last executing test programs: 8m42.03134601s ago: executing program 0 (id=471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$qrtrtun(r2, &(0x7f0000001200)="a940f1fcb5531aada6053052b0e61999d0ab57ea874a6e3e065cf259bd128d872f566c0848622d6eeaf18ddaedb2644a0a2061768bd909bd92b4ed97b1e09da22b01ebe6eff2069bbafc0fdfe814f624538d809c38511cb57143e08b326ca44e7640e0bd0f7103faa626a6cda06bb7dd38e25fec6d4221ce758067606dcd61c6f645c560057635f858f812e4a37ef77b5748e61e4b6e620120171154d009f163d08fc73dd4b4d452ba4fae3c8adb2f1767458ce7612530251e6a4caac5e8cc1b054f35f77468afd1f28b1a1c65c763c7b67f17dce0585222b7df63cee7e1c9a84240ed990bea8f01296be91b5a43", 0xee) 8m41.920644963s ago: executing program 0 (id=472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04030b"], 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x1, 0x4}, &(0x7f0000001340)=[{}, {}, {}, {}]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x10, 0x803, 0x0) write$qrtrtun(r2, &(0x7f0000001200)="a940f1fcb5531aada6053052b0e61999d0ab57ea874a6e3e065cf259bd128d872f566c0848622d6eeaf18ddaedb2644a0a2061768bd909bd92b4ed97b1e09da22b01ebe6eff2069bbafc0fdfe814f624538d809c38511cb57143e08b326ca44e7640e0bd0f7103faa626a6cda06bb7dd38e25fec6d4221ce758067606dcd61c6f645c560057635f858f812e4a37ef77b5748e61e4b6e620120171154d009f163d08fc73dd4b4d452ba4fae3c8adb2f1767458ce7612530251e6a4caac5e8cc1b054f35f77468afd1f28b1a1c65c763c7b67f17dce0585222b7df63cee7e1c9a84240ed990bea8f01296be91b5a43", 0xee) 8m40.940390347s ago: executing program 0 (id=473): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="41000200010001", 0x7) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000080001"], 0x44}}, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000d00)={0x1, [{0x0, 0x0, 0x8, 0x0}, {0x1, 0x40, 0x676, &(0x7f0000000140)="0f32c2ab86cc099e90b45f49fb90d8cb6c5ba317cc1b223e0cb28e9a3619bcbc0ee81263ff6c474b337a1b174c2b1f3bbae6ba8fd753ba2650bc1e917997e50c7930f0093fb456579baa5603273c4d9d2f165578cd4ec6d455a6e0072c9d35c0079c5cebad39d5ae1603acb21a2ef5cc7394e1a89aef36c4b579afd7"}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x2, 0x0, 0xeae, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x360, 0xbf4e, &(0x7f0000000080)="75abfb398c90449558fc4c0fc2f09794bf3f76cffe109111670815b8b0f055d49cc40824e818c0862edd85b680da06eb6e43ad636d01a79f53ee675a842c1cd79f754de2f3e375fa3bc0a1b1b6b5686761c96dcee7157762a2157ef6744326d40f21d6c7aada077b38014f71"}, {0x0, 0xfffffffffffffcd2, 0x6610, 0x0}, {0x7, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x83, 0x0}, {0x2, 0x0, 0x1, 0x0}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010000108000100000000000000", @ANYRES32=0x0, @ANYBLOB="022000001c00040008002900bad3060008001b0000000000"], 0x30}}, 0x0) 8m40.540819336s ago: executing program 0 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 8m39.9340371s ago: executing program 0 (id=479): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980901, 0x3, @value=0x140000000000}) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[], 0x0) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0xbe130000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xc7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) pselect6(0x40, &(0x7f00000002c0)={0x8001ff, 0xff, 0x800000000000, 0x8, 0x7f, 0x8, 0x7ff, 0x4}, 0x0, &(0x7f0000000240)={0xe402, 0x0, 0xffffffffffffffff, 0x3, 0x63, 0xfffffffffffffffc, 0x9, 0x150a}, 0x0, 0x0) 8m37.611211226s ago: executing program 0 (id=488): r0 = fanotify_init(0x200, 0x0) r1 = dup(r0) fanotify_mark(r0, 0x1, 0x8001053, r1, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) read$msr(r3, &(0x7f0000000180)=""/174, 0xae) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 8m36.903585752s ago: executing program 32 (id=488): r0 = fanotify_init(0x200, 0x0) r1 = dup(r0) fanotify_mark(r0, 0x1, 0x8001053, r1, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) read$msr(r3, &(0x7f0000000180)=""/174, 0xae) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 5m59.817115622s ago: executing program 4 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2108, 0x43502}, [@IFLA_EXT_MASK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c080}, 0x4080) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x2) r8 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x601f, 0x3e80, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) recvfrom(r6, 0x0, 0xfffffffffffffdf3, 0x2100, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r7) 5m58.659798316s ago: executing program 4 (id=968): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1337739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d13bc5ee2dd191d24b47eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719fb8e476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db3b925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eed00"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$getflags(r7, 0x401) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) 5m56.077796694s ago: executing program 4 (id=973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) open(0x0, 0x101080, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r8, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x28d41828b69a67d5, 0x12141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) 5m55.134097103s ago: executing program 4 (id=977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x2a, {0x2, 0x0, @empty}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="120100009600010000000087280400"/30], 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 5m51.563535654s ago: executing program 4 (id=990): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd80000000400000045"], 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000a00)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000e00)="174dbbc4cb440e66b35d7806d5d0fd6202b490652f26aaf1216beeb537d5665c2268fea65d415252fa850f143fa5ccef495735ec2d6f9769a5869a149ab97877cef8e410fce906f7c4a609c5186492f03ab3ab56cffa8ef4d2337f4a7029c1adc31517557fae5abed00ebc2a3e3bcef4b82e05aec92550fc8ed146da40335055f1312d3954880c9f0c6974282b64764729ccbd5402e751511ea4902d77d8349b1952281a536805e27bb31df49587d23ab5ee13a84238f8a138931badf4cb17c6ff8107159e605e4daba2e3c99764b2db85dc8fe6fbc658f882ad56605508177f3141af4cc6b01fe20c5a7e", 0xeb}, {&(0x7f0000000700)="75fa", 0x2}, {&(0x7f0000000f00)="dccba3d357820841deb7a91d662fc5addabec7d63648c75e172ca244e88e045c1f7965611b2fd952040760c9b1c789556ff82c609dd6ff540b9338ea20919fc69ec1f8f233b76f120e8c4b47b21f0b2738d73f5c5d000b2b7fed46aa04b5a3d0f771e9261d70f8f4c26ff029a40ff04c98786260277f8ed6bf5d43d87b68ea922ba984966c16a5796cf829d9b9aa1c6e3f655a946f4e689ee393d67b768c03bf3483f7baa3afac58d6e5df78a886de84c6281aa1d9bda705795b3190062dbe3bd3afd32c65107004d747774be50638870a1848d16132497a023048ed983d24", 0xdf}, {&(0x7f0000001000)="9f285c6be7891ac4ba5aecbe8d8d727fc4e347dd771bfdd867ca16fb5cc4079164f9ce7aab941259170f588736b3ecb502c76dd9e80f2cee15fd936c7d5d2bcc9fca173c5452fc101072c8ca24525e13ccbf967d739bb4bdbdd13c144fe521af81bc8716778d71b11ef64f9c402191f5cc00dbed68c27e8afbcf74d6378af09e594c972cf022793bb211ee131b562e7077bff71ad2faa952d51f504e0012b7862d9a368edbb03ebd03a01acdbbe5183bbec43c3805efd1a2e556495014c2f4d979f44de8c53797c8a3d2657c83c7663d49101e35a0e60b813c", 0xd9}, {&(0x7f0000000740)="7bb1b846728bcb9b6b6a1a90b1b13f60ec8f4a8fd9126834052932dcf541703603c75951f28804b2883bab306a9c76a5dc315c6c01ca8c", 0x37}, {&(0x7f0000000bc0)="331cddd7782485f980a0b5608326015a4851286f470762f792859fe7903303b4", 0x20}], 0x6}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="6e89bdb5b2ec5274eed11ca3d0ca5ac6689905add3fa44b429d7f57240227a1896f6c1dff1e056e7ab59d3357e791fb7", 0x30}], 0x1}}], 0x4, 0x4) 5m51.317647112s ago: executing program 4 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0xa1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x4, 0x6) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x40000, @mcast1={0xff, 0x5}}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) flock(r2, 0xe) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000180)={0xff}, &(0x7f0000002280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3c801, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x4000000000001f3, 0x4000) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) 5m50.920977436s ago: executing program 33 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0xa1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x4, 0x6) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x40000, @mcast1={0xff, 0x5}}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) flock(r2, 0xe) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000180)={0xff}, &(0x7f0000002280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3c801, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x4000000000001f3, 0x4000) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) 3m58.173573249s ago: executing program 2 (id=1335): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 3m58.085835495s ago: executing program 2 (id=1336): mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0) (async) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setuid(0xee00) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) (async) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x1, 0x9, {{0x19, 0x4, 0x0, 0x1b, 0x64, 0x65, 0x0, 0x6, 0x6, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x35, 0x2, [{0x5, 0x8, "6c0c1ae42e8b"}, {0x5, 0xc, "c6df16e19a5be4d4ca29"}, {0x6, 0xc, "1dbcb2ca09fd1d26adeb"}, {0x5, 0xf, "87cd541db2747f3d83c32be131"}]}, @timestamp={0x44, 0x18, 0xd3, 0x0, 0x6, [0x4e, 0x801, 0x4, 0x7ff, 0x1]}]}}}}}) connect$packet(r0, &(0x7f00000002c0)={0x11, 0x10, r1, 0x1, 0xf8, 0x6, @local}, 0x14) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x48e8, 0x5, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000400)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000400)={r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 3m58.047936252s ago: executing program 2 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000ac0)={0x5c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_b, @device_a, @initial, {0x2}}, 0x400, 0x60, @default, @val, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x8, 0x9, 0x0, 0x7}, 0x800, 0x4635, 0x99}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40048d0}, 0x20000010) 3m57.892204238s ago: executing program 2 (id=1339): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x240401, 0x46) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="d4570847b1937948b7111dd96d83d8a455529f100357457d4f0f5c91105a3c58131bf10de83dc9ee9d239e5e89e59edb35abbf64c1a92109f8eb01bf689b90055bd51506423f4e456274a778c228aeb5d65e191f1bbb21f0f6dd25edc276f1264580344fed0ee32709a73a160c7578465757b87291dcefc84e58ae39e56fb10d42fd5a34aa4fca42ff53e3c9467d8dc1278a34d406df142092ed6661092ce85816f8e6a119860c3314d0e13f5d50a266f738b71fd531396d768c35bc45c042ee7d69b0b7b90da2aab111667ef006593c99c27c67bc3812dbc9f1994b4830ed54ed1f0bdf4966c1d20bddeb83972b15a86ed5fdef279ce58447059a2ba491d21120dc7e0a1d8cc5eff2deedec41057e178eb95ff00fed1e7095decea9cfd52c0a7438dbfc135c796bfa2bb290ab03f35ea2f2d72b8b0503f4972d6d7c60bf5a80981c4f9826007fdcaad959e1c90cace1664480e98069a86f1c059d112e9da27fa71716f530c2a5bf2296d09e5fcc726a8e5287499f563089bdcb6bf3779298dc9b6f739190f434983651f5f29857cbf62faac8c20bc7ac69334fe99e70c29a1294d0ee89dd6c9cd57845e64b289f84220b6e1fe9e81381cf688fa945a68eed3ebc0e8c1efa403b5a4cde68a24a863c17c9f8ad6d24a09e60d83fcf2beb51e6faac173ac98bb2269d7523f8654417ffe70ab87b477045715ad6aa3db39d3f32760fe25bdc0f3e083232ea6a55da3986cbdbd654ed71a4780f7dc3edb628e14287963c3b5f7f177a35071d7f1169351863516fc96f8cce8781439de06c9f76d6e303518493676b3b135900b89eeac40d994936e3a5a6bbc2f2cf6a2a8ed0ad2f81386f8c327cf9b15f8039df0a950641f7d14728194d7640f4cf7e28e1f89b2485857f5f70866844cead5b29f5d9166dce885bd4343bb1fd2c8437105e8e295c27cb44b10a01590c0fdddbc8abc71f777171adef0a45fe5c92b39e32a9c119c6c9a340be0df8cb3b8b77a2a6b5ba1ed4449674811dfae90889b3fb174e11fb947e15232d57bdeee29db4bc0816a878120e84e0ec40a99fd2b88bdb8502922d7015dff05a94ce7c79852bb7ea9a043fa629afc702300d49ac7fbe67a7b0161d2703348b8d0efb144f2920e341debd821ddc4a12a3f89891f24427a169c741568a06825d4f12d64da0935f2f217798b41f44b90140ac2f4cf08219f42b5d30bdd52e76c74100326babb4d1bc576c944fc5bd3a985f9b209a6a473e4fe3afe0c110b630ac443b75c6e13b20810fd3e5ecf9c6785dabeb758a5ddcfb1ad889b5349606ead8f3fa34ba8ea706de19da6b3a0bc36c4c2e3173a9c929157aedf649699f1f8887a31fccebbd7f28843c91753483541b2b895e642855f856e3951e4853fb70b4090512112e813edaa8edb0a5ddf2c329dde5381e6a5716ec9d5a79d9438ba6de736ac9ad45754bfe7227ada116507c84ffd942a84f4ce115d4fd9029f17e62383ce5fc7048a3f85d2709f2375334f1fce2f8b1af99742869f00f2d2fa37ccaf385dc2eaabe2f67671f06addf403d94bffda4bf5747a8773e9ce3beb7ca2b2e2714dd50eb387e226d834a0696b689b004cbb5b3a5aa7a2878be737f4dd7d65bf976f8deb39ad07265be604ce4f9246225f91cd10afd4725d800eeae4abcd0fd17fdf11257b19db7dcb4b9c34dc3cee03dce7d9ab6f7ac5e12316ce9879abb4432f87faa2b25094963f48582fc8a617067b1a0f0960ddf8cfd5065352d9aba09d37b9b10c7a8f702547fd86f34b62183cc883e41c40f5b0676eb077bda0204bd08dae7e7922b7934f2b449229950b4fc54cd7dafc709d828e9301be8c767e0f3bc420cd10ee3dac383bb8ab8aefe3515d6b959dfe578d256f375751beecbd24a152939b59f913728e47207b8a642b100aadfc685cd7d77ba43ec2298db4f551d851991723cd1cdd42f2837e7fd5df3dbf52945ea9a97b73d8915336023beb9bd3c91d9b1c7f5d49b0cba9c30016bb3216e9d6e9070a5dff813ce85a2a36fffa6bf750cf21eaa91a754f9788663690189fe58a9205e4733b6ac0711e98123f145a87eceb00561ac7d1a699d00384c57f6dc92939f45956d489946a365440d40911dabed15b67748000e0d244b21276032667f66119a2485f31d2c098da4cbbd0c5bbf8373fb53b662e48fc572b6e6c5700a360c5b905b548eaee0aa928b38703c84f7ed4a9a858801ad26c2911d4bbbfc1f46a070fa64db31a619dad30ba96eea1edccc6b0e67b7acffe1261af8e08ffb27fb625820f7a823c63febe0fb32e8907415a973cb42c8752d6a9ac3af2bcbd91d5e5c3ac288b2e2a92cb860d97cbf2b17da25b5333d90156493076ab457afb59f3443894a3c1d3d8b1ce7cbd47d36a7a64bcb194ea00d46181a7b65e3e104bea46434643ac722d04437b72f518e98289edba99559dd6aa03af60da7a00ad4f6105d31745b808a243c8ee9ebd70fa8516cd471473a1608d206fa93885e696f668a397cf713fe9c2001fdbb6e07f124782f5891bdc238db61a7d7f0575072abfadad9593a6ba8b1c89351784d0c722af86989e137809aa5b7833462a71ceca8d7ee24e883577a128652125bef2bd7558f77bb566719f2672fb07f890f892d2d3a725d1d907a696d2d97065c001cfd9e97d60fe2f584992b9bd80f618531af2f3d5df2c5717da36bb2a64853612b8f1f881c2a306b1e9c4c369e33e5675e0f9195e570ba0b2e0594838ad9aef53686a2c4dfd9eae21a826501af92d48e0d857ee0876cd09996c65b50333ab256b439fe89d836d77135079c51f87b1fb58c446a8d52e3c6432c111af4b66d57306659c81088ea0ef96a2f1b97dfd8beeb578b3016eedb65e2ec190e1ba08c9c37f85e102fdc972c9ba2a4a6f11a79831ed8087a22d1d978f005f6ee8869b8c1717a42b75378a98a5f9b1725cc323151b1996468068afd2827ccede23ffe279aa7b45d7dc683db3a9efb9f7b2093765d7c178c09bc0edeccf18c9ee5845cba0c2dda463989faf6d018e330cb52bc5d7913e6e26ea8cde26b7251d828da7b83a1ecbda1ecb3344b3c60f606a419d868da70ade78c3ecebd9b2bcff9cef2507907f011cdf9b072b1dcc872e5b29365b0f4a7d6c581c9bf42320ad9c3a52b419b73d0c0f616f2f630df9bdb5f3b88bbcdfe618180131be8357099f9e8ea457eb1dcf9324c7081687899fa81bc267e87bdd80b88150f6745cb735936876ca6b3c7a492698d32d762baf5b482fa5f26351cf18018fc1cb49411fb6663c474ea29d2a9d4ad703119fe7a6ed2ce6f97287e7660617c4e38c7b1aa1ee5df253c625a1b1d29c042b6d5dbfb44633dd4c0e93992aff81024c408ff00d24d9c98c07c1d4fe5656e3b053914a09b8f2968008c5c4c115d9f8640136254303cc095f95fa335aa858510dad731af19eb0df690ab0edd2bbed96679dad71ccf94da088cf62b34580548027703f92525b41d36297e71d988901e3e086c0d8f425732e0134a9ac2b111a5745c57d9a138b6a4055e7e3ba220a47fef3474e5bba15d3f4711e1d00f2e29f1a1082f4518a08e36451e887963193b08c3e255f22383c7001540b05836b30e912adaef4130ae8edb9c891c398855b218e76eb94332538b7add4b9261e873a6b91785f5ea6c82306dff166d654987361917fe83fcc5be9be3e8644d96d5a7c7bb445fc1b2c0a48814fabc1b3a190674b5f159a5b041dd317c4cf06076d6c9a7572054a09f2b9b74f14289daf5a16dbe6de85ed6128c91a18518f069451dbe8b9f57dab9bcecb4cc53e6612b90f5e644eaed1765d45ad6e6d9f0358fd3a885df1c572cfdb511bbca345628206d89b16f9251be85e1c617b15302bb86397e0763d757c70362dea82688fe32d0a714d598f3131c2a3a4414898fccdfd901dc8fde466ca269bf211b9863e360ea4aab7fdc107ddfd7ede043708804386e0180542a0802745407ceecf6adb2a9a5614cde89d413f49a32733b875281c8cab7ac5815a92fda65ea23ce2feab66606605f49f526cc336d2a5a067c185845941e4142ba82899966fc95bf40570967ec0a6fe130dccbaca48d251adb0f81a170e3dfac6f02e7c8bb5fa6f5602bdc73267c6756e1a374d5e8b19a92ff39662db3ac9f761b2e9e015c51815e5f111d416ee0a67f3adad81f8c64dad193f19048bb46ad1fa786a0c3f36119bd14bb9ad96f2182a19504e15f2cfd885e5862f4d2467053ee1faa978bd2267d56401a548f17d34adba7e9186a2a58931a69bb815dd50552995aa8ceeb4eda5330227f2078eeb72c9b6845c04679868eb5f6a0f0da8c1ea2b0c7de8781d9fc129561a7b283aa488a117269116f81e44a261ed6c0fc4467125d83fd306bce3c6a29df8db000036cd851d805dda3bf218c800d77fc9837158f883b962efc7886cbe93cc137e0bff8387c4b7d64df8b89805dbf5698babf22be7d735bb7baedd43bb3f577989ddaf83892c55771a10beeb2326f3e766fd40eef0d0ff82969bf5534cbffff4fd493fc34d58f322d22fe21101c4248756ad844876d3a7f3999d14c0962e68eaeac83d44d22d498e04673343f4a3a60abfa4f45ea2af9b65982ff5899fd509beccfc8e7dd125c08096e9e5fb71edc590abdd53592d67afec4d227170c5f6e4f1daceecaec968448c033c0a9b0390a12b5af4b973c0cb7c072bdfc8b4158ea4cc9114816cf1242199d0d62a013c4e9646338bd284fede8c93114d2608c71ae1d0891a3583daa51971a5ba51251f3b9ac6d8a02e0fcb69744a74762e13c24e3f1d8e6e3e2956b99b97506e959ca3c7141faa5e2404c62854ef2b9e75a75760a71003e1b0c004752864f51ed600fc306773f635587504e3cf432d68c2fbce21c26a47dcf3358e434dc2b97941a5bb0e35744e4f3d53fee5719cc931f93e150744baf61754726b84a052bde27f666e472672f1f8f6381bd25bc619ba51a", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r2, 0x4, 0x0, @void}, 0x10) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x80, 0x0, 0x384, 0x0, 0x181, 0x0, 0x0, {0x0, 0x20}, {}, {0x0, 0x800}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\f\x00\x00', @ANYRES16=r6, @ANYBLOB="0100f5ff00000000000003000000140001800d0001007564703a73797a3000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) 3m57.043011462s ago: executing program 2 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x9, &(0x7f0000000040)=0x1) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) 3m56.881766199s ago: executing program 2 (id=1344): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x2, &(0x7f0000002400)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d72646d612c000001000000798fd6dc0ad3054496783030303030313030303030346532302c"]) lchown(&(0x7f0000000140)='./file0\x00', r3, 0xee00) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') pipe2$watch_queue(&(0x7f0000000240), 0x80) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') fsetxattr$security_capability(r1, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x9, 0xfffffff8}, {0x400, 0x6}], r3}, 0x18, 0x1) ioctl$TCFLSH(r2, 0x540b, 0x2) 3m41.684120759s ago: executing program 34 (id=1344): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x2, &(0x7f0000002400)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d72646d612c000001000000798fd6dc0ad3054496783030303030313030303030346532302c"]) lchown(&(0x7f0000000140)='./file0\x00', r3, 0xee00) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') pipe2$watch_queue(&(0x7f0000000240), 0x80) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') fsetxattr$security_capability(r1, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x9, 0xfffffff8}, {0x400, 0x6}], r3}, 0x18, 0x1) ioctl$TCFLSH(r2, 0x540b, 0x2) 6.011497133s ago: executing program 3 (id=2661): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendto$rxrpc(r1, &(0x7f00000027c0)="dc9d", 0x2, 0xc4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000fcff72000040"]) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x6}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async, rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe"], 0x0, 0x3}, 0x94) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_emit_ethernet(0x32, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) (async) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 5.833887134s ago: executing program 3 (id=2663): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @loopback, 0x7f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x8, 0xfffeffff, 0x14, 0xffffffffffffffff, 0x14, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0xd}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040), 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) socket$packet(0x11, 0x3, 0x300) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000009) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x9, 0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES8=r6, @ANYRESDEC=r5, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000020000000200000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000940)=@raw=[@jmp={0x5, 0x0, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x8, 0x0, 0x5, 0x1}, @jmp={0x5, 0x0, 0xb, 0xe, 0x6, 0x100, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xc, &(0x7f00000002c0)=""/12, 0x41100, 0x74, '\x00', 0x0, @fallback=0x42, r3, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x401}, 0x10, r5, r7, 0xa, 0x0, &(0x7f0000000640)=[{0x5, 0x3, 0xc, 0xa}, {0x3, 0x4, 0x10, 0x6}, {0x1, 0x3, 0xe, 0x5}, {0x3, 0x2, 0xf, 0x4}, {0x5, 0x3, 0x4, 0x5}, {0x1, 0x5, 0x0, 0x6}, {0x3, 0x3, 0x5, 0x2}, {0x0, 0x4, 0xd, 0x7}, {0x3, 0x4, 0xd, 0x7}, {0x1, 0x4, 0x1, 0xb}], 0x10, 0x8}, 0x94) sendmmsg$inet6(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="12", 0x1}], 0x1}}], 0x1, 0x4008000) shutdown(r1, 0x2) 4.68172069s ago: executing program 5 (id=2673): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "0e3ad5de"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0xfffe) 4.309184718s ago: executing program 7 (id=2674): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xc000000, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.190138621s ago: executing program 7 (id=2675): r0 = io_uring_setup(0x7534, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) copy_file_range(r1, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x13, 0x5, 0x9, 0x3, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x4}]}, 0x18}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) close_range(r0, 0xffffffffffffffff, 0x0) 4.125072268s ago: executing program 5 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) accept4(r2, 0x0, &(0x7f00000002c0), 0x80800) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) cachestat(r4, &(0x7f0000000040), 0x0, 0x0) getitimer(0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 3.661590765s ago: executing program 3 (id=2680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="cfd87e4d00000000", 0x8) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, 0xffffffffffffff9c) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x3b1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r3, 0xdb4, 0x0, 0x86, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x300fff2) 3.592034593s ago: executing program 1 (id=2682): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049cc) ptrace(0x10, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x14) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x644180, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x23, 0x0, 0x6, 0x2, &(0x7f0000000640), 0x8, 0x0, 0x0, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 3.50116305s ago: executing program 3 (id=2683): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) r2 = socket(0x10, 0x3, 0x6) (async) r3 = socket(0x10, 0x3, 0x0) rt_sigpending(&(0x7f00000000c0), 0x8) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x42) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x6, 0xff, @scatter={0x0, 0x1200, 0x0}, &(0x7f00000000c0)="eaff48000000", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfe], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000) (async) ftruncate(0xffffffffffffffff, 0x200004) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000020ac0100", @ANYRESOCT=r0, @ANYRESOCT=r6, @ANYBLOB, @ANYRES32, @ANYRES16=r2, @ANYRES32, @ANYBLOB], 0x50) (async) socket$inet(0x2, 0xa, 0x4) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000140)=0x2, 0x4) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, 0x0}) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000240), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x3e, 0x14, 0x64, 0x0, 0xb, 0x2, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "3297e3ba0fa8a2e71bd9fe1a399b51"}}, 0x31) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2.994415956s ago: executing program 5 (id=2684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r0, 0x8, &(0x7f0000000380)={0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x1, @local}, 0x10, 0x80000) bind$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x3fa, 0x400, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8084) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x7, 0x9c, 0x24, 0x8}}) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0xc, &(0x7f0000000380)=@generic={0x7, 0x0, 0x4, "f8d0cea9", "c56dc230"}) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x1) 2.690116356s ago: executing program 6 (id=2685): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x100, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x5, 0x2, [0x6, 0x20]}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.619337652s ago: executing program 6 (id=2686): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x100, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x5, 0x2, [0x6, 0x20]}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.317006415s ago: executing program 6 (id=2687): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000001200)=""/254) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x46) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x3}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 2.290874903s ago: executing program 5 (id=2688): syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x216800) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x712e, &(0x7f0000000500)={0x0, 0x7c87, 0x400, 0xfffffffe, 0x1c9}, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setfsuid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f"], 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="df800000f3b903b12f4e1139f8d7e16135167f52bc08dacab39dffb7acf8fc91fa24e352442744094747af430d23e252ee9904edc2795a16f757b3c61c553f8b1f105ca15320dfba00"/87, @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d0000880"], 0x108}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000440)=0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c000280080004"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 2.2458475s ago: executing program 1 (id=2689): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0xffffff64, 0x0, '\x00', {0x0, @bt={0x8c5, 0x8, 0x1, 0x2, 0x5, 0x1d3, 0x9, 0x8, 0x7fffffff, 0x0, 0x5, 0xa8b4, 0x0, 0xffff, 0x9, 0x0, {0xffffffff, 0x1}, 0x2, 0x5}}}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r4, 0xae80, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.245429097s ago: executing program 3 (id=2690): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @loopback, 0x7f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x8, 0xfffeffff, 0x14, 0xffffffffffffffff, 0x14, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0xd}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040), 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) socket$packet(0x11, 0x3, 0x300) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000009) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x9, 0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES8=r6, @ANYRESDEC=r5, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000020000000200000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000940)=@raw=[@jmp={0x5, 0x0, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x8, 0x0, 0x5, 0x1}, @jmp={0x5, 0x0, 0xb, 0xe, 0x6, 0x100, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xc, &(0x7f00000002c0)=""/12, 0x41100, 0x74, '\x00', 0x0, @fallback=0x42, r3, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x401}, 0x10, r5, r7, 0xa, &(0x7f0000000600), &(0x7f0000000640)=[{0x5, 0x3, 0xc, 0xa}, {0x3, 0x4, 0x10, 0x6}, {0x1, 0x3, 0xe, 0x5}, {0x3, 0x2, 0xf, 0x4}, {0x5, 0x3, 0x4, 0x5}, {0x1, 0x5, 0x0, 0x6}, {0x3, 0x3, 0x5, 0x2}, {0x0, 0x4, 0xd, 0x7}, {0x3, 0x4, 0xd, 0x7}, {0x1, 0x4, 0x1, 0xb}], 0x10, 0x8}, 0x94) sendmmsg$inet6(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="12", 0x1}], 0x1}}], 0x1, 0x4008000) shutdown(r1, 0x2) 2.208936112s ago: executing program 1 (id=2691): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd80000000400000045"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000a00)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000e00)="174dbbc4cb440e66b35d7806d5d0fd6202b490652f26aaf1216beeb537d5665c2268fea65d415252fa850f143fa5ccef495735ec2d6f9769a5869a149ab97877cef8e410fce906f7c4a609c5186492f03ab3ab56cffa8ef4d2337f4a7029c1adc31517557fae5abed00ebc2a3e3bcef4b82e05aec92550fc8ed146da40335055f1312d3954880c9f0c6974282b64764729ccbd5402e751511ea4902d77d8349b1952281a536805e27bb31df49587d23ab5ee13a84238f8a138931badf4cb17c6ff8107159e605e4daba2e3c99764b2db85dc8fe6fbc658f882ad56605508177f3141af4cc6b01fe20c5a7e", 0xeb}, {&(0x7f0000000700)="75fa", 0x2}, {&(0x7f0000000f00)="dccba3d357820841deb7a91d662fc5addabec7d63648c75e172ca244e88e045c1f7965611b2fd952040760c9b1c789556ff82c609dd6ff540b9338ea20919fc69ec1f8f233b76f120e8c4b47b21f0b2738d73f5c5d000b2b7fed46aa04b5a3d0f771e9261d70f8f4c26ff029a40ff04c98786260277f8ed6bf5d43d87b68ea922ba984966c16a5796cf829d9b9aa1c6e3f655a946f4e689ee393d67b768c03bf3483f7baa3afac58d6e5df78a886de84c6281aa1d9bda705795b3190062dbe3bd3afd32c65107004d747774be50638870a1848d16132497a023048ed983d24", 0xdf}, {&(0x7f0000001000)="9f285c6be7891ac4ba5aecbe8d8d727fc4e347dd771bfdd867ca16fb5cc4079164f9ce7aab941259170f588736b3ecb502c76dd9e80f2cee15fd936c7d5d2bcc9fca173c5452fc101072c8ca24525e13ccbf967d739bb4bdbdd13c144fe521af81bc8716778d71b11ef64f9c402191f5cc00dbed68c27e8afbcf74d6378af09e594c972cf022793bb211ee131b562e7077bff71ad2faa952d51f504e0012b7862d9a368edbb03ebd03a01acdbbe5183bbec43c3805efd1a2e556495014c2f4d979f44de8c53797c8a3d2657c83c7663d49101e35a0e60b813c", 0xd9}, {&(0x7f0000000740)="7bb1b846728bcb9b6b6a1a90b1b13f60ec8f4a8fd9126834052932dcf541703603c75951f28804b2883bab306a9c76a5dc315c6c01ca8c", 0x37}, {&(0x7f0000000bc0)="331cddd7782485f980a0b5608326015a4851286f470762f792859fe7903303b4", 0x20}], 0x6}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="6e89bdb5b2ec5274eed11ca3d0ca5ac6689905add3fa44b429d7f57240227a1896f6c1dff1e056e7ab59d3357e791fb7", 0x30}], 0x1}}], 0x4, 0x4) 1.66755391s ago: executing program 5 (id=2692): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd80000000400000045"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000a00)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000e00)="174dbbc4cb440e66b35d7806d5d0fd6202b490652f26aaf1216beeb537d5665c2268fea65d415252fa850f143fa5ccef495735ec2d6f9769a5869a149ab97877cef8e410fce906f7c4a609c5186492f03ab3ab56cffa8ef4d2337f4a7029c1adc31517557fae5abed00ebc2a3e3bcef4b82e05aec92550fc8ed146da40335055f1312d3954880c9f0c6974282b64764729ccbd5402e751511ea4902d77d8349b1952281a536805e27bb31df49587d23ab5ee13a84238f8a138931badf4cb17c6ff8107159e605e4daba2e3c99764b2db85dc8fe6fbc658f882ad56605508177f3141af4cc6b01fe20c5a7e", 0xeb}, {&(0x7f0000000700)="75fa", 0x2}, {&(0x7f0000000f00)="dccba3d357820841deb7a91d662fc5addabec7d63648c75e172ca244e88e045c1f7965611b2fd952040760c9b1c789556ff82c609dd6ff540b9338ea20919fc69ec1f8f233b76f120e8c4b47b21f0b2738d73f5c5d000b2b7fed46aa04b5a3d0f771e9261d70f8f4c26ff029a40ff04c98786260277f8ed6bf5d43d87b68ea922ba984966c16a5796cf829d9b9aa1c6e3f655a946f4e689ee393d67b768c03bf3483f7baa3afac58d6e5df78a886de84c6281aa1d9bda705795b3190062dbe3bd3afd32c65107004d747774be50638870a1848d16132497a023048ed983d24", 0xdf}, {&(0x7f0000001000)="9f285c6be7891ac4ba5aecbe8d8d727fc4e347dd771bfdd867ca16fb5cc4079164f9ce7aab941259170f588736b3ecb502c76dd9e80f2cee15fd936c7d5d2bcc9fca173c5452fc101072c8ca24525e13ccbf967d739bb4bdbdd13c144fe521af81bc8716778d71b11ef64f9c402191f5cc00dbed68c27e8afbcf74d6378af09e594c972cf022793bb211ee131b562e7077bff71ad2faa952d51f504e0012b7862d9a368edbb03ebd03a01acdbbe5183bbec43c3805efd1a2e556495014c2f4d979f44de8c53797c8a3d2657c83c7663d49101e35a0e60b813c", 0xd9}, {&(0x7f0000000740)="7bb1b846728bcb9b6b6a1a90b1b13f60ec8f4a8fd9126834052932dcf541703603c75951f28804b2883bab306a9c76a5dc315c6c01ca8c", 0x37}, {&(0x7f0000000bc0)="331cddd7782485f980a0b5608326015a4851286f470762f792859fe7903303b4", 0x20}], 0x6}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="6e89bdb5b2ec5274eed11ca3d0ca5ac6689905add3fa44b429d7f57240227a1896f6c1dff1e056e7ab59d3357e791fb7", 0x30}], 0x1}}], 0x4, 0x4) 1.222346932s ago: executing program 1 (id=2693): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x81) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18d500000000000000000000070000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ad0000/0x2000)=nil, 0x2000, 0xb635773f06ebbee5, 0x10, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000020000100ffffffff00000000020020800300000000000000140011007465616d5f736c6176655f300000000008000200ac1e00011400030077673000"/76], 0x4c}}, 0x0) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.125535024s ago: executing program 7 (id=2694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) landlock_restrict_self(r3, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40810}, 0x58cd38472105ff91) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd26, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3}}, 0x1c}}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.125005939s ago: executing program 6 (id=2695): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @local, 0x8}, 0x1c, 0x0}}], 0x1, 0x240880d1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x3, 0x8) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000380)=0xfffffffffffff800, 0x12) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.087698937s ago: executing program 7 (id=2696): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0x1, 0x0) keyctl$revoke(0x3, r0) 1.003438909s ago: executing program 7 (id=2697): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x6b9baa709c74be5b, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0xf, 0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0xbf14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601024e22000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84) 397.282366ms ago: executing program 5 (id=2698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r0, 0x8, &(0x7f0000000380)={0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x1, @local}, 0x10, 0x80000) bind$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x3fa, 0x400, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8084) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x7, 0x9c, 0x24, 0x8}}) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0xc, &(0x7f0000000380)=@generic={0x7, 0x0, 0x4, "f8d0cea9", "c56dc230"}) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x1) 238.082277ms ago: executing program 1 (id=2699): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @loopback}, &(0x7f0000000040)=0x8) 237.511597ms ago: executing program 6 (id=2700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r6], 0x50}, 0x1, 0xba01}, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000240)='./file1\x00', 0x200) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000000)) 235.154684ms ago: executing program 1 (id=2701): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001780)={0x44, &(0x7f0000001600)={0x0, 0x15, 0x1, "c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x420040, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240440c0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x20000000) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000002440), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000002480)={0xb, @sdr={0x43564548, 0x5}}) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000025c0)={0x10c8, 0x12, 0x4, 0x70bd25, 0x25dfdbfc, {0x16}, [@generic="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", @typed={0xb4, 0x1a, 0x0, 0x0, @binary="5d42ddbf2283712ff5dbe1a9c744e7830927ca6718395e45f2357ce47119775076222ee5686d526c31355cbdc1565be11363ed9f7506db1d199d442edcdbb691e309a5ea23474b766d33302aaa6f345baf11bd5a1f84d8a405a8c5b97cd0a36acdd3a35759d4aacab16feff762aacaebbbea7efab61a405486f21d3044ad0b9fbde74543de9ade62c301cc20a02c4c2e02a62ddf6831c669bfccd4de39e23c6e78165bbe4ef52a75734a03d58d2ec048"}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c0c0) splice(r0, &(0x7f0000000080)=0x3, r0, &(0x7f00000000c0)=0xbb, 0x9, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f0000000780)=[{0x2, 0x8000, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0xa000, 0x0, 0x0}], 0x3}) 57.447942ms ago: executing program 3 (id=2702): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x4208, 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000101b0100000000fecb6744e32b3cc97ea261e99e826e00000000000000000a140000001100010000000000ec00000000000058"], 0x28}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) 40.184216ms ago: executing program 6 (id=2703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x200000000000, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) clock_adjtime(0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 7 (id=2704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x2, {0xa, 0x4e22, 0x9, @loopback, 0x4e6b}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)="281959a7cc602bcfe0dab5183ce2674a14ceacf5ab1c0b11c90c05ed1cc4f3a520e5e650cbb0abaa514a0bd7523a39bb8e7b3afb64e2b0c2328b877e519d303b8304b39efb384ed7577a5dfd0d55de2d67cd5702fcfb2fafbd15907df9d9b89b55e733571f60570f582c17d66739d5a7b794bbc7adf0f639b245627ef7c04f724f6dc8d57de94bedffe4802bacc1b46af376e8555b875a2892102d12b86dc2de6bccd01f241d8978ce25282d81e9db974bb33201c947c5af250665d86e8ddab8642ee733ea", 0xc5}], 0x1, &(0x7f0000000d40)=[{0x130, 0x6, 0x4, "6e69de896e94367e53e98108c4784789186cdefd52c645d614ff8c41a1a07c40eff99d527fb7a7793679120216377724bf06e6b897e3cdd189bf4cde9585ac1edfda432fa3a0caf490d4560bc8765290ba76d8a3ccc98b5d15a2c2085f0f528c9ce5a02d1ee6af5648abaabaf058a641ae1629f3ffb07fb31aff615935b9579067d4b12a605a661969fb554bab232bd5dfab14a849cd9223c1dee7b8c97dbf3c126cbf1d225689996da5ad89c5431dcd9d522275f2e10bd30f29ad2a5904cf325b645c44d535abc1cdfe224890bbf8cd64ba824d08120396b0d127fe3d672d0fab09db00000000000000008c2749617742e5cba520c5b6de9e111da65d5bdbf23cd6118d688b88e050a5974aa8b56721b9bf96bd99555e3d22f257060f5284"}, {0xe0, 0x103, 0x9, "1902d29d1fed76156d4acb1437e5c121d519884acc3e22d148062ab73978fba784061591f08981bdb38bf1dfb0bf143e0f939e392222d1a522580f84a4bff0c5a37228957efceb328c4cce5c7501c23b65ff01423df21fc72fb6e47083a7e24dccf23360d2b818f8958701c1f216f334abd408449484d15f7b50695e0d98885eb57dc3c4293db11addc10b479bb1ac642310d33d847dac0b3f772aa7483bfdc04f03de4c6b32bd88cb2fec628e868969a12ee629041d6803ce20442c17ab6264e6e5e8800a2dbf460c0707c0323f1f"}, {0x110, 0x109, 0x101, "e1331446e090e5291246597e4b5e73719489bbb142afb856ad728d91b2fa5293e569b98062f076f7990e9acb1a32cbeb72a4abb032d7941f8b513f65f56a5f615b4ab094639282d63f0dff33229aaa2c70993ae54b3069696371e16110ad9e462c5a1707de41fe19a6df516b24ec186bd17d16e97d2e7e9f5bd6577db2e6c30ca0095847c738b16b1e37f3b1a6d1a936c3ed62c46c29ea12453abd793f97154a5bcc7bf86b29f54be34c2d049b6b8af75f1d3be8cce466f33b2ae2a30480e0be7d8c00d86f08b82d9a6363f7fb554fd8090287bdeafe06205e556ae850d2eaa7b1de43ab3a314459fad528d71a475b027e9ff747170cbb99a0"}, {0x40, 0x119, 0x4, "956a46763880e39c1ad091c67356d624c848afa6d2836ceb0b7b96c71d222856ef387e99ca402ae4d4704575f13d"}, {0x40, 0x119, 0x1, "7677a1201d6578af55a8bc1dc9b96d75a0743bfa442d3424ad786162675660ab647f75d1905ef1c4e942860fc0ccbc"}, {0x68, 0x107, 0xb9, "1fb632d54618240bd12031f6bd4c478172f9f544f3c7540ed8b5413e08e80ecaf3690331d47819b0607b26dbbf14adf127d72a46fafd4aa03c3b7d3b0ca93989e91d6e4fd6408de207e3c2fad99187d81cd1a9de8f"}, {0x80, 0x10c, 0x9, "b72edda15617c38406bc79862e9f38cbf854be282200496872a973d05a9e6fdd18623e69ada97ac2ab6cddac8fcf75c2395d6566b598f9bbabb2af09d3d693b97b1ab3bdfe8fa85948bb6ebb92d3e5184c8df23db52a74d6aa822aaca8b2bf916764c2cf5e92e7a39089a208e8"}], 0x488}, 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[@ANYBLOB="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"], 0x3518}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r10, 0x5437, 0x200000000000000) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') kernel console output (not intermixed with test programs): tor?? [ 614.984306][ T30] audit: type=1400 audit(1754245312.952:1339): avc: denied { ioctl } for pid=13150 comm="syz.5.1620" path="socket:[40481]" dev="sockfs" ino=40481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 615.690328][ T30] audit: type=1326 audit(1754245313.522:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13170 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba6d8eb69 code=0x7ffc0000 [ 615.778136][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1619'. [ 615.787153][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1619'. [ 615.896429][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1619'. [ 615.897397][ T1326] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.914269][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1619'. [ 615.931883][ T30] audit: type=1326 audit(1754245313.522:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13170 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5ba6d8eb69 code=0x7ffc0000 [ 616.053019][ T30] audit: type=1326 audit(1754245313.522:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13170 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba6d8eb69 code=0x7ffc0000 [ 616.176078][ T30] audit: type=1326 audit(1754245313.532:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13170 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5ba6d8eb69 code=0x7ffc0000 [ 616.210684][ T1326] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.236372][ T1326] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.249001][ T1326] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.275800][ T30] audit: type=1326 audit(1754245313.532:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13170 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba6d8eb69 code=0x7ffc0000 [ 616.344668][ T5858] usbhid 7-1:0.0: can't add hid device: -71 [ 616.426051][ T5858] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 616.437437][ T30] audit: type=1326 audit(1754245313.532:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13170 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ba6d8eb69 code=0x7ffc0000 [ 616.465960][ T30] audit: type=1326 audit(1754245313.532:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13170 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba6d8eb69 code=0x7ffc0000 [ 616.475474][ T5858] usb 7-1: USB disconnect, device number 14 [ 616.489553][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.520810][ T30] audit: type=1326 audit(1754245313.532:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13170 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba6d8eb69 code=0x7ffc0000 [ 617.390723][T13189] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1627'. [ 617.756527][T13198] overlayfs: missing 'lowerdir' [ 617.927640][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1630'. [ 618.493531][T13203] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1628'. [ 619.274302][ T30] audit: type=1400 audit(1754245316.822:1348): avc: denied { mounton } for pid=13211 comm="syz.6.1634" path="/132/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 619.652638][T13216] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1635'. [ 619.701991][T13216] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1635'. [ 620.273448][T13204] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1629'. [ 620.307361][ T5972] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 620.476212][ T5972] usb 8-1: Using ep0 maxpacket: 32 [ 620.485575][ T5972] usb 8-1: unable to get BOS descriptor or descriptor too short [ 620.499332][ T5972] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 620.519710][ T5972] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 620.552427][ T5972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.573449][ T5972] usb 8-1: Product: syz [ 620.578557][ T5972] usb 8-1: Manufacturer: syz [ 620.583298][ T5972] usb 8-1: SerialNumber: syz [ 620.805543][ T5972] usb 8-1: Limiting number of CPorts to U8_MAX [ 620.826989][ T5972] usb 8-1: Not enough endpoints found in device, aborting! [ 620.933469][ T30] audit: type=1400 audit(1754245319.102:1349): avc: denied { map } for pid=13239 comm="syz.5.1644" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 620.956496][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.077111][ T30] audit: type=1400 audit(1754245319.132:1350): avc: denied { execute } for pid=13239 comm="syz.5.1644" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 622.846974][T13253] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1640'. [ 623.029913][ T1205] usb 8-1: USB disconnect, device number 5 [ 623.486642][ T30] audit: type=1400 audit(1754245321.492:1351): avc: denied { create } for pid=13269 comm="syz.7.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 623.781041][T13275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.990287][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.996745][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.019063][T13259] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1641'. [ 624.219603][T13278] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1654'. [ 624.237165][ T5858] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 624.586171][ T5858] usb 6-1: device descriptor read/64, error -71 [ 624.946169][ T5858] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 625.086195][ T5858] usb 6-1: device descriptor read/64, error -71 [ 625.129789][T13288] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 625.137590][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1656'. [ 625.275803][T13290] netlink: 'syz.7.1655': attribute type 2 has an invalid length. [ 625.283770][T13290] netlink: 1192 bytes leftover after parsing attributes in process `syz.7.1655'. [ 625.311122][ T5858] usb usb6-port1: attempt power cycle [ 626.186214][ T5858] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 626.246395][ T5956] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 626.320699][ T5858] usb 6-1: device descriptor read/8, error -71 [ 626.516344][ T5956] usb 8-1: Using ep0 maxpacket: 32 [ 626.522784][ T5956] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 626.531294][ T5956] usb 8-1: config 0 has no interface number 0 [ 626.537468][ T5956] usb 8-1: config 0 interface 12 has no altsetting 0 [ 626.545718][ T5956] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 626.554895][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.566293][ T5858] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 626.991282][ T5956] usb 8-1: Product: syz [ 626.995456][ T5956] usb 8-1: Manufacturer: syz [ 627.000137][ T5956] usb 8-1: SerialNumber: syz [ 627.006456][ T5956] usb 8-1: config 0 descriptor?? [ 627.036271][ T1213] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 627.046193][ T5933] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 627.097110][ T5858] usb 6-1: device descriptor read/8, error -71 [ 627.184263][T13305] FAULT_INJECTION: forcing a failure. [ 627.184263][T13305] name failslab, interval 1, probability 0, space 0, times 0 [ 627.197556][T13305] CPU: 0 UID: 0 PID: 13305 Comm: syz.5.1661 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 627.197581][T13305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.197591][T13305] Call Trace: [ 627.197597][T13305] [ 627.197603][T13305] dump_stack_lvl+0x16c/0x1f0 [ 627.197633][T13305] should_fail_ex+0x512/0x640 [ 627.197659][T13305] ? fs_reclaim_acquire+0xae/0x150 [ 627.197683][T13305] ? security_inode_init_security+0x13f/0x390 [ 627.197710][T13305] should_failslab+0xc2/0x120 [ 627.197728][T13305] __kmalloc_noprof+0xd2/0x510 [ 627.197752][T13305] security_inode_init_security+0x13f/0x390 [ 627.197778][T13305] ? __pfx_shmem_initxattrs+0x10/0x10 [ 627.197801][T13305] ? __pfx_security_inode_init_security+0x10/0x10 [ 627.197829][T13305] ? shmem_get_inode+0x73a/0xfb0 [ 627.197858][T13305] shmem_symlink+0x135/0x9f0 [ 627.197889][T13305] ? __pfx_shmem_symlink+0x10/0x10 [ 627.197907][T13305] ? bpf_lsm_inode_permission+0x9/0x10 [ 627.197926][T13305] ? security_inode_permission+0xbf/0x260 [ 627.197953][T13305] vfs_symlink+0x403/0x680 [ 627.197983][T13305] do_symlinkat+0x261/0x310 [ 627.198003][T13305] ? __pfx_do_symlinkat+0x10/0x10 [ 627.198023][T13305] ? getname_flags.part.0+0x1c5/0x550 [ 627.198053][T13305] __x64_sys_symlink+0x75/0x90 [ 627.198075][T13305] do_syscall_64+0xcd/0x4c0 [ 627.198102][T13305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.198119][T13305] RIP: 0033:0x7fd00c98eb69 [ 627.198134][T13305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.198149][T13305] RSP: 002b:00007fd00a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 627.198168][T13305] RAX: ffffffffffffffda RBX: 00007fd00cbb6080 RCX: 00007fd00c98eb69 [ 627.198179][T13305] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000080 [ 627.198188][T13305] RBP: 00007fd00a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 627.198197][T13305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.198206][T13305] R13: 0000000000000000 R14: 00007fd00cbb6080 R15: 00007ffe547e5a98 [ 627.198228][T13305] [ 627.198313][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 627.500382][ T5858] usb usb6-port1: unable to enumerate USB device [ 627.631760][ T1213] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.677483][ T1213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 627.678250][T13307] lo: entered allmulticast mode [ 627.690985][ T1213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.704164][ T1213] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.799718][ T1213] usb 7-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 627.804462][ T5933] usb 4-1: config 0 has an invalid interface number: 73 but max is 0 [ 627.810878][ T1213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.831144][ T1213] usb 7-1: config 0 descriptor?? [ 627.833286][ T5933] usb 4-1: config 0 has no interface number 0 [ 627.876420][ T5933] usb 4-1: config 0 interface 73 altsetting 0 endpoint 0xD has invalid maxpacket 1015, setting to 64 [ 627.892596][ T5933] usb 4-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=8e.bf [ 627.902119][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.912610][ T5933] usb 4-1: Product: syz [ 627.921316][ T5933] usb 4-1: Manufacturer: syz [ 627.925944][ T5933] usb 4-1: SerialNumber: syz [ 627.933198][ T5933] usb 4-1: config 0 descriptor?? [ 627.943551][ T5933] HFC-S_USB 4-1:0.73: probe with driver HFC-S_USB failed with error -5 [ 628.151249][ T5933] usb 4-1: USB disconnect, device number 55 [ 628.266784][ T1213] nzxt-smart2 0003:1E71:2019.001A: item fetching failed at offset 1/5 [ 628.275475][ T1213] nzxt-smart2 0003:1E71:2019.001A: probe with driver nzxt-smart2 failed with error -22 [ 628.484092][T13306] lo: left allmulticast mode [ 628.496561][ T5933] usb 7-1: USB disconnect, device number 15 [ 628.744899][T13322] FAULT_INJECTION: forcing a failure. [ 628.744899][T13322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.758195][T13322] CPU: 0 UID: 0 PID: 13322 Comm: syz.3.1667 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 628.758218][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.758227][T13322] Call Trace: [ 628.758232][T13322] [ 628.758239][T13322] dump_stack_lvl+0x16c/0x1f0 [ 628.758269][T13322] should_fail_ex+0x512/0x640 [ 628.758299][T13322] _copy_from_user+0x2e/0xd0 [ 628.758318][T13322] __sys_bpf+0x21d/0x4de0 [ 628.758344][T13322] ? __pfx___sys_bpf+0x10/0x10 [ 628.758366][T13322] ? ksys_write+0x190/0x250 [ 628.758388][T13322] ? __mutex_unlock_slowpath+0x163/0x800 [ 628.758428][T13322] ? fput+0x9b/0xd0 [ 628.758449][T13322] ? ksys_write+0x1ac/0x250 [ 628.758465][T13322] ? __pfx_ksys_write+0x10/0x10 [ 628.758486][T13322] __x64_sys_bpf+0x78/0xc0 [ 628.758508][T13322] ? lockdep_hardirqs_on+0x7c/0x110 [ 628.758537][T13322] do_syscall_64+0xcd/0x4c0 [ 628.758563][T13322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.758580][T13322] RIP: 0033:0x7f5ba6d8eb69 [ 628.758594][T13322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.758610][T13322] RSP: 002b:00007f5ba7c94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 628.758629][T13322] RAX: ffffffffffffffda RBX: 00007f5ba6fb5fa0 RCX: 00007f5ba6d8eb69 [ 628.758640][T13322] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 628.758651][T13322] RBP: 00007f5ba7c94090 R08: 0000000000000000 R09: 0000000000000000 [ 628.758661][T13322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.758671][T13322] R13: 0000000000000000 R14: 00007f5ba6fb5fa0 R15: 00007ffeafde4938 [ 628.758694][T13322] [ 629.056789][ T5956] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 629.103508][ T5956] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 629.151766][ T5956] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 629.182117][ T5956] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 629.214341][ T5956] usb 8-1: USB disconnect, device number 6 [ 629.617580][ T30] audit: type=1400 audit(1754245327.452:1352): avc: denied { accept } for pid=13330 comm="syz.6.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 630.171142][ T30] audit: type=1400 audit(1754245328.322:1353): avc: denied { mount } for pid=13333 comm="syz.7.1672" name="/" dev="rpc_pipefs" ino=40816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 630.194436][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.255876][ T30] audit: type=1400 audit(1754245328.322:1354): avc: denied { mounton } for pid=13333 comm="syz.7.1672" path="/37/file0" dev="rpc_pipefs" ino=40816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 630.279380][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.908262][T13352] JFS: charset not found [ 630.936449][ T30] audit: type=1400 audit(1754245329.092:1355): avc: denied { setattr } for pid=13351 comm="syz.1.1674" name="NETLINK" dev="sockfs" ino=40838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 630.960514][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.059398][ T30] audit: type=1400 audit(1754245329.102:1356): avc: denied { setattr } for pid=13351 comm="syz.1.1674" name="SCTPv6" dev="sockfs" ino=40843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 631.163943][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1675'. [ 631.283470][T13325] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1669'. [ 631.435789][ T30] audit: type=1400 audit(1754245329.602:1357): avc: denied { unmount } for pid=11981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 631.665522][T13380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.057875][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1685'. [ 633.212384][T13392] hsr_slave_1 (unregistering): left promiscuous mode [ 633.685339][T13400] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1679'. [ 634.179361][T13415] @: renamed from vlan0 (while UP) [ 634.316230][ T30] audit: type=1400 audit(1754245332.482:1358): avc: denied { map } for pid=13414 comm="syz.7.1693" path="/proc/157/net/vlan/vlan0" dev="proc" ino=4026532959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 634.538312][ T30] audit: type=1400 audit(1754245332.482:1359): avc: denied { execute } for pid=13414 comm="syz.7.1693" path="/proc/157/net/vlan/vlan0" dev="proc" ino=4026532959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 635.041946][ T30] audit: type=1400 audit(1754245333.212:1360): avc: denied { connect } for pid=13422 comm="syz.6.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 635.189643][T13425] lo speed is unknown, defaulting to 1000 [ 635.355287][T13425] lo speed is unknown, defaulting to 1000 [ 635.381280][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1695'. [ 635.439989][ T5858] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 635.636366][T13425] lo speed is unknown, defaulting to 1000 [ 635.656337][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 636.006162][ T5956] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 636.090945][ T5858] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.111341][ T5858] usb 7-1: config 1 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 636.145003][ T5858] usb 7-1: config 1 interface 0 has no altsetting 0 [ 636.188790][ T5858] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.206346][ T5956] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 636.208184][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 636.245826][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.324033][ T5858] usb 7-1: SerialNumber: syz [ 636.332583][ T5858] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 636.340809][ T5858] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 636.386270][ T5956] usb 6-1: Product: syz [ 636.571641][T13424] syzkaller1: entered promiscuous mode [ 636.577140][T13424] syzkaller1: entered allmulticast mode [ 636.583367][ T5956] usb 6-1: Manufacturer: syz [ 636.592702][ T5956] usb 6-1: SerialNumber: syz [ 636.657469][T13434] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1690'. [ 636.767193][ T5956] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 636.776598][ T5858] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 636.796776][ T5858] usb 7-1: USB disconnect, device number 16 [ 636.807326][ T43] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 636.984857][T13425] infiniband syz0: set active [ 636.989718][ T5956] lo speed is unknown, defaulting to 1000 [ 637.005737][T13425] infiniband syz0: added lo [ 637.019046][T13425] syz0: rxe_create_cq: returned err = -12 [ 637.025759][T13425] infiniband syz0: Couldn't create ib_mad CQ [ 637.035961][T13425] infiniband syz0: Couldn't open port 1 [ 637.089023][T13425] RDS/IB: syz0: added [ 637.106603][T13425] smc: adding ib device syz0 with port count 1 [ 637.112874][T13425] smc: ib device syz0 port 1 has pnetid [ 637.122168][ T5956] lo speed is unknown, defaulting to 1000 [ 637.129953][T13425] lo speed is unknown, defaulting to 1000 [ 638.020595][T13425] lo speed is unknown, defaulting to 1000 [ 638.276711][ T43] usb 6-1: Service connection timeout for: 257 [ 638.471809][ T43] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 638.501294][ T43] ath9k_htc: Failed to initialize the device [ 638.515282][ T43] usb 6-1: ath9k_htc: USB layer deinitialized [ 638.729236][ T1213] usb 6-1: USB disconnect, device number 42 [ 639.328639][ T1213] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 639.373587][T13445] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1698'. [ 639.461366][T13468] sctp: [Deprecated]: syz.6.1705 (pid 13468) Use of int in max_burst socket option deprecated. [ 639.461366][T13468] Use struct sctp_assoc_value instead [ 639.467031][T13425] lo speed is unknown, defaulting to 1000 [ 639.484642][ T30] audit: type=1400 audit(1754245337.632:1361): avc: denied { getopt } for pid=13467 comm="syz.6.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 639.539679][ T1213] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 639.556206][ T30] audit: type=1400 audit(1754245337.702:1362): avc: denied { map } for pid=13467 comm="syz.6.1705" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 639.593169][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.609515][ T1213] usb 6-1: Product: syz [ 639.616953][ T1213] usb 6-1: Manufacturer: syz [ 639.729145][T13471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1706'. [ 639.866210][ T1213] usb 6-1: SerialNumber: syz [ 639.876209][ T30] audit: type=1400 audit(1754245337.702:1363): avc: denied { read write } for pid=13467 comm="syz.6.1705" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 639.900838][ T1213] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 639.917135][ T43] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 639.953718][ T30] audit: type=1400 audit(1754245337.702:1364): avc: denied { open } for pid=13467 comm="syz.6.1705" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 639.978791][ T30] audit: type=1400 audit(1754245337.722:1365): avc: denied { ioctl } for pid=13467 comm="syz.6.1705" path="socket:[41607]" dev="sockfs" ino=41607 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 640.242142][T13425] lo speed is unknown, defaulting to 1000 [ 640.836187][ T30] audit: type=1400 audit(1754245338.902:1366): avc: denied { connect } for pid=13485 comm="syz.6.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 641.128677][T13425] lo speed is unknown, defaulting to 1000 [ 641.412335][ T43] usb 6-1: Service connection timeout for: 257 [ 641.418596][ T43] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 641.455783][ T43] ath9k_htc: Failed to initialize the device [ 641.470799][ T43] usb 6-1: ath9k_htc: USB layer deinitialized [ 641.924511][ T5858] usb 6-1: USB disconnect, device number 43 [ 642.005531][T13504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1714'. [ 643.689289][T13510] mmap: syz.6.1717 (13510): VmData 25972736 exceed data ulimit 2841. Update limits or use boot option ignore_rlimit_data. [ 643.792716][T13521] overlayfs: workdir and upperdir must be separate subtrees [ 643.936185][ T5956] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 644.097965][ T5956] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.110574][ T5956] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 644.135417][ T5956] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.153038][ T5956] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.162550][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.173214][ T5956] usb 8-1: Product: syz [ 644.180565][ T5956] usb 8-1: Manufacturer: syz [ 644.334357][T13525] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1721'. [ 644.545046][ T5956] usb 8-1: SerialNumber: syz [ 644.554801][ T5956] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 644.607945][ T5956] cdc_ncm 8-1:1.0: bind() failure [ 644.954790][T13531] netlink: 'syz.6.1723': attribute type 72 has an invalid length. [ 644.962951][T13531] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1723'. [ 644.995591][T13531] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 645.003573][T13531] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 647.624387][T10695] usb 8-1: USB disconnect, device number 7 [ 647.743722][ T30] audit: type=1404 audit(1754245345.912:1367): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 647.774231][T13568] lo speed is unknown, defaulting to 1000 [ 647.898643][ T30] audit: type=1400 audit(1754245346.062:1368): avc: denied { ioctl } for pid=13565 comm="syz.5.1732" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 648.026415][ T1205] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 648.202112][ T30] audit: type=1400 audit(1754245346.132:1369): avc: denied { create } for pid=13574 comm="syz.6.1735" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 648.357806][ T30] audit: type=1400 audit(1754245346.162:1370): avc: denied { prog_load } for pid=13574 comm="syz.6.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 648.926240][ T30] audit: type=1400 audit(1754245346.172:1371): avc: denied { create } for pid=13574 comm="syz.6.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 648.947965][ T30] audit: type=1400 audit(1754245346.192:1372): avc: denied { create } for pid=13574 comm="syz.6.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 648.969439][ T30] audit: type=1400 audit(1754245346.242:1373): avc: denied { create } for pid=13574 comm="syz.6.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 648.989407][ T30] audit: type=1400 audit(1754245346.262:1374): avc: denied { read } for pid=13574 comm="syz.6.1735" dev="nsfs" ino=4026532850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 649.011270][ T30] audit: type=1400 audit(1754245346.462:1375): avc: denied { create } for pid=13567 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 649.031462][ T30] audit: type=1400 audit(1754245346.502:1376): avc: denied { name_bind } for pid=13579 comm="syz.7.1736" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 650.765120][T13621] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13621 comm=syz.3.1750 [ 651.797235][T13640] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1753'. [ 652.024595][T13635] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1752'. [ 652.558639][T13666] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1764'. [ 652.823459][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 652.823476][ T30] audit: type=1400 audit(1754245350.912:1497): avc: denied { allowed } for pid=13674 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 652.876211][ T30] audit: type=1400 audit(1754245350.922:1498): avc: denied { execmem } for pid=13674 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 653.117146][T13681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1768'. [ 653.311139][ T30] audit: type=1400 audit(1754245350.932:1499): avc: denied { read write } for pid=13669 comm="syz.7.1766" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 653.382529][ T30] audit: type=1400 audit(1754245350.972:1500): avc: denied { write } for pid=13667 comm="syz.5.1765" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 653.647990][ T30] audit: type=1400 audit(1754245350.982:1501): avc: denied { read write } for pid=13667 comm="syz.5.1765" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 653.722275][ T30] audit: type=1400 audit(1754245350.982:1502): avc: denied { create } for pid=13667 comm="syz.5.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 653.794907][ T30] audit: type=1400 audit(1754245350.982:1503): avc: denied { create } for pid=13667 comm="syz.5.1765" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 653.854283][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 653.884729][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1771'. [ 653.931240][ T30] audit: type=1400 audit(1754245351.282:1504): avc: denied { name_bind } for pid=13674 comm="syz.1.1768" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 653.987439][ T30] audit: type=1400 audit(1754245351.282:1505): avc: denied { map_create } for pid=13674 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 654.013132][ T30] audit: type=1400 audit(1754245351.282:1506): avc: denied { prog_load } for pid=13674 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 657.868306][ T30] kauditd_printk_skb: 403 callbacks suppressed [ 657.868323][ T30] audit: type=1400 audit(1754245356.042:1910): avc: denied { create } for pid=13787 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 657.951480][ T30] audit: type=1400 audit(1754245356.122:1911): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 657.988639][ T30] audit: type=1400 audit(1754245356.162:1912): avc: denied { create } for pid=13790 comm="syz.6.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 658.011565][ T30] audit: type=1400 audit(1754245356.182:1913): avc: denied { create } for pid=13790 comm="syz.6.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 658.013754][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'. [ 658.072359][ T30] audit: type=1400 audit(1754245356.182:1914): avc: denied { create } for pid=13790 comm="syz.6.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 658.093381][ T30] audit: type=1400 audit(1754245356.182:1915): avc: denied { read } for pid=13790 comm="syz.6.1808" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 658.118728][ T30] audit: type=1400 audit(1754245356.212:1916): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 658.143539][ T30] audit: type=1400 audit(1754245356.222:1917): avc: denied { create } for pid=13792 comm="syz.7.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 658.164585][ T30] audit: type=1400 audit(1754245356.232:1918): avc: denied { create } for pid=13792 comm="syz.7.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 658.184241][ T30] audit: type=1400 audit(1754245356.232:1919): avc: denied { mounton } for pid=13792 comm="syz.7.1809" path="/61/file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 658.226024][T13798] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 658.263252][T13798] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 658.603187][T13813] mac80211_hwsim hwsim15 syzkaller0: Caught tx_queue_len zero misconfig [ 658.780621][T13810] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1811'. [ 659.063455][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 659.075941][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 659.114937][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 659.114977][ T3546] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.144099][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 659.172376][ T3546] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.213183][ T3546] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.234983][ T3546] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.839767][T13834] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1821'. [ 660.415763][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'. [ 660.425251][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1834'. [ 660.444190][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'. [ 661.915786][T13887] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 662.809069][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.826368][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.835314][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.844609][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.882692][ T30] kauditd_printk_skb: 287 callbacks suppressed [ 662.882707][ T30] audit: type=1400 audit(1754245361.052:2207): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 662.948698][ T30] audit: type=1400 audit(1754245361.122:2208): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 662.982917][ T30] audit: type=1400 audit(1754245361.152:2209): avc: denied { execmem } for pid=13952 comm="syz.7.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 663.035668][ T30] audit: type=1400 audit(1754245361.202:2210): avc: denied { wake_alarm } for pid=13952 comm="syz.7.1868" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 663.061838][ T30] audit: type=1400 audit(1754245361.232:2211): avc: denied { read } for pid=13952 comm="syz.7.1868" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 663.090682][ T30] audit: type=1400 audit(1754245361.232:2212): avc: denied { read write } for pid=13952 comm="syz.7.1868" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 663.123218][ T30] audit: type=1400 audit(1754245361.292:2213): avc: denied { append } for pid=13949 comm="syz.5.1867" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 663.149119][ T30] audit: type=1400 audit(1754245361.292:2214): avc: denied { create } for pid=13949 comm="syz.5.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 663.170986][ T30] audit: type=1400 audit(1754245361.292:2215): avc: denied { read write } for pid=13949 comm="syz.5.1867" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 663.370623][ T30] audit: type=1400 audit(1754245361.502:2216): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 664.618355][T13997] __nla_validate_parse: 8 callbacks suppressed [ 664.618367][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1882'. [ 664.644093][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1882'. [ 664.655102][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1882'. [ 664.665501][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1882'. [ 665.227497][T14024] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 665.313623][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1893'. [ 665.405453][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1898'. [ 665.449519][T14033] veth3: entered promiscuous mode [ 666.049868][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 666.100596][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 666.332181][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 666.341297][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 667.493900][T14077] bridge_slave_0: entered promiscuous mode [ 668.325433][ T30] kauditd_printk_skb: 234 callbacks suppressed [ 668.325447][ T30] audit: type=1400 audit(1754245366.492:2451): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 668.375508][ T30] audit: type=1400 audit(1754245366.542:2452): avc: denied { read } for pid=14086 comm="syz.3.1916" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 668.480122][ T30] audit: type=1400 audit(1754245366.582:2453): avc: denied { read } for pid=14086 comm="syz.3.1916" dev="nsfs" ino=4026533022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 668.536137][ T30] audit: type=1400 audit(1754245366.592:2454): avc: denied { create } for pid=14086 comm="syz.3.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 668.568805][ T30] audit: type=1400 audit(1754245366.592:2455): avc: denied { execmem } for pid=14086 comm="syz.3.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 668.626336][ T30] audit: type=1400 audit(1754245366.592:2456): avc: denied { prog_load } for pid=14086 comm="syz.3.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 668.665856][ T30] audit: type=1400 audit(1754245366.592:2457): avc: denied { create } for pid=14086 comm="syz.3.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 668.736371][ T30] audit: type=1400 audit(1754245366.592:2458): avc: denied { read write } for pid=14086 comm="syz.3.1916" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 668.779280][ T30] audit: type=1400 audit(1754245366.592:2459): avc: denied { read } for pid=14086 comm="syz.3.1916" dev="nsfs" ino=4026533022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 668.800984][ T30] audit: type=1400 audit(1754245366.612:2460): avc: denied { prog_load } for pid=14088 comm="syz.1.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 670.097937][T14121] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.105193][T14121] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.112300][T14121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.365268][T14131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 671.124839][T14141] netlink: 'syz.7.1939': attribute type 21 has an invalid length. [ 671.138177][T14141] __nla_validate_parse: 2 callbacks suppressed [ 671.138191][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1939'. [ 671.554805][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1946'. [ 671.608927][T14162] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1942'. [ 672.433456][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1961'. [ 672.667825][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1962'. [ 673.400900][ T30] kauditd_printk_skb: 245 callbacks suppressed [ 673.400914][ T30] audit: type=1400 audit(1754245371.572:2706): avc: denied { mounton } for pid=14236 comm="syz.3.1973" path="/387" dev="tmpfs" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 673.429078][T14237] FAULT_INJECTION: forcing a failure. [ 673.429078][T14237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.432092][ T30] audit: type=1400 audit(1754245371.572:2707): avc: denied { prog_load } for pid=14236 comm="syz.3.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 673.442842][T14237] CPU: 0 UID: 0 PID: 14237 Comm: syz.3.1973 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 673.442863][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.442872][T14237] Call Trace: [ 673.442877][T14237] [ 673.442883][T14237] dump_stack_lvl+0x16c/0x1f0 [ 673.442909][T14237] should_fail_ex+0x512/0x640 [ 673.442936][T14237] _copy_from_user+0x2e/0xd0 [ 673.442953][T14237] kstrtouint_from_user+0xd6/0x1d0 [ 673.442973][T14237] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 673.442993][T14237] ? __lock_acquire+0xb97/0x1ce0 [ 673.443028][T14237] proc_fail_nth_write+0x83/0x220 [ 673.443046][T14237] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 673.443070][T14237] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 673.443085][T14237] vfs_write+0x29d/0x1150 [ 673.443104][T14237] ? __pfx___mutex_lock+0x10/0x10 [ 673.443127][T14237] ? __pfx_vfs_write+0x10/0x10 [ 673.443148][T14237] ? __fget_files+0x20e/0x3c0 [ 673.443171][T14237] ksys_write+0x12a/0x250 [ 673.443186][T14237] ? __pfx_ksys_write+0x10/0x10 [ 673.443208][T14237] do_syscall_64+0xcd/0x4c0 [ 673.443232][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.443247][T14237] RIP: 0033:0x7f5ba6d8d61f [ 673.443259][T14237] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 673.443273][T14237] RSP: 002b:00007f5ba7c94030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 673.443288][T14237] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ba6d8d61f [ 673.443298][T14237] RDX: 0000000000000001 RSI: 00007f5ba7c940a0 RDI: 000000000000000a [ 673.443306][T14237] RBP: 00007f5ba7c94090 R08: 0000000000000000 R09: 0000000000000000 [ 673.443315][T14237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 673.443324][T14237] R13: 0000000000000000 R14: 00007f5ba6fb5fa0 R15: 00007ffeafde4938 [ 673.443345][T14237] [ 673.651504][ T30] audit: type=1400 audit(1754245371.602:2708): avc: denied { create } for pid=14236 comm="syz.3.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 673.750631][ T30] audit: type=1400 audit(1754245371.922:2709): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 673.782802][ T30] audit: type=1400 audit(1754245371.952:2710): avc: denied { mounton } for pid=14239 comm="syz.3.1974" path="/388/file0" dev="tmpfs" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 673.807275][ T30] audit: type=1400 audit(1754245371.952:2711): avc: denied { mounton } for pid=14239 comm="syz.3.1974" path="/388/file0" dev="tmpfs" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 673.832204][ T30] audit: type=1400 audit(1754245371.982:2712): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 673.856614][ T30] audit: type=1400 audit(1754245372.012:2713): avc: denied { read } for pid=14241 comm="syz.3.1975" dev="nsfs" ino=4026533022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 673.879388][ T30] audit: type=1400 audit(1754245372.012:2714): avc: denied { name_bind } for pid=14241 comm="syz.3.1975" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 673.907554][ T30] audit: type=1400 audit(1754245372.072:2715): avc: denied { create } for pid=14241 comm="syz.3.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 674.436456][T12165] Bluetooth: hci3: command 0xfc11 tx timeout [ 674.442899][ T5856] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 676.523816][T14318] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1999'. [ 676.629959][T14316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=14316 comm=syz.7.1995 [ 676.690292][T14322] trusted_key: encrypted_key: hex blob is missing [ 676.725174][T14325] lo speed is unknown, defaulting to 1000 [ 678.409130][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 678.409146][ T30] audit: type=1400 audit(1754245376.582:2965): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 678.472929][ T30] audit: type=1400 audit(1754245376.622:2966): avc: denied { create } for pid=14371 comm="syz.5.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 678.503833][ T30] audit: type=1400 audit(1754245376.622:2967): avc: denied { create } for pid=14371 comm="syz.5.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 678.534587][ T30] audit: type=1400 audit(1754245376.622:2968): avc: denied { create } for pid=14371 comm="syz.5.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 678.555800][ T30] audit: type=1400 audit(1754245376.642:2969): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 678.624106][ T30] audit: type=1400 audit(1754245376.702:2970): avc: denied { read } for pid=14375 comm="syz.5.2025" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 678.670159][T14378] FAULT_INJECTION: forcing a failure. [ 678.670159][T14378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.687549][T14378] CPU: 0 UID: 0 PID: 14378 Comm: syz.7.2027 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 678.687569][T14378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.687576][T14378] Call Trace: [ 678.687580][T14378] [ 678.687584][T14378] dump_stack_lvl+0x16c/0x1f0 [ 678.687605][T14378] should_fail_ex+0x512/0x640 [ 678.687626][T14378] _copy_from_user+0x2e/0xd0 [ 678.687639][T14378] kstrtouint_from_user+0xd6/0x1d0 [ 678.687655][T14378] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 678.687670][T14378] ? __lock_acquire+0xb97/0x1ce0 [ 678.687694][T14378] proc_fail_nth_write+0x83/0x220 [ 678.687708][T14378] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.687724][T14378] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.687736][T14378] vfs_write+0x29d/0x1150 [ 678.687750][T14378] ? __pfx___mutex_lock+0x10/0x10 [ 678.687767][T14378] ? __pfx_vfs_write+0x10/0x10 [ 678.687782][T14378] ? __fget_files+0x20e/0x3c0 [ 678.687799][T14378] ksys_write+0x12a/0x250 [ 678.687810][T14378] ? __pfx_ksys_write+0x10/0x10 [ 678.687821][T14378] ? fdget+0x187/0x210 [ 678.687835][T14378] do_syscall_64+0xcd/0x4c0 [ 678.687853][T14378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.687864][T14378] RIP: 0033:0x7f0e6898d61f [ 678.687873][T14378] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 678.687884][T14378] RSP: 002b:00007f0e69822030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 678.687895][T14378] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e6898d61f [ 678.687902][T14378] RDX: 0000000000000001 RSI: 00007f0e698220a0 RDI: 0000000000000003 [ 678.687908][T14378] RBP: 00007f0e69822090 R08: 0000000000000000 R09: 0000000000000000 [ 678.687915][T14378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 678.687920][T14378] R13: 0000000000000000 R14: 00007f0e68bb5fa0 R15: 00007ffea7b5b608 [ 678.687934][T14378] [ 678.690803][ T30] audit: type=1400 audit(1754245376.762:2971): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 678.946425][ T30] audit: type=1400 audit(1754245376.762:2972): avc: denied { read } for pid=14375 comm="syz.5.2025" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 678.972103][ T30] audit: type=1400 audit(1754245376.762:2973): avc: denied { create } for pid=14375 comm="syz.5.2025" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 679.028683][ T30] audit: type=1400 audit(1754245376.762:2974): avc: denied { prog_load } for pid=14375 comm="syz.5.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 679.619241][T14404] can0: slcan on ptm0. [ 679.667316][T14404] can0 (unregistered): slcan off ptm0. [ 680.416875][T14442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14442 comm=syz.5.2052 [ 680.416875][T14443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14443 comm=syz.5.2052 [ 680.492680][T14445] sp0: Synchronizing with TNC [ 680.773579][T14450] netlink: 'syz.6.2055': attribute type 4 has an invalid length. [ 680.789161][T14450] netlink: 'syz.6.2055': attribute type 4 has an invalid length. [ 681.077370][T14454] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2056'. [ 681.126378][T14437] [U] è [ 682.306919][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2069'. [ 682.331123][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2069'. [ 682.359082][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2069'. [ 682.369021][ T3546] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.379803][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2069'. [ 682.406220][ T3546] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.426912][ T3546] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.435682][ T3546] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.079843][T14511] netlink: 'syz.3.2078': attribute type 10 has an invalid length. [ 683.090544][T14511] team0: Device hsr_slave_0 failed to register rx_handler [ 683.174571][T14512] tipc: Resetting bearer [ 683.190575][T14512] tipc: Resetting bearer [ 683.243168][T14512] tipc: Resetting bearer [ 683.435062][ T30] kauditd_printk_skb: 276 callbacks suppressed [ 683.435078][ T30] audit: type=1400 audit(1754245381.602:3251): avc: denied { create } for pid=14527 comm="syz.1.2084" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 683.569536][ T30] audit: type=1400 audit(1754245381.742:3252): avc: denied { create } for pid=14527 comm="syz.1.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=0 [ 684.023238][ T30] audit: type=1400 audit(1754245382.192:3253): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 684.072766][ T30] audit: type=1400 audit(1754245382.232:3254): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 684.109430][ T30] audit: type=1400 audit(1754245382.282:3255): avc: denied { execmem } for pid=14532 comm="syz.5.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 684.159082][ T30] audit: type=1400 audit(1754245382.332:3256): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 684.189559][ T30] audit: type=1400 audit(1754245382.362:3257): avc: denied { read write } for pid=14536 comm="syz.7.2087" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 684.198119][T14538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14538 comm=syz.5.2085 [ 684.276606][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2087'. [ 684.285575][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2087'. [ 684.296948][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2087'. [ 684.308186][ T30] audit: type=1400 audit(1754245382.442:3258): avc: denied { prog_load } for pid=14534 comm="syz.3.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 684.316272][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2087'. [ 684.347783][T14541] netlink: 'syz.3.2086': attribute type 21 has an invalid length. [ 684.412012][ T30] audit: type=1400 audit(1754245382.442:3259): avc: denied { write } for pid=14534 comm="syz.3.2086" name="ip_vs" dev="proc" ino=4026533128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 684.438655][ T30] audit: type=1400 audit(1754245382.442:3260): avc: denied { prog_load } for pid=14534 comm="syz.3.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 685.402478][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.410498][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.664234][T14566] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2095'. [ 686.031056][T14568] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2096'. [ 686.754484][T14571] netlink: 'syz.6.2098': attribute type 10 has an invalid length. [ 687.934905][T14605] __nla_validate_parse: 6 callbacks suppressed [ 687.934921][T14605] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2109'. [ 687.952529][T14605] netlink: 'syz.6.2109': attribute type 1 has an invalid length. [ 688.284694][T14613] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2112'. [ 688.455260][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 688.455276][ T30] audit: type=1400 audit(1754245386.622:3364): avc: denied { setattr } for pid=14616 comm="syz.3.2114" name="midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=0 [ 688.511939][ T30] audit: type=1400 audit(1754245386.682:3365): avc: denied { prog_load } for pid=14620 comm="syz.1.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 688.567358][ T30] audit: type=1400 audit(1754245386.742:3366): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 688.626602][ T30] audit: type=1400 audit(1754245386.762:3367): avc: denied { name_bind } for pid=14622 comm="syz.1.2116" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 688.677724][ T30] audit: type=1400 audit(1754245386.762:3368): avc: denied { map_create } for pid=14622 comm="syz.1.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 688.699689][ T30] audit: type=1400 audit(1754245386.772:3369): avc: denied { bpf } for pid=14622 comm="syz.1.2116" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 688.730316][ T30] audit: type=1400 audit(1754245386.772:3370): avc: denied { create } for pid=14624 comm="syz.6.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 688.731497][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2119'. [ 688.761432][ T30] audit: type=1400 audit(1754245386.772:3371): avc: denied { create } for pid=14622 comm="syz.1.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 688.894480][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2119'. [ 688.945603][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2119'. [ 688.962367][T14633] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2118'. [ 689.000425][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2119'. [ 689.046177][ T30] audit: type=1400 audit(1754245386.772:3372): avc: denied { map_create } for pid=14622 comm="syz.1.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 689.073462][ T30] audit: type=1400 audit(1754245386.772:3373): avc: denied { map_create } for pid=14622 comm="syz.1.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 689.888216][T14674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2134'. [ 690.056399][T14674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.542703][T14688] bridge1: entered allmulticast mode [ 690.577462][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2140'. [ 690.588143][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2140'. [ 691.694178][T12165] Bluetooth: hci3: command 0xfc11 tx timeout [ 691.696234][ T5856] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 692.071666][T14719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.902178][ T1205] IPVS: starting estimator thread 0... [ 692.910992][T14750] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 693.026148][T14752] IPVS: using max 74 ests per chain, 177600 per kthread [ 693.472035][ T30] kauditd_printk_skb: 358 callbacks suppressed [ 693.472051][ T30] audit: type=1400 audit(1754245391.642:3732): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 693.734145][ T30] audit: type=1400 audit(1754245391.642:3733): avc: denied { allowed } for pid=14756 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 693.758447][ T30] audit: type=1400 audit(1754245391.832:3734): avc: denied { prog_load } for pid=14758 comm="syz.5.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 693.795734][ T30] audit: type=1400 audit(1754245391.892:3735): avc: denied { execmem } for pid=14756 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 693.868201][ T30] audit: type=1400 audit(1754245391.902:3736): avc: denied { allowed } for pid=14758 comm="syz.5.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 694.090832][T14763] __nla_validate_parse: 3 callbacks suppressed [ 694.090854][T14763] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2158'. [ 694.153856][ T30] audit: type=1400 audit(1754245392.262:3737): avc: denied { name_bind } for pid=14756 comm="syz.3.2158" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 694.315140][ T30] audit: type=1400 audit(1754245392.262:3738): avc: denied { map_create } for pid=14756 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 694.374413][ T30] audit: type=1400 audit(1754245392.262:3739): avc: denied { prog_load } for pid=14756 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 694.433228][ T30] audit: type=1400 audit(1754245392.262:3740): avc: denied { prog_load } for pid=14756 comm="syz.3.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 694.613820][ T30] audit: type=1400 audit(1754245392.422:3741): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 695.694340][T14814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2177'. [ 695.707708][T14814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2177'. [ 696.251179][T14828] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2181'. [ 696.281080][T14825] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 696.287614][T14825] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 696.296972][T14825] vhci_hcd vhci_hcd.0: Device attached [ 696.315393][T14829] vhci_hcd: connection closed [ 696.315601][ T5969] vhci_hcd: stop threads [ 696.329969][ T5969] vhci_hcd: release socket [ 696.337997][ T5969] vhci_hcd: disconnect device [ 696.486870][T14836] netlink: 'syz.3.2186': attribute type 1 has an invalid length. [ 696.601868][T14836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.000435][T14837] bond1: (slave veth3): Enslaving as an active interface with a down link [ 697.175972][T14849] mkiss: ax0: crc mode is auto. [ 698.247920][T14899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2207'. [ 698.259476][T14899] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 698.298443][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2208'. [ 698.323362][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2208'. [ 698.348912][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2208'. [ 698.359294][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2208'. [ 698.483655][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 698.483670][ T30] audit: type=1400 audit(1754245396.652:3968): avc: denied { read append } for pid=14910 comm="syz.5.2211" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 698.517844][ T30] audit: type=1400 audit(1754245396.652:3969): avc: denied { read write } for pid=14910 comm="syz.5.2211" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 698.547726][ T30] audit: type=1400 audit(1754245396.652:3970): avc: denied { prog_load } for pid=14910 comm="syz.5.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 698.568784][ T30] audit: type=1400 audit(1754245396.672:3971): avc: denied { mounton } for pid=14910 comm="syz.5.2211" path="/342/file0" dev="tmpfs" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 698.594025][ T30] audit: type=1400 audit(1754245396.672:3972): avc: denied { mounton } for pid=14910 comm="syz.5.2211" path="/342/file0" dev="tmpfs" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 698.620278][ T30] audit: type=1400 audit(1754245396.692:3973): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 698.676340][ T30] audit: type=1400 audit(1754245396.722:3974): avc: denied { create } for pid=14914 comm="syz.5.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 698.699098][ T30] audit: type=1400 audit(1754245396.722:3975): avc: denied { prog_load } for pid=14912 comm="syz.1.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 698.844843][ T30] audit: type=1400 audit(1754245396.722:3976): avc: denied { allowed } for pid=14914 comm="syz.5.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 698.893160][ T30] audit: type=1400 audit(1754245396.722:3977): avc: denied { read write } for pid=14914 comm="syz.5.2213" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 699.103193][T14931] netlink: 1276 bytes leftover after parsing attributes in process `syz.6.2218'. [ 700.492405][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2228'. [ 700.524041][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2228'. [ 700.561988][T14961] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2229'. [ 700.616725][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2228'. [ 700.628206][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2228'. [ 700.883284][T14968] netlink: 'syz.3.2231': attribute type 10 has an invalid length. [ 701.313668][T14981] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2234'. [ 703.225026][T15010] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2242'. [ 703.436233][T15025] wireguard0: entered promiscuous mode [ 703.441952][T15025] wireguard0: entered allmulticast mode [ 703.669418][T15030] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2250'. [ 703.697881][ T30] kauditd_printk_skb: 327 callbacks suppressed [ 703.697902][ T30] audit: type=1400 audit(1754245401.842:4305): avc: denied { name_bind } for pid=15020 comm="syz.3.2250" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 703.736296][ T30] audit: type=1400 audit(1754245401.842:4306): avc: denied { map_create } for pid=15020 comm="syz.3.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 703.779538][ T30] audit: type=1400 audit(1754245401.842:4307): avc: denied { prog_load } for pid=15020 comm="syz.3.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 703.800597][ T30] audit: type=1400 audit(1754245401.842:4308): avc: denied { prog_load } for pid=15020 comm="syz.3.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 703.825868][ T30] audit: type=1400 audit(1754245401.992:4309): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 703.871089][ T30] audit: type=1400 audit(1754245402.042:4310): avc: denied { create } for pid=15033 comm="syz.7.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 703.903705][ T30] audit: type=1400 audit(1754245402.072:4311): avc: denied { read write } for pid=15033 comm="syz.7.2253" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 703.917169][T15034] FAULT_INJECTION: forcing a failure. [ 703.917169][T15034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 703.944314][T15034] CPU: 1 UID: 0 PID: 15034 Comm: syz.7.2253 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 703.944341][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.944351][T15034] Call Trace: [ 703.944358][T15034] [ 703.944367][T15034] dump_stack_lvl+0x16c/0x1f0 [ 703.944397][T15034] should_fail_ex+0x512/0x640 [ 703.944423][T15034] should_fail_alloc_page+0xe7/0x130 [ 703.944438][T15034] prepare_alloc_pages+0x3c2/0x610 [ 703.944454][T15034] ? rcu_is_watching+0x12/0xc0 [ 703.944471][T15034] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 703.944483][T15034] ? css_rstat_updated+0x1c2/0x510 [ 703.944499][T15034] ? __pfx_css_rstat_updated+0x10/0x10 [ 703.944518][T15034] ? rcu_is_watching+0x12/0xc0 [ 703.944532][T15034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 703.944544][T15034] ? __mod_zone_page_state+0xcc/0x1a0 [ 703.944567][T15034] ? __lock_acquire+0x62e/0x1ce0 [ 703.944587][T15034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 703.944601][T15034] ? policy_nodemask+0xea/0x4e0 [ 703.944615][T15034] alloc_pages_mpol+0x1fb/0x550 [ 703.944628][T15034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 703.944643][T15034] ? __lock_acquire+0x62e/0x1ce0 [ 703.944661][T15034] folio_alloc_mpol_noprof+0x36/0x2f0 [ 703.944678][T15034] vma_alloc_folio_noprof+0xed/0x1e0 [ 703.944692][T15034] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 703.944712][T15034] do_pte_missing+0x2230/0x3ba0 [ 703.944729][T15034] ? find_held_lock+0x2b/0x80 [ 703.944746][T15034] __handle_mm_fault+0x152a/0x2a50 [ 703.944768][T15034] ? __pfx___handle_mm_fault+0x10/0x10 [ 703.944786][T15034] ? __pte_offset_map_lock+0x174/0x310 [ 703.944806][T15034] ? find_held_lock+0x2b/0x80 [ 703.944833][T15034] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 703.944858][T15034] handle_mm_fault+0x589/0xd10 [ 703.944883][T15034] __get_user_pages+0x551/0x34a0 [ 703.944903][T15034] ? __pfx___get_user_pages+0x10/0x10 [ 703.944922][T15034] faultin_page_range+0x338/0x940 [ 703.944940][T15034] madvise_do_behavior+0x34c/0x530 [ 703.944957][T15034] ? __pfx_madvise_do_behavior+0x10/0x10 [ 703.944972][T15034] ? down_read+0x13d/0x480 [ 703.944985][T15034] ? find_held_lock+0x2b/0x80 [ 703.945001][T15034] do_madvise+0x176/0x240 [ 703.945014][T15034] ? __pfx_do_madvise+0x10/0x10 [ 703.945032][T15034] ? __fget_files+0x20e/0x3c0 [ 703.945050][T15034] ? __pfx_ksys_write+0x10/0x10 [ 703.945063][T15034] __x64_sys_madvise+0xa9/0x110 [ 703.945077][T15034] ? lockdep_hardirqs_on+0x7c/0x110 [ 703.945093][T15034] do_syscall_64+0xcd/0x4c0 [ 703.945111][T15034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.945125][T15034] RIP: 0033:0x7f0e6898eb69 [ 703.945134][T15034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.945145][T15034] RSP: 002b:00007f0e69822038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 703.945156][T15034] RAX: ffffffffffffffda RBX: 00007f0e68bb5fa0 RCX: 00007f0e6898eb69 [ 703.945163][T15034] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 703.945170][T15034] RBP: 00007f0e69822090 R08: 0000000000000000 R09: 0000000000000000 [ 703.945177][T15034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.945183][T15034] R13: 0000000000000000 R14: 00007f0e68bb5fa0 R15: 00007ffea7b5b608 [ 703.945197][T15034] [ 704.378609][ T30] audit: type=1400 audit(1754245402.502:4312): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 704.407689][T15044] netlink: 'syz.5.2257': attribute type 1 has an invalid length. [ 704.425688][ T30] audit: type=1400 audit(1754245402.512:4313): avc: denied { create } for pid=15036 comm="syz.6.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 704.446749][ T30] audit: type=1400 audit(1754245402.512:4314): avc: denied { create } for pid=15036 comm="syz.6.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 704.482894][T15044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 704.483021][T15048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15048 comm=syz.1.2254 [ 704.591717][T15049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2254'. [ 704.651177][T15054] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2259'. [ 704.688485][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 704.704896][T15056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2260'. [ 704.717399][T15056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2260'. [ 705.039091][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2272'. [ 705.409474][T15087] ceph: No mds server is up or the cluster is laggy [ 705.455399][T15114] FAULT_INJECTION: forcing a failure. [ 705.455399][T15114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.475877][T15114] CPU: 0 UID: 0 PID: 15114 Comm: syz.5.2278 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 705.475902][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 705.475912][T15114] Call Trace: [ 705.475916][T15114] [ 705.475921][T15114] dump_stack_lvl+0x16c/0x1f0 [ 705.475942][T15114] should_fail_ex+0x512/0x640 [ 705.475961][T15114] _copy_to_iter+0x463/0x16f0 [ 705.475978][T15114] ? __pfx__copy_to_iter+0x10/0x10 [ 705.475989][T15114] ? do_raw_spin_unlock+0x172/0x230 [ 705.476002][T15114] ? _raw_spin_unlock+0x28/0x50 [ 705.476016][T15114] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 705.476033][T15114] seq_read_iter+0x719/0x12c0 [ 705.476059][T15114] seq_read+0x39e/0x4e0 [ 705.476076][T15114] ? __pfx_seq_read+0x10/0x10 [ 705.476096][T15114] ? get_pid_task+0xfc/0x250 [ 705.476116][T15114] ? avc_policy_seqno+0x9/0x20 [ 705.476151][T15114] ? __pfx_seq_read+0x10/0x10 [ 705.476167][T15114] proc_reg_read+0x240/0x330 [ 705.476191][T15114] ? __pfx_proc_reg_read+0x10/0x10 [ 705.476214][T15114] vfs_read+0x1e4/0xc60 [ 705.476228][T15114] ? __pfx_vfs_read+0x10/0x10 [ 705.476238][T15114] ? find_held_lock+0x2b/0x80 [ 705.476252][T15114] ? __fget_files+0x204/0x3c0 [ 705.476267][T15114] ? __fget_files+0x20e/0x3c0 [ 705.476278][T15114] ? __fget_files+0x130/0x3c0 [ 705.476294][T15114] __x64_sys_pread64+0x1eb/0x250 [ 705.476306][T15114] ? __pfx___x64_sys_pread64+0x10/0x10 [ 705.476322][T15114] do_syscall_64+0xcd/0x4c0 [ 705.476340][T15114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.476351][T15114] RIP: 0033:0x7fd00c98eb69 [ 705.476361][T15114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.476373][T15114] RSP: 002b:00007fd00d71a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 705.476384][T15114] RAX: ffffffffffffffda RBX: 00007fd00cbb5fa0 RCX: 00007fd00c98eb69 [ 705.476391][T15114] RDX: 00000000000000fc RSI: 0000200000000000 RDI: 0000000000000003 [ 705.476398][T15114] RBP: 00007fd00d71a090 R08: 0000000000000000 R09: 0000000000000000 [ 705.476404][T15114] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001 [ 705.476410][T15114] R13: 0000000000000000 R14: 00007fd00cbb5fa0 R15: 00007ffe547e5a98 [ 705.476424][T15114] [ 706.150051][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2289'. [ 706.169734][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2290'. [ 707.065060][T15167] bridge0: entered promiscuous mode [ 707.090894][T15167] bond0: entered promiscuous mode [ 707.099995][T15167] bond_slave_0: entered promiscuous mode [ 707.122108][T15167] bond_slave_1: entered promiscuous mode [ 707.146417][T15167] debugfs: 'hsr1' already exists in 'hsr' [ 707.153750][T15167] Cannot create hsr debugfs directory [ 707.159536][T15167] hsr1: entered allmulticast mode [ 707.166294][T15167] bridge0: entered allmulticast mode [ 707.174145][T15167] bond0: entered allmulticast mode [ 707.184587][T15167] bond_slave_0: entered allmulticast mode [ 707.199204][T15167] bond_slave_1: entered allmulticast mode [ 707.631334][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2304'. [ 707.712654][T15187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=15187 comm=syz.6.2304 [ 708.234862][T15200] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2306'. [ 708.343262][T15201] netem: incorrect ge model size [ 708.348692][T15201] netem: change failed [ 708.540264][T15203] lo speed is unknown, defaulting to 1000 [ 708.995208][ T30] kauditd_printk_skb: 294 callbacks suppressed [ 708.995224][ T30] audit: type=1400 audit(1754245407.162:4609): avc: denied { execmem } for pid=15207 comm="syz.1.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 709.028676][ T30] audit: type=1400 audit(1754245407.182:4610): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 709.072759][ T30] audit: type=1400 audit(1754245407.222:4611): avc: denied { allowed } for pid=15209 comm="syz.5.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 709.106273][ T30] audit: type=1400 audit(1754245407.222:4612): avc: denied { execmem } for pid=15209 comm="syz.5.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 709.129222][ T30] audit: type=1400 audit(1754245407.222:4613): avc: denied { prog_load } for pid=15207 comm="syz.1.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 709.433484][ T30] audit: type=1326 audit(1754245407.222:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.1.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997378eb69 code=0x7ffc0000 [ 709.636692][ T30] audit: type=1326 audit(1754245407.222:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.1.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f997378eb69 code=0x7ffc0000 [ 709.683966][T15220] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2312'. [ 709.837669][ T30] audit: type=1326 audit(1754245407.222:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.1.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997378eb69 code=0x7ffc0000 [ 710.166523][ T30] audit: type=1326 audit(1754245407.222:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.1.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f997378d4d0 code=0x7ffc0000 [ 710.301992][ T30] audit: type=1326 audit(1754245407.222:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.1.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f997378d61f code=0x7ffc0000 [ 710.786758][T15230] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2314'. [ 711.240320][T15249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2325'. [ 711.494233][T15262] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 711.500758][T15262] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 711.538090][T15262] vhci_hcd vhci_hcd.0: Device attached [ 711.597774][T15266] vhci_hcd: connection closed [ 711.598030][ T3464] vhci_hcd: stop threads [ 711.616851][ T3464] vhci_hcd: release socket [ 711.621435][ T3464] vhci_hcd: disconnect device [ 711.782252][T15287] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 712.404488][T15312] tipc: Resetting bearer [ 712.846394][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.260593][T15350] FAULT_INJECTION: forcing a failure. [ 713.260593][T15350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.273859][T15350] CPU: 0 UID: 0 PID: 15350 Comm: syz.3.2364 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 713.273889][T15350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 713.273901][T15350] Call Trace: [ 713.273907][T15350] [ 713.273914][T15350] dump_stack_lvl+0x16c/0x1f0 [ 713.273944][T15350] should_fail_ex+0x512/0x640 [ 713.273975][T15350] _copy_from_user+0x2e/0xd0 [ 713.273995][T15350] copy_msghdr_from_user+0x98/0x160 [ 713.274022][T15350] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 713.274045][T15350] ? lockdep_hardirqs_on+0x7c/0x110 [ 713.274071][T15350] ? kfree+0x2b4/0x4d0 [ 713.274095][T15350] ? __pfx__kstrtoull+0x10/0x10 [ 713.274116][T15350] ? ___sys_sendmsg+0x141/0x1d0 [ 713.274143][T15350] ___sys_sendmsg+0xfe/0x1d0 [ 713.274169][T15350] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.274216][T15350] ? __pfx___might_resched+0x10/0x10 [ 713.274244][T15350] __sys_sendmmsg+0x200/0x420 [ 713.274271][T15350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 713.274303][T15350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 713.274339][T15350] ? fput+0x9b/0xd0 [ 713.274361][T15350] ? ksys_write+0x1ac/0x250 [ 713.274378][T15350] ? __pfx_ksys_write+0x10/0x10 [ 713.274400][T15350] __x64_sys_sendmmsg+0x9c/0x100 [ 713.274424][T15350] ? lockdep_hardirqs_on+0x7c/0x110 [ 713.274448][T15350] do_syscall_64+0xcd/0x4c0 [ 713.274475][T15350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.274492][T15350] RIP: 0033:0x7f5ba6d8eb69 [ 713.274508][T15350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.274523][T15350] RSP: 002b:00007f5ba7c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 713.274541][T15350] RAX: ffffffffffffffda RBX: 00007f5ba6fb6080 RCX: 00007f5ba6d8eb69 [ 713.274553][T15350] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 713.274564][T15350] RBP: 00007f5ba7c73090 R08: 0000000000000000 R09: 0000000000000000 [ 713.274575][T15350] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002 [ 713.274585][T15350] R13: 0000000000000000 R14: 00007f5ba6fb6080 R15: 00007ffeafde4938 [ 713.274609][T15350] [ 714.051314][ T30] kauditd_printk_skb: 340 callbacks suppressed [ 714.051330][ T30] audit: type=1400 audit(1754245412.222:4959): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 714.088052][ T30] audit: type=1400 audit(1754245412.262:4960): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 714.112541][ T30] audit: type=1400 audit(1754245412.262:4961): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 714.136527][ T30] audit: type=1400 audit(1754245412.262:4962): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 714.162415][ T30] audit: type=1400 audit(1754245412.262:4963): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 714.192223][ T30] audit: type=1400 audit(1754245412.262:4964): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 714.215149][ T30] audit: type=1400 audit(1754245412.262:4965): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 714.238056][ T30] audit: type=1400 audit(1754245412.262:4966): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 714.261883][ T30] audit: type=1400 audit(1754245412.262:4967): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 714.286530][ T30] audit: type=1400 audit(1754245412.262:4968): avc: denied { mounton } for pid=15355 comm="syz.3.2367" path="/453/file0" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 715.530278][T15386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.539098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.548971][T15386] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2376'. [ 715.886349][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.321829][T15418] netlink: 'syz.5.2386': attribute type 4 has an invalid length. [ 718.385619][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2411'. [ 718.490285][T15481] lo speed is unknown, defaulting to 1000 [ 718.928960][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.331583][ T30] kauditd_printk_skb: 497 callbacks suppressed [ 719.331594][ T30] audit: type=1400 audit(1754245417.502:5466): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 719.372610][ T30] audit: type=1400 audit(1754245417.542:5467): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 719.515770][ T30] audit: type=1400 audit(1754245417.632:5468): avc: denied { read write } for pid=15495 comm="syz.6.2415" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 719.570042][ T30] audit: type=1400 audit(1754245417.632:5469): avc: denied { create } for pid=15495 comm="syz.6.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 719.593567][ T30] audit: type=1400 audit(1754245417.642:5470): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 719.618128][ T30] audit: type=1400 audit(1754245417.652:5471): avc: denied { create } for pid=15495 comm="syz.6.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 719.641451][ T30] audit: type=1400 audit(1754245417.662:5472): avc: denied { read write } for pid=15494 comm="syz.7.2416" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 719.666353][ T30] audit: type=1400 audit(1754245417.662:5473): avc: denied { execmem } for pid=15494 comm="syz.7.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 719.695942][ T30] audit: type=1400 audit(1754245417.722:5474): avc: denied { create } for pid=15494 comm="syz.7.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 719.715584][ T30] audit: type=1400 audit(1754245417.722:5475): avc: denied { map_create } for pid=15494 comm="syz.7.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 720.362874][T15516] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2421'. [ 720.739073][T15518] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2424'. [ 721.094238][T15533] netlink: 'syz.3.2428': attribute type 21 has an invalid length. [ 721.956465][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.647761][T15558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=15558 comm=syz.5.2438 [ 723.824509][T15569] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2439'. [ 724.402911][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 724.402921][ T30] audit: type=1400 audit(1754245422.572:5614): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 724.532921][ T30] audit: type=1400 audit(1754245422.702:5615): avc: denied { execmem } for pid=15579 comm="syz.5.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 724.589218][ T30] audit: type=1400 audit(1754245422.762:5616): avc: denied { create } for pid=15577 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 724.660956][ T30] audit: type=1400 audit(1754245422.782:5617): avc: denied { allowed } for pid=15577 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 724.795418][ T30] audit: type=1400 audit(1754245422.782:5618): avc: denied { create } for pid=15577 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 724.944799][ T30] audit: type=1400 audit(1754245422.932:5619): avc: denied { read } for pid=15579 comm="syz.5.2443" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 724.996376][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.104140][ T30] audit: type=1400 audit(1754245422.932:5620): avc: denied { create } for pid=15579 comm="syz.5.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 725.166105][ T30] audit: type=1400 audit(1754245422.932:5621): avc: denied { create } for pid=15579 comm="syz.5.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 725.220759][ T30] audit: type=1400 audit(1754245422.932:5622): avc: denied { prog_load } for pid=15579 comm="syz.5.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 725.290752][ T30] audit: type=1400 audit(1754245422.932:5623): avc: denied { read append } for pid=15579 comm="syz.5.2443" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 725.564877][T15610] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2453'. [ 725.622329][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2454'. [ 725.653214][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2454'. [ 725.673672][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2454'. [ 725.688201][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2454'. [ 726.127232][T15619] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2455'. [ 726.734927][T15632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2460'. [ 726.865135][T15635] veth3: entered promiscuous mode [ 727.376222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.384904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.726315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.734538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.036270][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.431332][T15682] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2480'. [ 728.465472][T15682] geneve2: entered promiscuous mode [ 728.496490][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.593664][T15691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.602783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.946298][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.290617][T15708] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2489'. [ 729.436121][ T30] kauditd_printk_skb: 245 callbacks suppressed [ 729.436142][ T30] audit: type=1400 audit(1754245427.602:5869): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 729.491374][ T30] audit: type=1400 audit(1754245427.652:5870): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 729.686878][ T30] audit: type=1400 audit(1754245427.722:5871): avc: denied { execmem } for pid=15716 comm="syz.1.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 729.806580][ T30] audit: type=1400 audit(1754245427.722:5872): avc: denied { create } for pid=15716 comm="syz.1.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 729.828964][T15713] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2490'. [ 729.855215][ T30] audit: type=1400 audit(1754245427.732:5873): avc: denied { read } for pid=15715 comm="syz.7.2493" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 730.001396][ T30] audit: type=1400 audit(1754245427.732:5874): avc: denied { read } for pid=15715 comm="syz.7.2493" dev="nsfs" ino=4026533350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 730.049767][ T30] audit: type=1400 audit(1754245427.732:5875): avc: denied { create } for pid=15715 comm="syz.7.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 730.208906][ T30] audit: type=1400 audit(1754245427.732:5876): avc: denied { read } for pid=15715 comm="syz.7.2493" dev="nsfs" ino=4026533350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 730.230391][ T30] audit: type=1400 audit(1754245427.742:5877): avc: denied { read } for pid=15715 comm="syz.7.2493" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 730.254083][ T30] audit: type=1400 audit(1754245427.752:5878): avc: denied { read write } for pid=15715 comm="syz.7.2493" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 730.283874][ T36] net_ratelimit: 3 callbacks suppressed [ 730.283888][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.328018][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.076423][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.085196][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.428731][T15810] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 734.189297][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.197677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.539497][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 734.539509][ T30] audit: type=1400 audit(1754245432.712:6054): avc: denied { create } for pid=15834 comm="syz.5.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=0 [ 734.616381][ T30] audit: type=1400 audit(1754245432.712:6055): avc: denied { read write } for pid=15834 comm="syz.5.2529" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0 [ 734.681372][ T30] audit: type=1400 audit(1754245432.742:6056): avc: denied { create } for pid=15840 comm="syz.1.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 734.782965][ T30] audit: type=1400 audit(1754245432.942:6057): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 734.881104][ T30] audit: type=1400 audit(1754245433.002:6058): avc: denied { read } for pid=15845 comm="syz.3.2534" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 734.942721][ T30] audit: type=1400 audit(1754245433.032:6059): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 735.000731][ T30] audit: type=1400 audit(1754245433.102:6060): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 735.026208][ T30] audit: type=1400 audit(1754245433.102:6061): avc: denied { create } for pid=15847 comm="syz.3.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 735.061618][ T30] audit: type=1400 audit(1754245433.112:6062): avc: denied { write } for pid=15847 comm="syz.3.2535" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 735.100697][ T30] audit: type=1400 audit(1754245433.112:6063): avc: denied { read } for pid=15847 comm="syz.3.2535" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 735.390745][T15865] FAULT_INJECTION: forcing a failure. [ 735.390745][T15865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.404703][T15865] CPU: 0 UID: 0 PID: 15865 Comm: syz.3.2539 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 735.404737][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.404747][T15865] Call Trace: [ 735.404753][T15865] [ 735.404760][T15865] dump_stack_lvl+0x16c/0x1f0 [ 735.404790][T15865] should_fail_ex+0x512/0x640 [ 735.404812][T15865] _copy_from_user+0x2e/0xd0 [ 735.404824][T15865] kstrtouint_from_user+0xd6/0x1d0 [ 735.404840][T15865] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 735.404856][T15865] ? __lock_acquire+0xb97/0x1ce0 [ 735.404880][T15865] proc_fail_nth_write+0x83/0x220 [ 735.404894][T15865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 735.404910][T15865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 735.404922][T15865] vfs_write+0x29d/0x1150 [ 735.404936][T15865] ? __pfx___mutex_lock+0x10/0x10 [ 735.404953][T15865] ? __pfx_vfs_write+0x10/0x10 [ 735.404971][T15865] ? __fget_files+0x20e/0x3c0 [ 735.405029][T15865] ksys_write+0x12a/0x250 [ 735.405041][T15865] ? __pfx_ksys_write+0x10/0x10 [ 735.405057][T15865] do_syscall_64+0xcd/0x4c0 [ 735.405075][T15865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.405090][T15865] RIP: 0033:0x7f5ba6d8d61f [ 735.405100][T15865] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 735.405112][T15865] RSP: 002b:00007f5ba7c73030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 735.405123][T15865] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ba6d8d61f [ 735.405129][T15865] RDX: 0000000000000001 RSI: 00007f5ba7c730a0 RDI: 0000000000000005 [ 735.405136][T15865] RBP: 00007f5ba7c73090 R08: 0000000000000000 R09: 0000000000000000 [ 735.405142][T15865] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 735.405149][T15865] R13: 0000000000000000 R14: 00007f5ba6fb6080 R15: 00007ffeafde4938 [ 735.405163][T15865] [ 735.734808][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2548'. [ 735.818696][T15889] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 735.931137][T15886] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 736.010475][T15886] bond3 (unregistering): Released all slaves [ 736.067025][T15899] netlink: 'syz.5.2549': attribute type 21 has an invalid length. [ 736.075089][T15899] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2549'. [ 736.090640][T15899] netlink: 'syz.5.2549': attribute type 21 has an invalid length. [ 736.098685][T15899] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2549'. [ 737.238418][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.027040][T15943] 0ªî{X¹¦: left allmulticast mode [ 738.047718][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.054827][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.102815][T15943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.114511][T15943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.144792][T15943] tipc: Resetting bearer [ 738.168674][T15943] geneve0: left promiscuous mode [ 738.173631][T15943] geneve0: left allmulticast mode [ 738.193294][T15943] wireguard0: left promiscuous mode [ 738.199757][T15943] wireguard0: left allmulticast mode [ 738.207628][T15943] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 738.214446][T15943] macsec1: left allmulticast mode [ 738.225307][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.241069][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.250440][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.259549][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.270551][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.300673][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.310312][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.322066][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 738.331450][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.340480][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2567'. [ 738.350616][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 738.367528][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2567'. [ 738.812893][T15958] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2570'. [ 738.854923][T15954] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2570'. [ 738.927975][T15967] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 738.934480][T15967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 738.944694][T15967] vhci_hcd vhci_hcd.0: Device attached [ 738.952763][T15967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 738.964321][T15967] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 738.970926][T15967] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 738.979237][T15967] vhci_hcd vhci_hcd.0: Device attached [ 738.986390][T15967] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 738.992972][T15967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 739.001066][T15967] vhci_hcd vhci_hcd.0: Device attached [ 739.008026][T15967] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 739.014596][T15967] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 739.022665][T15967] vhci_hcd vhci_hcd.0: Device attached [ 739.032135][T15967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 739.042480][T15967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 739.053429][T15967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 739.176152][ T5933] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 739.635366][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 739.635401][ T30] audit: type=1400 audit(1754245437.802:6255): avc: denied { execmem } for pid=15981 comm="syz.5.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 739.664254][ T30] audit: type=1400 audit(1754245437.802:6256): avc: denied { create } for pid=15981 comm="syz.5.2577" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 739.693197][ T30] audit: type=1400 audit(1754245437.802:6257): avc: denied { allowed } for pid=15981 comm="syz.5.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 739.946376][ T30] audit: type=1400 audit(1754245437.862:6258): avc: denied { create } for pid=15985 comm="syz.6.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 739.984335][T15988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15988 comm=syz.1.2578 [ 739.996820][ T30] audit: type=1400 audit(1754245437.862:6259): avc: denied { create } for pid=15985 comm="syz.6.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 739.996862][ T30] audit: type=1400 audit(1754245438.002:6260): avc: denied { accept } for pid=15985 comm="syz.6.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=0 [ 739.996894][ T30] audit: type=1400 audit(1754245438.002:6261): avc: denied { read } for pid=15985 comm="syz.6.2579" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 740.140346][ T30] audit: type=1400 audit(1754245438.152:6262): avc: denied { prog_load } for pid=15987 comm="syz.1.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 740.304200][T12286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.527045][T15996] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2580'. [ 740.678335][ T30] audit: type=1400 audit(1754245438.152:6263): avc: denied { prog_load } for pid=15987 comm="syz.1.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 740.737914][ T30] audit: type=1400 audit(1754245438.152:6264): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 741.190176][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2584'. [ 741.238158][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2584'. [ 741.279477][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2584'. [ 741.328575][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2584'. [ 741.717376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.933441][T15974] vhci_hcd: connection closed [ 741.934235][T15976] vhci_hcd: connection closed [ 741.936113][T15968] vhci_hcd: connection reset by peer [ 741.958711][ T3464] vhci_hcd: stop threads [ 741.963007][ T3464] vhci_hcd: release socket [ 741.975033][ T3464] vhci_hcd: disconnect device [ 741.994140][T15970] vhci_hcd: connection closed [ 741.999498][T16031] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2594'. [ 742.019552][ T3464] vhci_hcd: stop threads [ 742.033126][ T3464] vhci_hcd: release socket [ 742.039505][T16031] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2594'. [ 742.049890][ T3464] vhci_hcd: disconnect device [ 742.060732][ T3464] vhci_hcd: stop threads [ 742.101923][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 742.111926][ T3464] vhci_hcd: release socket [ 742.123187][ T3464] vhci_hcd: disconnect device [ 742.130175][T16031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2594'. [ 742.140895][ T3464] vhci_hcd: stop threads [ 742.145176][ T3464] vhci_hcd: release socket [ 742.149867][ T3464] vhci_hcd: disconnect device [ 742.521708][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2601'. [ 742.961136][T16066] lo speed is unknown, defaulting to 1000 [ 743.317439][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.348122][T16070] lo speed is unknown, defaulting to 1000 [ 743.975986][T16084] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2610'. [ 744.376147][ T5933] vhci_hcd: vhci_device speed not set [ 744.489160][T16077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.498851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.656358][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 744.656368][ T30] audit: type=1400 audit(1754245442.832:6420): avc: denied { bpf } for pid=16086 comm="syz.1.2613" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 744.703404][ T30] audit: type=1400 audit(1754245442.862:6421): avc: denied { prog_load } for pid=16086 comm="syz.1.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 744.791315][ T30] audit: type=1400 audit(1754245442.862:6422): avc: denied { create } for pid=16086 comm="syz.1.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 744.868173][ T30] audit: type=1400 audit(1754245442.862:6423): avc: denied { read write } for pid=16093 comm="syz.6.2615" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 744.916780][ T30] audit: type=1400 audit(1754245442.872:6424): avc: denied { read } for pid=16093 comm="syz.6.2615" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 744.946087][ T30] audit: type=1400 audit(1754245442.872:6425): avc: denied { create } for pid=16093 comm="syz.6.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 744.975870][ T30] audit: type=1400 audit(1754245442.872:6426): avc: denied { create } for pid=16093 comm="syz.6.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 745.038025][ T30] audit: type=1400 audit(1754245443.182:6427): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 745.138026][ T30] audit: type=1400 audit(1754245443.262:6428): avc: denied { prog_load } for pid=16098 comm="syz.5.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 745.207218][ T30] audit: type=1400 audit(1754245443.302:6429): avc: denied { prog_load } for pid=16098 comm="syz.5.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 745.668107][T10695] usb usb40-port1: attempt power cycle [ 746.237073][T10695] usb usb40-port1: unable to enumerate USB device [ 746.298678][T16142] __nla_validate_parse: 1 callbacks suppressed [ 746.298690][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2635'. [ 746.327301][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2635'. [ 746.339179][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2635'. [ 746.348795][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2635'. [ 746.366451][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.540186][T16156] bridge0: entered allmulticast mode [ 746.650258][T16160] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2642'. [ 746.706167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.716375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.857352][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.863684][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.151251][T16170] netlink: 'syz.6.2643': attribute type 12 has an invalid length. [ 748.611141][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2655'. [ 748.628408][T16205] netlink: 'syz.7.2655': attribute type 7 has an invalid length. [ 748.637444][T16205] netlink: 'syz.7.2655': attribute type 8 has an invalid length. [ 748.648074][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2655'. [ 748.663561][T16205] gretap0: entered promiscuous mode [ 748.672188][T16205] batadv_slave_1: entered promiscuous mode [ 748.683639][T16205] erspan0: entered promiscuous mode [ 748.691819][T16205] debugfs: 'hsr1' already exists in 'hsr' [ 748.698947][T16205] Cannot create hsr debugfs directory [ 748.934974][T16214] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2660'. [ 749.396516][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.682611][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 749.682626][ T30] audit: type=1400 audit(1754245447.852:6622): avc: denied { bpf } for pid=16230 comm="syz.1.2664" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 749.715917][ T30] audit: type=1400 audit(1754245447.882:6623): avc: denied { prog_load } for pid=16230 comm="syz.1.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 749.750554][ T30] audit: type=1400 audit(1754245447.882:6624): avc: denied { create } for pid=16230 comm="syz.1.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 749.839100][ T30] audit: type=1400 audit(1754245448.002:6625): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 749.871535][ T30] audit: type=1400 audit(1754245448.042:6626): avc: denied { create } for pid=16235 comm="syz.5.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 749.894455][ T30] audit: type=1400 audit(1754245448.062:6627): avc: denied { read } for pid=16235 comm="syz.5.2666" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 749.941906][ T30] audit: type=1400 audit(1754245448.062:6628): avc: denied { allowed } for pid=16235 comm="syz.5.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 749.970666][ T30] audit: type=1400 audit(1754245448.082:6629): avc: denied { read write } for pid=11981 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 749.999625][ T30] audit: type=1400 audit(1754245448.132:6630): avc: denied { prog_load } for pid=16237 comm="syz.7.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 750.021569][ T30] audit: type=1400 audit(1754245448.132:6631): avc: denied { execmem } for pid=16237 comm="syz.7.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 750.198412][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2667'. [ 750.401118][T16254] 8021q: VLANs not supported on ip6_vti0 [ 750.641757][T16258] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2670'. [ 751.316162][ T5856] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 751.976808][T16289] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[16289] [ 752.394780][T16295] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 752.461155][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.521538][T16297] FAULT_INJECTION: forcing a failure. [ 752.521538][T16297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.553559][T16297] CPU: 0 UID: 0 PID: 16297 Comm: syz.6.2686 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 752.553577][T16297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.553584][T16297] Call Trace: [ 752.553588][T16297] [ 752.553593][T16297] dump_stack_lvl+0x16c/0x1f0 [ 752.553614][T16297] should_fail_ex+0x512/0x640 [ 752.553634][T16297] _copy_from_user+0x2e/0xd0 [ 752.553647][T16297] copy_msghdr_from_user+0x98/0x160 [ 752.553665][T16297] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 752.553687][T16297] ___sys_sendmsg+0xfe/0x1d0 [ 752.553703][T16297] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.553730][T16297] ? __mutex_unlock_slowpath+0x80/0x800 [ 752.553752][T16297] __sys_sendmsg+0x16d/0x220 [ 752.553768][T16297] ? __pfx___sys_sendmsg+0x10/0x10 [ 752.553792][T16297] do_syscall_64+0xcd/0x4c0 [ 752.553814][T16297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.553826][T16297] RIP: 0033:0x7f7c3498eb69 [ 752.553835][T16297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.553846][T16297] RSP: 002b:00007f7c3581c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.553857][T16297] RAX: ffffffffffffffda RBX: 00007f7c34bb5fa0 RCX: 00007f7c3498eb69 [ 752.553865][T16297] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 752.553871][T16297] RBP: 00007f7c3581c090 R08: 0000000000000000 R09: 0000000000000000 [ 752.553878][T16297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.553884][T16297] R13: 0000000000000000 R14: 00007f7c34bb5fa0 R15: 00007ffe754cf4f8 [ 752.553898][T16297] [ 752.802663][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2687'. [ 752.851330][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2687'. [ 752.899927][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2688'. [ 753.368992][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2687'. [ 753.378602][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2687'. [ 753.388018][T16314] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2691'. [ 753.890225][T16319] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2692'. [ 754.706279][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 754.706290][ T30] audit: type=1400 audit(1754245452.882:6791): avc: denied { read write } for pid=7868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 754.752593][ T30] audit: type=1400 audit(1754245452.922:6792): avc: denied { execmem } for pid=16335 comm="syz.5.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 754.772957][ T30] audit: type=1400 audit(1754245452.922:6793): avc: denied { nlmsg_write } for pid=16335 comm="syz.5.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=0 [ 754.794280][ T30] audit: type=1400 audit(1754245452.922:6794): avc: denied { read write } for pid=16335 comm="syz.5.2698" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 754.842575][ T30] audit: type=1400 audit(1754245453.012:6795): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 754.871591][ T30] audit: type=1400 audit(1754245453.012:6796): avc: denied { create } for pid=16337 comm="syz.1.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 754.905001][ T30] audit: type=1400 audit(1754245453.072:6797): avc: denied { create } for pid=16339 comm="syz.6.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 754.912963][T16341] vlan2: entered promiscuous mode [ 754.928777][ T30] audit: type=1400 audit(1754245453.072:6798): avc: denied { create } for pid=16339 comm="syz.6.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 754.953840][ T30] audit: type=1400 audit(1754245453.132:6799): avc: denied { create } for pid=16340 comm="syz.1.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 754.955459][T16341] vlan2: entered allmulticast mode [ 754.974800][ T30] audit: type=1400 audit(1754245453.132:6800): avc: denied { create } for pid=16340 comm="syz.1.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 755.016106][ T5856] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 755.150852][T16349] sp0: Synchronizing with TNC [ 755.160994][ T5969] [ 755.163304][ T5969] ===================================================== [ 755.170199][ T5969] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 755.177618][ T5969] 6.16.0-syzkaller-11241-g186f3edfdd41 #0 Not tainted [ 755.184348][ T5969] ----------------------------------------------------- [ 755.191250][ T5969] kworker/u8:11/5969 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 755.199119][ T5969] ffffffff8f79c318 (disc_data_lock#2){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 755.207446][ T5969] [ 755.207446][ T5969] and this task is already holding: [ 755.214781][ T5969] ffffffff9b112bb8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 755.223443][ T5969] which would create a new lock dependency: [ 755.229295][ T5969] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.+.+}-{3:3} [ 755.237089][ T5969] [ 755.237089][ T5969] but this new dependency connects a HARDIRQ-irq-safe lock: [ 755.246500][ T5969] (&port_lock_key){-.-.}-{3:3} [ 755.246518][ T5969] [ 755.246518][ T5969] ... which became HARDIRQ-irq-safe at: [ 755.259006][ T5969] lock_acquire+0x179/0x350 [ 755.263570][ T5969] _raw_spin_lock_irqsave+0x3a/0x60 [ 755.268826][ T5969] serial8250_handle_irq+0x95/0xcb0 [ 755.274081][ T5969] serial8250_default_handle_irq+0x9a/0x250 [ 755.280027][ T5969] serial8250_interrupt+0xf5/0x1b0 [ 755.285192][ T5969] __handle_irq_event_percpu+0x22c/0x7d0 [ 755.290886][ T5969] handle_irq_event+0xab/0x1e0 [ 755.295706][ T5969] handle_edge_irq+0x3ca/0x9e0 [ 755.300523][ T5969] __common_interrupt+0xdf/0x250 [ 755.305530][ T5969] common_interrupt+0xba/0xe0 [ 755.310276][ T5969] asm_common_interrupt+0x26/0x40 [ 755.315365][ T5969] pv_native_safe_halt+0xf/0x20 [ 755.320283][ T5969] default_idle+0x13/0x20 [ 755.324681][ T5969] default_idle_call+0x6d/0xb0 [ 755.329499][ T5969] do_idle+0x391/0x510 [ 755.333626][ T5969] cpu_startup_entry+0x4f/0x60 [ 755.338445][ T5969] start_secondary+0x21d/0x2b0 [ 755.343274][ T5969] common_startup_64+0x13e/0x148 [ 755.348275][ T5969] [ 755.348275][ T5969] to a HARDIRQ-irq-unsafe lock: [ 755.355258][ T5969] (disc_data_lock#2){.+.+}-{3:3} [ 755.355278][ T5969] [ 755.355278][ T5969] ... which became HARDIRQ-irq-unsafe at: [ 755.368116][ T5969] ... [ 755.368121][ T5969] lock_acquire+0x179/0x350 [ 755.375245][ T5969] _raw_read_lock+0x5f/0x70 [ 755.379815][ T5969] sp_get+0x18/0xf0 [ 755.383683][ T5969] sixpack_receive_buf+0x59/0x1c90 [ 755.388852][ T5969] tty_ldisc_receive_buf+0x15a/0x1a0 [ 755.394202][ T5969] tty_port_default_receive_buf+0x70/0xb0 [ 755.399988][ T5969] flush_to_ldisc+0x268/0x730 [ 755.404737][ T5969] process_one_work+0x9cc/0x1b70 [ 755.409738][ T5969] worker_thread+0x6c8/0xf10 [ 755.414384][ T5969] kthread+0x3c5/0x780 [ 755.418510][ T5969] ret_from_fork+0x5d7/0x6f0 [ 755.423157][ T5969] ret_from_fork_asm+0x1a/0x30 [ 755.427991][ T5969] [ 755.427991][ T5969] other info that might help us debug this: [ 755.427991][ T5969] [ 755.438192][ T5969] Possible interrupt unsafe locking scenario: [ 755.438192][ T5969] [ 755.446510][ T5969] CPU0 CPU1 [ 755.451950][ T5969] ---- ---- [ 755.457289][ T5969] lock(disc_data_lock#2); [ 755.461771][ T5969] local_irq_disable(); [ 755.468502][ T5969] lock(&port_lock_key); [ 755.475331][ T5969] lock(disc_data_lock#2); [ 755.482331][ T5969] [ 755.485765][ T5969] lock(&port_lock_key); [ 755.490239][ T5969] [ 755.490239][ T5969] *** DEADLOCK *** [ 755.490239][ T5969] [ 755.498350][ T5969] 6 locks held by kworker/u8:11/5969: [ 755.503690][ T5969] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 755.514787][ T5969] #1: ffffc900042cfd10 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 755.525792][ T5969] #2: ffff888141f38ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x730 [ 755.534819][ T5969] #3: ffff8880294f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 755.544092][ T5969] #4: ffffffff9b112bb8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 755.553195][ T5969] #5: ffff8880294f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 755.562476][ T5969] [ 755.562476][ T5969] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 755.572859][ T5969] -> (&port_lock_key){-.-.}-{3:3} { [ 755.578043][ T5969] IN-HARDIRQ-W at: [ 755.581991][ T5969] lock_acquire+0x179/0x350 [ 755.588128][ T5969] _raw_spin_lock_irqsave+0x3a/0x60 [ 755.594959][ T5969] serial8250_handle_irq+0x95/0xcb0 [ 755.601788][ T5969] serial8250_default_handle_irq+0x9a/0x250 [ 755.609310][ T5969] serial8250_interrupt+0xf5/0x1b0 [ 755.616054][ T5969] __handle_irq_event_percpu+0x22c/0x7d0 [ 755.623319][ T5969] handle_irq_event+0xab/0x1e0 [ 755.629715][ T5969] handle_edge_irq+0x3ca/0x9e0 [ 755.636136][ T5969] __common_interrupt+0xdf/0x250 [ 755.642714][ T5969] common_interrupt+0xba/0xe0 [ 755.649111][ T5969] asm_common_interrupt+0x26/0x40 [ 755.655757][ T5969] pv_native_safe_halt+0xf/0x20 [ 755.662241][ T5969] default_idle+0x13/0x20 [ 755.668192][ T5969] default_idle_call+0x6d/0xb0 [ 755.674574][ T5969] do_idle+0x391/0x510 [ 755.680267][ T5969] cpu_startup_entry+0x4f/0x60 [ 755.686648][ T5969] start_secondary+0x21d/0x2b0 [ 755.693035][ T5969] common_startup_64+0x13e/0x148 [ 755.699598][ T5969] IN-SOFTIRQ-W at: [ 755.703545][ T5969] lock_acquire+0x179/0x350 [ 755.709670][ T5969] _raw_spin_lock_irqsave+0x3a/0x60 [ 755.716487][ T5969] serial8250_handle_irq+0x95/0xcb0 [ 755.723303][ T5969] serial8250_default_handle_irq+0x9a/0x250 [ 755.730821][ T5969] serial8250_interrupt+0xf5/0x1b0 [ 755.737567][ T5969] __handle_irq_event_percpu+0x22c/0x7d0 [ 755.744835][ T5969] handle_irq_event+0xab/0x1e0 [ 755.751221][ T5969] handle_edge_irq+0x3ca/0x9e0 [ 755.757602][ T5969] __common_interrupt+0xdf/0x250 [ 755.764161][ T5969] common_interrupt+0x61/0xe0 [ 755.770452][ T5969] asm_common_interrupt+0x26/0x40 [ 755.777093][ T5969] handle_softirqs+0x1dd/0x8e0 [ 755.783479][ T5969] __irq_exit_rcu+0x109/0x170 [ 755.789772][ T5969] irq_exit_rcu+0x9/0x30 [ 755.795633][ T5969] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 755.802890][ T5969] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 755.810506][ T5969] console_flush_all+0x9a2/0xc60 [ 755.817073][ T5969] console_unlock+0xd8/0x210 [ 755.823280][ T5969] vprintk_emit+0x418/0x6d0 [ 755.829416][ T5969] _printk+0xc7/0x100 [ 755.835020][ T5969] kauditd_hold_skb+0x205/0x250 [ 755.841501][ T5969] kauditd_send_queue+0x239/0x290 [ 755.848150][ T5969] kauditd_thread+0x623/0xa70 [ 755.854452][ T5969] kthread+0x3c5/0x780 [ 755.860136][ T5969] ret_from_fork+0x5d7/0x6f0 [ 755.866341][ T5969] ret_from_fork_asm+0x1a/0x30 [ 755.872722][ T5969] INITIAL USE at: [ 755.876583][ T5969] lock_acquire+0x179/0x350 [ 755.882620][ T5969] _raw_spin_lock_irqsave+0x3a/0x60 [ 755.889351][ T5969] serial8250_do_set_termios+0x2cc/0x1730 [ 755.896599][ T5969] serial8250_set_termios+0x6e/0x80 [ 755.903325][ T5969] uart_set_options+0x31a/0x5f0 [ 755.909708][ T5969] serial8250_console_setup+0x189/0x450 [ 755.916783][ T5969] univ8250_console_setup+0x1eb/0x2e0 [ 755.923693][ T5969] try_enable_preferred_console+0x2fd/0x530 [ 755.931118][ T5969] register_console+0x3ab/0x11b0 [ 755.937589][ T5969] univ8250_console_init+0x5f/0x90 [ 755.944231][ T5969] console_init+0x14f/0x680 [ 755.950265][ T5969] start_kernel+0x29f/0x4d0 [ 755.956296][ T5969] x86_64_start_reservations+0x18/0x30 [ 755.963289][ T5969] x86_64_start_kernel+0x130/0x190 [ 755.969933][ T5969] common_startup_64+0x13e/0x148 [ 755.976412][ T5969] } [ 755.978882][ T5969] ... key at: [] port_lock_key+0x0/0x40 [ 755.986484][ T5969] [ 755.986484][ T5969] the dependencies between the lock to be acquired [ 755.986490][ T5969] and HARDIRQ-irq-unsafe lock: [ 755.999948][ T5969] -> (disc_data_lock#2){.+.+}-{3:3} { [ 756.005305][ T5969] HARDIRQ-ON-R at: [ 756.009253][ T5969] lock_acquire+0x179/0x350 [ 756.015391][ T5969] _raw_read_lock+0x5f/0x70 [ 756.021527][ T5969] sp_get+0x18/0xf0 [ 756.026956][ T5969] sixpack_receive_buf+0x59/0x1c90 [ 756.033697][ T5969] tty_ldisc_receive_buf+0x15a/0x1a0 [ 756.040604][ T5969] tty_port_default_receive_buf+0x70/0xb0 [ 756.047947][ T5969] flush_to_ldisc+0x268/0x730 [ 756.054246][ T5969] process_one_work+0x9cc/0x1b70 [ 756.060810][ T5969] worker_thread+0x6c8/0xf10 [ 756.067020][ T5969] kthread+0x3c5/0x780 [ 756.072719][ T5969] ret_from_fork+0x5d7/0x6f0 [ 756.078926][ T5969] ret_from_fork_asm+0x1a/0x30 [ 756.085311][ T5969] SOFTIRQ-ON-R at: [ 756.089267][ T5969] lock_acquire+0x179/0x350 [ 756.095393][ T5969] _raw_read_lock+0x5f/0x70 [ 756.101525][ T5969] sp_get+0x18/0xf0 [ 756.106961][ T5969] sixpack_receive_buf+0x59/0x1c90 [ 756.113693][ T5969] tty_ldisc_receive_buf+0x15a/0x1a0 [ 756.120601][ T5969] tty_port_default_receive_buf+0x70/0xb0 [ 756.127944][ T5969] flush_to_ldisc+0x268/0x730 [ 756.134242][ T5969] process_one_work+0x9cc/0x1b70 [ 756.140798][ T5969] worker_thread+0x6c8/0xf10 [ 756.147005][ T5969] kthread+0x3c5/0x780 [ 756.152692][ T5969] ret_from_fork+0x5d7/0x6f0 [ 756.158908][ T5969] ret_from_fork_asm+0x1a/0x30 [ 756.165293][ T5969] INITIAL USE at: [ 756.169157][ T5969] lock_acquire+0x179/0x350 [ 756.175197][ T5969] _raw_write_lock_irq+0x36/0x50 [ 756.181676][ T5969] sixpack_close+0x1e/0x2f0 [ 756.187713][ T5969] tty_ldisc_close+0x114/0x1a0 [ 756.194010][ T5969] tty_ldisc_kill+0x8e/0x150 [ 756.200133][ T5969] tty_ldisc_release+0x210/0x2e0 [ 756.206609][ T5969] tty_release_struct+0x23/0xe0 [ 756.212995][ T5969] tty_release+0xe2d/0x1430 [ 756.219035][ T5969] __fput+0x402/0xb70 [ 756.224561][ T5969] task_work_run+0x150/0x240 [ 756.230691][ T5969] exit_to_user_mode_loop+0xeb/0x110 [ 756.237515][ T5969] do_syscall_64+0x3f6/0x4c0 [ 756.243642][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.251065][ T5969] INITIAL READ USE at: [ 756.255360][ T5969] lock_acquire+0x179/0x350 [ 756.261832][ T5969] _raw_read_lock+0x5f/0x70 [ 756.268304][ T5969] sp_get+0x18/0xf0 [ 756.274077][ T5969] sixpack_receive_buf+0x59/0x1c90 [ 756.281155][ T5969] tty_ldisc_receive_buf+0x15a/0x1a0 [ 756.288408][ T5969] tty_port_default_receive_buf+0x70/0xb0 [ 756.296102][ T5969] flush_to_ldisc+0x268/0x730 [ 756.302758][ T5969] process_one_work+0x9cc/0x1b70 [ 756.309660][ T5969] worker_thread+0x6c8/0xf10 [ 756.316227][ T5969] kthread+0x3c5/0x780 [ 756.322269][ T5969] ret_from_fork+0x5d7/0x6f0 [ 756.328834][ T5969] ret_from_fork_asm+0x1a/0x30 [ 756.335588][ T5969] } [ 756.338055][ T5969] ... key at: [] disc_data_lock+0x18/0xfe0 [ 756.345921][ T5969] ... acquired at: [ 756.349699][ T5969] lock_acquire+0x179/0x350 [ 756.354348][ T5969] _raw_read_lock+0x5f/0x70 [ 756.358998][ T5969] sp_get+0x18/0xf0 [ 756.362961][ T5969] sixpack_write_wakeup+0x20/0x390 [ 756.368213][ T5969] tty_wakeup+0xe8/0x120 [ 756.372602][ T5969] tty_port_default_wakeup+0x2a/0x40 [ 756.378025][ T5969] serial8250_tx_chars+0x68e/0x860 [ 756.383277][ T5969] __start_tx+0x3df/0x490 [ 756.387754][ T5969] serial8250_start_tx+0x368/0x530 [ 756.393008][ T5969] __uart_start+0x295/0x500 [ 756.397654][ T5969] uart_write+0x218/0xb30 [ 756.402137][ T5969] sixpack_receive_buf+0x3d3/0x1c90 [ 756.407498][ T5969] tty_ldisc_receive_buf+0x15a/0x1a0 [ 756.412942][ T5969] tty_port_default_receive_buf+0x70/0xb0 [ 756.418818][ T5969] flush_to_ldisc+0x268/0x730 [ 756.423651][ T5969] process_one_work+0x9cc/0x1b70 [ 756.428733][ T5969] worker_thread+0x6c8/0xf10 [ 756.433469][ T5969] kthread+0x3c5/0x780 [ 756.437678][ T5969] ret_from_fork+0x5d7/0x6f0 [ 756.442409][ T5969] ret_from_fork_asm+0x1a/0x30 [ 756.447316][ T5969] [ 756.449606][ T5969] [ 756.449606][ T5969] stack backtrace: [ 756.455555][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: kworker/u8:11 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 756.455570][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 756.455578][ T5969] Workqueue: events_unbound flush_to_ldisc [ 756.455595][ T5969] Call Trace: [ 756.455601][ T5969] [ 756.455606][ T5969] dump_stack_lvl+0x116/0x1f0 [ 756.455623][ T5969] check_irq_usage+0x7dc/0x920 [ 756.455640][ T5969] ? __kasan_check_byte+0x13/0x50 [ 756.455654][ T5969] ? check_path.constprop.0+0x24/0x50 [ 756.455671][ T5969] ? __lock_acquire+0x12bc/0x1ce0 [ 756.455687][ T5969] __lock_acquire+0x12bc/0x1ce0 [ 756.455705][ T5969] ? lock_acquire+0x179/0x350 [ 756.455722][ T5969] lock_acquire+0x179/0x350 [ 756.455738][ T5969] ? sp_get+0x18/0xf0 [ 756.455751][ T5969] ? ldsem_down_read_trylock+0x11a/0x180 [ 756.455763][ T5969] ? ldsem_down_read_trylock+0x120/0x180 [ 756.455775][ T5969] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 756.455788][ T5969] _raw_read_lock+0x5f/0x70 [ 756.455802][ T5969] ? sp_get+0x18/0xf0 [ 756.455813][ T5969] sp_get+0x18/0xf0 [ 756.455825][ T5969] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 756.455838][ T5969] sixpack_write_wakeup+0x20/0x390 [ 756.455851][ T5969] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 756.455864][ T5969] tty_wakeup+0xe8/0x120 [ 756.455878][ T5969] tty_port_default_wakeup+0x2a/0x40 [ 756.455888][ T5969] serial8250_tx_chars+0x68e/0x860 [ 756.455902][ T5969] __start_tx+0x3df/0x490 [ 756.455912][ T5969] serial8250_start_tx+0x368/0x530 [ 756.455924][ T5969] __uart_start+0x295/0x500 [ 756.455938][ T5969] uart_write+0x218/0xb30 [ 756.455955][ T5969] sixpack_receive_buf+0x3d3/0x1c90 [ 756.455970][ T5969] ? ldsem_down_read_trylock+0x120/0x180 [ 756.455981][ T5969] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 756.455993][ T5969] ? tty_buffer_free+0x12b/0x270 [ 756.456008][ T5969] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 756.456022][ T5969] tty_ldisc_receive_buf+0x15a/0x1a0 [ 756.456038][ T5969] tty_port_default_receive_buf+0x70/0xb0 [ 756.456056][ T5969] flush_to_ldisc+0x268/0x730 [ 756.456073][ T5969] ? rcu_is_watching+0x12/0xc0 [ 756.456088][ T5969] process_one_work+0x9cc/0x1b70 [ 756.456101][ T5969] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 756.456113][ T5969] ? __pfx_process_one_work+0x10/0x10 [ 756.456126][ T5969] ? assign_work+0x1a0/0x250 [ 756.456137][ T5969] worker_thread+0x6c8/0xf10 [ 756.456150][ T5969] ? __kthread_parkme+0x19e/0x250 [ 756.456166][ T5969] ? __pfx_worker_thread+0x10/0x10 [ 756.456177][ T5969] kthread+0x3c5/0x780 [ 756.456187][ T5969] ? __pfx_kthread+0x10/0x10 [ 756.456198][ T5969] ? rcu_is_watching+0x12/0xc0 [ 756.456211][ T5969] ? __pfx_kthread+0x10/0x10 [ 756.456221][ T5969] ret_from_fork+0x5d7/0x6f0 [ 756.456231][ T5969] ? __pfx_kthread+0x10/0x10 [ 756.456241][ T5969] ret_from_fork_asm+0x1a/0x30 [ 756.456257][ T5969] [ 756.456812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.737993][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.796239][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.846218][T10695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog