54, 0x8001, 0x8000, 0x9, 0x200000000, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="11032bbddf250000000014000200776732000000f2bdbc4fe195ffa3a913c700000000e3ba1ccbf78400"/51], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r0) 44m40.474457592s ago: executing program 7 (id=322): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = add_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0x5411, 0x7ffffffffffffffe) 44m25.961124233s ago: executing program 38 (id=272): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @private}}}}) write$FUSE_DIRENT(r0, &(0x7f0000002100)={0x10, 0x0, r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket$phonet(0x23, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x9, 0x61, 0x100, &(0x7f00000000c0)="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"}) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14) 44m25.292231129s ago: executing program 39 (id=322): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = add_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0x5411, 0x7ffffffffffffffe) 18m16.151851855s ago: executing program 1 (id=4631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x8000000, 0x0, 0x7, 0x400}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x3d3}) r3 = io_uring_setup(0x4dc2, &(0x7f0000000640)={0x0, 0x0, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) getpid() socket$netlink(0x10, 0x3, 0x15) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200"], 0x2a4}}, 0x4048010) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000003c0)=[r2], 0x1) r6 = socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') close_range(r6, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000006c0)={0x1, 0x0, @ioapic={0x2, 0x3, 0xfffffffa, 0x0, 0x0, [{0x8, 0xd, 0x4, '\x00', 0xaf}, {0x3, 0x1, 0x10, '\x00', 0x9}, {0x10, 0x8, 0xa, '\x00', 0x5}, {0x2, 0x9, 0x2, '\x00', 0x9b}, {0x5, 0x2, 0x5}, {0x3, 0x8, 0x9, '\x00', 0xa}, {0x3, 0x4, 0xe7, '\x00', 0x2}, {0x1, 0x4, 0x99}, {0x2, 0x1, 0x20}, {0x7b, 0x2, 0x8, '\x00', 0x8}, {0x8, 0xfa, 0xf4}, {0x7, 0xe, 0x3, '\x00', 0x9}, {0x3, 0x0, 0x9, '\x00', 0x1}, {0x7, 0xf9, 0x7}, {0x7e, 0xdd, 0x4, '\x00', 0x2}, {0x4, 0x7, 0xb, '\x00', 0x80}, {0x1, 0xc4, 0x4, '\x00', 0x1}, {0x9, 0x4, 0x5, '\x00', 0x6}, {0x9, 0x5, 0x5, '\x00', 0xe}, {0x8, 0x2, 0x6e, '\x00', 0x1}, {0xc, 0x7, 0x4}, {0x8, 0x8, 0x4, '\x00', 0x1}, {0x8, 0x6, 0x10, '\x00', 0xe}, {0x40, 0xff, 0x4, '\x00', 0x5e}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 18m14.160962613s ago: executing program 1 (id=4637): request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:D%', 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1, 0x0, 0x9) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x8c, 0xff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r5 = fsopen(&(0x7f00000005c0)='sockfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'team_slave_0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, 0xfffffffffffffffe) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) (async) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r9, &(0x7f00000000c0)={0x14}, 0x14) (async) r10 = socket$netlink(0x10, 0x3, 0x2) (async) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x2240) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r11, 0xc01064c1, &(0x7f0000000140)={r12}) (async) sendmsg$netlink(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000000e00010000000000000080000008004900510c00"/36], 0x24}], 0x1}, 0x0) 18m13.746026783s ago: executing program 1 (id=4640): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000140)='0', 0x1) syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = fanotify_init(0x8, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80800, 0x0) fanotify_mark(r6, 0x80, 0x40100000, 0xffffffffffffffff, 0x0) r7 = dup(0xffffffffffffffff) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000f2f0ffffffffffffff00000000950007dc70c4e1cd"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r9]) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x784ce000) r11 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x6, 0x125001) r13 = openat$cgroup_subtree(r12, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) 18m13.360780727s ago: executing program 1 (id=4642): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000002c0)=[0x0, 0x7]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f00000001c0)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) chroot(&(0x7f0000000d00)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 18m10.469233031s ago: executing program 1 (id=4654): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (fail_nth: 5) 18m9.590969074s ago: executing program 1 (id=4657): mknod$loop(&(0x7f0000000080)='./cgroup/file0\x00', 0x100000000000600d, 0x1) 18m8.8530347s ago: executing program 40 (id=4657): mknod$loop(&(0x7f0000000080)='./cgroup/file0\x00', 0x100000000000600d, 0x1) 11m26.980182813s ago: executing program 3 (id=5943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x800000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4e}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x3c}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r2, &(0x7f0000003480)=[{{&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)="47d0ed54e7bb6f5f1a439a92806383b56b8ffc7acbf79d5d40977f4ac8d3d55df98553beb334a3893aae663ff3e558577698ce6949b024f70a3fbc1b4a37797b3e28ddda571eec9006cd38565fb1b04a6eb69462cdcf293a9a008509658ffb1c0375878412bda4f212bc5efa03ad69b1a9ffef6ffd5ac15549f9441f98ab86e84564c21e1845eafddb757f9f8fa013aa6bf2a41f2484", 0x96}, {&(0x7f0000000680)="280e5fd3571b1724ae6183dc99013192d11f2d0a83470b542f21a7a323786a472cde1eff23765de834a0c6a9c9b9cdcf10c5a389fc8addec028fdcea25810b30cf5c2373c95c9ff71a5ab658f860ba68b6cea9e0248a0d6d36bd3f5921d01ce1e489d5b29f26757bcb9e777917f42863fa480bb56d3c760734206b03f804dbc14e7af7b6fa9b3c9953768f62b60c815e16155f4244119f", 0x97}], 0x2, &(0x7f0000000740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="2800000000000000000000000700000094040000019404010001820bf4509eebf347cd18d7000000140000000000000000000000010000000300000000000000ac00000000000000000000000700000044240f21e000000200000007ac1414bb00000005ac1e010100000002ac14143e1c000000098633000000000108d9c3c1aab031070e9c992c8209e4b3c34ace3d0f050d932f930488dd36bade0cc9020adacd730fd746bfa40101441492000000000600000003000000070000003a890fe0000000000a010102ac1e0101071f4ce000000264010102ffffffff640101020000000000000000e00000020000000000"], 0xf0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a40)="e0fce96b5020e83c3778acd6fa93e3935c401f3ab79daa624c6af44fb5f73038257ac0d5c495e44ace27eb2eac2b13d547046ac7caa9475766384c8a82253e17a6939ccde2f440dbe89a60ffa4d7ffe5b3798abfa5033e2eb2502032a5d29865cc0247dcdcb728a3a823d8d1bae6ffffff0f50d9511ab9128cf93f5336eed1f3481bb71fec6374757970e1f96f7f4b6bb0c8dfa2e07276b452e8adba6c64164f536c3d8e561f37d3556c55a7d347ee4d77a09cf399a870925f8b0d6546834f95053b11ddd8207bda", 0xc8}, {&(0x7f0000000b40)="3e747e55010f313da2187319f92a9c5a5c85d43930e8f51c87c69c03c9802fbf6953a5a3b3d9e83efeefbeb877cd93232c226a64feada6f1d1badd8c66a8591c758287374567d304c57da579765451027714af329c23", 0x56}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="c0129c94af69b9fefcc9f271522fd954a311beeccbade9ed3c5a7bb43073fe03dc4ffbfcfc890c5fc3d5d5a66c8948eea8d2ed60493a90b4fa2b1b473258e1eeff87d73d704bdf32ff6cf72d5c5d9425ff2d208751bf42cf28758be13fd5f868c9a4b7903012de870313d7cc56fac6269435b6afabd3bc27a87c763c0e584b79277c30bc904ec9b96aa13a271cc35965ffc58b28bf16baab0e58", 0x9a}], 0x4, &(0x7f0000001d80)}}, {{&(0x7f0000001dc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003140)=[{&(0x7f0000002e00)="53e4eeb3326b22b87efc1ebbd8b6c58a5f4150212ec508f9878f366fbd5e1921951446f7bf09c6f40e6832f1f9c2374a6e9ec36cb9c7131d8d9e58538d9819a53c760e8e5217dc9ccdfce1354473e14aa3bf177def0ae0289f3ecd5ed569ad65eced985fa44fe9e522f5ad0bc6d3", 0x6e}, {&(0x7f0000002e80)="1218045b50efc10800f0ed4e98e85ad7e98f1183ff534ec9a5db4ddbe4106424473eb5be3b61be8c34d7c3976f0be858a025b7bcb26c666972321ce6e0e9b78f7a67f02d2eb6e8b2fed6baac48dc39993e2e26235632cb7ef3749d5f295f70a428490d50e8d6581dfaf37adeea8c69394261", 0x72}, {&(0x7f0000002f00)="f4a9056fc4bde05db5c7477c6a8ae5a34f0de077459c5c667d9c9c0a5b5b1869d5c0c796d908572c3d3a6e729a21cc1dc50799b3b1515b0721ed6d484ab9cb4705b2c726ddd6d03983ebb5cd8838a109c393a6618f1bffb1535b04f5ace85616c9602021ba25967d2dc3af684fabd0b68a7e8ba9cc1d0147ed2021e2225fddf4beba7bf20b63ff0c0313c56977d4b760916127bda06d12789ed08db6efd009edcbdba171aa39fe72b72e63ad43b4b77aa666549059", 0xb5}, {&(0x7f0000002fc0)="6b06645d75", 0x5}, {&(0x7f0000003100)}], 0x5}}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000010032bbd7001"], 0x20}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r5 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x4b42, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0), &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11m26.069492361s ago: executing program 3 (id=5945): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = semget(0x1, 0x5, 0x6b4) semtimedop(r1, 0x0, 0x0, 0x0) semop(r1, &(0x7f0000003480)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getpid() r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000005c0)=0x10, 0x80000) getsockname(r5, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000680)=0x80) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000000506010400000000000000000100000705000100070000000900020073797a310000000021e5ddda73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xc8, 0x4, 0x1000, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x7800, 0xa9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, r9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 11m22.042983186s ago: executing program 3 (id=5950): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0x2000000, 0x1, 0x401, 0x3}) 11m21.958157187s ago: executing program 3 (id=5951): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x2040) r1 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='afs_make_fs_calli\x00', 0xffffffffffffffff, 0x0, 0x8e9}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x1010, 0x10d, 0x5, "ece538e8b62831eafcd9056be7c8a4f36891e0bd363476ba635f8d61e20221d10831df051097c214cf0e5f4345fa2c1eff6b0f8eedd3687f41fdd27b53aabf690ef80b8953b86b7943136212b1ec5c95809bc5d24c84f1ea4c6a1ff8b0dfc20e9b15115ddad4e233132bb07ee1577ae158a9ec4de6171ac0a7542ea221a3d97d80e7bed34fde3c64661a751d33a6d102ec5e611cee97f445ff21d4d3b360a17a83b7594ad811751ceb59ea8b5cde9525ac5679cf2e35907c0abbb85a25c776a98af56eff37c6627d00c51fd572f6113013d16a54d005b0f833f3c9cde6b897312b7ddc1b063781f822e06890c08ad3025e80b4a550a680e58053a8c33d2e1858f971a40788f6b287baa082a334140c0091f5f2d232ecbc86218a477e468e5be1b48d7787071b5c891cc3efde21a3b0337adeaa6a41ce8fd6edf1b0a47ca0cd6d785cc2c1c3803dde4d9749a10e21d489531efca60760b4ff2061dd7800c4f23c3d1e2bcd694fcc87261a2fdfee6baaa701c7083e9675a75b8d530f09f72d8d3fed4ed848ba18d11635893b52c84a6f0fdc9711b63cba52c9e33ac701261d5459b6ff53be036549b6d0e617d125a6a758370d0671f5f956918db7c4d0afb4f7369bad2a1cf0b7bcf130464bb031b092392a72e8234c1cc1d41190dad660bd1d9283d7d4c7f7410c83f6cfbd25b438097f3e5fd4a23e56c1995179797f03c6dfc5e8be4515d9c72ef9ecbb7cd80d4e71d2ac2f31396081eb9fee4b5d633aee32775a004f7aee9f33d81f9e469a1bef0a995ca8d50c2d853bfb1ebaf301d0c649b74827ae650b6a3bec85e2e9fd45e33bdd8c29cb0692d78a73700daf8eaff8efc06f8c07b3ce384ab1d925cdc440a4b85ace1edb6202df092fe6b37c11e10f3cb3d9e0cc19d55989766aec965403244c8dabfcdcc51c2297131307048ffc88b47d07e821656fa73395dd464d79ee82b3d4f47bd29f42f44f9521efdec7b0e8b5436d496ae046d72d69bc3d35a62829954fdf87fa10330a7864465ee86c540b2e1320e8453701898027ef86ad0d7c31c009f0e5f4c35eeb870ba4caa3708656b38c3797aaadb4b372acf23c05d55d98eb8c1c628e744a6a4439b5a515a2a083f8fbc71a2e6800c3ffec640d21d05a4b1f4548c5541f809e9766cce96b2c53b220361638c4dc43af7d5edb874bb48ca3c8a837fdccff0c8b50bc402da6262c5e3b344f313153fd455e4414f2b0e4a2bcf881b5615e399f8bbe6c3c20a314539b856de845a6e37e5f6925f3d5929eb59243b792834b0de7643077681b9113f5d192c4e96ebea0465901e5aa5da812b0d112089c048e29c523a753f7babe4e3de0bff0f220493bef0e7b76b051cecc325a8fb60a76880155ed33bbbccb472dd3b568829eb7cfb4280521adee82b1b1b7c31b0baa329f81f254526461b787d32bd18a760944a3f728a8a257f2bb9bc9172daeeb9a3d099fa60a440063b70cb48a54cf8739467f7e2b075b74800056475332bd226daf3e7a85c198107c3fe4818e78dda31d1d8c4c618c218e368a0e20655c325f95ebdb03320448cfd754064e7a6b69b1677d12a5c63b853d77bd06b4759e30e764806b91d5e9e54c907255ead2d433538105dc4dd9d364de0a82bbbe035d34e215be51d468b95a87e0e6d76264ff4a8bde40e956782351b5595118d6f630ae1eeeb5755177d0cd71f259eb580ba0918194a3b75d6110d58079c57ffef2f53a8d0fcd824c1bf83e612a2c63b0dc6f0e6997d7905d5adf649da853204a522043147f7b7debd7c01835b4f311ad3a6c4122f4cc970e2926ea30aaaf307555dea57ef2dbe3e5ec783dc447d1834cb1cc711c34051d5077d373013e995d34dd20a4ae0f3356b388a46ca2d3686daa528246dd0ab3e7400406e88797294d61b24e81ce8812e0eb38e898c658dafa957618e969f73f988fb6a5b13b0bdd2a63e666f88513f5f15d0f0a743be28c5fa6386d9af70292e96b54d4d5495ab142b036f11a7c18d6245ceb713a30c875af0e7124934b1bda9a9484e617360e2b9b63052da78188ab3ff5e2c8df92e3ff7845343165fd501f097296d614e163a33d8e15032147e2f3dd57e8207c11a11cd9d39a786223d2b6b000ab841e3237bcca18431f26a0ece2e478c28b56ccb93966151be4e52d823d1bc345d9a5c2925d06c27e4c74dd2783f55d32d07ae2eb68fe6d5614cf979e3c16d3f467efee15169eb5a641837b93bc06733eab8e30cd85c731ea46a24266dfe87fb8a9515b25841a246e6d8df10faa34da94576a4a3e1ffc78323cc58b122c0a0993da408b82f4a311c2250483a701df3e99fba515f31791b5b8b6ee31cb92731d656b7ff43b38d3b2d9f59008a7400d6f2dece551883f32d0281395379aa42285e90dff71bad695156ba4842936f6ddcd99cdb5ef8a147a15cf6ede0eff9b5106306806574fe9b3ede36418c97ebbb1de5b7b23a453b98e10634956a34cbf40b62b4cff86935ddbdd31cf5b78e1248b19ba060cff190f1f2f178dab05e0d6395d9b1440b01ed10f5c46c903d3e2f78e9393124a981c7db5126210ce0981dfe0566d0751f3a76b66f06390a1df65218832cb33c91a1a78c67b24b4aa1a52231a6152a2483684eecf19522d5a22bde3cac03fd1de054e36325490af9081bda7b85e007e8714fa6f945257d8bbb766f612f682d19f885d054055de33423889c45157120dfde3ae504c6fd55c65fd652245fbc1d20e535da9e326341fd39bbb8f81117516747c7bd6a0e41faae21d4a7b905a6e82d4584bb56c0c2e540e7c69ce8594724b08c1ccb578617cc7f4f203f1f96011a5a3e9e4ae90ec5b7d5c1b5c682706b331c57e56966ac4017dc56e7a701c2c27657dc7fc436c4c02c51a76537bb90fffd13c1a2bb473245cbf0f34b020cc1b267ba624b09616448eabc753f3eb69256aa7f4ae3c590cca158457b1fd5e37c977ea19f30f813e0169c6b37496162134b6ea6501d6e5910a9b4b5597fd379bdceda96f016fea03ebfe375bdd60d9a61099e593706255f8b1a1048db705b304eb2f7b61737df8ddea67277059f37dc9065e71bfb49efbbbe79661afd5f58f388f02a03dcb69758237b6789fcbdc4ea2fea4132d33d777cd5193c210e345f06a1568e061b39b774ed321e435f44a54842435af0d574ceec62e3132d8b57d490d1e8f1860fbd95e6a30176af9c085760e5ecc9199df22b76069e1ec85035c69d754f399824ebd886693d897b55f139cf6053a27d6389e9158d7f187ee506c304953dcb5c0c72fa5c942933bcd0ed00127fc842cd2f50d6483faa9a775450ea4cac5a18d4c4868ca696f136c28a4703d1562167671ad50ea5e70d0c43f95992130db3ac2e97e10f614a8974650366d369437f12e598dd37f474ab5010b3dd4ef6c3a23e37db0ee18675bc16f0e0e96e50a72f3816e08dee4e9407b0906d57a7caf9539288bda2d6577e09c417c01f910f18a324bd7c1b9388fd464109a5cafa70ee2cf83197c6a0acc5e012343ce8afe4e6a94f0f55b2230c9a6acdc9b9cea5c4a06f6d4376a5d8c43a562736b617acfa01f2b8dfc0f4c25cd3f8d7c675ee2cb72d030dbe4f78805dd9589b4874093dd7b4c6b6715fd245e6d853dbbb4ffdaa4f665870f7f22ed0a9d862cff03581ff2c4bc9ee5768c7ca806460a882dd0ffc96238a22715b6a49d50df7705c2d1ad35ab7df6660ba3ded28f6bedd9dba2158c6a3cc7943d6df0bc376135ea3b9211523130ad77dd1532841a7067a77b01573952bab397520a23eac4d5f67c54ff293e14d7e21792b909fae37de019200b6dcdaf815d0c747d891de553072f7d9dec9cb0657f9f2962c0be6f122bf1d8793995ecde34a14d46acbd238d0cc0edfa3556b7a7c763f37bd162bb6d638eda49818fe97ee6f5637254ff1b31cd1c358f19b362a978b689d5661873da06124960f1b25fa2c069586584ce5c83b72c4844ad85c917e35e0fbc6f565771579997cd31fdf3e42dcc1ab17573328e6a73affe545fc82c149566cb11b439cfb804b581a12c1054d4fee14feae7d91db10348b3470e282fc93c07376e050731cbfc091e3b858a9e1679b4c92b44656802a239ef3f0b91a5649eccdbff499328e9243ba7c25aa50de56d3e0dbafcc6aeab35b64b027e36d6e7868d5f6ea7e46d7d6bc263a3f304b5642e60fa847369f6ea08bd9049822fc6f7cebac468e88db61846c417be1c78ea28691e3a58d46607597c2746b0cdcdde0c8d2f21c6f407d88f17fec2eaa290db8b4513e29439be7ddd719d712e8b01dcff54fe42563e40973ad4f1b00bc9489cd10390b63adef8101b82144370e23d92ee972b129e14a3c1945288f7ebbb67999afcda79c63bb458949b6821cb7f6888d422283de23f19de6b06109a5b9e66be004c00c45854599c4323662f51424c3ce2d10d2d75b827669a18622b7ebadf590aae33903d4c9a90e5533d9dfcb7d1f6052c77d92799caa323b7a21493357119b5e3c0b9e69ccfbf28ec7d5b99871644f35bfabbb5c143d136d906b51564b7d8fefd3d31fdbe875c733f3d70994f70fb1c70d23ecc14de56d0c5abd21cb4bff75a353baa80a04ac3a153d8d569ef4c2562067e50be7345ceafd57d7e80028880755e97520b8bcafd55e3162701fe7972f31dfe1ddc77b79e97fd7c0a3fde0c5ee973d2885f3c9148c6b872de4dbb2fc83cfb665074aaf02401f4fc4dd95dc071333bded7cfc1a1af81824dbe4da2622ffc8e78acdc82a917e76fe4e9b0b5fe4e7d38947d3dfe70e7faa1952a4ebd47de74892167dccc2f60ae8d8457e2b1e50ca63b3692fcd13cdf92e25d0fb048d1c2b7196aa2e694bef12a7d206e9aef9bfec220deec4c59283516d3b6f6735c6186af1baed16d1f6c88c4de6e1e87aadceb42d4abe5a28edff4d57f8c4dc43d9481140635ab3604f052597d5e79f524ed8774d039fd83317ce1f909b4eadeae59239526113bf414c933e7dcfa9b2f0ffd3293a013394d8522f00465207ffcb7d96f0702bd06faf0f947691747ba1a05b4dea153178390466ea1a7548ec58d6ea4042da3373b70edf2a98e8bcf30fac5a657315a36be25dbb24aa0283bac1aa63bccff625da4ccd79a30c77f443761de7eed7410700de59a00878984e11374b291fda37c7aebbb7d95aabcec51a0f3975a19e2053f5c45d5dc4be3c2d0f5391f43d3a3d14dd5a69f93d0311bd948cb18e16bbf929331de9bed528c929fecee03777021eb5ec02c6637933b266d1195da1b62d2b0df0726c7bbafab2a0ec060d3e7bebc5002209dcaf4790d38aa0a07a3979e2f489672f8d095d6a6971a5a30c61af3b3eba960974ed4a0989b1e48204fc80e0756e0f7d8c3d4f120643794234653f08d8d5bc8fa905759ca0a1b36e4b490d86d4434bbc4814d6c86a787e0098b00d04e7391e3976f9c3f665227aa7a4d66fe3a694eb8dbbab093fc6760392047eb085db0abf5326aa9611f1da7bcaea327b12b97b5683096d5f014dea74536db50710b722d4d859c399784058f20f181117a707504da274cc55b632eca9f5c225f96144856b30736f9dd40df0faa53fa90760f81a91c96484f15527fda27eb2e47defa383e70b388b3d4c2707b4fa1ec51f5a8b5689bbe9c4d3234d050bbcfddb88fecf317bcd35627693c3082f07146df8df9f3e3fef2d9a9875b6a485a53d9664fb899eb7d07b6c2bf53c605b54acbc5dd1492d8f6babf83eb734f9292a482d6772ab6274d17444b99d08e83bf3e003196c43972fe57"}, {0xfe8, 0x107, 0x6, "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"}], 0x1ff8}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r10}, 0x18) ptrace$poke(0x1, r9, &(0x7f0000000280), 0x2b6) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f00000023c0)={'#! ', './file0/file0'}, 0x11) 11m21.817727069s ago: executing program 3 (id=5952): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRES8=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000558b68aac2ad00b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x288, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000008c0)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x8000, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x2e, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x4, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) 11m21.361598827s ago: executing program 3 (id=5955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff90b, 0x7, 0x2, 0x0, 0xfffffff7, 0x1, 0x8, 0x1, 0x80000000}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x28, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf}, {0x2, 0x3}, {0x3, 0x3}]}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x2e, 0x2e, 0x30, 0x61]}}, &(0x7f0000000540)=""/153, 0x63, 0x99, 0x1, 0x7fff, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000050005"], 0x24}}, 0x84) 11m20.844365988s ago: executing program 41 (id=5955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff90b, 0x7, 0x2, 0x0, 0xfffffff7, 0x1, 0x8, 0x1, 0x80000000}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x28, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf}, {0x2, 0x3}, {0x3, 0x3}]}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x2e, 0x2e, 0x30, 0x61]}}, &(0x7f0000000540)=""/153, 0x63, 0x99, 0x1, 0x7fff, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000050005"], 0x24}}, 0x84) 44.819889336s ago: executing program 9 (id=7602): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xaad, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xa77, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0x10, 0x4, 0x8, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x11, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b"}, {0x1f}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703aa9"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0xfc, "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"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x5, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) chmod(&(0x7f0000000200)='./cgroup\x00', 0x10) 42.434009475s ago: executing program 9 (id=7609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000004300000000000013e807188bd44670caefea0483379361460f912966f78a0bcbeb8fa96dae878f9c4272318906ed7e89c701b2e3399a5b20ff2f8625ba1cb883efe04120e1ae58c2c24d5be745910f75dc4b6eca3eeb6aab11eb9a0e9eaccb950e1a7865"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x90, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x7a, 0x3ffe, 0x0, 0x0, @str='\x00\x00\n\xb9\xe4\a2/;\xf9JF \xaf\xe7\x1f\x98pkW\x8b\xc2\x92#\x02\xe6\xc7K;\xde0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304"], 0x68}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, r6, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20009081}, 0x40000a5) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000001340)={0x0, 0x23, 0x8, {0x8, 0xd, "39819942302d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 39.414987441s ago: executing program 9 (id=7618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000340) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 38.310791075s ago: executing program 0 (id=7622): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001180)={{r0}, "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"}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r9, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r10, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) 38.226770521s ago: executing program 9 (id=7623): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='environ\x00') (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x2001010, &(0x7f00000000c0)=ANY=[]) (async) syz_io_uring_setup(0x1349, &(0x7f00000001c0)={0x0, 0xc0bf, 0x4, 0x5}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x4, {0x4, 0x35, "00f4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x4f) (async) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) (async) socket$l2tp(0x2, 0x2, 0x73) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x12, r3, 0x3000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x150, &(0x7f00000000c0)=0x6, 0x0, 0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000002c0)={0x3, @vbi={0xba3, 0x7, 0x9, 0x30385056, [0xfc2], [0x6, 0x9b0], 0x1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) (async) socket(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1, 0x0, 0x1}) (async) setsockopt(r0, 0x5, 0x87, &(0x7f0000000440)="47bf550ecbef354036c272dd6ae397da84fd46eeaae25daabeedb3d25c8fb954c3ba98811e47ef2893db20fe095ae4a728824fc64a027e582a26392f399ca7d13cdaed499798d997c4a6fb3381251b82c34b2e5161b7b79eeddc09375d4abb2c4d12f783f57b53d19a8c82ca24e709103d0d134306497c286219e2ad7bee233c21634872deae4e6735fb851dde471dad06520e069c53fe11ac626179178ca008d23289f297feff8ca041c033123d48dc9658a852125a16a08beb90d11ee485b1340a3eed94fec92a91dabe1a", 0xcc) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x21) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x20) (async) read$watch_queue(r7, &(0x7f00000000c0)=""/11, 0xb) (async) keyctl$revoke(0x3, r6) (async) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x1}) (async) io_uring_enter(r9, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 37.503516485s ago: executing program 0 (id=7624): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x26, 0x2, 0x2000000) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff3}, {0x2, 0x2}, {0x6, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x1040) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x4a3d, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x20000180) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) 36.450289122s ago: executing program 0 (id=7628): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 34.917149574s ago: executing program 0 (id=7631): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 34.785883841s ago: executing program 9 (id=7632): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000000)={0x24, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) 32.928593841s ago: executing program 0 (id=7634): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 29.480452944s ago: executing program 0 (id=7636): syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x100, 0x0, 0x20c}, &(0x7f0000000000), &(0x7f0000000500)) socket$inet6(0xa, 0x3, 0xff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0xb, 0x8b}, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)) r2 = getpgrp(0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7f) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000400)={0xf78, 0x8, 0x8, 0x8000a, 0x11, "d58f8700"}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) 29.421030141s ago: executing program 9 (id=7638): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x7ffffffc, 0x4) io_setup(0x8, &(0x7f0000004200)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010062, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x6, 0x0, r1, 0x0, 0x0, 0x8, 0x0, 0x0, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f0000000200)="884f2e1a33be0e77293f31fff0d75bcf049f8404c10264d3a0eb11ec45ee726059eb8005dc2e5ac9e39934e4f1262a54dcbd4cf67a9f86a9a4fbab6aa713ac25054c496b05b930a41b1d2fdabb5cf63507775d9ecfb7", 0x56, 0x6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x8, 0x0, 0x3}]) fspick(r1, &(0x7f0000000140)='./file0\x00', 0x0) 13.885537801s ago: executing program 42 (id=7638): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x7ffffffc, 0x4) io_setup(0x8, &(0x7f0000004200)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010062, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x6, 0x0, r1, 0x0, 0x0, 0x8, 0x0, 0x0, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f0000000200)="884f2e1a33be0e77293f31fff0d75bcf049f8404c10264d3a0eb11ec45ee726059eb8005dc2e5ac9e39934e4f1262a54dcbd4cf67a9f86a9a4fbab6aa713ac25054c496b05b930a41b1d2fdabb5cf63507775d9ecfb7", 0x56, 0x6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x8, 0x0, 0x3}]) fspick(r1, &(0x7f0000000140)='./file0\x00', 0x0) 9.98808258s ago: executing program 4 (id=7687): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000940)={{0x2, 0x4e23, @empty}, {0x0, @remote}, 0x15, {0x2, 0x4e20, @remote}, 'gre0\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x40428c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5421, 0x0) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x47}, 0xa) close(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000000040)={&(0x7f0000000340)="dcd105b42a60351f24487c57399265329e50d0d8c39acc9e8258bcc8892e1cdfb231d5169979916fbf18b8c315b144ae9eef1f7732f2c01bdfb99053fbf8d86cc9547ff991432c40a46d40c3e44836f61e8a385c9780c7df3cc46fe21f4880d5d85a186bf4f49f54926666af06085e1a83e997c6efc89ed1d454f3a9c97c4f544caa45214fc46b3e4a262c98f9199f266523f94baa4d7c31ce3462ad03311522e14eacb2f6660f0c444962f67ccac9bad1e5696cefecb3d9c54d7f54e7178d55e848d83299c4a55f85cd23e82e60692d9acbf92e222fe97d6b517ec974b087d2ef80fecfbd44af21b09f47a7db43b0e2c2a0eae1e42ba7", 0xf7}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a30000000000800034000000001140000001100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x54870}, 0x8d5) 8.720794002s ago: executing program 4 (id=7692): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 8.557241023s ago: executing program 4 (id=7694): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@phonet, 0x80, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/251, 0xfb}], 0x6, &(0x7f0000000300)=""/102, 0x66}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0x20000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7.873932666s ago: executing program 2 (id=7695): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001180)={{r0}, "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"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 7.067064413s ago: executing program 2 (id=7696): syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c9004947617ecdbd9824e7715762cea7b2533c84be057bfbdc1b72e6190b4ab595147543aa2fb2daf151c5a4f23e491cfc5ebbd82ca303e0d46e7b6f0173557d99"], 0x4d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x88, 0x8, 0x2, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x4, 0x10, 0x8, 0x0, 0x0, 0x0, 0x81, 0x6, 0x27, 0x0, 0xff}, {0x3000, 0x5000, 0x4, 0x0, 0x7, 0x4, 0x0, 0xff, 0x3, 0x0, 0x0, 0xa}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x4}, {0xeeee8000, 0x3000, 0xf, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x80}, {0x8080000, 0x5000, 0xa, 0x6, 0x5, 0x3, 0x68, 0x0, 0x1, 0xf9}, {0x0, 0xdddd0000, 0x0, 0x2, 0x1, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x0, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x401]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 6.281656807s ago: executing program 6 (id=7697): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r3 = gettid() ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 6.068059213s ago: executing program 2 (id=7698): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xa0c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x66, {0x2, 0xfffd, @remote}}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r4, 0x0) remap_file_pages(&(0x7f00003b2000/0x1000)=nil, 0x1000, 0x0, 0x800, 0x8000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137) ioctl$SIOCSIFHWADDR(r1, 0x8931, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) 5.906925353s ago: executing program 2 (id=7699): socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f0000000480)) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020}, 0x49e8648f) 4.695252476s ago: executing program 2 (id=7700): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = semget(0x1, 0x7, 0x6b4) semop(r0, &(0x7f0000003480), 0x4a) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), 0x0}, 0x20) 4.694837399s ago: executing program 4 (id=7701): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xad9, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xaa3, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0x10, 0x4, 0x8, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x16, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c05"}, {0x1f}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703aa9"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0xfc, "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"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, 0x0, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x5, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) chmod(&(0x7f0000000200)='./cgroup\x00', 0x10) 4.660974146s ago: executing program 6 (id=7702): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001180)={{r0}, "c9595017010b41baf417c1d51b72e9fb20c9017417846a4d726e19e1352ebd6c7e9968bd17a0d8464ba1f8b5efb2bd12d5cad1cfd03ae55707d8166f37b982c54edd06f7dbd379b873bfa3597f78b9c0dd474f183f22dcb6d4efd2729957f1ddee543f577e747c69d0593681edeaf9b92c1d0662f26abd313e56d87abe059cab18043dccf38dbf42b8d6d7792e8deb8fc4ec35619476ae876ff5cfabd5e0a0b771c6d4339310d2c0d645b24c6d36f1ed65abd3d69b14ac4ed054fdb68572b0f6c4fb623edf19bb15881d3c3c3b22ec7104f49febbce30751e4eb8cce4bc4f07a6210e3ef34c542a8adc34d4c5add4fc67ff4cc6fcc2ab8bd6d923530fe272baa30bcf3d2271ce810da3327ada82dab61c00a9b21043e085154ae36e12a5f3b966ca73e005fe2a7c80ff9910a0c26debff678565654f1dc7b3510fb5ef43a3233685fdd58064b6fcba903db17c5d5ead0a29c67c9f4975204f03779afb33703c391d46ba8d92eb8913ae6584faa2c215938a717acbe563077e41191fa2841865204605c37c5cc9c912012973035fc6eaaeec26bda869986d59fb19f681103553c7a278c14a8d9c203803e90c6b876710ebd12662b908e0129f22c375dbaccea2a4cb1a9b407adfd23d46a60415c2e9d6d52d0549aa3a32d8b8e511d8f89fa62b85d1c33bc0b3c462d175766225698408e33f02cf0f2f5111e2be4a087a76868eddc0f8cd52548c73ec6d98c6282bcc9565fe05e559eedd34ff05c56bfb3911a2129ceacd10b53e9901c99e94b451a0a103cb3b8e775f9d2450bbd01343656c9a6b270e0ea11eee816a99db161302618163275144119cdb9c93da2f2be99629fb32af3b368d53551461cb10d95219c32238c9349832c447b2b0053c88d7d68999ff2a0642e4d969c7b19dcc780ade5535b1cd52f2c72ab24a3693682cee9b8c2bd88f5b946adff52fa95420b1fe0cbc43284c940cb37848f96f253b12a1da9535f63fc6ae5a00df8d18229ae2448b385164752149c1fc4df3b79ade41f46f9dab571909c472762e5e66265ca4b1d748a26a5927ec733b9c3b623e6023b03f650b2550723bf01c5b6e764dd300dbd9955cd98afe527ead1979793c48f11d532b38e52c11f3d6f59025b6d2c9891e29f021f15c9b968b512a5cd7ba968350f36946d211fa3edadb7a17f0858095c12861d489b7ee0ad14c9ab55a9decdaf895bd149d225483b5d01de93fc644f9aec44c35fbdc615b8a6dd87a5f5529338f45c329ecacb93a866d30c8b24915dd4b45c288f1749f6b9202912d28b143bbbbbdf19bbbbfa2e3578e176cda7454e47a4d4886559efbfaeddff0442310ef1be56e38e5606ef721afaf016ca7d4aa25c573e038b067aa9283bd084dce31323d666ce058a76a38ada68bb55ff4e11de1a1cb5a4c977dc6a23e0ae38859702cedc4f72b1044e31a727a0f5bc43f5b4acbab274040dc5bc33b44e03eea8139b3aebd9a8c3a17f4263ecd5e7f56b02f405ec40739f055ea65bc2e19ce590ad8bbc218c44585f3c4985c5a5fc40bc24e2ccbece50c5c75d4e1095e3bed5cc64a9dfb1c47a73f957275305f6dc08722f36414f6c52b2302a317be6293051cef05324032c0666ed2e6a98200c906da43fdf9dd952ff6d6e5283b309a13819184926c5942a7e03da00f83308a70840bb703d766be2d3f64b31cf3b470331abb46f9903e7aa4387b3580d5795e32f4520f43fa3135b88071be94f739e5e761b161d45d820c4f1def62b6ba9f6bfd84b9eb9aa94d0bcb92a225fa6d0fd858c5fbf36d0e0c8d2de722cbe3122172232a8cdc8a321aea714a435ce8efddeac308caf97a7dfca6405d467092fa1d3c146d470d1c2c0839f5fbe0bf493df82b1b5236f19e7134ce51a281095fbed8325c78248f678d7d996166bfef1ba11b87f68b263a2271ecfb41e031acf810d125a99a63aaa95b69d4a1a480ca83d4f3ed78e749b37bf4717811fe005f2496fea402c8cbffb89e507a32e267cb6e7d34d33b15de84da714ad0fe76d8f8ef57061c043b822705382d71a48c69f58e1a648d1535eea9a3decffc7b31cc971790b9849e2c5a819bf34ef2c6da3457a6ec6fe726bd53b72887798708e27d1e77df8d9726b0140a77b198d7dec80f53f2224c920d2abd7b3f46650afd675e61d8edc49defc5a06048418849c5b44cc1b7edf00172775dadcba627792366aab2440a9f7cec2fb09fa3a0336096891dae2b358dda44522b884f5982651a5ea35af7f6e473e06b47180f7022f0189e3a0edff1ece325d4c1a4ac455264b471bb92f98e1b2ae3caca7184fe2d044b92bc8d603355c154942bad6e58090450dbbc84f0c2a2526cdf9778f3cab888a21243fab4e0c508726bc394ab7ab724cfb8d62c53bad794a736e82ca1a65e3fdd4afcbdd9e8b532096101ccb500447528e421ec6ace79c24d9c68d20db8d585279e347faed5f35c99bb0b5fc3ec260f6925ad2b0128ed28ee00f141a1061ca98defc7a549a869a118b834b666d0f440b81c681ee722accd2608d1b14295f4823a522a6b558d6df7a8ab1caa0076cc2c8230f9dda7313c32f5d47691980cdbe009a5253fb98df076dead8184fd35bc827e75fbc468ba918b6efe4dc6219c555e07cc749dc7f7cf3d49dc6eb4261bfd50e74b5a2d210174101db2b15be6b72fc3bf07ce9482d778de33aeb444ff71946d5192035f777d6f7a2eab9147c96681ff00418b05b2e8fdbda493c135ea28990a2b331ba3a99d13118096eb2b221914189b7fa7f1cd6f42ce2fcd610a9e9ea1a0200ee7f4debb1e5edc6d1bab181ee4e619b9beb5c16eabe2a9975fd4d67f20f78327ed6916ad8a061555aac3ee145668e1c0f11b98460c184ecc95dbc2fbd71b2066d8b6fc5fc46ddc9adf49ee8452a8cd2201e6294bbfc1f304b2759012927fc406f9420c1f120c23f32ca89d4f799306c69890ba071862e0498baf191193e4c286b39d1f47151736f2a7f946960d8b4a8dc9edf6b55caea61c697d0c969752c5662e5d8b8c85bf02ea4ca705ae65b305341d021b2102f6876b507cf20e20533a69ca12af1244550de44e67e522e22ae67f303e94f557a3dc5a23e0914bdbac4da3ac730ca76cde28fbbbd0a61d28a1986541fb95967048f6424b8760748dd88a4712917fe88a2688fa4ef5f8bb92fd32dc9c5828347c62f2f80a79f3212335b1d63eaf7863c118c24100439f8f07d309c722a249dbb5fc71d8fa564e95491611c7ed44c67fdaa35f26e94772212bb4561d14b2afa191cddede57944a23097b8cef0e6cb4931dfd6e6be6b03e75a7ba0e08769817ff6babb73f52e084c35ee2b8b3e1a9c9a7300663e18b2cb535bb11c49a2c0d4578e82ddf6ba90eda3ad6b597a2acb110a37282a787ddbc030118d1b4efd183dae9843e6a1f844d2dc1dae7f40f01b4335763f8cb0e0cf889ddee39f85fa983909f9922f28f693b9d91b56090e233a8f92670b6a21a10557cf6a9e378c241647adbd4a6aa87afd1fca36e1ffcf29262fd19b68dfba7ae224e90484ce058eba578f8c6bdd54d3f3e679d28f48f463c03d597aeab1e944fc3e0852023874cdbf188661165bc8376ea7c38992306156adc4f6cfd36935d041c7f52bdd495b9b9bab4193dfa70c03187d623c14bb34e01f37dbe006e2aea897fb33f1913254b94dfdb6085c784be30bd3f6f6d2ae1fb618d45a205810161f34104eb2c40a3b9cf89efc5bf8ec309bd4e288c40db78ad41186d09e6b4c8bea597932ce3a3e79998c5fcc065758759fd7dcea570dcd8ae31dda2fcf5a83196c8219ca754d1be9cafbbbb5bba444246bd260a1db2a0b0bbfcb8caa5b6c025aa88afc19b1cffee6ac03a5e45d526d31b871cec14496f49972fcce1009ae790f72ea580526673440a04ad93f0004df94c2490207ef372a6aa7b8ac7cd4dc49213a5146149c81f63cf74c1092d4b7af53274d11fbc317dc723cfe898f5343a5168642cf7a4da219858110062bfa5e388dee474810d2b482bb85b39934e3fc6e4bfb63a43691104285fa63a27ea20f36635548ca0d664dae963eb1d339c7948189501d04c373266e204adab68fb9e7759fbc831e64e014e0890fe85f9ba790ea5bc413f7f4440a6f89d5fe0c9fec7b5932042ffca9ca87092f6064d590acdd3d17e1a3be3765f8ed55f4659dd1ea8acd784875ce4eb8a1d8590366952fb522e35dd73625bc53f874aecc94221a2d3863bdea952eaa850b4a28b1be0ddc0c87caeb0c79a2e04e60e5f1b2afab6653ef4f725345c775b3a5a7245be4804f7f8cb4bf644ae6e1ea8fbd2503e0c2a60e040540b5f32b626aa68f1a7686df789e3ed851587f1c7b99faa4018884ab46d9beeb2014a50c065b4d7242acb0e2a194da19b26f12304c95a0b91076dc4225a0c151413fe1dc76c6d904a64537bc1c6853f87a5f94501c109fc17c5557373450225db9f7f8e08d56a488c5cd0ed18563231d46e0837949422a6f7c24bb2af37b4e9ced7341753309003f50a80dd9eca6cf2901c9ff62ed3bfcdbc37c5e1bdeed25292022b499b4091417a46ec8bfbe29faa1ecac58c38012c3dc7451a263f127a2537f32b9bfe9ca0b8348bf5364c08679c34d1664c7fde4c385e4b5118b143365fd6ac2e963f9ee1beac80f8cdf7ac0d608bcf46c0f3cc3cf8f712017993bf4c4b12091c5ecc20cf69b7cf08f8b1d12115eadcbb20ddd31698c3c1d1b6b3cca0b7091c2274061128e9316fd5794b4f453cd5e0b6caa326d908d128d85f0e2a5746fdbfc72192084bf0b61c922581702eae38c9386f678f7bc15fbf356c990d418a620c8708f1333ec11fe7adee68b78f639e3fbc7732e306f2909d6d43acce49bb00c8d29944cfdc4e5f530beef0ef0ea9a9851177806434b8539b34b8b7cfcdd327f4a930dc93ae9931a744f97e2726eae793d27770cdb7835627f245879a59f9a5d70cbbda494f24dec5db13e0a8212fd179229ae04f439955947ccf3513cdfacc87d120e9184edf2e5498ba237f1717cdf0d8021c9f1dc71de2eac5eca058e4f5031c2bac7de9b2892d8b5464f5ed7218957b6813fbb80a4671113aab95675ce4942fa5d92e87c923efa2bf878c494f67d0a65078ec1f88046c6a9bde7a444c521a3d2e25ed814b4e8f60dd4706f5a33d326e35404af41e50e418bc9671c072a997fbee8611e87d68c81d3ce67cfac69ff9fe5ec290ed7ee9a822625c04a64164d8908cdcf7ba2b1d5bab876cfa6fd4e201ebe7629edb7d55cd273e390cf422cd9792d8d3ee047f2cb706f67f4cff55892139bb01d68fc66e871ac84e705d027a6721eb4ceb1633e037050aabb9cc3e57be1ea1400ce046f71a787a4b9581f007159085cb704338a3d6620b99a2065e175c7e0ff498e5fb06e4364698f5d1a919f93a6342add0980dfa7ed6a87c5a67bfba9f543cd8bbb107a353ca76df1b156534317a04c4a3ec964bb75d4303219c3e4ae0af741566d604750853f2bddc2ffb8666d5ef5aaacc18fd2a5237ebeac00b98db30fa52d6886d5ff8f49c934217bc49812a560fa4abed59ecda9db787bb4f54c8d9b1acbabc3f4a7ec1099733f3d2c26df46ffb7a1edebf117da1a1318c321ba333b3a5f08b43f5baa9b1c4315d94a9338defbe9f9189e7f2b8ae57ab2cebf6070a685fbf643e5213a003b0d76152003a3afe30a7afbe1c65838fdde3eb4236ee64ce43dda6d14d7aa1c8f574dcf73a5763712c4b4fa9f2f979695a3f3b75188d10fa003896c3d88f19db57753e52b09d5"}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r9, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r10, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) 3.900134876s ago: executing program 6 (id=7703): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 3.590705089s ago: executing program 2 (id=7704): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab", 0xa, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=']) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r6, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl724\x00', [0x4e27, 0x5, 0x0, 0x40300000, 0x6, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0x2, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x5, 0x10087, 0x3, 0x40000003, 0x2, 0x180002, 0xf23, 0x2000007, 0xb, 0xfff, 0x3c, 0x18, 0xf, 0x0, 0xfffffff8]}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="aea225cc5cf77876b42962b52cdb12cbb92d2fe69b62a402e0294c0b7723bc2e2a9d25", 0x23, 0xfffffffffffffffa) 2.919414086s ago: executing program 6 (id=7705): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001180)={{r0}, "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"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 2.12659971s ago: executing program 6 (id=7706): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r2, 0xda8c) accept4(r2, &(0x7f0000000340)=@nfc, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/557, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="380000004800010029bd7000ffdbdf250a000000", @ANYRES32, @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x24048804}, 0x20000840) syz_emit_ethernet(0xebc, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xe86, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0x10, 0x4, 0x8, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x19, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c053a7d16e3463c90bc6f5c4b6392f42b7cc0660036903cd649ba"}, {0x1f}, {0xe, 0xa, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9cca"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0x17f, "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"}]}}}}}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.3818274s ago: executing program 6 (id=7707): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xffffffffa003e45c, 0x700000000000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) 1.300980853s ago: executing program 4 (id=7708): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x26, 0x2, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x4a3d, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x20000180) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) 0s ago: executing program 4 (id=7709): socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f0000000480)) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020}, 0x49e8648f) kernel console output (not intermixed with test programs): ompat=0 ip=0x7f092a38e9a9 code=0x7ffc0000 [ 2927.512958][ T543] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2928.116056][ T543] usb 7-1: Using ep0 maxpacket: 8 [ 2928.117572][T23752] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 2928.122817][ T543] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 65288, setting to 64 [ 2928.148348][ T543] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2928.157244][ T543] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2928.168096][ T543] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2928.180538][T23752] em28xx 10-1:0.132: board has no eeprom [ 2928.182684][ T543] usb 7-1: Product: syz [ 2928.214186][ T543] usb 7-1: Manufacturer: syz [ 2928.220528][ T543] usb 7-1: SerialNumber: syz [ 2928.243113][ T543] usb 7-1: config 0 descriptor?? [ 2928.258226][ T543] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 2928.599285][ T4556] [U] : [ 2928.602113][ T4556] [U] [ 2928.604809][ T4556] [U] [ 2928.607495][ T4556] [U] [ 2928.632653][ T4556] [U] [ 2928.635392][ T4556] [U] [ 2928.638099][ T4556] [U] [ 2928.640797][ T4556] [U] [ 2928.643809][ T4556] [U] [ 2928.646558][ T4556] [U] [ 2928.649254][ T4556] [U] [ 2928.651953][ T4556] [U] [ 2928.655718][ T4556] [U] [ 2928.658417][ T4556] [U] [ 2928.661117][ T4556] [U] [ 2928.663809][ T4556] [U] [ 2928.667142][ T4556] [U] [ 2928.669846][ T4556] [U] [ 2928.672541][ T4556] [U] [ 2928.675238][ T4556] [U] [ 2928.678280][ T4556] [U] [ 2928.680980][ T4556] [U] [ 2928.683673][ T4556] [U] [ 2928.686361][ T4556] [U] [ 2928.689034][ T4556] [U] øÿ [ 2928.692282][ T4556] [U] ôàä©DlvpV‰‚´à ö˜9: óˆœ$ªVñQ™úÐ H;JÐUs¯@2i“”}šcËóX7„¬½¢U [ 2928.896563][ T4556] [U] zìkyã ½TÂÓ3TW¬ós1vnG#‘ãXów2zÉìÃO$É®>Æ [ 2928.906419][ T4556] [U] ÐiMÅ[ÿŸ_Eù [ 2928.921036][ T4556] [U] @µ¶>–ì„…³¸¨É®=ù1 [ 2928.925411][ T4556] [U] h½¨% [ 2928.960385][ T4556] [U] ܆t/”ã¤ â£¼á ¶ [ 2928.970808][ T4562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7275'. [ 2928.985621][ T4556] [U] u [ 2928.989991][ T4556] [U] ?Â-× [ 2928.993262][ T4556] [U] ?z…ѲžXÇv…ïÀαÈårœfAŸÀ:¡ˆTk:Ò¡‚Ž:%¼A–EFjSñÉn [ 2929.004038][ T4556] [U] K;ÁŸªTI ›=½3KGðg»«@t;*B [ 2929.016026][ T4556] [U] €ûÂ+÷4hxõ×Óc/Åíbë BŽçQÄ}Ž‰OtZ†„ ¿5ð·"±ê¦®ß¡¿.|Ë-aÕ×c1”^Îú&¸GBdRˆ×"k½œÍbŠ¸HuòÅ ¨‘Î¥’°C [ 2929.030281][ T4556] [U] Sz9]Ç;Ú6{ñ,·Ø‘¥þŒG¾9VV¢—éßqùgVê\Î}ªÄ¾)Yö¼×_ [ 2929.040210][ T4556] [U] ÚåS.q®žH°íT¨1 [ 2929.047206][ T4556] [U] °u"_ÞDÄà—1q­GÖ°ýùt:ù2Ím´šGa8ºÙYq [ 2929.063546][ T4556] [U] EúBBâL~€ [ 2929.091243][ T4556] [U] ³ºX(¦äïz€>œ§È[5ɹ:ž…â8´JáÂæLÎ;';‚F‚žd` [ 2929.106420][ T4556] [U] ^[‡•úáj|>¥~rŽÊ5êðZ9ùu€àyT&Àˆ  €@˜* [ 2929.120548][ T4556] [U] zVû ÍšÀjÛe—ZäxF‰+´À$ØËé$ qìmÂM:âײsÙ]:§7Ë£6ÿ*sQ}]g]q"67ÆCµ¯Øe¶ [ 2929.144931][ T4556] [U] L®‰s"ÒY…§÷h4™^S©:{žï&}ö‘ʘ: ½§öÅÁÊz¥a£š¿4É°~‰Qÿ2c­ZíŒûI´žŒiw$ÀWÒ,]õ®ò|ãÛÕ­U'ÑIÐvá¨~-ò| ¸¦zÐ&¿•>ˆñGá%ÂÀñ®¾áó9 [ 2929.189091][ T4556] [U] ž=ÚÔâ¦àöäVŸÞúèpàJÏ”“¹cùŽ#ÏÆeäôeú?€WÙä_aÓE›`b6‹¹14Zò‚ [ 2932.316700][ T4589] dump_stack_lvl+0x16c/0x1f0 [ 2932.316726][ T4589] should_fail_ex+0x512/0x640 [ 2932.316753][ T4589] _copy_to_user+0x32/0xd0 [ 2932.316783][ T4589] simple_read_from_buffer+0xcb/0x170 [ 2932.316811][ T4589] proc_fail_nth_read+0x197/0x240 [ 2932.316831][ T4589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2932.316851][ T4589] ? rw_verify_area+0xcf/0x680 [ 2932.316874][ T4589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2932.316891][ T4589] vfs_read+0x1e4/0xc60 [ 2932.316919][ T4589] ? __pfx___mutex_lock+0x10/0x10 [ 2932.316940][ T4589] ? __pfx_vfs_read+0x10/0x10 [ 2932.316972][ T4589] ? __fget_files+0x20e/0x3c0 [ 2932.316996][ T4589] ksys_read+0x12a/0x250 [ 2932.317010][ T4589] ? __pfx_ksys_read+0x10/0x10 [ 2932.317032][ T4589] do_syscall_64+0xcd/0x4c0 [ 2932.317055][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2932.317073][ T4589] RIP: 0033:0x7f092a38d3bc [ 2932.317086][ T4589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2932.317103][ T4589] RSP: 002b:00007f092b287030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2932.317127][ T4589] RAX: ffffffffffffffda RBX: 00007f092a5b5fa0 RCX: 00007f092a38d3bc [ 2932.317139][ T4589] RDX: 000000000000000f RSI: 00007f092b2870a0 RDI: 0000000000000005 [ 2932.317149][ T4589] RBP: 00007f092b287090 R08: 0000000000000000 R09: 0000000000000000 [ 2932.317160][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2932.317170][ T4589] R13: 0000000000000000 R14: 00007f092a5b5fa0 R15: 00007fff2653bb48 [ 2932.317193][ T4589] [ 2933.803793][ T4609] comedi comedi0: fl512: I/O port conflict (0x2,16) [ 2933.810924][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2933.811026][ T30] audit: type=1400 audit(2000000670.640:7661): avc: denied { getopt } for pid=4607 comm="syz.4.7288" laddr=fe80::b lport=43565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2934.044796][ T4604] ALSA: seq fatal error: cannot create timer (-22) [ 2934.186168][ T4608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2934.657659][ T5946] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 2934.714832][ T30] audit: type=1400 audit(2000000671.550:7662): avc: denied { ioctl } for pid=4621 comm="syz.6.7291" path="socket:[133652]" dev="sockfs" ino=133652 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2934.890682][ T30] audit: type=1400 audit(2000000671.720:7663): avc: denied { create } for pid=4621 comm="syz.6.7291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2935.385291][ T30] audit: type=1400 audit(2000000671.730:7664): avc: denied { write } for pid=4621 comm="syz.6.7291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2935.408760][ T5946] usb 10-1: Using ep0 maxpacket: 8 [ 2935.419101][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7291'. [ 2935.443147][ T5946] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 65288, setting to 64 [ 2935.458193][ T5946] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2935.473848][ T5946] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2935.497119][ T5946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2935.525182][ T5946] usb 10-1: Product: syz [ 2935.539733][ T5946] usb 10-1: Manufacturer: syz [ 2935.555538][ T5946] usb 10-1: SerialNumber: syz [ 2935.590982][ T5946] usb 10-1: config 0 descriptor?? [ 2935.602563][ T5946] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found [ 2935.639528][ T4637] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2936.556380][ T4634] xt_CT: No such helper "pptp" [ 2936.616001][ T4644] [U] : [ 2936.618817][ T4644] [U] [ 2936.621535][ T4644] [U] [ 2936.624225][ T4644] [U] [ 2936.744846][ T4644] [U] [ 2936.747597][ T4644] [U] [ 2936.750294][ T4644] [U] [ 2936.752973][ T4644] [U] [ 2936.758584][ T4644] [U] [ 2936.761292][ T4644] [U] [ 2936.763979][ T4644] [U] [ 2936.766694][ T4644] [U] [ 2936.777647][ T4644] [U] [ 2936.780385][ T4644] [U] [ 2936.783069][ T4644] [U] [ 2936.785775][ T4644] [U] [ 2936.789543][ T4644] [U] [ 2936.792252][ T4644] [U] [ 2936.794953][ T4644] [U] [ 2936.797646][ T4644] [U] [ 2936.822859][ T4644] [U] [ 2936.825595][ T4644] [U] [ 2936.828278][ T4644] [U] [ 2936.830958][ T4644] [U] [ 2936.833651][ T4644] [U] øÿ [ 2936.837176][ T4644] [U] ôàä©DlvpV‰‚´à ö˜9: óˆœ$ªVñQ™úÐ H;JÐUs¯@2i“”}šcËóX7„¬½¢U [ 2936.883209][ T4644] [U] zìkyã ½TÂÓ3TW¬ós1vnG#‘ãXów2zÉìÃO$É®>Æ [ 2937.214287][ T4644] [U] ÐiMÅ[ÿŸ_Eù [ 2937.455994][ T4644] [U] @µ¶>–ì„…³¸¨É®=ù1 [ 2937.460497][ T4644] [U] h½¨% [ 2937.463934][ T4644] [U] ܆t/”ã¤ â£¼á ¶ [ 2938.007697][ T4644] [U] u [ 2938.023200][ T4644] [U] ?Â-× [ 2938.082504][ T4644] [U] ?z…ѲžXÇv…ïÀαÈårœfAŸÀ:¡ˆTk:Ò¡‚Ž:%¼A–EFjSñÉn [ 2938.094810][ T4644] [U] K;ÁŸªTI ›=½3KGðg»«@t;*B [ 2938.100139][ T4644] [U] €ûÂ+÷4hxõ×Óc/Åíbë BŽçQÄ}Ž‰OtZ†„ ¿5ð·"±ê¦®ß¡¿.|Ë-aÕ×c1”^Îú&¸GBdRˆ×"k½œÍbŠ¸HuòÅ ¨‘Î¥’°C [ 2938.128103][ T4644] [U] Sz9]Ç;Ú6{ñ,·Ø‘¥þŒG¾9VV¢—éßqùgVê\Î}ªÄ¾)Yö¼×_ [ 2938.152962][ T4645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2938.183305][ T4644] [U] ÚåS.q®žH°íT¨1 [ 2938.377633][ T4654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2938.878689][ T4660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2939.208751][ T4644] [U] °u"_ÞDÄà—1q­GÖ°ý [ 2939.257724][ T30] audit: type=1400 audit(2000000676.090:7665): avc: denied { ioctl } for pid=4661 comm="syz.0.7301" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2939.304305][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2939.317783][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2939.323801][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2939.391880][ T4669] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7302'. [ 2939.587066][ T5946] snd_usb_toneport 10-1:0.0: set_interface failed [ 2939.607014][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2939.653036][ T4668] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2939.653227][ T5946] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected [ 2939.685179][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2939.687806][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2939.705296][ T30] audit: type=1400 audit(2000000676.090:7666): avc: denied { set_context_mgr } for pid=4661 comm="syz.0.7301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2940.587936][ T5946] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 2940.607772][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2940.607914][ T5946] usb 10-1: USB disconnect, device number 123 [ 2940.657761][ T30] audit: type=1400 audit(2000000676.140:7667): avc: denied { write } for pid=4661 comm="syz.0.7301" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2940.661317][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2940.680932][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2940.715110][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2940.751314][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2940.759174][ T30] audit: type=1400 audit(2000000676.140:7668): avc: denied { map } for pid=4661 comm="syz.0.7301" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2940.783288][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2940.790545][ T30] audit: type=1400 audit(2000000676.550:7669): avc: denied { read } for pid=4670 comm="syz.9.7304" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2940.797748][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2940.816794][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2940.836702][ T30] audit: type=1400 audit(2000000676.550:7670): avc: denied { open } for pid=4670 comm="syz.9.7304" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2941.266886][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2941.269888][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2941.286438][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2941.288556][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2941.351168][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2941.357578][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2941.365583][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2941.372402][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2941.380953][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2941.387362][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2941.407409][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2941.557914][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2941.852566][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2941.874295][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2941.892069][ T4662] binder_alloc: binder_alloc_mmap_handler: 4661 200000ffd000-200001000000 already mapped failed -16 [ 2941.916552][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2941.924932][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2941.988248][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2942.087728][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2942.093796][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2942.140641][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2942.146831][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2942.154682][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2942.162794][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2942.172502][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2942.199375][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2942.215253][ T4664] binder: BINDER_SET_CONTEXT_MGR already set [ 2942.235055][ T4664] binder: 4661:4664 ioctl 4018620d 200000000040 returned -16 [ 2942.532773][ T4705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2943.321196][ T4713] netlink: 'syz.0.7313': attribute type 6 has an invalid length. [ 2943.762777][ T4710] xt_CT: No such helper "pptp" [ 2943.988204][ T4722] FAULT_INJECTION: forcing a failure. [ 2943.988204][ T4722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2944.001324][ T4722] CPU: 1 UID: 0 PID: 4722 Comm: syz.9.7311 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 2944.001349][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2944.001360][ T4722] Call Trace: [ 2944.001368][ T4722] [ 2944.001376][ T4722] dump_stack_lvl+0x16c/0x1f0 [ 2944.001404][ T4722] should_fail_ex+0x512/0x640 [ 2944.001433][ T4722] _copy_to_user+0x32/0xd0 [ 2944.001463][ T4722] simple_read_from_buffer+0xcb/0x170 [ 2944.001494][ T4722] proc_fail_nth_read+0x197/0x240 [ 2944.001515][ T4722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2944.001536][ T4722] ? rw_verify_area+0xcf/0x680 [ 2944.001562][ T4722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2944.001581][ T4722] vfs_read+0x1e4/0xc60 [ 2944.001612][ T4722] ? __pfx___mutex_lock+0x10/0x10 [ 2944.001635][ T4722] ? __pfx_vfs_read+0x10/0x10 [ 2944.001669][ T4722] ? __fget_files+0x20e/0x3c0 [ 2944.001695][ T4722] ksys_read+0x12a/0x250 [ 2944.001711][ T4722] ? __pfx_ksys_read+0x10/0x10 [ 2944.001729][ T4722] ? fput+0x70/0xf0 [ 2944.001754][ T4722] do_syscall_64+0xcd/0x4c0 [ 2944.001777][ T4722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2944.001795][ T4722] RIP: 0033:0x7fb6b258d3bc [ 2944.001809][ T4722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2944.001826][ T4722] RSP: 002b:00007fb6b346a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2944.001844][ T4722] RAX: ffffffffffffffda RBX: 00007fb6b27b6160 RCX: 00007fb6b258d3bc [ 2944.001856][ T4722] RDX: 000000000000000f RSI: 00007fb6b346a0a0 RDI: 000000000000000a [ 2944.001867][ T4722] RBP: 00007fb6b346a090 R08: 0000000000000000 R09: 0000000000000000 [ 2944.001878][ T4722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2944.001888][ T4722] R13: 0000000000000000 R14: 00007fb6b27b6160 R15: 00007ffe333b4b28 [ 2944.001914][ T4722] [ 2944.254104][ T4724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2944.879761][ T30] audit: type=1400 audit(2000000681.720:7671): avc: denied { getopt } for pid=4725 comm="syz.4.7317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2945.309730][ T4737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7320'. [ 2945.519020][ T30] audit: type=1400 audit(2000000682.350:7672): avc: denied { write } for pid=4732 comm="syz.0.7320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2945.663895][ T4742] program syz.2.7318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2945.857738][ T30] audit: type=1326 audit(2000000682.530:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.2.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d618e9a9 code=0x7ffc0000 [ 2945.931870][ T30] audit: type=1326 audit(2000000682.540:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.2.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f07d618e9a9 code=0x7ffc0000 [ 2946.025665][ T30] audit: type=1326 audit(2000000682.550:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.2.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d618e9a9 code=0x7ffc0000 [ 2946.162339][ T30] audit: type=1326 audit(2000000682.550:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.2.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f07d618e9a9 code=0x7ffc0000 [ 2946.185747][ C0] vkms_vblank_simulate: vblank timer overrun [ 2946.193670][ T30] audit: type=1326 audit(2000000682.560:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.2.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d618e9a9 code=0x7ffc0000 [ 2946.333293][ T30] audit: type=1326 audit(2000000682.560:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.2.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f07d618e9a9 code=0x7ffc0000 [ 2946.356614][ C0] vkms_vblank_simulate: vblank timer overrun [ 2946.363755][ T30] audit: type=1326 audit(2000000682.560:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.2.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d618e9a9 code=0x7ffc0000 [ 2946.387156][ C0] vkms_vblank_simulate: vblank timer overrun [ 2946.482871][ T30] audit: type=1326 audit(2000000682.560:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.2.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d618e9a9 code=0x7ffc0000 [ 2946.811203][ T4757] No control pipe specified [ 2946.986690][ T4760] netlink: 'syz.2.7326': attribute type 4 has an invalid length. [ 2947.028461][ T4760] netlink: 'syz.2.7326': attribute type 4 has an invalid length. [ 2947.665322][ T4759] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 2948.744774][ T4773] wg1 speed is unknown, defaulting to 1000 [ 2948.930845][ T4791] pim6reg: entered allmulticast mode [ 2950.487593][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 2950.487608][ T30] audit: type=1400 audit(2000000687.320:7731): avc: denied { ioctl } for pid=4806 comm="syz.0.7338" path="socket:[133923]" dev="sockfs" ino=133923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2950.611062][ T30] audit: type=1400 audit(2000000687.320:7732): avc: denied { read } for pid=4806 comm="syz.0.7338" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2951.043658][ T30] audit: type=1400 audit(2000000687.320:7733): avc: denied { open } for pid=4806 comm="syz.0.7338" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2951.087763][ T30] audit: type=1400 audit(2000000687.400:7734): avc: denied { ioctl } for pid=4806 comm="syz.0.7338" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2951.113567][ T30] audit: type=1400 audit(2000000687.400:7735): avc: denied { create } for pid=4806 comm="syz.0.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2951.134185][ T30] audit: type=1400 audit(2000000687.400:7736): avc: denied { read write } for pid=4806 comm="syz.0.7338" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2951.157385][ C0] vkms_vblank_simulate: vblank timer overrun [ 2951.174220][ T30] audit: type=1400 audit(2000000687.400:7737): avc: denied { open } for pid=4806 comm="syz.0.7338" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2951.474982][ T30] audit: type=1400 audit(2000000687.770:7738): avc: denied { read write } for pid=4804 comm="syz.4.7337" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2951.533458][ T30] audit: type=1400 audit(2000000687.770:7739): avc: denied { open } for pid=4804 comm="syz.4.7337" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2951.603676][ T4821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2951.658980][ T30] audit: type=1400 audit(2000000687.820:7740): avc: denied { allowed } for pid=4804 comm="syz.4.7337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2951.978723][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7341'. [ 2952.026288][ T4827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2954.275000][ T4867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2954.974698][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7351'. [ 2955.314896][ T4873] ALSA: seq fatal error: cannot create timer (-22) [ 2955.578850][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7353'. [ 2955.590829][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2955.590845][ T30] audit: type=1400 audit(2000000692.430:7761): avc: denied { relabelfrom } for pid=4874 comm="syz.9.7353" name="" dev="pipefs" ino=134452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2955.619427][ C0] vkms_vblank_simulate: vblank timer overrun [ 2956.691996][ T30] audit: type=1400 audit(2000000693.290:7762): avc: denied { create } for pid=4875 comm="syz.0.7354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2956.813057][ T30] audit: type=1400 audit(2000000693.420:7763): avc: denied { mounton } for pid=4875 comm="syz.0.7354" path="/554/file0" dev="tmpfs" ino=3111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2956.836098][ T30] audit: type=1400 audit(2000000693.420:7764): avc: denied { mount } for pid=4875 comm="syz.0.7354" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2956.964169][ T30] audit: type=1400 audit(2000000693.430:7765): avc: denied { remount } for pid=4875 comm="syz.0.7354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2957.021842][ T30] audit: type=1400 audit(2000000693.650:7766): avc: denied { unlink } for pid=4875 comm="syz.0.7354" name="#12f" dev="tmpfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2957.075435][ T4885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7355'. [ 2957.098717][ T30] audit: type=1400 audit(2000000693.650:7767): avc: denied { mount } for pid=4875 comm="syz.0.7354" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2957.773332][ T30] audit: type=1400 audit(2000000693.730:7768): avc: denied { unmount } for pid=26946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2957.814996][ T4892] fuse: blksize only supported for fuseblk [ 2957.841111][ T30] audit: type=1400 audit(2000000693.750:7769): avc: denied { unmount } for pid=26946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2957.861314][ T30] audit: type=1400 audit(2000000693.940:7770): avc: denied { write } for pid=4886 comm="syz.4.7357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2958.149949][ T4897] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7359'. [ 2958.719225][ T1292] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2958.728211][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.734530][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.789641][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7365'. [ 2960.133230][ T4920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2960.529105][ T4926] wg1 speed is unknown, defaulting to 1000 [ 2960.889089][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2960.889118][ T30] audit: type=1400 audit(2000000697.730:7774): avc: denied { read write } for pid=4932 comm="syz.6.7369" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2960.918775][ C0] vkms_vblank_simulate: vblank timer overrun [ 2961.016482][ T30] audit: type=1400 audit(2000000697.730:7775): avc: denied { open } for pid=4932 comm="syz.6.7369" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2961.040090][ C0] vkms_vblank_simulate: vblank timer overrun [ 2961.047079][ T30] audit: type=1400 audit(2000000697.770:7776): avc: denied { create } for pid=4935 comm="syz.0.7370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2961.632866][ T30] audit: type=1400 audit(2000000697.770:7777): avc: denied { ioctl } for pid=4932 comm="syz.6.7369" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2961.657939][ C0] vkms_vblank_simulate: vblank timer overrun [ 2961.664255][ T30] audit: type=1400 audit(2000000697.910:7778): avc: denied { ioctl } for pid=4935 comm="syz.0.7370" path="socket:[135178]" dev="sockfs" ino=135178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2961.689104][ C0] vkms_vblank_simulate: vblank timer overrun [ 2961.816215][ T30] audit: type=1400 audit(2000000697.910:7779): avc: denied { mounton } for pid=4935 comm="syz.0.7370" path="/557/file0" dev="tmpfs" ino=3135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2961.838964][ C0] vkms_vblank_simulate: vblank timer overrun [ 2961.954302][ T30] audit: type=1400 audit(2000000697.910:7780): avc: denied { mount } for pid=4935 comm="syz.0.7370" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2962.298533][ T4951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2962.536267][ T30] audit: type=1400 audit(2000000697.910:7781): avc: denied { read write } for pid=4935 comm="syz.0.7370" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2962.937567][ T30] audit: type=1400 audit(2000000697.910:7782): avc: denied { open } for pid=4935 comm="syz.0.7370" path="/557/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2963.213469][ T4956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2963.592502][ T30] audit: type=1400 audit(2000000698.010:7783): avc: denied { mount } for pid=4932 comm="syz.6.7369" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2963.737631][ T4964] program syz.9.7375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2964.048673][ T4965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2964.754466][ T4969] input: syz0 as /devices/virtual/input/input53 [ 2964.784580][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 2965.007613][ T5886] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 2965.166594][ T4976] wg1 speed is unknown, defaulting to 1000 [ 2965.327561][ T5886] usb 10-1: Using ep0 maxpacket: 16 [ 2965.477606][ T5886] usb 10-1: too many configurations: 197, using maximum allowed: 8 [ 2965.629959][ T5886] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2965.644876][ T5886] usb 10-1: can't read configurations, error -61 [ 2965.919732][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2965.919751][ T30] audit: type=1400 audit(2000000702.750:7798): avc: denied { mount } for pid=4981 comm="syz.4.7382" name="/" dev="autofs" ino=134618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2965.948939][ T5886] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 2966.108762][ T4984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2966.627959][ T30] audit: type=1400 audit(2000000703.460:7799): avc: denied { unmount } for pid=29658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2966.657548][ T5886] usb 10-1: Using ep0 maxpacket: 16 [ 2966.667754][ T5886] usb 10-1: too many configurations: 197, using maximum allowed: 8 [ 2966.681741][ T5886] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2966.712240][ T5886] usb 10-1: can't read configurations, error -61 [ 2966.725357][ T5886] usb usb10-port1: attempt power cycle [ 2966.787804][ T2030] Bluetooth: hci2: command 0x1003 tx timeout [ 2966.796024][T25863] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2967.222099][ T5005] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7386'. [ 2967.257645][ T5886] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 2967.301246][ T5886] usb 10-1: Using ep0 maxpacket: 16 [ 2967.312364][ T5886] usb 10-1: too many configurations: 197, using maximum allowed: 8 [ 2967.324458][ T5886] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2967.333844][ T5886] usb 10-1: can't read configurations, error -61 [ 2967.544585][ T5011] program syz.9.7388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2967.655920][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7387'. [ 2968.231938][ T3985] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2968.417905][ T3985] usb 7-1: Using ep0 maxpacket: 32 [ 2968.553529][ T3985] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 2968.563713][ T3985] usb 7-1: config 0 has no interface number 0 [ 2968.680876][ T5021] ALSA: seq fatal error: cannot create timer (-22) [ 2968.700626][ T3985] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2968.716674][ T3985] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2968.824627][ T5026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2969.270499][ T3985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2969.279764][ T3985] usb 7-1: Product: syz [ 2969.283938][ T3985] usb 7-1: Manufacturer: syz [ 2969.288646][ T3985] usb 7-1: SerialNumber: syz [ 2969.295576][ T3985] usb 7-1: config 0 descriptor?? [ 2969.371846][ T3985] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2969.417600][ T3985] em28xx 7-1:0.132: Video interface 132 found: [ 2969.671434][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2969.683664][ T30] audit: type=1400 audit(2000000706.510:7800): avc: denied { setopt } for pid=5006 comm="syz.6.7387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2969.688041][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2970.012229][ T5036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2970.403295][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7387'. [ 2970.403433][ T30] audit: type=1400 audit(2000000707.240:7801): avc: denied { write } for pid=5006 comm="syz.6.7387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2970.434047][ T3985] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 2970.770308][ T30] audit: type=1400 audit(2000000707.240:7802): avc: denied { nlmsg_read } for pid=5006 comm="syz.6.7387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2970.816784][ T30] audit: type=1400 audit(2000000707.650:7803): avc: denied { nlmsg_write } for pid=5051 comm="syz.0.7397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2970.916742][ T5038] xt_CT: No such helper "pptp" [ 2971.809997][ T30] audit: type=1401 audit(2000000707.800:7804): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 2971.867564][ T3985] em28xx 7-1:0.132: failed to read eeprom (err=-110) [ 2971.874345][ T3985] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 2971.884149][ T30] audit: type=1400 audit(2000000707.990:7805): avc: denied { bind } for pid=5054 comm="syz.4.7398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2971.903362][ C1] vkms_vblank_simulate: vblank timer overrun [ 2971.945222][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7401'. [ 2971.996647][ T5065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7401'. [ 2972.094612][ T5066] program syz.2.7400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2972.409853][ T30] audit: type=1400 audit(2000000709.250:7806): avc: denied { read } for pid=5060 comm="syz.4.7401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2972.537587][ T3985] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2972.576010][ T3985] em28xx 7-1:0.132: analog set to bulk mode. [ 2972.585119][ T9] em28xx 7-1:0.132: Registering V4L2 extension [ 2972.605618][ T3985] usb 7-1: USB disconnect, device number 120 [ 2972.633820][ T3985] em28xx 7-1:0.132: Disconnecting em28xx [ 2972.817742][ T30] audit: type=1400 audit(2000000709.650:7807): avc: denied { ioctl } for pid=5069 comm="syz.9.7403" path="mnt:[4026532799]" dev="nsfs" ino=4026532799 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2973.252412][ T5081] ALSA: seq fatal error: cannot create timer (-22) [ 2974.012089][ T9] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 2974.022203][ T9] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 2974.037107][ T9] em28xx 7-1:0.132: No AC97 audio processor [ 2974.047201][ T9] usb 7-1: Decoder not found [ 2974.083212][ T9] em28xx 7-1:0.132: failed to create media graph [ 2974.180445][ T5097] 9pnet_fd: Insufficient options for proto=fd [ 2974.202991][ T30] audit: type=1400 audit(2000000711.040:7808): avc: denied { read } for pid=5083 comm="syz.2.7407" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2974.236367][ T9] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 2974.873149][ T9] em28xx 7-1:0.132: Remote control support is not available for this card. [ 2974.967373][ T30] audit: type=1400 audit(2000000711.040:7809): avc: denied { open } for pid=5083 comm="syz.2.7407" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2975.078164][ T30] audit: type=1400 audit(2000000711.070:7810): avc: denied { ioctl } for pid=5083 comm="syz.2.7407" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2975.102750][ C1] vkms_vblank_simulate: vblank timer overrun [ 2975.111909][ T3985] em28xx 7-1:0.132: Closing input extension [ 2975.140643][ T5091] xt_CT: No such helper "pptp" [ 2975.158411][ T3985] em28xx 7-1:0.132: Freeing device [ 2975.304682][ T5102] ALSA: seq fatal error: cannot create timer (-22) [ 2975.467923][T17121] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2975.678000][T17121] usb 3-1: Using ep0 maxpacket: 8 [ 2975.722423][ T5115] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7413'. [ 2976.588923][T17121] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 65288, setting to 64 [ 2976.599996][T17121] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2976.609652][T17121] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2976.618990][T17121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2976.627072][T17121] usb 3-1: Product: syz [ 2976.632295][T17121] usb 3-1: Manufacturer: syz [ 2976.637032][T17121] usb 3-1: SerialNumber: syz [ 2976.646643][T17121] usb 3-1: config 0 descriptor?? [ 2976.828681][T17121] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 2976.887192][ T5118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2977.042047][ T30] audit: type=1400 audit(2000000713.860:7811): avc: denied { create } for pid=5120 comm="syz.6.7415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2977.084136][ T5123] [U] : [ 2977.086962][ T5123] [U] [ 2977.089637][ T5123] [U] [ 2977.092323][ T5123] [U] [ 2977.095190][ T5123] [U] [ 2977.097862][ T5123] [U] [ 2977.100529][ T5123] [U] [ 2977.103221][ T5123] [U] [ 2977.111510][ T5123] [U] [ 2977.114246][ T5123] [U] [ 2977.116920][ T5123] [U] [ 2977.119601][ T5123] [U] [ 2977.128603][ T30] audit: type=1400 audit(2000000713.870:7812): avc: denied { read } for pid=5103 comm="syz.2.7411" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2977.169839][ T5122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2977.186830][ T5123] [U] [ 2977.189573][ T5123] [U] [ 2977.192274][ T5123] [U] [ 2977.194981][ T5123] [U] [ 2977.251652][ T5121] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2978.022162][ T30] audit: type=1400 audit(2000000713.870:7813): avc: denied { open } for pid=5103 comm="syz.2.7411" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2978.048727][ T5123] [U] [ 2978.051449][ T5123] [U] [ 2978.054133][ T5123] [U] [ 2978.056817][ T5123] [U] [ 2978.232657][ T30] audit: type=1400 audit(2000000714.190:7814): avc: denied { ioctl } for pid=5120 comm="syz.6.7415" path="socket:[134825]" dev="sockfs" ino=134825 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2978.258514][ C1] vkms_vblank_simulate: vblank timer overrun [ 2978.265018][ T30] audit: type=1400 audit(2000000714.460:7815): avc: denied { ioctl } for pid=5120 comm="syz.6.7415" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=134826 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2978.291117][ C1] vkms_vblank_simulate: vblank timer overrun [ 2978.355422][ T5104] [U] [ 2978.432275][T17121] snd_usb_toneport 3-1:0.0: set_interface failed [ 2978.447599][T17121] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 2978.455493][T17121] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 2978.512773][ T30] audit: type=1400 audit(2000000715.340:7816): avc: denied { write } for pid=5128 comm="syz.6.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2978.861233][T17121] usb 3-1: USB disconnect, device number 23 [ 2978.878171][ T30] audit: type=1400 audit(2000000715.340:7817): avc: denied { connect } for pid=5128 comm="syz.6.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2978.909474][ T30] audit: type=1400 audit(2000000715.370:7818): avc: denied { read } for pid=5128 comm="syz.6.7416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2980.974012][ T5161] ALSA: seq fatal error: cannot create timer (-22) [ 2981.395021][ T5169] xt_CT: No such helper "pptp" [ 2981.405182][ T30] audit: type=1400 audit(2000000718.250:7819): avc: denied { ioctl } for pid=5167 comm="syz.2.7423" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2981.484870][ T30] audit: type=1400 audit(2000000718.320:7820): avc: denied { name_bind } for pid=5180 comm="syz.9.7425" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2982.364638][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2982.364653][ T30] audit: type=1400 audit(2000000718.850:7823): avc: denied { read } for pid=5183 comm="syz.2.7426" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2982.429537][ T30] audit: type=1400 audit(2000000718.850:7824): avc: denied { open } for pid=5183 comm="syz.2.7426" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2982.454427][ T5181] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2982.514275][ T5182] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2982.522202][ T30] audit: type=1400 audit(2000000719.350:7825): avc: denied { mounton } for pid=5180 comm="syz.9.7425" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2982.529759][ T5182] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2982.673995][ T5182] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2982.688784][ T5187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2982.694938][ T5187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2982.701013][ T5187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2982.706982][ T5187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2982.713321][ T5187] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2982.720172][ T5187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2982.726202][ T5187] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2982.737076][ T5187] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2982.851406][ T5195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2983.115623][ T5182] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 2983.816191][ T5203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2983.867324][ T30] audit: type=1400 audit(2000000720.700:7826): avc: denied { read } for pid=5205 comm="syz.6.7432" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2983.992909][ T30] audit: type=1400 audit(2000000720.700:7827): avc: denied { open } for pid=5205 comm="syz.6.7432" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2984.086704][ T30] audit: type=1400 audit(2000000720.740:7828): avc: denied { connect } for pid=5205 comm="syz.6.7432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2984.114712][ T5216] trusted_key: encrypted_key: insufficient parameters specified [ 2984.127004][ T30] audit: type=1400 audit(2000000720.760:7829): avc: denied { ioctl } for pid=5205 comm="syz.6.7432" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2984.697665][ T2030] Bluetooth: hci1: command 0x0406 tx timeout [ 2984.718669][T25863] Bluetooth: hci5: command 0x0406 tx timeout [ 2984.724821][ T2030] Bluetooth: hci4: command 0x0c1a tx timeout [ 2984.725104][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 2984.734909][ T30] audit: type=1400 audit(2000000720.760:7830): avc: denied { create } for pid=5205 comm="syz.6.7432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 2984.772928][ T5223] pim6reg: entered allmulticast mode [ 2984.848877][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 2984.887397][ T5227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7436'. [ 2984.907667][T30699] bridge_slave_1: left allmulticast mode [ 2984.917324][T30699] bridge_slave_1: left promiscuous mode [ 2984.940823][T30699] bridge0: port 2(bridge_slave_1) entered disabled state [ 2985.082360][ T5234] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2985.112845][T30699] bridge_slave_0: left allmulticast mode [ 2985.114955][ T5234] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2985.126628][ T5234] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2985.135457][T30699] bridge_slave_0: left promiscuous mode [ 2985.135656][ T5234] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2985.149726][ T5234] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2985.149913][T30699] bridge0: port 1(bridge_slave_0) entered disabled state [ 2986.430384][ T5245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2986.787582][ T5225] Bluetooth: hci5: command 0x0406 tx timeout [ 2986.871134][T25863] Bluetooth: hci0: command 0x0c1a tx timeout [ 2987.316855][ T5253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2987.736231][T30699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2987.746750][T30699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2987.756615][T30699] bond0 (unregistering): Released all slaves [ 2987.956280][T30699] bond1 (unregistering): (slave vlan2): Releasing backup interface [ 2987.965233][T30699] veth1: left promiscuous mode [ 2987.970757][T30699] bond1 (unregistering): Released all slaves [ 2988.155938][T30699] bond2 (unregistering): Released all slaves [ 2988.337249][T30699] bond3 (unregistering): Released all slaves [ 2988.511684][T30699] bond4 (unregistering): Released all slaves [ 2988.711285][T30699] bond5 (unregistering): Released all slaves [ 2988.882962][T30699] bond6 (unregistering): Released all slaves [ 2988.967924][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 2989.054385][T30699] bond7 (unregistering): Released all slaves [ 2989.230328][T30699] bond8 (unregistering): Released all slaves [ 2989.411066][T30699] bond9 (unregistering): Released all slaves [ 2989.593090][T30699] bond10 (unregistering): Released all slaves [ 2989.773536][T30699] bond11 (unregistering): Released all slaves [ 2989.955233][T30699] bond12 (unregistering): Released all slaves [ 2990.139658][T30699] bond13 (unregistering): Released all slaves [ 2990.319636][T30699] bond14 (unregistering): (slave wlan0): Releasing active interface [ 2990.330480][T30699] bond14 (unregistering): Released all slaves [ 2990.439002][ T3985] wg1 speed is unknown, defaulting to 1000 [ 2990.458839][ T3985] syz0: Port: 1 Link DOWN [ 2990.463527][ T3985] wg1 speed is unknown, defaulting to 1000 [ 2990.615459][ T30] audit: type=1400 audit(2000000727.450:7831): avc: denied { read write } for pid=5254 comm="syz.0.7442" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2990.817360][ T30] audit: type=1400 audit(2000000727.450:7832): avc: denied { open } for pid=5254 comm="syz.0.7442" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2990.931062][ T5262] input: syz1 as /devices/virtual/input/input54 [ 2991.326091][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 2991.418539][ T5259] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2991.555161][ T5266] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2991.563310][ T5266] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2991.573167][ T5266] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2991.581253][ T5266] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 2991.679652][T30699] tipc: Left network mode [ 2993.188354][ T30] audit: type=1400 audit(2000000730.030:7833): avc: denied { ioctl } for pid=5286 comm="syz.2.7448" path="socket:[135759]" dev="sockfs" ino=135759 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2993.322890][T23752] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2993.772914][ T30] audit: type=1400 audit(2000000730.610:7834): avc: denied { create } for pid=5294 comm="syz.0.7451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2993.854120][T23752] usb 5-1: Using ep0 maxpacket: 8 [ 2994.274387][ T5305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2994.388969][T23752] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 65288, setting to 64 [ 2994.399464][ T30] audit: type=1400 audit(2000000731.190:7835): avc: denied { create } for pid=5294 comm="syz.0.7451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2994.400656][ T5306] rdma_rxe: rxe_newlink: failed to add wg1 [ 2994.422407][ T30] audit: type=1400 audit(2000000731.190:7836): avc: denied { write } for pid=5294 comm="syz.0.7451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2994.515025][T23752] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2994.553127][T23752] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2994.575226][T23752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2994.599827][T23752] usb 5-1: Product: syz [ 2994.617468][T23752] usb 5-1: Manufacturer: syz [ 2994.634802][T23752] usb 5-1: SerialNumber: syz [ 2994.663033][T23752] usb 5-1: config 0 descriptor?? [ 2994.752374][T23752] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2994.820663][ T5313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7455'. [ 2994.974342][ T5315] [U] : [ 2994.977166][ T5315] [U] [ 2994.979860][ T5315] [U] [ 2994.982524][ T5315] [U] [ 2995.004884][ T5315] [U] [ 2995.007660][ T5315] [U] [ 2995.010359][ T5315] [U] [ 2995.013061][ T5315] [U] [ 2995.022396][ T5315] [U] [ 2995.025150][ T5315] [U] [ 2995.027865][ T5315] [U] [ 2995.030565][ T5315] [U] [ 2995.040300][ T5315] [U] [ 2995.043044][ T5315] [U] [ 2995.045742][ T5315] [U] [ 2995.048445][ T5315] [U] [ 2995.115058][ T5315] [U] [ 2995.117792][ T5315] [U] [ 2995.120472][ T5315] [U] [ 2995.123148][ T5315] [U] [ 2995.157686][T30699] batadv_slave_0: left promiscuous mode [ 2995.235026][ T5315] [U] [ 2995.237747][ T5315] [U] [ 2995.240438][ T5315] [U] [ 2995.243110][ T5315] [U] [ 2995.245789][ T5315] [U] øÿ [ 2995.258637][ T5315] [U] ôàä©DlvpV‰‚´à ö˜9: óˆœ$ªVñQ™úÐ H;JÐUs¯@2i“”}šcËóX7„¬½¢U [ 2995.684179][ T5315] [U] zìkyã ½TÂÓ3TW¬ós1vnG#‘ãXów2zÉìÃO$É®>Æ [ 2995.725636][ T5315] [U] ÐiMÅ[ÿŸ_Eù [ 2995.762831][T30699] veth1_macvtap: left promiscuous mode [ 2995.763055][ T5315] [U] @µ¶>–ì„…³¸¨É®=ù1 [ 2995.773253][T30699] veth0_macvtap: left promiscuous mode [ 2996.089385][ T5315] [U] h½¨% [ 2996.092721][ T5315] [U] ܆t/”ã¤ â£¼á ¶ [ 2996.102525][ T5315] [U] u [ 2996.113181][ T5315] [U] ?Â-× [ 2996.147814][T30699] veth1_vlan: left promiscuous mode [ 2996.159938][T30699] veth0_vlan: left promiscuous mode [ 2996.165353][ T5315] [U] ?z…ѲžXÇv…ïÀαÈårœfAŸÀ:¡ˆTk:Ò¡‚Ž:%¼A–EFjSñÉn [ 2996.173480][ T5315] [U] K;ÁŸªTI ›=½3KGðg»«@t;*B [ 2996.185524][ T5315] [U] €ûÂ+÷4hxõ×Óc/Åíbë BŽçQÄ}Ž‰OtZ†„ ¿5ð·"±ê¦®ß¡¿.|Ë-aÕ×c1”^Îú&¸GBdRˆ×"k½œÍbŠ¸HuòÅ ¨‘Î¥’°C [ 2996.205763][ T5315] [U] Sz9]Ç;Ú6{ñ,·Ø‘¥þŒG¾9VV¢—éßqùgVê\Î}ªÄ¾)Yö¼×_ [ 2996.217619][ T5315] [U] ÚåS.q®žH°íT¨1 [ 2996.222218][ T5315] [U] °u"_ÞDÄà—1q­GÖ°ýùt:ù2Ím´šGa8ºÙYq [ 2996.269230][ T5315] [U] EúBBâL~€ [ 2996.272723][ T5315] [U] ³ºX(¦äïz€>œ§È[5ɹ:ž…â8´JáÂæLÎ;';‚F‚žd` [ 2996.279915][ T5315] [U] ^[‡•úáj|>¥~rŽÊ5êðZ9ùu€àyT&Àˆ  €@˜* [ 2996.297626][ T5315] [U] zVû ÍšÀjÛe—ZäxF‰+´À$ØËé$ qìmÂM:âײsÙ]:§7Ë£6ÿ*sQ}]g]q"67ÆCµ¯Øe¶ [ 2996.311727][ T5315] [U] L®‰s"ÒY…§÷h4™^S©:{žï&}ö‘ʘ: ½§öÅÁÊz¥a£š¿4É°~‰Qÿ2c­ZíŒûI´žŒiw$ÀWÒ,]õ®ò|ãÛÕ­U'ÑIÐvá¨~-ò| ¸¦zÐ&¿•>ˆñGá%ÂÀñ®¾áó9 [ 2996.334231][ T5315] [U] ž=ÚÔâ¦àöäVŸÞúèpàJÏ”“¹cùŽ#ÏÆeäôeú?€WÙä_aÓE›`b6‹¹14Zò‚H;JÐUs¯@2i“”}šcËóX7„¬½¢U [ 3018.927124][ T5594] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3019.288056][ T5578] [U] zìkyã ½TÂÓ3TW¬ós1vnG#‘ãXów2zÉìÃO$É®>Æ [ 3019.399640][ T5578] [U] ÐiMÅ[ÿŸ_Eù [ 3019.403533][ T5578] [U] @µ¶>–ì„…³¸¨É®=ù1 [ 3019.409550][ T5578] [U] h½¨% [ 3019.412886][ T5578] [U] ܆t/”ã¤ â£¼á ¶ [ 3019.417077][ T5578] [U] u [ 3019.935378][ T5578] [U] ?Â-× [ 3019.950986][ T5578] [U] ?z…ѲžXÇv…ïÀαÈårœfAŸÀ:¡ˆTk:Ò¡‚Ž:%¼A–EFjSñÉn [ 3020.136147][ T5578] [U] K;ÁŸªTI ›=½3KGðg»«@t;*B [ 3020.151865][ T1292] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 3020.518207][ T5578] [U] €ûÂ+÷4hxõ×Óc/Åíbë BŽçQÄ}Ž‰OtZ†„ ¿5ð·"±ê¦®ß¡¿.|Ë-aÕ×c1”^Îú&¸GBdRˆ×"k½œÍbŠ¸HuòÅ ¨‘Î¥’°C [ 3020.543304][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.550056][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.578630][ T5578] [U] Sz9]Ç;Ú6{ñ,·Ø‘¥þŒG¾9VV¢—éßqùgVê\Î}ªÄ¾)Yö¼×_ [ 3020.638657][ T5578] [U] ÚåS.q®žH°íT¨1 [ 3020.659954][ T5578] [U] °u"_ÞDÄà—1q­GÖ°ý [ 3020.667808][T17118] snd_usb_toneport 5-1:0.0: set_interface failed [ 3020.674726][T17118] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 3020.704505][ T5609] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7531'. [ 3020.710488][T17118] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 3020.778207][T17118] usb 5-1: USB disconnect, device number 69 [ 3021.042417][ T5616] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3021.539796][ T5618] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7533'. [ 3021.549006][ T7888] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 3021.790737][ T7888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3021.804307][ T7888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3021.846531][ T7888] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 3022.128598][ T7888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3022.139738][ T7888] usb 7-1: config 0 descriptor?? [ 3022.450643][ T5633] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3022.492178][ T5633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3022.500198][ T5633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3022.509804][ T5633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3022.517790][ T5633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 3022.643116][T25863] Bluetooth: hci0: command 0x0c1a tx timeout [ 3022.887319][ T7888] hid-steam 0003:28DE:1142.002F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 3023.088070][ T5640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7539'. [ 3023.128318][T17118] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 3023.143731][ T7888] hid-steam 0003:28DE:1142.002F: Steam wireless receiver connected [ 3023.359089][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7540'. [ 3023.376585][ T7888] hid-steam 0003:28DE:1142.0030: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 3023.890756][ T30] audit: type=1400 audit(2000000760.730:7843): avc: denied { write } for pid=5614 comm="syz.6.7534" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 3023.927802][T17118] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3023.957582][T17118] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3023.977106][T17118] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3024.000096][T17118] usb 10-1: config 0 descriptor?? [ 3024.004728][ T5649] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7534'. [ 3024.048380][ T3985] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3024.135948][ T5654] FAULT_INJECTION: forcing a failure. [ 3024.135948][ T5654] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.150644][ T5654] CPU: 0 UID: 0 PID: 5654 Comm: syz.4.7543 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3024.150671][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3024.150683][ T5654] Call Trace: [ 3024.150689][ T5654] [ 3024.150697][ T5654] dump_stack_lvl+0x16c/0x1f0 [ 3024.150726][ T5654] should_fail_ex+0x512/0x640 [ 3024.150751][ T5654] ? __kvmalloc_node_noprof+0x124/0x620 [ 3024.150781][ T5654] should_failslab+0xc2/0x120 [ 3024.150801][ T5654] __kvmalloc_node_noprof+0x137/0x620 [ 3024.150827][ T5654] ? bpf_test_init.isra.0+0x9e/0x140 [ 3024.150848][ T5654] ? bpf_test_run_xdp_live+0x13b/0x500 [ 3024.150868][ T5654] ? kasan_save_stack+0x33/0x60 [ 3024.150889][ T5654] ? bpf_test_run_xdp_live+0x13b/0x500 [ 3024.150910][ T5654] bpf_test_run_xdp_live+0x13b/0x500 [ 3024.150934][ T5654] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 3024.150966][ T5654] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 3024.151010][ T5654] ? _copy_from_user+0x59/0xd0 [ 3024.151036][ T5654] ? bpf_test_init.isra.0+0x6b/0x140 [ 3024.151058][ T5654] bpf_prog_test_run_xdp+0x824/0x1590 [ 3024.151088][ T5654] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 3024.151111][ T5654] ? __might_fault+0x80/0x190 [ 3024.151132][ T5654] ? fput+0x70/0xf0 [ 3024.151152][ T5654] ? __bpf_prog_get+0x97/0x2a0 [ 3024.151173][ T5654] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 3024.151196][ T5654] __sys_bpf+0x1707/0x4e70 [ 3024.151227][ T5654] ? __pfx___sys_bpf+0x10/0x10 [ 3024.151252][ T5654] ? ksys_write+0x190/0x250 [ 3024.151271][ T5654] ? __mutex_unlock_slowpath+0x163/0x800 [ 3024.151308][ T5654] ? fput+0x70/0xf0 [ 3024.151328][ T5654] ? ksys_write+0x1ac/0x250 [ 3024.151343][ T5654] ? __pfx_ksys_write+0x10/0x10 [ 3024.151362][ T5654] __x64_sys_bpf+0x78/0xc0 [ 3024.151387][ T5654] ? lockdep_hardirqs_on+0x7c/0x110 [ 3024.151406][ T5654] do_syscall_64+0xcd/0x4c0 [ 3024.151429][ T5654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3024.151447][ T5654] RIP: 0033:0x7f6b9078e9a9 [ 3024.151462][ T5654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3024.151480][ T5654] RSP: 002b:00007f6b915de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3024.151499][ T5654] RAX: ffffffffffffffda RBX: 00007f6b909b5fa0 RCX: 00007f6b9078e9a9 [ 3024.151511][ T5654] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 3024.151522][ T5654] RBP: 00007f6b915de090 R08: 0000000000000000 R09: 0000000000000000 [ 3024.151540][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3024.151551][ T5654] R13: 0000000000000000 R14: 00007f6b909b5fa0 R15: 00007fffb3fb8fd8 [ 3024.151572][ T5654] [ 3024.416316][ C0] vkms_vblank_simulate: vblank timer overrun [ 3024.437812][ T3985] usb 3-1: Using ep0 maxpacket: 32 [ 3024.444753][ T3985] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 3024.453171][ T3985] usb 3-1: config 0 has no interface number 0 [ 3024.459657][ T3985] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3024.471538][ T3985] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3024.480727][ T3985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3024.488876][ T3985] usb 3-1: Product: syz [ 3024.493387][ T3985] usb 3-1: Manufacturer: syz [ 3024.498151][ T3985] usb 3-1: SerialNumber: syz [ 3024.504885][ T3985] usb 3-1: config 0 descriptor?? [ 3024.513045][ T3985] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3024.522989][ T3985] em28xx 3-1:0.132: Video interface 132 found: [ 3024.659099][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3024.670127][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3024.724548][ T5645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3024.743320][ T5645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3024.771990][T17118] wacom 0003:056A:0331.0031: item 0 4 0 8 parsing failed [ 3024.779757][T17118] wacom 0003:056A:0331.0031: parse failed [ 3024.785580][T17118] wacom 0003:056A:0331.0031: probe with driver wacom failed with error -22 [ 3024.971901][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3024.975396][ T5645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7540'. [ 3024.992315][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.001920][ T3985] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 3025.009261][T17118] usb 10-1: USB disconnect, device number 3 [ 3025.222290][T23752] usb 7-1: USB disconnect, device number 121 [ 3025.233401][T23752] hid-steam 0003:28DE:1142.002F: Steam wireless receiver disconnected [ 3025.365132][ T5662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3026.040673][ T3985] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 3026.115659][ T3985] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 3026.252376][ T30] audit: type=1400 audit(2000000763.080:7844): avc: denied { ioctl } for pid=5663 comm="syz.4.7546" path="socket:[137529]" dev="sockfs" ino=137529 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3026.809245][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7548'. [ 3027.308731][ T5683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3027.375041][ T3985] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 3028.087487][ T3985] em28xx 3-1:0.132: analog set to bulk mode. [ 3028.105542][ T7888] em28xx 3-1:0.132: Registering V4L2 extension [ 3028.164755][ T5686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7551'. [ 3028.187548][T23752] usb 3-1: USB disconnect, device number 24 [ 3028.196637][ T7888] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 3028.216124][T23752] em28xx 3-1:0.132: Disconnecting em28xx [ 3029.915808][ T7888] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 3029.924880][ T7888] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 3029.939646][ T7888] em28xx 3-1:0.132: No AC97 audio processor [ 3029.976053][ T5714] ALSA: seq fatal error: cannot create timer (-22) [ 3030.014680][ T7888] usb 3-1: Decoder not found [ 3030.020764][ T7888] em28xx 3-1:0.132: failed to create media graph [ 3030.028965][ T7888] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 3030.036811][ T7888] em28xx 3-1:0.132: Remote control support is not available for this card. [ 3030.047135][T23752] em28xx 3-1:0.132: Closing input extension [ 3030.056405][ T5707] xt_CT: No such helper "pptp" [ 3030.175358][ T5716] pim6reg: entered allmulticast mode [ 3030.314962][ T5718] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3030.331634][ T5718] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3030.339529][ T5718] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3030.347982][ T5718] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3030.355767][ T5718] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 3030.567839][T23752] em28xx 3-1:0.132: Freeing device [ 3031.213677][ T30] audit: type=1400 audit(2000000767.670:7845): avc: denied { name_connect } for pid=5722 comm="syz.4.7559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 3031.777705][ T30] audit: type=1400 audit(2000000767.720:7846): avc: denied { listen } for pid=5722 comm="syz.4.7559" lport=36096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3031.800542][ T30] audit: type=1400 audit(2000000767.730:7847): avc: denied { accept } for pid=5722 comm="syz.4.7559" lport=36096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3032.927510][ T5739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3033.730134][ T5748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3035.017597][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 3035.198361][ T5763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3035.205495][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 3035.224714][ T9] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 3035.234685][ T9] usb 10-1: config 0 has no interface number 0 [ 3035.254738][ T9] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3035.276169][ T9] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3035.299900][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3035.339502][ T9] usb 10-1: Product: syz [ 3035.359023][ T9] usb 10-1: Manufacturer: syz [ 3035.440136][ T9] usb 10-1: SerialNumber: syz [ 3035.526375][ T5762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3035.564476][ T9] usb 10-1: config 0 descriptor?? [ 3035.726977][ T9] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3035.798228][ T9] em28xx 10-1:0.132: Video interface 132 found: [ 3035.958001][ T5751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3036.038610][ T5751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.263255][ T5774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3037.624676][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7566'. [ 3037.657843][ T9] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 3038.448576][ T9] em28xx 10-1:0.132: failed to read eeprom (err=-110) [ 3038.470316][ T9] em28xx 10-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 3038.662951][ T5787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3039.567499][ T9] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 3039.611883][ T9] em28xx 10-1:0.132: analog set to bulk mode. [ 3039.663837][ T3985] em28xx 10-1:0.132: Registering V4L2 extension [ 3039.683137][ T9] usb 10-1: USB disconnect, device number 4 [ 3039.700379][ T9] em28xx 10-1:0.132: Disconnecting em28xx [ 3040.060348][ T5803] No control pipe specified [ 3040.535658][ T30] audit: type=1400 audit(2000000777.370:7848): avc: denied { read } for pid=5798 comm="syz.4.7578" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3040.749373][ T30] audit: type=1400 audit(2000000777.370:7849): avc: denied { open } for pid=5798 comm="syz.4.7578" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3041.518518][ T5817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3041.734701][ T30] audit: type=1400 audit(2000000777.680:7850): avc: denied { ioctl } for pid=5798 comm="syz.4.7578" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3041.821110][ T30] audit: type=1400 audit(2000000778.240:7851): avc: denied { read } for pid=5798 comm="syz.4.7578" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3041.845099][ T30] audit: type=1400 audit(2000000778.240:7852): avc: denied { open } for pid=5798 comm="syz.4.7578" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3042.062004][ T5822] input: syz1 as /devices/virtual/input/input55 [ 3042.634798][ T3985] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 3042.644977][ T3985] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 3042.662251][ T3985] em28xx 10-1:0.132: No AC97 audio processor [ 3042.668792][T23752] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3042.697311][ T3985] usb 10-1: Decoder not found [ 3042.704032][ T3985] em28xx 10-1:0.132: failed to create media graph [ 3042.711389][ T3985] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 3042.723921][ T30] audit: type=1400 audit(2000000779.560:7853): avc: denied { open } for pid=5827 comm="syz.6.7582" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 3042.750607][ T3985] em28xx 10-1:0.132: Remote control support is not available for this card. [ 3042.829444][ T9] em28xx 10-1:0.132: Closing input extension [ 3042.851251][ T30] audit: type=1400 audit(2000000779.680:7854): avc: denied { ioctl } for pid=5827 comm="syz.6.7582" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 3042.879359][T23752] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3042.886047][T23752] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 3042.889204][ T9] em28xx 10-1:0.132: Freeing device [ 3042.921983][T23752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3042.934885][ T30] audit: type=1400 audit(2000000779.720:7855): avc: denied { read } for pid=5827 comm="syz.6.7582" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 3042.964568][ T30] audit: type=1400 audit(2000000779.720:7856): avc: denied { open } for pid=5827 comm="syz.6.7582" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 3042.991619][T23752] usb 5-1: config 0 descriptor?? [ 3043.257489][T17118] usb 7-1: new low-speed USB device number 122 using dummy_hcd [ 3043.314193][ T5838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3043.567320][T23752] zeroplus 0003:0C12:0005.0032: item fetching failed at offset 0/3 [ 3043.580243][T23752] zeroplus 0003:0C12:0005.0032: parse failed [ 3043.586820][T23752] zeroplus 0003:0C12:0005.0032: probe with driver zeroplus failed with error -22 [ 3043.649164][T17118] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3043.658374][T17118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3043.688632][T17118] usb 7-1: config 0 descriptor?? [ 3043.706612][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7585'. [ 3043.866998][ T30] audit: type=1400 audit(2000000780.700:7857): avc: denied { getopt } for pid=5844 comm="syz.0.7588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3043.890077][ T5845] delete_channel: no stack [ 3044.573138][T23752] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3045.069770][T23752] usb 3-1: Using ep0 maxpacket: 32 [ 3045.081844][T23752] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 3045.092300][T23752] usb 3-1: config 0 has no interface number 0 [ 3045.100558][T23752] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3045.119656][T23752] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3045.139087][T23752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3045.147536][T23752] usb 3-1: Product: syz [ 3045.151826][T23752] usb 3-1: Manufacturer: syz [ 3045.156591][T23752] usb 3-1: SerialNumber: syz [ 3045.171117][T23752] usb 3-1: config 0 descriptor?? [ 3045.189638][T23752] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3045.200943][T23752] em28xx 3-1:0.132: Video interface 132 found: [ 3045.225839][T17118] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3045.275348][T17118] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 3045.317800][T17118] asix 7-1:0.0: probe with driver asix failed with error -71 [ 3045.341909][T17118] usb 7-1: USB disconnect, device number 122 [ 3045.429123][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3045.509767][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3045.682415][T17118] usb 5-1: USB disconnect, device number 70 [ 3045.767030][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7585'. [ 3045.781094][T23752] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 3045.871700][ T5864] xt_CT: No such helper "pptp" [ 3045.980899][ T5869] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3046.103438][ T5870] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3046.111673][ T5870] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3046.123322][ T5870] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3046.131430][ T5870] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 3046.417471][T23752] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 3046.424242][T23752] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 3047.687118][ T5889] 9pnet_fd: Insufficient options for proto=fd [ 3047.872360][T23752] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 3048.272592][T23752] em28xx 3-1:0.132: analog set to bulk mode. [ 3048.280637][T17118] em28xx 3-1:0.132: Registering V4L2 extension [ 3048.408617][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 3048.408699][ T30] audit: type=1400 audit(2000000785.240:7860): avc: denied { connect } for pid=5893 comm="syz.0.7598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3048.523622][ T30] audit: type=1400 audit(2000000785.280:7861): avc: denied { write } for pid=5893 comm="syz.0.7598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3048.675635][T17118] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 3048.695350][T17118] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 3048.745477][ T9] usb 3-1: USB disconnect, device number 25 [ 3048.759098][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 3049.702095][ T5912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3049.989432][ T5913] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3050.011553][ T5913] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3050.019548][ T5913] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3050.030553][ T5913] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3050.038580][ T5913] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 3050.400306][T17118] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 3050.526257][T17118] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 3050.656502][ T5924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3051.038066][T17118] em28xx 3-1:0.132: No AC97 audio processor [ 3051.115079][T17118] usb 3-1: Decoder not found [ 3051.120985][T17118] em28xx 3-1:0.132: failed to create media graph [ 3051.133106][T17118] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 3051.146870][T17118] em28xx 3-1:0.132: Remote control support is not available for this card. [ 3051.194250][ T9] em28xx 3-1:0.132: Closing input extension [ 3051.220904][ T5922] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 3051.244644][ T30] audit: type=1400 audit(2000000788.080:7862): avc: denied { setopt } for pid=5920 comm="syz.2.7606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3051.289691][ T9] em28xx 3-1:0.132: Freeing device [ 3051.305613][ T30] audit: type=1400 audit(2000000788.130:7863): avc: denied { map } for pid=5920 comm="syz.2.7606" path="socket:[137079]" dev="sockfs" ino=137079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3051.368781][ T30] audit: type=1400 audit(2000000788.130:7864): avc: denied { read } for pid=5920 comm="syz.2.7606" path="socket:[137079]" dev="sockfs" ino=137079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3051.392357][ C1] vkms_vblank_simulate: vblank timer overrun [ 3051.956191][ T5938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3052.087635][T17118] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 3052.133590][ T5944] No control pipe specified [ 3052.494192][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7612'. [ 3052.524378][T17118] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3052.538551][T17118] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3052.549240][T17118] usb 10-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 3052.623310][T17118] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3052.654834][T17118] usb 10-1: config 0 descriptor?? [ 3052.837660][ T5886] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3053.048478][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 3053.478682][ T5886] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 3053.487938][T17118] hid-led 0003:1D34:0004.0033: item fetching failed at offset 5/7 [ 3053.495829][ T5886] usb 5-1: config 0 has no interface number 0 [ 3053.502317][T17118] hid-led 0003:1D34:0004.0033: probe with driver hid-led failed with error -22 [ 3053.512708][ T5886] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3053.640411][T17118] usb 10-1: USB disconnect, device number 5 [ 3053.655486][ T5886] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3053.667557][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3053.680471][ T5886] usb 5-1: Product: syz [ 3053.684694][ T5886] usb 5-1: Manufacturer: syz [ 3053.697592][ T5886] usb 5-1: SerialNumber: syz [ 3053.710064][ T5960] FAULT_INJECTION: forcing a failure. [ 3053.710064][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 3053.726606][ T5886] usb 5-1: config 0 descriptor?? [ 3053.741538][ T5886] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3053.751789][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.2.7615 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3053.751805][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3053.751812][ T5960] Call Trace: [ 3053.751817][ T5960] [ 3053.751822][ T5960] dump_stack_lvl+0x16c/0x1f0 [ 3053.751840][ T5960] should_fail_ex+0x512/0x640 [ 3053.751856][ T5960] ? fs_reclaim_acquire+0xae/0x150 [ 3053.751872][ T5960] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 3053.751886][ T5960] should_failslab+0xc2/0x120 [ 3053.751899][ T5960] __kmalloc_noprof+0xd2/0x510 [ 3053.751913][ T5960] tomoyo_realpath_from_path+0xc2/0x6e0 [ 3053.751927][ T5960] ? tomoyo_profile+0x47/0x60 [ 3053.751942][ T5960] tomoyo_path_number_perm+0x245/0x580 [ 3053.751959][ T5960] ? tomoyo_path_number_perm+0x237/0x580 [ 3053.751977][ T5960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3053.751995][ T5960] ? find_held_lock+0x2b/0x80 [ 3053.752022][ T5960] ? find_held_lock+0x2b/0x80 [ 3053.752035][ T5960] ? hook_file_ioctl_common+0x145/0x410 [ 3053.752053][ T5960] ? __fget_files+0x20e/0x3c0 [ 3053.752067][ T5960] security_file_ioctl+0x9b/0x240 [ 3053.752080][ T5960] __x64_sys_ioctl+0xb7/0x210 [ 3053.752097][ T5960] do_syscall_64+0xcd/0x4c0 [ 3053.752112][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3053.752124][ T5960] RIP: 0033:0x7f07d618e9a9 [ 3053.752134][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3053.752145][ T5960] RSP: 002b:00007f07d6f54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3053.752156][ T5960] RAX: ffffffffffffffda RBX: 00007f07d63b5fa0 RCX: 00007f07d618e9a9 [ 3053.752164][ T5960] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 3053.752170][ T5960] RBP: 00007f07d6f54090 R08: 0000000000000000 R09: 0000000000000000 [ 3053.752177][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3053.752183][ T5960] R13: 0000000000000000 R14: 00007f07d63b5fa0 R15: 00007fffbe24ee68 [ 3053.752197][ T5960] [ 3053.752202][ T5960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3053.902686][ C1] vkms_vblank_simulate: vblank timer overrun [ 3053.978719][ T5886] em28xx 5-1:0.132: Video interface 132 found: [ 3054.008214][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3054.023825][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.194255][ T30] audit: type=1400 audit(2000000791.030:7865): avc: denied { setopt } for pid=5963 comm="syz.2.7617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3054.253482][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7612'. [ 3054.272191][ T5886] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 3054.296401][ T30] audit: type=1400 audit(2000000791.050:7866): avc: denied { bind } for pid=5963 comm="syz.2.7617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3054.380841][ T30] audit: type=1400 audit(2000000791.050:7867): avc: denied { write } for pid=5963 comm="syz.2.7617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3054.949052][ T5973] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3054.956871][ T5973] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3054.966195][ T5973] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3054.974304][ T5973] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 3055.270418][ T5886] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 3055.278575][ T5886] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 3055.536091][ T5886] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 3055.567299][ T5886] em28xx 5-1:0.132: analog set to bulk mode. [ 3055.581504][T23752] em28xx 5-1:0.132: Registering V4L2 extension [ 3055.690666][ T5982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3055.814898][ T5886] usb 5-1: USB disconnect, device number 71 [ 3056.116555][ T5886] em28xx 5-1:0.132: Disconnecting em28xx [ 3056.147758][ T5946] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 3056.243220][ T5989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7625'. [ 3056.336963][ T3985] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3056.357521][ T5946] usb 10-1: Using ep0 maxpacket: 32 [ 3056.364690][ T5946] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3056.377537][ T5946] usb 10-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 3056.386736][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3056.423118][ T5946] usb 10-1: config 0 descriptor?? [ 3056.517531][ T3985] usb 3-1: Using ep0 maxpacket: 8 [ 3056.881389][T23752] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 3056.888901][T23752] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 3056.896034][T23752] em28xx 5-1:0.132: No AC97 audio processor [ 3056.903527][T23752] usb 5-1: Decoder not found [ 3056.908669][T23752] em28xx 5-1:0.132: failed to create media graph [ 3056.915039][T23752] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 3056.929498][ T3985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3056.943424][T23752] em28xx 5-1:0.132: Remote control support is not available for this card. [ 3056.967918][ T3985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3056.999118][ T3985] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 3057.010136][ T5886] em28xx 5-1:0.132: Closing input extension [ 3057.010496][ T3985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3057.021846][ T5886] em28xx 5-1:0.132: Freeing device [ 3057.042350][ T3985] usb 3-1: config 0 descriptor?? [ 3057.214169][ T5980] sp0: Synchronizing with TNC [ 3057.241686][ T5946] chicony 0003:04F2:1421.0034: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.9-1/input0 [ 3057.715940][ T6003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3057.835729][ T3985] lenovo 0003:17EF:6009.0035: unknown main item tag 0x1 [ 3058.715309][ T3985] lenovo 0003:17EF:6009.0035: hidraw1: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0 [ 3058.780256][ T6018] netlink: 'syz.6.7630': attribute type 1 has an invalid length. [ 3058.784473][ T5886] usb 10-1: USB disconnect, device number 6 [ 3060.032552][ T6033] No control pipe specified [ 3060.549026][ T3985] usb 3-1: USB disconnect, device number 26 [ 3061.177620][ T6018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3063.086627][ T6022] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 3063.458468][ T30] audit: type=1400 audit(2000000798.030:7868): avc: denied { mount } for pid=6043 comm="syz.2.7635" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 3064.285707][ T5834] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3064.286915][ T6056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7636'. [ 3064.304296][ T5834] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 3064.612323][ T30] audit: type=1400 audit(2000000801.420:7869): avc: denied { mount } for pid=6055 comm="syz.4.7637" name="/" dev="rpc_pipefs" ino=138369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 3064.947489][ T30] audit: type=1400 audit(2000000801.430:7870): avc: denied { mounton } for pid=6055 comm="syz.4.7637" path="/436/file0" dev="rpc_pipefs" ino=138369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 3064.948132][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3064.995283][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3065.030384][ T6070] FAULT_INJECTION: forcing a failure. [ 3065.030384][ T6070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3065.032065][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3065.056745][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.2.7640 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3065.056772][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3065.056782][ T6070] Call Trace: [ 3065.056789][ T6070] [ 3065.056796][ T6070] dump_stack_lvl+0x16c/0x1f0 [ 3065.056824][ T6070] should_fail_ex+0x512/0x640 [ 3065.056851][ T6070] _copy_from_user+0x2e/0xd0 [ 3065.056879][ T6070] csum_and_copy_from_iter_full+0x21a/0x1f70 [ 3065.056919][ T6070] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 3065.056947][ T6070] ? rcu_is_watching+0x12/0xc0 [ 3065.056970][ T6070] ? trace_kmem_cache_alloc+0x28/0xc0 [ 3065.056990][ T6070] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 3065.057018][ T6070] ? kmalloc_reserve+0x18b/0x2c0 [ 3065.057042][ T6070] ? trace_kmem_cache_alloc+0x28/0xc0 [ 3065.057067][ T6070] ip_generic_getfrag+0x170/0x270 [ 3065.057093][ T6070] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 3065.057117][ T6070] ? do_csum+0x26f/0x2d0 [ 3065.057140][ T6070] raw_getfrag+0x22d/0x2a0 [ 3065.057161][ T6070] __ip_append_data+0x355c/0x4240 [ 3065.057189][ T6070] ? __pfx_raw_getfrag+0x10/0x10 [ 3065.057213][ T6070] ? ip_dst_mtu_maybe_forward.constprop.0+0x311/0x6e0 [ 3065.057237][ T6070] ? __pfx___ip_append_data+0x10/0x10 [ 3065.057265][ T6070] ip_append_data+0x10f/0x1a0 [ 3065.057291][ T6070] ? __pfx_raw_getfrag+0x10/0x10 [ 3065.057309][ T6070] raw_sendmsg+0xf01/0x3820 [ 3065.057333][ T6070] ? avc_has_perm_noaudit+0x80/0x3b0 [ 3065.057360][ T6070] ? __pfx_raw_sendmsg+0x10/0x10 [ 3065.057377][ T6070] ? avc_has_perm_noaudit+0x149/0x3b0 [ 3065.057402][ T6070] ? avc_has_perm+0x144/0x1f0 [ 3065.057435][ T6070] ? sock_has_perm+0x259/0x2f0 [ 3065.057474][ T6070] ? __pfx_raw_sendmsg+0x10/0x10 [ 3065.057494][ T6070] inet_sendmsg+0x119/0x140 [ 3065.057512][ T6070] __sys_sendto+0x43c/0x520 [ 3065.057531][ T6070] ? __pfx___sys_sendto+0x10/0x10 [ 3065.057568][ T6070] ? ksys_write+0x1ac/0x250 [ 3065.057584][ T6070] ? __pfx_ksys_write+0x10/0x10 [ 3065.057602][ T6070] __x64_sys_sendto+0xe0/0x1c0 [ 3065.057618][ T6070] ? do_syscall_64+0x91/0x4c0 [ 3065.057636][ T6070] ? lockdep_hardirqs_on+0x7c/0x110 [ 3065.057655][ T6070] do_syscall_64+0xcd/0x4c0 [ 3065.057676][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3065.057693][ T6070] RIP: 0033:0x7f07d618e9a9 [ 3065.057708][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3065.057724][ T6070] RSP: 002b:00007f07d6f33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3065.057740][ T6070] RAX: ffffffffffffffda RBX: 00007f07d63b6080 RCX: 00007f07d618e9a9 [ 3065.057751][ T6070] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 3065.057761][ T6070] RBP: 00007f07d6f33090 R08: 0000200000000340 R09: 0000000000000010 [ 3065.057772][ T6070] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 3065.057782][ T6070] R13: 0000000000000000 R14: 00007f07d63b6080 R15: 00007fffbe24ee68 [ 3065.057806][ T6070] [ 3065.797450][ T30] audit: type=1400 audit(2000000802.620:7871): avc: denied { unmount } for pid=29658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 3067.605729][T25863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3067.618280][T25863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3067.627033][T25863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3067.634692][T25863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3067.643418][T25863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3067.711845][ T6093] input: syz1 as /devices/virtual/input/input56 [ 3067.718224][ T30] audit: type=1400 audit(2000000804.530:7872): avc: denied { mounton } for pid=6090 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 3068.051785][ T6101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3068.833613][ T6066] infiniband syz0: set active [ 3068.838404][ T5886] wg1 speed is unknown, defaulting to 1000 [ 3068.870738][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7649'. [ 3068.879943][ T6066] infiniband syz0: added wg1 [ 3068.953934][ T6066] syz0: rxe_create_cq: returned err = -12 [ 3068.962067][ T6066] infiniband syz0: Couldn't create ib_mad CQ [ 3068.975135][ T6066] infiniband syz0: Couldn't open port 1 [ 3069.095955][ T6066] RDS/IB: syz0: added [ 3069.106411][ T6066] smc: adding ib device syz0 with port count 1 [ 3069.112766][ T6066] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 3069.224777][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3069.236131][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 3069.263441][ T5886] wg1 speed is unknown, defaulting to 1000 [ 3069.740566][ T6114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3069.747511][T25863] Bluetooth: hci2: command tx timeout [ 3069.880121][ T30] audit: type=1400 audit(2000000806.700:7873): avc: denied { read } for pid=6118 comm="syz.6.7653" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3069.897920][ T6120] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3069.977547][ T30] audit: type=1400 audit(2000000806.710:7874): avc: denied { open } for pid=6118 comm="syz.6.7653" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3069.990598][ T6117] 9pnet_fd: Insufficient options for proto=fd [ 3070.001179][ T30] audit: type=1400 audit(2000000806.710:7875): avc: denied { ioctl } for pid=6118 comm="syz.6.7653" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3070.256950][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 3070.270192][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 3070.277601][ T6090] bridge_slave_0: entered allmulticast mode [ 3070.284830][ T6090] bridge_slave_0: entered promiscuous mode [ 3070.764263][ T7888] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3070.771765][ T7888] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3070.781992][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 3070.793545][ T7888] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3070.801097][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 3070.817887][ T7888] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3070.825203][ T7888] rtc rtc0: __rtc_set_alarm: err=-22 [ 3070.830741][ T6090] bridge_slave_1: entered allmulticast mode [ 3070.838393][ T6090] bridge_slave_1: entered promiscuous mode [ 3070.848797][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3071.178739][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7652'. [ 3071.557731][ T6138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3071.918726][T25863] Bluetooth: hci2: command tx timeout [ 3072.010464][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3072.299826][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3073.185626][ T6152] overlayfs: failed to resolve './file1': -2 [ 3073.222058][ T30] audit: type=1400 audit(2000000810.020:7876): avc: denied { mount } for pid=6145 comm="syz.4.7660" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 3073.465075][ T7888] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 3073.597561][ T30] audit: type=1400 audit(2000000810.430:7877): avc: denied { unmount } for pid=29658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 3073.634553][ T6090] team0: Port device team_slave_0 added [ 3073.672228][ T7888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3073.683425][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3073.698220][ T6090] team0: Port device team_slave_1 added [ 3073.775890][ T6160] trusted_key: encrypted_key: insufficient parameters specified [ 3073.857465][ T7888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3073.870096][ T7888] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3073.887573][ T7888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3073.908093][ T7888] usb 7-1: config 0 descriptor?? [ 3073.988143][T25863] Bluetooth: hci2: command tx timeout [ 3074.103519][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3074.128861][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3074.154758][ C1] vkms_vblank_simulate: vblank timer overrun [ 3074.187910][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3074.323320][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3074.330610][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3074.377813][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3074.522958][ T6167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3074.571323][ T7888] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 3074.875113][ T7888] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 3074.890847][ T7888] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0036/input/input57 [ 3075.037179][ T7888] cm6533_jd 0003:0D8C:0022.0036: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 3075.056689][ T6090] hsr_slave_0: entered promiscuous mode [ 3075.108647][ T6090] hsr_slave_1: entered promiscuous mode [ 3075.141382][ T7888] usb 7-1: USB disconnect, device number 123 [ 3075.364253][ T6178] No control pipe specified [ 3075.813297][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3075.841528][ T6173] fido_id[6173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 3076.067840][T25863] Bluetooth: hci2: command tx timeout [ 3076.823754][ T6090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3076.836729][ T6090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3076.873123][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3076.950346][ T6090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3076.964796][ T6090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3077.758230][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7669'. [ 3078.325023][ T6090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3078.335778][ T6090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3078.395802][ T6066] wg1 speed is unknown, defaulting to 1000 [ 3078.565426][ T6090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3078.589335][ T6090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3078.650048][ T30] audit: type=1400 audit(2000000815.490:7878): avc: denied { read } for pid=6211 comm="syz.6.7677" path="socket:[138689]" dev="sockfs" ino=138689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3078.896452][ T6217] No control pipe specified [ 3080.594645][ T6090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3080.640018][ T6090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3080.758067][ T6090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3081.094067][ T6090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3081.122741][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3081.132727][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3081.142212][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3081.152237][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3081.159617][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3081.335961][ T6231] wg1 speed is unknown, defaulting to 1000 [ 3081.435597][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3081.453628][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 3081.504570][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 3081.511768][ T6379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3081.525044][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 3081.532279][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3081.577106][ T6090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3081.677854][ T1292] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 3081.687142][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.702936][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.716968][ T6247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3083.388302][ T6262] Falling back ldisc for ptm0. [ 3083.464063][T25863] Bluetooth: hci1: command tx timeout [ 3083.951011][ T6379] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3083.996176][ T30] audit: type=1400 audit(2000000820.810:7879): avc: denied { connect } for pid=6273 comm="syz.6.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3084.017513][ T6379] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3084.042423][ T30] audit: type=1400 audit(2000000820.830:7880): avc: denied { listen } for pid=6273 comm="syz.6.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3084.114368][ T6275] syz.2.7688: attempt to access beyond end of device [ 3084.114368][ T6275] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3084.144408][ T30] audit: type=1400 audit(2000000820.910:7881): avc: denied { getopt } for pid=6273 comm="syz.6.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3084.205042][T23752] wg1 speed is unknown, defaulting to 1000 [ 3084.211747][T23752] syz0: Port: 1 Link DOWN [ 3084.216109][T23752] wg1 speed is unknown, defaulting to 1000 [ 3084.681301][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7687'. [ 3084.719848][ T6379] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3084.749196][ T6379] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3085.052776][ T6379] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3085.087415][ T6379] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3085.108949][ T30] audit: type=1400 audit(2000000821.950:7882): avc: denied { read } for pid=6291 comm="syz.4.7694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3085.367458][ T5886] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3085.501144][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3085.508018][T25863] Bluetooth: hci1: command tx timeout [ 3085.600067][ T6379] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3085.620232][ T6379] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3085.699904][ T5886] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3085.710534][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3085.752620][ T5886] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3085.766629][ T5886] usb 5-1: config 1 has no interface number 1 [ 3085.773096][ T5886] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3085.786702][ T5886] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3085.802197][ T5886] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3085.811601][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3085.819724][ T5886] usb 5-1: Product: syz [ 3085.828380][ T5886] usb 5-1: Manufacturer: syz [ 3085.835154][ T5886] usb 5-1: SerialNumber: syz [ 3085.893424][ T6090] veth0_vlan: entered promiscuous mode [ 3085.922204][ T6090] veth1_vlan: entered promiscuous mode [ 3086.193320][ T6305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3086.448490][ T6231] chnl_net:caif_netlink_parms(): no params data found [ 3086.621498][T25863] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3086.637752][T25863] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 3086.642558][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 3086.658834][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 3086.666194][ T6231] bridge_slave_0: entered allmulticast mode [ 3086.771618][ T6231] bridge_slave_0: entered promiscuous mode [ 3086.797016][ T6379] bridge_slave_1: left allmulticast mode [ 3086.802917][ T6379] bridge_slave_1: left promiscuous mode [ 3086.808742][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 3086.817507][ T6379] bridge_slave_0: left allmulticast mode [ 3086.823283][ T6379] bridge_slave_0: left promiscuous mode [ 3086.833362][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 3087.494252][ T6315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3087.587598][T25863] Bluetooth: hci1: command tx timeout [ 3088.425752][ T5886] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 3088.433441][ T5886] usb 5-1: MIDIStreaming interface descriptor not found [ 3088.521628][ T5886] usb 5-1: USB disconnect, device number 72 [ 3088.763083][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3088.773221][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3088.783246][ T6379] bond0 (unregistering): Released all slaves [ 3088.794674][ T6090] veth0_macvtap: entered promiscuous mode [ 3088.802263][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 3088.809656][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 3088.816830][ T6231] bridge_slave_1: entered allmulticast mode [ 3088.825141][ T6231] bridge_slave_1: entered promiscuous mode [ 3089.560861][ T6337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3089.633483][ T6090] veth1_macvtap: entered promiscuous mode [ 3089.661777][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3089.670943][T25863] Bluetooth: hci1: command tx timeout [ 3089.759327][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3089.824170][ T6338] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3089.842479][ T6231] team0: Port device team_slave_0 added [ 3089.846166][ T6338] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3090.012811][ T6338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3090.057683][ T6338] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3090.126728][ T6344] autofs: Bad value for 'fd' [ 3090.569254][ T6338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 3090.750295][ T6231] team0: Port device team_slave_1 added [ 3090.913334][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3091.068244][ T6354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3091.423730][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3091.452830][ T6090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3091.551794][ T6090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3091.581028][ T6090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3091.599212][ T6090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3091.629710][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3091.638246][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3091.672275][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3091.990269][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3091.999186][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3092.042609][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3092.390023][ T6231] hsr_slave_0: entered promiscuous mode [ 3092.752267][ T6231] hsr_slave_1: entered promiscuous mode [ 3092.765278][ T6231] debugfs: 'hsr0' already exists in 'hsr' [ 3092.773289][ T6231] Cannot create hsr debugfs directory [ 3092.930622][ T6379] hsr_slave_0: left promiscuous mode [ 3092.939749][ T6379] hsr_slave_1: left promiscuous mode [ 3093.533126][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3093.547778][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3093.560899][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3093.571667][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3093.713892][ T6379] veth1_macvtap: left promiscuous mode [ 3093.815526][ T6379] veth0_macvtap: left promiscuous mode [ 3093.850280][ T6379] veth1_vlan: left promiscuous mode [ 3093.855886][ T6379] veth0_vlan: left promiscuous mode [ 3094.493169][ T6379] ------------[ cut here ]------------ [ 3094.499063][ T6379] WARNING: CPU: 0 PID: 6379 at net/ipv6/route.c:4856 rt6_multipath_rebalance.part.0+0x879/0xfd0 [ 3094.509512][ T6379] Modules linked in: [ 3094.513688][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: kworker/u8:20 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3094.525612][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3094.535755][ T6379] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3094.540612][ T6379] RIP: 0010:rt6_multipath_rebalance.part.0+0x879/0xfd0 [ 3094.547532][ T6379] Code: a4 24 54 06 00 00 31 ff 44 89 e6 e8 11 34 83 f7 45 85 e4 0f 84 44 fe ff ff 41 bf ff ff ff ff e9 82 fe ff ff e8 b8 38 83 f7 90 <0f> 0b 90 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 a1 38 83 f7 [ 3094.558008][ T30] audit: type=1400 audit(2000000831.390:7883): avc: denied { write } for pid=5807 comm="syz-executor" path="pipe:[4496]" dev="pipefs" ino=4496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 3094.567192][ T6379] RSP: 0018:ffffc9000d39f0c0 EFLAGS: 00010293 [ 3094.567302][ T6379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a3869ca [ 3094.567316][ T6379] RDX: ffff88802d0ca440 RSI: ffffffff8a387038 RDI: ffff888058ec6808 [ 3094.567329][ T6379] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 3094.567361][ T6379] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805978a400 [ 3094.567374][ T6379] R13: ffffed100b2f1492 R14: 0000000000000100 R15: 0000000000000001 [ 3094.567387][ T6379] FS: 0000000000000000(0000) GS:ffff888124722000(0000) knlGS:0000000000000000 [ 3094.567405][ T6379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3094.567418][ T6379] CR2: 00007fffbe24ef88 CR3: 000000002badd000 CR4: 00000000003526f0 [ 3094.567431][ T6379] Call Trace: [ 3094.567439][ T6379] [ 3094.567454][ T6379] fib6_ifdown+0x6dc/0x8f0 [ 3094.670617][ T6379] ? __pfx_fib6_ifdown+0x10/0x10 [ 3094.675550][ T6379] fib6_clean_node+0x2a4/0x5b0 [ 3094.680338][ T6379] ? __pfx_fib6_clean_node+0x10/0x10 [ 3094.685610][ T6379] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3094.691774][ T6379] fib6_walk_continue+0x44f/0x8d0 [ 3094.696796][ T6379] fib6_walk+0x182/0x370 [ 3094.701039][ T6379] ? __pfx_fib6_ifdown+0x10/0x10 [ 3094.705958][ T6379] fib6_clean_tree+0xd4/0x110 [ 3094.710634][ T6379] ? __pfx_fib6_clean_tree+0x10/0x10 [ 3094.715899][ T6379] ? __lock_acquire+0xb8a/0x1c90 [ 3094.720859][ T6379] ? __pfx_fib6_clean_node+0x10/0x10 [ 3094.726129][ T6379] ? __pfx_fib6_ifdown+0x10/0x10 [ 3094.731070][ T6379] ? __pfx_fib6_ifdown+0x10/0x10 [ 3094.736001][ T6379] __fib6_clean_all+0x107/0x2d0 [ 3094.740854][ T6379] rt6_disable_ip+0x2ec/0x990 [ 3094.745512][ T6379] ? __mutex_trylock_common+0xe9/0x250 [ 3094.750986][ T6379] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3094.756858][ T6379] ? __pfx_rt6_disable_ip+0x10/0x10 [ 3094.762056][ T6379] ? rcu_is_watching+0x12/0xc0 [ 3094.766817][ T6379] ? find_held_lock+0x2b/0x80 [ 3094.771565][ T6379] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 3094.777032][ T6379] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 3094.782950][ T6379] addrconf_notify+0x220/0x19e0 [ 3094.787818][ T6379] ? ip6mr_device_event+0x1bc/0x230 [ 3094.793008][ T6379] notifier_call_chain+0xb9/0x410 [ 3094.798032][ T6379] ? __pfx_addrconf_notify+0x10/0x10 [ 3094.803306][ T6379] call_netdevice_notifiers_info+0xbe/0x140 [ 3094.809211][ T6379] dev_close_many+0x319/0x630 [ 3094.813886][ T6379] ? __pfx_dev_close_many+0x10/0x10 [ 3094.819092][ T6379] unregister_netdevice_many_notify+0x578/0x2700 [ 3094.825403][ T6379] ? lockdep_hardirqs_on+0x7c/0x110 [ 3094.830608][ T6379] ? batadv_tt_local_event+0x455/0x7f0 [ 3094.836052][ T6379] ? __local_bh_enable_ip+0xa4/0x120 [ 3094.841339][ T6379] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3094.848098][ T6379] ? unregister_netdevice_queue+0x22e/0x3f0 [ 3094.853975][ T6379] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3094.860217][ T6379] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 3094.866008][ T6379] default_device_exit_batch+0x853/0xaf0 [ 3094.871661][ T6379] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3094.878332][ T6379] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 3094.883790][ T6379] ? __pfx___might_resched+0x10/0x10 [ 3094.889089][ T6379] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3094.895226][ T6379] ops_undo_list+0x360/0xab0 [ 3094.899816][ T6379] ? __pfx_ops_undo_list+0x10/0x10 [ 3094.904926][ T6379] ? __local_bh_enable_ip+0xa4/0x120 [ 3094.910218][ T6379] cleanup_net+0x408/0x890 [ 3094.914619][ T6379] ? __pfx_cleanup_net+0x10/0x10 [ 3094.919574][ T6379] ? rcu_is_watching+0x12/0xc0 [ 3094.924322][ T6379] process_one_work+0x9cf/0x1b70 [ 3094.929264][ T6379] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 3094.935407][ T6379] ? __pfx_process_one_work+0x10/0x10 [ 3094.940788][ T6379] ? assign_work+0x1a0/0x250 [ 3094.945360][ T6379] worker_thread+0x6c8/0xf10 [ 3094.949955][ T6379] ? __pfx_worker_thread+0x10/0x10 [ 3094.955047][ T6379] kthread+0x3c2/0x780 [ 3094.959111][ T6379] ? __pfx_kthread+0x10/0x10 [ 3094.963682][ T6379] ? rcu_is_watching+0x12/0xc0 [ 3094.968444][ T6379] ? __pfx_kthread+0x10/0x10 [ 3094.973013][ T6379] ret_from_fork+0x5d7/0x6f0 [ 3094.978292][ T6379] ? __pfx_kthread+0x10/0x10 [ 3094.982863][ T6379] ret_from_fork_asm+0x1a/0x30 [ 3094.987635][ T6379] [ 3094.990654][ T6379] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3094.997923][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: kworker/u8:20 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 3095.009793][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3095.019829][ T6379] Workqueue: netns cleanup_net [ 3095.024592][ T6379] Call Trace: [ 3095.027866][ T6379] [ 3095.030778][ T6379] dump_stack_lvl+0x3d/0x1f0 [ 3095.035354][ T6379] panic+0x71c/0x800 [ 3095.039234][ T6379] ? __pfx_panic+0x10/0x10 [ 3095.043633][ T6379] ? show_trace_log_lvl+0x29b/0x3e0 [ 3095.048841][ T6379] ? check_panic_on_warn+0x1f/0xb0 [ 3095.053947][ T6379] ? rt6_multipath_rebalance.part.0+0x879/0xfd0 [ 3095.060185][ T6379] check_panic_on_warn+0xab/0xb0 [ 3095.065107][ T6379] __warn+0xf6/0x3c0 [ 3095.068979][ T6379] ? rt6_multipath_rebalance.part.0+0x879/0xfd0 [ 3095.075202][ T6379] report_bug+0x3c3/0x580 [ 3095.079511][ T6379] ? rt6_multipath_rebalance.part.0+0x879/0xfd0 [ 3095.085734][ T6379] handle_bug+0x184/0x210 [ 3095.090046][ T6379] exc_invalid_op+0x17/0x50 [ 3095.094531][ T6379] asm_exc_invalid_op+0x1a/0x20 [ 3095.099360][ T6379] RIP: 0010:rt6_multipath_rebalance.part.0+0x879/0xfd0 [ 3095.106192][ T6379] Code: a4 24 54 06 00 00 31 ff 44 89 e6 e8 11 34 83 f7 45 85 e4 0f 84 44 fe ff ff 41 bf ff ff ff ff e9 82 fe ff ff e8 b8 38 83 f7 90 <0f> 0b 90 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 a1 38 83 f7 [ 3095.125793][ T6379] RSP: 0018:ffffc9000d39f0c0 EFLAGS: 00010293 [ 3095.131839][ T6379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a3869ca [ 3095.139788][ T6379] RDX: ffff88802d0ca440 RSI: ffffffff8a387038 RDI: ffff888058ec6808 [ 3095.147738][ T6379] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 3095.155688][ T6379] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805978a400 [ 3095.163638][ T6379] R13: ffffed100b2f1492 R14: 0000000000000100 R15: 0000000000000001 [ 3095.171594][ T6379] ? rt6_multipath_rebalance.part.0+0x20a/0xfd0 [ 3095.177819][ T6379] ? rt6_multipath_rebalance.part.0+0x878/0xfd0 [ 3095.184048][ T6379] fib6_ifdown+0x6dc/0x8f0 [ 3095.188466][ T6379] ? __pfx_fib6_ifdown+0x10/0x10 [ 3095.193397][ T6379] fib6_clean_node+0x2a4/0x5b0 [ 3095.198161][ T6379] ? __pfx_fib6_clean_node+0x10/0x10 [ 3095.203429][ T6379] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3095.209572][ T6379] fib6_walk_continue+0x44f/0x8d0 [ 3095.214580][ T6379] fib6_walk+0x182/0x370 [ 3095.218803][ T6379] ? __pfx_fib6_ifdown+0x10/0x10 [ 3095.223721][ T6379] fib6_clean_tree+0xd4/0x110 [ 3095.228389][ T6379] ? __pfx_fib6_clean_tree+0x10/0x10 [ 3095.233654][ T6379] ? __lock_acquire+0xb8a/0x1c90 [ 3095.238576][ T6379] ? __pfx_fib6_clean_node+0x10/0x10 [ 3095.243856][ T6379] ? __pfx_fib6_ifdown+0x10/0x10 [ 3095.248780][ T6379] ? __pfx_fib6_ifdown+0x10/0x10 [ 3095.253710][ T6379] __fib6_clean_all+0x107/0x2d0 [ 3095.258556][ T6379] rt6_disable_ip+0x2ec/0x990 [ 3095.263213][ T6379] ? __mutex_trylock_common+0xe9/0x250 [ 3095.268650][ T6379] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3095.274521][ T6379] ? __pfx_rt6_disable_ip+0x10/0x10 [ 3095.279700][ T6379] ? rcu_is_watching+0x12/0xc0 [ 3095.284444][ T6379] ? find_held_lock+0x2b/0x80 [ 3095.289104][ T6379] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 3095.294551][ T6379] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 3095.300448][ T6379] addrconf_notify+0x220/0x19e0 [ 3095.305298][ T6379] ? ip6mr_device_event+0x1bc/0x230 [ 3095.310476][ T6379] notifier_call_chain+0xb9/0x410 [ 3095.315483][ T6379] ? __pfx_addrconf_notify+0x10/0x10 [ 3095.320787][ T6379] call_netdevice_notifiers_info+0xbe/0x140 [ 3095.326675][ T6379] dev_close_many+0x319/0x630 [ 3095.331336][ T6379] ? __pfx_dev_close_many+0x10/0x10 [ 3095.336533][ T6379] unregister_netdevice_many_notify+0x578/0x2700 [ 3095.342869][ T6379] ? lockdep_hardirqs_on+0x7c/0x110 [ 3095.348056][ T6379] ? batadv_tt_local_event+0x455/0x7f0 [ 3095.353511][ T6379] ? __local_bh_enable_ip+0xa4/0x120 [ 3095.358776][ T6379] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3095.365527][ T6379] ? unregister_netdevice_queue+0x22e/0x3f0 [ 3095.371402][ T6379] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3095.377622][ T6379] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 3095.383418][ T6379] default_device_exit_batch+0x853/0xaf0 [ 3095.389036][ T6379] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3095.395171][ T6379] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 3095.400613][ T6379] ? __pfx___might_resched+0x10/0x10 [ 3095.405880][ T6379] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3095.412097][ T6379] ops_undo_list+0x360/0xab0 [ 3095.416704][ T6379] ? __pfx_ops_undo_list+0x10/0x10 [ 3095.421817][ T6379] ? __local_bh_enable_ip+0xa4/0x120 [ 3095.427086][ T6379] cleanup_net+0x408/0x890 [ 3095.431486][ T6379] ? __pfx_cleanup_net+0x10/0x10 [ 3095.436406][ T6379] ? rcu_is_watching+0x12/0xc0 [ 3095.441153][ T6379] process_one_work+0x9cf/0x1b70 [ 3095.446088][ T6379] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 3095.452223][ T6379] ? __pfx_process_one_work+0x10/0x10 [ 3095.457577][ T6379] ? assign_work+0x1a0/0x250 [ 3095.462162][ T6379] worker_thread+0x6c8/0xf10 [ 3095.466743][ T6379] ? __pfx_worker_thread+0x10/0x10 [ 3095.471835][ T6379] kthread+0x3c2/0x780 [ 3095.475903][ T6379] ? __pfx_kthread+0x10/0x10 [ 3095.480501][ T6379] ? rcu_is_watching+0x12/0xc0 [ 3095.485255][ T6379] ? __pfx_kthread+0x10/0x10 [ 3095.489826][ T6379] ret_from_fork+0x5d7/0x6f0 [ 3095.494405][ T6379] ? __pfx_kthread+0x10/0x10 [ 3095.498974][ T6379] ret_from_fork_asm+0x1a/0x30 [ 3095.503728][ T6379] [ 3095.506950][ T6379] Kernel Offset: disabled [ 3095.511273][ T6379] Rebooting in 86400 seconds..