last executing test programs: 14m0.90240016s ago: executing program 32 (id=231): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x773, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c", @ANYRES16=r7, @ANYBLOB="200004000000fcdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24084004}, 0x4000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) r9 = socket(0x10, 0x3, 0x0) write(r9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x20000800) syz_init_net_socket$ax25(0x3, 0x2, 0x1) 13m56.343306437s ago: executing program 33 (id=247): ustat(0x2, &(0x7f00000000c0)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 13m49.961547597s ago: executing program 34 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x100000) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x800, r0, 0x0}]) shutdown(r0, 0x0) 13m42.980962063s ago: executing program 35 (id=274): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101542, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000010}) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) fsopen(&(0x7f0000000000)='qnx6\x00', 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r3, 0x11e, 0x1, 0x0, &(0x7f0000000040)) r4 = syz_open_procfs(r0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000040)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 13m30.439484504s ago: executing program 36 (id=294): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r1, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) 12m29.741187207s ago: executing program 37 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0xb, 0x200000001e, 0x8000000000000001, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0xa000, 0x2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731ef6d2ce8d29daa47ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783f13cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db234687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a5aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x4, {0x3, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x3, 0x20001, 0x5, 0x4, 0x0, 0x7ff, 0x401, 0x0, 0x0, 0xa000, 0x0, r3, r4, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000240)='./file0/../file0/file0\x00', &(0x7f0000000300)='./file0/../file0/file0\x00') 12m20.973253232s ago: executing program 38 (id=478): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x3, 0x556, 0x2000}], 0x1) 12m4.993179144s ago: executing program 39 (id=529): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0x2, @sdr={0x20363059, 0x80000001}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1002) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000306b240c50f27128eda010203010902120001000000000904"], 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000feff92cf76f56f6a6d8ca8f4d5700000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff8500"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000000000400000000c0"]) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES32=r0], 0xfffffd16) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(r7) 12m1.132190102s ago: executing program 40 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffeb6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) read$char_usb(0xffffffffffffffff, &(0x7f00000030c0)=""/4110, 0x100e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r6, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) 11m57.986338226s ago: executing program 41 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000000801030000000000000000050000020c0004800800084000000000060002400002000005000300060000000900010073797a31000000009c92a5b0"], 0x3c}, 0x1, 0x0, 0x0, 0x4048850}, 0x20008000) 11m14.775641428s ago: executing program 42 (id=651): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x181580, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r2, 0x3, 'y5t', "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"}}, 0x110) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000240)=0x3, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000002c0)={r4}, 0x1) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000300)={0x9b2, "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"}) recvmmsg(r3, &(0x7f0000003740)=[{{&(0x7f0000000cc0)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/143, 0x8f}, {&(0x7f0000000e00)=""/73, 0x49}], 0x2, &(0x7f0000000ec0)=""/118, 0x76}, 0xab2}, {{&(0x7f0000000f40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000fc0)=""/50, 0x32}, {&(0x7f0000001000)=""/132, 0x84}, {&(0x7f00000010c0)=""/249, 0xf9}, {&(0x7f00000011c0)=""/110, 0x6e}, {&(0x7f0000001240)=""/111, 0x6f}, {&(0x7f00000012c0)=""/234, 0xea}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x7, &(0x7f0000001480)=""/4096, 0x1000}, 0x1800}, {{&(0x7f0000002480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002500)=""/55, 0x37}, {&(0x7f0000002540)=""/194, 0xc2}, {&(0x7f0000002640)=""/234, 0xea}, {&(0x7f0000002740)=""/83, 0x53}, {&(0x7f00000027c0)=""/110, 0x6e}, {&(0x7f0000002840)=""/128, 0x80}, {&(0x7f00000028c0)=""/157, 0x9d}, {&(0x7f0000002980)=""/239, 0xef}], 0x8, &(0x7f0000002b00)=""/7, 0x7}}, {{&(0x7f0000002b40)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002bc0)=""/245, 0xf5}, {&(0x7f0000002cc0)=""/209, 0xd1}], 0x2}, 0x2}, {{&(0x7f0000002e00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002e80)=""/170, 0xaa}, {&(0x7f0000002f40)=""/205, 0xcd}, {&(0x7f0000003040)=""/49, 0x31}, {&(0x7f0000003080)=""/183, 0xb7}, {&(0x7f0000003140)}, {&(0x7f0000003180)=""/83, 0x53}, {&(0x7f0000003200)=""/36, 0x24}, {&(0x7f0000003240)=""/210, 0xd2}], 0x8}, 0x6}, {{&(0x7f00000033c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003440)=""/174, 0xae}, {&(0x7f0000003500)=""/243, 0xf3}, {&(0x7f0000003600)=""/37, 0x25}, {&(0x7f0000003640)=""/36, 0x24}], 0x4, &(0x7f00000036c0)=""/94, 0x5e}, 0x1}], 0x6, 0x2100, 0x0) r5 = syz_usb_connect$uac1(0x0, 0xe9, &(0x7f00000038c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x81, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x6, 0x5, 0x1], 0x3}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x3, 0x88, "7e538c4f38cb"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0xcc}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x43, "7e7109ad"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x68, "095e897da0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x3, 0x5, 0xfe, "e8", "cba5"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfff, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x9, 0xc1, "d426"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xb3, 0x2, 0x9, 0x3}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0x5, 0x5, "51521d4b61c628c3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc, 0xf7, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9, 0x2109}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x3, 0x0, 0x0, "69c481f04c5707d8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xa6, 0x9, 0x1, {0x7, 0x25, 0x1, 0x0, 0x9}}}}}}}]}}, &(0x7f0000003b00)={0xa, &(0x7f00000039c0)={0xa, 0x6, 0x300, 0x2d, 0x5, 0x2, 0x40, 0x2}, 0x2a, &(0x7f0000003a00)={0x5, 0xf, 0x2a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x4, 0x2, 0x985, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0xe, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x40, 0xf00f, 0x8, [0xffc00f]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000003a40)=@lang_id={0x4, 0x3, 0x827}}, {0x41, &(0x7f0000003a80)=@string={0x41, 0x3, "42e3ce2d6e8250ff58547a2db505b3ce1583fe5e8e906ba728f260006e09803f8810bd0de7e44bfeb5d5d96a2eedbd92c869df68b5f91e250b80539379360d"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000003c80)={0x14, &(0x7f0000003b40)={0x40, 0xa, 0xee, {0xee, 0x4, "171870237efaa426366536982834498ad76769ebb06c69176a20294be465380b12da4cdd0b52c4cf6f4ee464a92a1817978b489e2c87f51a982009f4a0370f00adb0247f13908fafd8a92d38f901b753862b0c90a2b29ebc54aba56ae21e45737b07684a41811b208cb8548d6a02eb7d447f4084aae0bbbe84fd3e91849648e7008c431a3ee8d6ed79e49c6a580a3db8456642a5a90c66a5df6d02fb4088df9793d38651c3e325400c497e798dd583459c0eb857d3a6adf132fff7a1a984c4b306cc26317515346b836cb8bacdc7ce749ae9d6cb3d45edb9695d419b4477311e91884b2b8a4c185d8b593567"}}, &(0x7f0000003c40)={0x0, 0x3, 0x18, @string={0x18, 0x3, "0ba159375dd371dfdafc3506b1bfafd7bd5aa7d0c6b1"}}}, &(0x7f0000003ec0)={0x44, &(0x7f0000003cc0)={0x40, 0x14, 0x5, "24cda3f457"}, &(0x7f0000003d00)={0x0, 0xa, 0x1}, &(0x7f0000003d40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003d80)={0x20, 0x81, 0x2, "95b3"}, &(0x7f0000003dc0)={0x20, 0x82, 0x1, "f1"}, &(0x7f0000003e00)={0x20, 0x83, 0x2, "f3b3"}, &(0x7f0000003e40)={0x20, 0x84, 0x2, "6ffa"}, &(0x7f0000003e80)={0x20, 0x85, 0x3, 'e|~'}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000004200)={&(0x7f0000003f40), 0xc, &(0x7f00000041c0)={&(0x7f0000003fc0)={0x1d4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x32, 0x81}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "1b4d8992425791ee4333cd97"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "b02ce1216de955"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "ff3c5f9b0e8c398ba87f60285fd8e429"}, @NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "cf7b7314e2476d9d149359be3f19d4df2d3227bcb2fb4af4"}], @NL80211_ATTR_IE={0x104, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7f, 0xe, @device_a, 0x100, @value=@broadcast, 0xc, 0x6, @device_a, 0x9}}, @random={0x6, 0x9f, "3b4c55e25dc3f368d2a349281332ecda17f50614a9601d8625fc18750b39387f91e1d9fa12e26f37a6bc57ee3275c4336b0b2ac4a67fe6e5418612a963fe0341c8006c54ec06efdbe54d4316f57f966f16c0d508e4f4b3664448621ab83f3cf9704ea0f84c3330a12baeb65fc837ed28dd6ae57590ddaab594fd8a72274ea71d5f98757b6341d23ce14c0cf1755ade0e288b3e917a864d0c8001ef7e01bafc"}, @preq={0x82, 0x36, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x5, 0xe, 0xa8c4, @broadcast, 0x9, @value=@device_b, 0x9de9, 0x716c, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0x40}, {{0x1, 0x0, 0x1}, @broadcast}]}}]}, @NL80211_ATTR_IE={0x4e, 0x2a, [@mic={0x8c, 0x18, {0xf65, "2d9fb76bc32f", @long="26527ae3b9c55e0246544254c9f170af"}}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x0, 0x751, @void, @void, @void}}, @channel_switch={0x25, 0x3, {0x1, 0x914f3eac7b10f3a3, 0x2}}, @chsw_timing={0x68, 0x4, {0x5, 0xc40}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x6, 0x8}}, @challenge={0x10, 0x1, 0xed}, @erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000004240), 0xf8, 0x40040) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x18000, 0x110) ioctl$BLKCRYPTOPREPAREKEY(r3, 0xc040128b, &(0x7f0000004380)={&(0x7f00000042c0)="2481b25b199ca7fa1be802fb38cb1957282f545c6a670e24ea21b3a44ff5064be92721980c3ac7", 0x27, &(0x7f0000004300)=""/74, 0x4a}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000043c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc}, 0xa) r10 = syz_usb_connect$cdc_ncm(0x4, 0x7d, &(0x7f0000004400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x4, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "9ef277"}, {0x5, 0x24, 0x0, 0xb54}, {0xd, 0x24, 0xf, 0x1, 0xea51, 0x1, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x3d}, [@country_functional={0xc, 0x24, 0x7, 0x5, 0x7f, [0x3, 0x74, 0x7fff]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x60, 0x2a}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x46, 0x10}}}}}}}]}}, &(0x7f0000004600)={0xa, &(0x7f0000004480)={0xa, 0x6, 0x300, 0xc6, 0x26, 0x6, 0xff, 0x3}, 0x19, &(0x7f00000044c0)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x5, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xb3, 0x6, 0x9}]}, 0x3, [{0x5f, &(0x7f0000004500)=@string={0x5f, 0x3, "8b7098757bf678cadb6a373d8e1c80f663d1e20dcb524ae6f68dedc24ba900a8732e62a27d8e8f24858b023e8698d7dc93442edca1a2ac61bb577f7bc4807d4e019717c2edd5ffc6972f87ebddada3d437718089ddf312e7ff1275cac5"}}, {0x4, &(0x7f0000004580)=@lang_id={0x4, 0x3, 0xc04}}, {0x3c, &(0x7f00000045c0)=@string={0x3c, 0x3, "148c6d92329525ce4fb99a9694e9308089b95f9feec79d1a4dba521769908e177968b51cd3b2b02470b96e3e796260de73ead87999fe81e6cd90"}}]}) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000004740)={0x14, &(0x7f0000004640)={0x0, 0x2, 0x9c, {0x9c, 0x22, "5248efa585c858e410552d92f5cecdb3c7c75cd3c6d45aa73ab58ff5fbe76134052d7b71cf8ff684f189958fc2787d3fa3b1c7a80cfc81a721ecde40b5d41da0f2602b01c24db52aeaeae829d157737a64e9d736301743a9175e67c1c7df0c80efc6b3809a1231344fc2848dfe5385fff7f2e77a281864d3767e2121c9c365b2af8a9ca4ae026a8dfbfc38258a670a4966bce99d90b775fb911e"}}, &(0x7f0000004700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004a40)={0x44, &(0x7f0000004780)={0x40, 0xd, 0xd4, "3aff6080c2a388c751f06f17af006c77bbebe2c6a6db5edb47552c1027470bbcb2105d668d4a547d1ebac124b8fe891a61952daf5a9c42deecc1258742b0218f546f9698cb6f1dfee8a162a9b3210080bb82e056e17ad6052139bcbfbcbee7b8e74d3228ae822fcfdbccfe04f8186e82a6d97b3ec51d5559265ec09fad347d4fbe5f45446b06b4278de03030ee1232888abab9088c257527e1e1d34f569a2f196bbeaafabd4d1486a63f648bb12f64c430453417e7b8a84fa6598447e96012962ce08af615aabe157aad3a29d9770a9ee1dc89c4"}, &(0x7f0000004880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000048c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000004900)={0x20, 0x80, 0x1c, {0x2, 0x401, 0x5, 0x6, 0x1, 0x2, 0x7, 0x8, 0x0, 0xfffd, 0x1000, 0x7}}, &(0x7f0000004940)={0x20, 0x85, 0x4, 0x1ff}, &(0x7f0000004980)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000049c0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000004a00)={0x20, 0x89, 0x2, 0x1}}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000004ac0)={0x0}, &(0x7f0000004b00)=0xc) sched_setaffinity(r11, 0x8, &(0x7f0000004b40)) sched_setscheduler(r11, 0x5, &(0x7f0000004b80)=0x6cfc) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000004bc0)) sendmsg$tipc(r9, &(0x7f0000005f00)={&(0x7f0000004c00)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3}}, 0x10, &(0x7f0000005e80)=[{&(0x7f0000004c40)}, {&(0x7f0000004c80)="2ae5b46c7017022c4a1c43084d4bbcd586dd76dfc343f61f0ab8d0fbfb27766b4b3dbd6543bf5ff3ad76166a36537045447a66045c3de290772bd53bb4636f05767ee2f873ee8c9f05854e427828f4985c5ca1292854f906fd2b804a08ce4b561b34fd246c5cbd986cd1617905d85b275ea6d4ccb94b1a6992bf9e39ce0a335e339d4d6bf43f435ced25fc6ee82703623474f32a3ec64060d173226219a8dab2dfddf4ca328ff7dd4375fd29ef602d47a4e3c34850f5ba3e0e1858e6042aaa73a9cb36c6367e7b300485467219f278f34e653af621800f3db7ea29f2a5c099074f251bd82ecfeb9772c51b48474e676282016fcd6a01590ef37caf41457e302d13fef1fd9533cd9adc01c18dba4e959c9d473b0e93cfd7a2da7f9a93c7ac9100418c929e6da474270e1cea5886b6e17ff871b2e4472592af4a48a62fd6f4fe6a02918eecab9ba26d42a68f996cfa9886ec2e26329ecc72d4896698e56e58b3ebad071bb6a4d68f22df74351f2be558109640d40bbcb8fe372d2fe6c90a0a660170c211b18448fff888a48917c0a9af5aceb1ab52205d14b0678687c7fbbfbb80f6dead8270c42958afe72c2e29e2c4bb2a05525fa04fd3b0dae9035764f5f510b6bfed85c615d97772baeb67e13dd3e0b7cb5ab920f6dbe9b778dc4f083f0824f1a9999496fb17338b91c9d26cd7ded3735205ba5ff463602825f99093c84d6fc7ef0a0f5b98e82a5b1dcdc98e5399b20f5c17b5b6a17f545735b91ed8fe425e95b57cfaf8484412aa3dd0eb96363047fe1bd2c0285b631842d5a8b6df92576818c0ba7a81965c5076d3a6d72ddb597b2d304bf6bb41808bc14dba04b3cad3c26ca19a9749a1f9bdf0cc6ee5312a2e39c824e6dff99af599dab0703047a250a34e53a618cb1babacad43991d1d7a4fab7bd6c76eef66d976235ee03e7b2faf25d8b0a91f40acfd1936b5c800f0f05718dd9708d5d769ca2683303135fd7539dff02829bfbc5de83f823c62082fbf1d54b68b8ba6d1e17e6c3611f4b972149b067d04374ef86352c80fb4e6c4760ba13c98e4d4d85ad65be8a6aef4e37b468abeb0681d384956d1a7d5264fe9f1c010f2528b375b0516d6f743b303d1f439c6437e46234e3431d284d99ea7d31050f191c3cfab9e7b0886fcfcd42f75ab2f3d7f6c1af3008f14f3d6de5d1ef00547f4da69888d257cdba550cc2615ec555e086d7a1f2ee02988dc5d8d83da74534866710aa7b02d662143d33c8b603592c22b6fc65ac253836ec103b6c409f7e7282149150138ed3d5ecaf6f4537370111be5523c0ac3720a91d41c1db2f74c3913b69c53ffe348ebb380867fcf9a3759a3db041ff84eacab668baa9bb9505d1a5586cf20c433e577bb94156e69056c1396c08d16c83d0fefd0d90710c029b463216e69b7295757ac0c14b94f967be283328b981b4666459c842f0bd0d3dc1dc64002b4c303c8bd881c07ab90d97eb3dee7d0c7b14011fe71de8d49b22e1ae40ec71a7e0fd8ff43440f1b8afcb6edaf121974e23a5d64429a923c118dc6a79b4d8a02b0d272d453f5f3741cfbd8eeb1b852b7bcc97498e8bd6406006e9aefa33fef1118ca91d5e582a9dc339247a1b27296a6fb2687a1a976ab33ee100c76f66cc2092a8a981aebafe78704d95f7be8893e903a09cf7bba839aae41c99b2ba14b6b96128388017eb48a1c9669d7b6aa160cd5223dee972ce9e5707153eeb4cc6287dca42905d74847a100655a0cea98ff6bf9d422c6dcff0123674159088622e662413c64de362d76c847fc65f0fea4e41347471a61489703a9264b6f17966bd3da4a682f231c3dae67abb33c0209da93ff1ff2ddedc2851a705c8ae8f2e2ad72fb3b87533de6e2dff04ac45aa6e88cf9aace97824627f8a796d82a3ee37a63bbb3550cc70f35bf18f67be3c081a922e2d748b318efab1da9c69b4a424bc1e072c9440a4800cf9dff945c49b4716be4dd0633905eede00917542eb6d13a1ab20364276acbd2251db1fca730c23f822225a94276447d99aaffa2be6561f74f80307e18fac296f4f89528ea7b67df87800054d81132b1682a0690e7aa19444b0af37d7ddfc9ed1cfd4e2db8adfcb324478e8df6a2feec595bb609a4b62a6303d1c121b50ed65ab31a5dcc195c95cd78973dcbb57e47275140be4be464af5d3d38b79baf9b47fda9344a8430a51a0a4eef0eafdf69617ed0c7a43912476c8d5f24301ace40b610d23940ae86cbf3ed5ff5443389524f904dd5b2b8f75b85835b4bae681485c1d99ed304bb5027c0b9c6fe96474b70532e54d24348024cb69c9f6f62e48c0cb6e0ad333ab1722c23c1fea0c74290f54a59ff407c8cdd0e78ce567aabf78442685d31241932df2b6cbfea2ccb774762c73015bfb0ee0e35f669dbcfad285915e918d08e9e73beba3e50a908d3e73be26e5a7eb25c9c2859155782c76f116ca2a20796ebd3e3c47af1bbf7bea09979a4666b9793a8821bc9b973a9900998b7803a19d708423d0d7d15a64c8d10525bbede521537b40b0de3f7c06ec403d4de380648a505cbdbe24e3c660853448dbded89de2a931abaf58494cfd6b076ea53086f38c61768a49f6c5356255f8f29eff1069310d45ca8f0dfd3791045588570ed3186bdc39efab55d4c8428405ef5b02fe70a71a27d2b07c03f562499d9e0b07b946f6c033aeffb3f4ec077336e82d769f97965c8a4963b5a1e056e719c03cae333303bde30c75138b5605b4f24798f07899056d8bbf25c1d0ee722a5df21840e72fdef2eb62bd1ceb7a08bbea6f5dc720594367a5539be010500301bd118f183e33ef77d46b9e5ddca813b60cda2a2ca8f8210ad40029996b40b6efa23c70344768c88489050b2dd093c96cf394c0efcfed4c3d6aa01a36f7465267c0c294c1e54d34aab5f9f8775c27f416f18dbe510ea6f73ac96b285fb938870fbd1c16d87daa6dc78c0d268f237b816643e6d8c51f4c8947d210d5bcad05728e7814438c54cbaae6da0760586ac4c114e110d04b81482c77c0f835f64bb89bce0db0e90f72c903ebb26add121ca8e463348b84a11f96437113d4c3667ccade4a74d3dc28d7accb3a6762a612f487efbb2a525561a748006ee972822d6bc11ac0ab739ff51e127635b940b1a1cd7d5e6b8ec2b92d73dc7d03376b877886b5710eea332029253b2c8712cc865e1c203a1f85d620e3bdce27e730a24c75dac20fbe75851e40a28c1a729e01f2d06559e373a726a29cb748c4c39369e85a947e50b43f79361f814cf63624a68bbe2c01d6dfa63470bba78d385a74788f89ccc4546b081847e8818815a478f5a2c77b78a4610954a65d4f3723984fadb9c2265e1491ffdf5eec76bccd1d6ba2f8a71701de53839dc03161761f16279ae59fd471b101422f0460a01ba879257f1d19bcac3dd006d99fb1ad6572458761c3265f0a13ebd1d9cc1b94ac07ca0b5ddb989bef20d74d03d2ec8218aa0104f670935a958c45338151387a03143a4e84c866e5ae4510bff6768e75b52cae0869bcb5973fb6fbf999ca62647aaca0a2271f7c648e38b7e707a9cfb0cb97a6c07682384e731743dfb2846416c17c0af3a5c5c7dbe07702061e8586e9a7e9a621c3c3c3cee7844175bf7799cc863ba0264086d3d4ad3a3b238d305668c4b49b99b086ac0e2f1383f1255cbeef97051cc602d65c31d08a51352234f0e0b292f9b4929f0e182258569d8988fdc607cbac9d4adb9a55efbb0826c0bf1ec9c2fa27bd85e9fffd69799f16185fb57e9620c510200231c7c888a29f00801317a74661d45dded64233abfaec1da21d6c0b2cfe42bde0e6a1e06067c2aaaedb682de3d9dad11a789e1e6d98eb908027a83d0f7408654eeb681baa6d5613dce270968ad532848b041f816c42d19905f95789a0ef08e57bd96e7ba2fb778e3aea08a7ebb075658d8c3742c8ad9bc320816c7bf5ff19669976b02e2e419635142bac1720557d85d33188e6a12275961393996fed92e6e36591311d4313042eecfb663989630badc90d9945ac147e53b66581854bc768100ea2cc484e996a12090a7d178e45bf0288a11e319effe65372e77cfb2530fba7630467fb960f7d402640368acb5f1685a57018a6a3ea815cd0306bcff91ede493405f1c4491fd396d40732a6f0953dafa9df061c3390bad6e9119b2d5bcf6787254a5ef6a4a54f927ae1448f937cac0c700734b672603721872598253b5f8cd378218a7c61f126bbc1f1adb753371efe05136d192cfc9c6a847cfe191fa0545fae47b05d51732c614aa35ec9cf3840cc1bcae3826774d533a9df860061e71e40fe296b681a05b16eafb2aa067cfae59a09e40c3c6351c2f77d9e2eb0517eea45ecc8dfde076128fc248958c60df5fca398fcd0f8093cacde81416612da3b9a1b1a2d9bd1fd931c18136721193c0c4dea485d15d38c2e5bfe761fcbf91271fb84ca54919543950e6bea6c8f669146f4bf7b21ebec3d0bcee4d9e2c6722ae1af9d597a1d42e1d777c1b33905206b92cf64e5423515584a452055c39e47b3b698040bebbf807d78b2efc7c9c42e17005206953d6ca74d423ed88040f9002c20c787a6d5f6ffcea920f64050e8825cf8d566c3659af41b781986613087de7c6357212fccebe5cbbc0d1c7d9c24448ae40e3335f08b5c484d90de7ea6be8bc801e631b2bdab43ea3a2f741f01fd69ea4cb828c99c37d9010596419647efa98a85503475720fb6a9c9759fe9ee24a99583f3754a0c4a4c10d8fa2ee57c02f9a516eb788d077873f380cae7b899f941c35fa117a75160647f99564ca97fd327084572d751088b34152263701a2226fc5e9007ceb6534b32b7b92b120f83cc7cf9883a5a50bc4f2eff413aabe0401c5fe5369f68aaf2cfb957502b2e2734ce40f7c3a2de07b18a73aec26c4e3ac2db1c8d72c920b52a1d4e8053dc35c744c4f95f12b7b50afd3902b6ca825518b6cbb46f42a66cf7bf7c9aea5ff60136bc20e1a13b32096cc539e413ef1eed9da3e78863ba1300f035d91f768692e62e18c97003f27b237d84e7200197d01bcfc3364208741e6648f7742db4116bb6a9b73738b96720305a441899ca37b16833340f42d099735547e29b3ca33633fa1ce8073459f9e391bcfa599bcf4d3a44d24445c221f5e2f7336089dff8c8c464c74eaa6b28d1a09f4112c98a6a30f7f60f43865011fdef8ccb5d44fe95e829d10e38d2786b48d5f497962142a3e0b55fab5849da62f63bd34721b4486bac2fcbed4652e69b7f51b99636c4cd4c73784e95584e0a5d35adfb3b1d9506a20ab0e26df6cbfd9e78f7937556bf60d39ecfb6a256ab564043d222e6e6e9661e75bf5c37ef38f6a60ed00fe704f25e626211b93a3bec8c747090274ba1da923e591f64a12beb9b3f0bce1eecafc6568839766abff236e07065f90050ea3c34723070505cb8c35272c00bb53c3fe732c6e517ac17924994219ecdf3a5f5382411d3be2298cb028bb627baa32223c856f8a042a186412c9228582d19823856a1d9501bb8fb80d01dd4183795a4eeb4640a184ce376c4b884a7e10a6a3b78ebca8000728e4dfeed00e5722264fedb03eeb80b8803bf32e2780c5ebe2ff0d1e2421b9e0faacbae51fee14e7eb8dacf95a7d93693e855e68826463c96f91b069b4456a2c011be688f565fd01cff03b641aa39057acb0484e32a8d9647bde6b099772a0eb0df4a6ed3a4de7aae22df2615d8b749119fac444f2e3d35778b02a6ce49be9d8048ee088cd440274e97d8c61589549aa74a378c4", 0x1000}, {&(0x7f0000005c80)="82c833909fe46ba547f4daf84eb95f3282af40d89fce2fef4859917286d32a5292cf364b8dac192cce64e683873eacf63a83ac8dfe94c0330b14bc670437645c938aad8fb334eed9b9670ba4fb13084937baa9e79685839a96bdb7c21d2d891e28e708d191c788575cee69abdfd61fbd81164ae4412b5f24168b5c25d31cd9a58d77a479a17b714ebf5a4ebc6674c61eff07b1a4a7da18f45d2d1ef117083e4d435a219649f8e60adab5b26f041b0f7e6dbd80bd48105754ea8cf5534c8a1543f5cd85c48a4e79262d68903e70d5e63638aef4417f33d57df5e5c37944946a", 0xdf}, {&(0x7f0000005d80)="544937e7184d7050ed5ff3ada9d8eef0db1d7641acd26dc15a13c02ea09ee2289b56ddcb784157d05310379d6f2158b91d9f86ad1e57a1b11945adb2be9c55b01eae6f00b58ae50bd88502f13318539040857174d33a476208a44b4f85b6f8af3dc936217a512956277b21b827203e8155aaf51cb8853f65672f12031967da3dc94caadda98ba09c8844f8445989d97cab0745bd35dad11d678d4522f00c9cbc769e6683489a0640180d4d8e7e5450bf99e1ff10067679d8be618589fa49ef972a360ec4701aafede62cf3f449c2c69ea90ddd8a9a6bd81121fdf84f9920", 0xde}], 0x4, &(0x7f0000005ec0)="79f1115f7dce6be4245ae1386945bb", 0xf, 0x4}, 0x2000000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000006080)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006040)={&(0x7f0000005f80)={0xa0, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7f}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8b3}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x280}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x831}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x45}, 0x8090) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000006140)={0xffffffffffffffff, 0x8001, 0x5, 0x1}) 11m14.393706448s ago: executing program 43 (id=653): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x30002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x124}}, 0x200000d4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) r9 = dup(r8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r9, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11m7.006180287s ago: executing program 44 (id=668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) r1 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="64010100640103020000000007000000ac1414bb7f000001ac1414130a010100e0000001e0000002ac14142ee79d2e77b9f63ea6282ecf2262328acd2151e0163217d7a34f115e4760407c0f6e8072d2f028578a260d4b8afbcc40372a5c97a1c2dd7a8e90d1c4c0f34d17eebfd7e9f6c41921eb8a6d08"], 0x2c) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x2c, 0x26, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xd}, {0xd, 0xa}, {0xd, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 11m4.941234057s ago: executing program 45 (id=672): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000040)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x62, 0x0, 0x0, 0xfffffffffffffdc3}, 0x77) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x1, {0x7fffff15, 0x9558, 0x1000000c, 0x207}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0xfffe, @empty}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) 11m0.405611816s ago: executing program 6 (id=679): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x2a0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'netdevsim0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}, [@common=@inet=@recent1={{}, {0x60, 0x3, 0x1, 0x1, 'syz0\x00', 0x9, [0xffffff00, 0xff, 0x0, 0xff]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{}, {0x3, 0xe8}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffd8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x15, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000240)={r0, r1, 0x0, 0x0, 0x4}) 10m59.58707206s ago: executing program 6 (id=680): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1020, 0x280000b, 0x28011, r0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000009640)={'erspan0\x00', {0x2, 0x4e20, @empty}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0xfffffff7, 0x5, 0x0, "153a508b74ddb609e20fb860b786eb8ae1f7ec95527c8e3e0d12bbe3673f8a3a", 0x48524742}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30385056, 0x3, @discrete={0x4, 0x15}}) 10m59.330859049s ago: executing program 46 (id=680): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1020, 0x280000b, 0x28011, r0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000009640)={'erspan0\x00', {0x2, 0x4e20, @empty}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0xfffffff7, 0x5, 0x0, "153a508b74ddb609e20fb860b786eb8ae1f7ec95527c8e3e0d12bbe3673f8a3a", 0x48524742}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30385056, 0x3, @discrete={0x4, 0x15}}) 10m46.227523734s ago: executing program 47 (id=690): socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc004ae0a, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}}}}}}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) 10m37.164471751s ago: executing program 48 (id=707): r0 = syz_usb_connect(0x1824d6d4b966011, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x89, 0x2, 0x1}}) 10m34.478272717s ago: executing program 49 (id=717): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102368, 0x18fe0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000f80)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x44020000, 0x4, 0xffff, 0x4, 0x5, 0x0, 0x0, 0x1, 0x1}}, 0x50) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="011607000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df01200004000000000000"], 0x509) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m28.785388997s ago: executing program 50 (id=732): setfsgid(0xee00) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x220001, 0x54) getdents64(r4, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee3}}, {{&(0x7f0000001fc0)=@can, 0x80, 0x0, 0x0, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000000300)="ba58111a0fee4ba97b42e2b12cc96c4506619892071c7b9656515e41028bff7c10db816180797a5f834953fd66b1d24ce7bbe7c97dd0dbb43def372a9910bdecb1a71864778dbead50aa03d209c7ad498d7bc24502fb2e72315cab74b591cb9b724c01d8a6709165c74782727768d9d5d98a8ed4f437b626351df52d96b251e01845", 0x82}, {&(0x7f0000002a00)}, {0x0}], 0x4}}, {{&(0x7f0000002d00)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f00000003c0)}}, {{&(0x7f0000002ec0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x80, 0x0, 0x0, &(0x7f0000004080)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x818}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x180002}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0xa8}}], 0x5, 0x20004040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x6040000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 10m24.099213158s ago: executing program 51 (id=740): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x30002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x124}}, 0x200000d4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) r7 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r11 = dup(r10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r11, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) 10m21.226265883s ago: executing program 2 (id=742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x4}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x14008850) (fail_nth: 6) 10m20.869014857s ago: executing program 2 (id=743): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000340)={0x18, r6, 0xffffffffffffffff, 0x1c}) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) 10m19.80266605s ago: executing program 2 (id=744): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000003880)={'\x00', 0x1, 0x4, 0x6, 0x4, 0x7, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003900)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000003a00)=0xe8) r3 = getuid() r4 = syz_open_dev$vim2m(&(0x7f0000003a40), 0x0, 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003a80), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000003ac0)={0x1, 0xfffffffe, 0x2, 0x84880, 0xffffffffffffffff}) r8 = inotify_init() r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$isdn_base(0x22, 0x3, 0x0) r11 = getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r13 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000004080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000060c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000061c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r17 = gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000008240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) stat(&(0x7f0000008280)='./file0\x00', &(0x7f00000082c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000008340), 0x40002, 0x0) r21 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000008380), 0x2, 0x0) r22 = socket$l2tp(0x2, 0x2, 0x73) r23 = openat$vmci(0xffffffffffffff9c, &(0x7f00000083c0), 0x2, 0x0) r24 = openat$nvram(0xffffffffffffff9c, &(0x7f0000008400), 0x80000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000008440)={0x57, 0x6, {0x0}, {0xffffffffffffffff}, 0x5, 0x7}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000008480)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000084c0)={0x0, 0x0, 0x0}, &(0x7f0000008500)=0xc) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000008540)=0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f0000008ac0)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="5289bc01c276711eda97d1c958e9080e6cc616075eb75cf6fabcf02c23aa187e9acb479dd7a4ad", 0x27}], 0x1, 0x0, 0x0, 0x20000000}}, {{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="dc14cf73b3c6daf9e6e455af475e40700a376de6cfe2d9b01d75d97e74c230b0acce1909b73fa21862851cb3e1664687c91ad6cc31ca35bd7d34fa827dffb4fc8edeb33516843a376e1cb292739a73ee7ec4a3144da9d77cb15dd968f712e322db00f2eb623ed972a748eb196168d1f6f7e9a4083c7399b5d889f841e61ba1e3363377460b996d53035407cc9508977b3de2d104c39cc0a641a176dfae1f0047b5560f83bbcd0a81d492a0fcdfa1defdfcbf902ec7a34387b0226b65a7142340dd090fadd0fea5150b899424b7f78241c966", 0xd2}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="69a2df12938dc45fd78193774956bec6797207777fefef383ff6a0ed05f6b899345bf2c07a459f1f", 0x28}], 0x4, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000023c0)="c026e664dce3dc748f0b0994c786a77c7c2532b9b31ef05ab31172500797c288e15455ea20dae036b343ff8d12d6fc32546b8c03cbbe3115f5053a4f84d8b19b9f77b1c3df65978d7792e60ebaa22acfd3bcf0804daf59", 0x57}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="b6d4a3b16f765c1089ab508c07aefa6dc85fbf6208b9a79725e0e1fc86dc35712bc984e6b03e37e49538d39264861f2653913257a13b5738c44376a97a2804bef3ced19132b167c06a0d687f98da96ddd65af708fe3794069ee737147d1db247ac0b2b18e99b87278c168aabed9046d21a9bb56a91d4bc0a678640d5682db34401f7cb6a6ee0f0b58e83d34079152e2f2173eb186cd27113e67271dda1879820819d67134337f4c3ad", 0xa9}], 0x3}}, {{&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f00000035c0)="9762a490ed8c03fd73bba1dc45d6175dbd660571dfdc5edb703d09c39f5c2c7fd1c519192ca98c349741d5c6fe35711c91ea11b0d771bb6f21c244a3789845d365993b58bc542d59cbb63c887f865b196959e3855d8c08cc608e0cfb0c9d14b81f9a18badf7067e248dfea3acb890bd07001f79753090ab13bc27d8ac7a2ea92ca4064c5af5eb0d21bba1c52e61511f56078aee71be80f338fb5e7c1304343bf0f4a5b88b44edc56455a85591988cb707689e64624b997d16bf430302a7fbe1a3de65e6aa00590006e1d424586510cac15df70f11581ff8e1b346999eeb62ea5791b", 0xe2}, {&(0x7f00000036c0)="1df8c1862767f4155adc175730da7dad3087719fe7850d29595c01c0b8dd6029165b3b8ef7c9978fda5a3f4456df994d22cb93d9b5bb342f2c82a515a5a616f9e5967fee", 0x44}, {&(0x7f0000003740)="bab113972b1615f8d383597e3cc4773d46ad62fd470653278bf599420fd9bdd27e6f136f937649b0696f40565d82dc84082f95dc548c8ba798a9bb4a7886260dbbe21b38040074db355d11543ed3ac368e446e1b6d36be15487d97ce4e563bcc1a91c9e4ab93c23b130536dc47fb5b5f0bc7182e76a6a3589df08cc0a30611f84adb93cfc6bd45c851130d3e5fff011d7efa6ac7f752be5771ee3d7e82", 0x9d}, {&(0x7f0000003800)}], 0x4, &(0x7f0000003bc0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r6]}}, @rights={{0x24, 0x1, 0x1, [r7, r8, r9, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00, r12}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0xc0, 0x4c800}}, {{&(0x7f0000003c80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003d00)="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", 0xff}, {&(0x7f0000003e00)="1115a537118603328ff84aeed07ccb4e858094a1b1541f9cbb1a4c4c4ffd1d0723a84a35cfd12dc2eea2b5bbe858a1d9a6011681ec3e622e79924d555a5c6296cf6024645939d32cf618400d71c0a130fd80aad9e4f4d27ad1eef266e4588ab305ecc1e86df2464904f82a94d50495579146a097ce91acb6b80731ee1593c147de0351d9ef03345b16c4a03dc4c3f41c21775013df6634c6c0b69621759f6bbe93a44205080cd56c9a473d0302103ef7414ea1e5ceccbea86420ca623353a5a4309a6cb840b24a90", 0xc8}, {&(0x7f0000003f00)="014326463d02267da394d72e1b8c0f1415247ffd1d977423a030acfed4c25c85a9bbe29064ac98cd85900c7d86bb2ecd78b8bd3a26a5629e95b6ce7f3e6f15f5a348c276edc87315abb6", 0x4a}, {&(0x7f0000003f80)="357cb1db81ca2f2fafe9af11899dd2afdc1a1cdfd0d2d8036e042ad190fbd21268ab8f056aea7637373ab4806065639be76fe86b9f942a09209a3bed52434b34a89692810da5b458e0f39e3bbe6daab6e9d6429525e0b31acfc415f0bd92f15c3e1cdb703d64cf029e4c759930abf730c5ae628c332c69b8a44b0bcb55aa0b0f1ca28b34ca2f5d21757b", 0x8a}], 0x4, &(0x7f0000008980)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x28, 0x1, 0x1, [r20, r21, 0xffffffffffffffff, r22, r23, r24]}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r28, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118, 0x4001}}], 0x5, 0x40000) 10m19.708262342s ago: executing program 2 (id=745): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x20100, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xb, 0xffff}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) 10m17.692407001s ago: executing program 2 (id=747): mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) close(r3) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x3fffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000203c50000000000000000000000000f08000100010000003ca6c613f690d15a2547aa54659767e5c2fc9cbf94874bddf7dc7bd9f9d4e0a5d5c6e61ff03dc1f4d8feba37a0bf0f16a6cbc414481a05804a2fa1c66b188ccbcb641ab57f91d5"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 10m17.362546191s ago: executing program 2 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) syz_usb_connect(0x2, 0x3f, &(0x7f0000003340)={{0x12, 0x1, 0x300, 0x45, 0x9c, 0xb1, 0x8, 0x1199, 0x68aa, 0xc992, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x6, 0x80, 0x90, 0x6, [{{0x9, 0x4, 0x7, 0x5, 0x3, 0xa7, 0x30, 0xc7, 0x1, [], [{{0x9, 0x5, 0xb, 0x8, 0xe4361f42ef54a988, 0x2, 0x8, 0x40}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0x9, 0xd6}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x3, 0x7f, 0x9}}]}}]}}]}}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x80) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r3, 0x0, 0xfffffe59) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="35010000feec48081d0620c167e3000000010902120001000000001e25"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, &(0x7f0000000000)) 10m17.184285887s ago: executing program 52 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) syz_usb_connect(0x2, 0x3f, &(0x7f0000003340)={{0x12, 0x1, 0x300, 0x45, 0x9c, 0xb1, 0x8, 0x1199, 0x68aa, 0xc992, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x6, 0x80, 0x90, 0x6, [{{0x9, 0x4, 0x7, 0x5, 0x3, 0xa7, 0x30, 0xc7, 0x1, [], [{{0x9, 0x5, 0xb, 0x8, 0xe4361f42ef54a988, 0x2, 0x8, 0x40}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0x9, 0xd6}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x3, 0x7f, 0x9}}]}}]}}]}}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x80) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r3, 0x0, 0xfffffe59) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="35010000feec48081d0620c167e3000000010902120001000000001e25"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, &(0x7f0000000000)) 10m17.078117076s ago: executing program 9 (id=750): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) socket$phonet(0x23, 0x2, 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x20000000f5) 10m16.470724281s ago: executing program 9 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x3, 0x18, 0x6, 0x8, 0x1aa, 0x4, 0x6, 0xa, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500bb570000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 10m13.588820232s ago: executing program 9 (id=753): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e30, @loopback}, 0x2, 0x0, 0x1}}, 0x2e) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)=0xb) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x281) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000300)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="3c0002"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 10m12.372202007s ago: executing program 9 (id=754): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000008a20000000000a030000000000000000000700fffc0900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0000000c0a010100000000000000000700000008000440000000020900010073797a300000000004000380140000001000010000000000000000000084000a98930b0d9f6dfe6ef16894a77d684fc54179c4e6d55b38c9932a9ce90cc16d3395125be5f54df5e55a2f86ead72077f2d109f679d39a3a2ef50a6b9717dc4518ffcc45fc7196aceaf70d8b2b0d3421b80365ec"], 0xb0}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x20100, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xb, 0xffff}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) 10m10.744535977s ago: executing program 9 (id=758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x760b}], 0x1, 0x40000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x81) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 10m10.170996875s ago: executing program 9 (id=760): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2802}}, 0x3, 0x0, 0x20000, 0x81, 0x2f, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x4, 0x29, 0x9, 0x80, 0x9, 0x6, 0xcc, 0x1, 0x0, 0x1, 0x9, 0x8, 0x1, 0xba}, 0xe) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_names\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) ptrace(0x10, r3) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000c18000/0x3000)=nil, &(0x7f0000da9000/0x4000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 10m10.001558727s ago: executing program 53 (id=760): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2802}}, 0x3, 0x0, 0x20000, 0x81, 0x2f, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x4, 0x29, 0x9, 0x80, 0x9, 0x6, 0xcc, 0x1, 0x0, 0x1, 0x9, 0x8, 0x1, 0xba}, 0xe) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_names\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) ptrace(0x10, r3) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(r3, 0x3, &(0x7f00000002c0)=[&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000c18000/0x3000)=nil, &(0x7f0000da9000/0x4000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 10m7.486638218s ago: executing program 6 (id=741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r3, 0x2, "05fa90", "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"}}, 0x110) r4 = socket$inet(0x2, 0x3, 0x8) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0xfffc, 0x41424344, r6, 0x0, 0x2, 0xb, 0x0, 0xfeff, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r7], 0x148}}, 0x0) 10m6.344292361s ago: executing program 6 (id=766): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x20100, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xb, 0xffff}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) 10m4.548485298s ago: executing program 6 (id=768): io_uring_setup(0x97d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}) nanosleep(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x80010, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000240)={0x0, 0x0, 0x0, r3}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000002) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000"]) 10m3.599073119s ago: executing program 6 (id=770): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x18, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 10m3.384008223s ago: executing program 54 (id=770): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x18, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 9m3.621523272s ago: executing program 0 (id=943): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x82880, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x1) syz_usb_disconnect(r1) (fail_nth: 1) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xb}}}}}}}]}}, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) syz_usb_disconnect(r0) 9m1.934910857s ago: executing program 0 (id=947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r4, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 9m0.782928516s ago: executing program 0 (id=950): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x30002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x124}}, 0x200000d4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) r7 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r11 = dup(r10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r11, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8m59.948868969s ago: executing program 0 (id=955): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x20100, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xb, 0xffff}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) 8m56.785988516s ago: executing program 0 (id=967): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x2bffff, 0x6, 0x34325842, 0x9, 0x6bb, 0x7ff, 0x4, 0x6, 0x0, 0x0, 0x5, 0x5}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000001cc0)=""/213, 0xd5}], 0x6, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r8, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 8m56.548797546s ago: executing program 0 (id=970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x760b}], 0x1, 0x40000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x81) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8m56.185089177s ago: executing program 55 (id=970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x760b}], 0x1, 0x40000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x81) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8m50.464313858s ago: executing program 8 (id=990): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000140)=0xd, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@empty, @private, 0x0}, &(0x7f0000000300)=0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x9, 0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000280)=@fd={0x9, 0x2, 0x4, 0x0, 0x80000001, {0x0, 0x2710}, {0x54b80bf8f1526a34, 0xc, 0xc, 0x5, 0x4, 0x6, "0672ff06"}, 0x4, 0x4, {}, 0xfffffffe}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500009300e867c638f0714a0800000085000000a50000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_open_dev$vcsn(&(0x7f0000000400), 0xde10, 0x408000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x16d) fcntl$lock(r6, 0x5, &(0x7f0000000200)={0x1, 0x2}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000030000006e0000000000000900000018114000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001839000004000000000000000000000085100000f8ffffff851000000600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001857000005000000000000000000000035085000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000000600000006600300050000008c77080101000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xa3, &(0x7f0000000040)=""/163, 0x40f00, 0x9, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xd, 0xf5a6, 0x55}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r3, r4, r5, r6, 0x1, r7, r8], &(0x7f0000000580)=[{0x5, 0x4, 0xa, 0x6}, {0x2, 0x1, 0x5, 0xb}], 0x10, 0x6}, 0x94) 8m50.343031993s ago: executing program 8 (id=991): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98b9, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x1, 0x0, 0x5, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x7, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x6c3f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0xa, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x3, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x1, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) r3 = eventfd(0x101) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/vmcoreinfo', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m50.213260611s ago: executing program 8 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_delvlan={0x30, 0x71, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5, 0x3}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x4}], 0x2, 0x0, 0x0) unshare(0x2040600) unshare(0x2000400) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 8m48.997220562s ago: executing program 8 (id=993): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x20100, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xb, 0xffff}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) 8m47.617322768s ago: executing program 8 (id=998): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x30925) keyctl$setperm(0x5, r4, 0x2012000) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) syz_80211_join_ibss(0x0, &(0x7f00000003c0)=@default_ap_ssid, 0x6, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) syz_open_dev$vcsu(&(0x7f0000000000), 0x800, 0x20040) r5 = socket$netlink(0x10, 0x3, 0xb) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) add_key$user(&(0x7f0000000340), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000580)="f5559f916e8c31b864c9c1acb3e6cd325ba92506485d8191ede709f27e77f2088843f354519ced086909b8fb1191ae3a6ddab7cae740cabb1f9f5df4438bff0cae86deff6b81f29470f7ea2b81a02e5d32c2b3b30a908a55df52cf8f6314a528cf81193fff4866b6888fa829194ab35b54d006b98b884a7d0b851cee974a600e931a20f76ae8311a7211061536604ba394e1ded71b89a264039abb0b5083067e63924606734f79a81d8be4a041b9bfde4559e3c47e594370ef7217f6bfddfd164fc692e6fa17362224ef6b97ffc75bd0a2e4d60937bb15d5fe7e940e13f95a7a462607f4412ae34a045b071e447b6c2a", 0xf0, r3) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000000)={0xc, 0x101, 0x4, 0x10001}, 0x10) close(0x3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000160000012cbd7000fddbdf2500000000ed5d9d33b3946b4173afaaacda6aaa1bdb3ee17534a77c46eaf942a0f622d39f56b4c149585ed268f9fddbbb35f49f0ef0728ffa044425530eb33bc1db075b20f3b81af1dc79f6f87e12518c55609a25115225f56704848703"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 8m47.347790049s ago: executing program 8 (id=999): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c", @ANYBLOB='\b'], 0x1c}}, 0x40) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000480)={r4, 0xfff6, 0x1, 'k'}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0xfffffff6, 0x10}, 0xc) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="28005080110001004abee339fbf7eef16f162471f40000000500020005000000080003000bac0f0067af67da2aa526f4b3ae92f63192932e3d6f2a3f6c496fc8518733fe573427caf3fe"], 0x44}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="44debd2c7e207c9f76a5d030142c820a3ec665933bb7d7382de0849c3134393978b3e50d11abda87bb4998bcb90395aba24146d3f5d815ae8659d48c05a402463746d6e0799eefe44855e9fcbcbada6185e88afbf9f58ec9526b58abc40350c3158ecce74a936791dadb92a6ac6a87a60b74c14401d2f45b11c42a14579e6a0545e35eb09b95c505607836628f21d8e40545e05075b9eb4cce8fbb4264154321b05faa613d8c26b5362cd55feed31250e3b56066666e441ca0b439eda0b553ca29bcd5b256a49880cf48f288cd1859c9297daf7ba7bb", 0xd6) 8m47.106240421s ago: executing program 56 (id=999): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c", @ANYBLOB='\b'], 0x1c}}, 0x40) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000480)={r4, 0xfff6, 0x1, 'k'}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0xfffffff6, 0x10}, 0xc) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="28005080110001004abee339fbf7eef16f162471f40000000500020005000000080003000bac0f0067af67da2aa526f4b3ae92f63192932e3d6f2a3f6c496fc8518733fe573427caf3fe"], 0x44}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="44debd2c7e207c9f76a5d030142c820a3ec665933bb7d7382de0849c3134393978b3e50d11abda87bb4998bcb90395aba24146d3f5d815ae8659d48c05a402463746d6e0799eefe44855e9fcbcbada6185e88afbf9f58ec9526b58abc40350c3158ecce74a936791dadb92a6ac6a87a60b74c14401d2f45b11c42a14579e6a0545e35eb09b95c505607836628f21d8e40545e05075b9eb4cce8fbb4264154321b05faa613d8c26b5362cd55feed31250e3b56066666e441ca0b439eda0b553ca29bcd5b256a49880cf48f288cd1859c9297daf7ba7bb", 0xd6) 9.23851428s ago: executing program 4 (id=2912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x40}, 0x10) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r5, &(0x7f00000000c0)=""/6, 0x6) 8.72313427s ago: executing program 1 (id=2915): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) read(r3, &(0x7f0000000180)=""/136, 0x88) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x1, 0x8, 0x7f, 0x0, 0x2, ']\x00'}}, 0x20) 8.250362547s ago: executing program 4 (id=2916): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x4, 0x0, @remote, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000000)) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x8851, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) sendfile(r1, r0, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800003300", @ANYRES16=r4, @ANYBLOB="010329bd7000fcdbdf252400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = dup(r1) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="c422ea47fcf76fbab293d2f138814cfc266eff60b2d1cce6cdb1b35dcd40f0d9c928e0fc6f7f6673b7e0c4a0cd5aa4cacc2107bc7b110373c5553b22a7c950676e60cc579b27287eae96d6e047c14e81e7c30c6722ee18c1051b80b1e8410e6288be609015819356e1b53c23711f5b8f4dd2dad7f1e71a2a915f01adf1789d78811aa852d6097885ac4b4dff6f064ed6fc3c33071d80a391f6794a2f1d151c6e4429a6472b55b80fbf89bd3f2ead6c3b7a2cec9e4958bcee25e32ed7177196825049ef6144f02f3fd9957222c56741ee63c4977f8079596e2e7f03c30191", 0xde}], 0x2) syz_io_uring_setup(0x708a, &(0x7f0000000100)={0x0, 0xd9b6, 0x24, 0x3, 0x25f}, &(0x7f00000001c0), &(0x7f0000000200)) setxattr$incfs_size(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000480)=0x80000001, 0x8, 0x3) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom0\x00', 0xc00, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000440)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x5) fadvise64(r5, 0x18, 0x3, 0x4) fspick(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 7.682768193s ago: executing program 3 (id=2918): ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x100000, 0xa000, 0x1}) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x19, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @generic={0x7, 0x4, 0x6, 0x5, 0x400}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x0, 0x1, 0x9, 0x0, 0xf}, @cb_func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}], &(0x7f0000000280)='syzkaller\x00', 0xb9000000, 0x9f, &(0x7f00000002c0)=""/159, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x4, 0x1, 0xbc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[r2, r3, r4], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0x8}, {0x4, 0x1, 0x4, 0xb}], 0x10, 0x1000}, 0x94) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x105000, 0x0) connect(r6, &(0x7f0000000700)=@caif=@dgm={0x25, 0x7b, 0xb}, 0x80) r7 = userfaultfd(0x1001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r5, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x35, 0x21, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @generic={0x3, 0xf, 0x0, 0x8, 0x4}, @alu={0x7, 0x0, 0x2, 0x5, 0x1, 0x18, 0xffffffffffffffff}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xb8, &(0x7f0000000900)=""/184, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, r6, 0x8, &(0x7f00000009c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r9, r5, 0x0, &(0x7f0000000d40)=[r1, r1, r3, r3, r3], 0x0, 0x10, 0x3}, 0x94) ioctl(r10, 0x1, &(0x7f0000000e40)="fd0b0736c18773bbeccff0f81c9dfe585d3af78b1956e1bf479e6039fdd1b5ccd8f5f10bce74ec82c03962639a1b337ef6204acd79811a2719baf078e5f26c4bac1e221ac4e7fe17fb23f50bf725084dffbe16f8bb1decceda3a8fcd1cb5ec3b9b735c8b0e0d90fa19607c3e7c17c2c52bfd7f4a3bbfc87286") r11 = accept$nfc_llcp(r6, &(0x7f0000000ec0), &(0x7f0000000f40)=0x60) fcntl$F_GET_RW_HINT(r11, 0x40b, &(0x7f0000000f80)) syz_open_dev$MSR(&(0x7f0000000fc0), 0x10000, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000001000), 0x4) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0x7, &(0x7f0000001040)={0x0, 0x3a92, 0x2c9e, 0x1}, 0x10) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x400200, 0x0) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f00000010c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r14, 0x0, &(0x7f0000001100)) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x3}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x39, 0x0, 0xe, 0x1}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @var={0xe, 0x0, 0x0, 0xe, 0x4, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x8, [{0x4, 0x1, 0x3}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}, @func={0x1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x30, 0x5f, 0x61, 0x2e, 0x30, 0x2e, 0x0]}}, &(0x7f0000001200)=""/218, 0x8a, 0xda, 0x1, 0x9}, 0x28) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@bloom_filter={0x1e, 0xa425, 0x9, 0x1, 0x200, r0, 0x8, '\x00', r8, r15, 0x1, 0x2, 0x5, 0xd}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r10, {0x10000}}, './file0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{0x1, 0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x15, &(0x7f00000013c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ldst={0x3, 0x0, 0x3, 0x6, 0xb, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f0000001480)='GPL\x00', 0x83fe, 0x0, 0x0, 0x0, 0xa, '\x00', r8, 0x25, r6, 0x8, &(0x7f00000014c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0x1, 0x80000001, 0x7f}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001640)=[r4, 0x1, r17, r6, r18, 0x1, r3, 0x1], &(0x7f0000001680)=[{0x1, 0x1, 0x10, 0x9}, {0x3, 0x5, 0xc, 0xa}, {0x0, 0x5, 0x6, 0x6}], 0x10, 0x8}, 0x94) ioctl$BLKPG(r17, 0x1269, &(0x7f0000001840)={0x3, 0x0, 0x98, &(0x7f0000001780)={0x8e, 0x1160000000000000, 0xe}}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001880)=r5, 0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r7, 0x71096000) 7.682392102s ago: executing program 1 (id=2919): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x26c0, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001400)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0002bdeba1e0d200"/28], 0x1c}}, 0x4040040) bind$alg(r3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) r8 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) writev(r8, 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/205) 7.680977247s ago: executing program 4 (id=2920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x4000904) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_notify(r7, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x18}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7.646997523s ago: executing program 3 (id=2921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x54, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x12}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x22}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x46}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 7.592148699s ago: executing program 3 (id=2922): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220a000000b380c5310c1ba695fe8f3929a706f7cfd8db54047376634cd8ac9784f1fbd4c122bf86f9bfca"], 0x0}, 0x0) r2 = gettid() setpgid(r2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x40640) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x1, 0x3, 0x6, 0xcb, "0982aa400000000000e6ffffab5affffe500", 0x5, 0x80000001}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xff) bind$alg(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.658946418s ago: executing program 4 (id=2924): socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0xcc, 0x0, &(0x7f0000000240)) r5 = socket(0x2, 0x3, 0xff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=@newtaction={0x18, 0x76, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) mlock(&(0x7f0000836000/0x2000)=nil, 0x2000) 5.490615703s ago: executing program 1 (id=2926): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES64=r2, @ANYRES16, @ANYRESDEC=r3, @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}, {0x11c, 0xf, 0x9e, 0xffffffff}]}) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, r7, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r9, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r9, &(0x7f0000000200), 0x0) bind$inet6(r0, &(0x7f0000005b40)={0xa, 0x4e23, 0x8, @loopback, 0x4}, 0x1c) 5.471020819s ago: executing program 7 (id=2927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r4 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r8, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) listen(r6, 0xffa7) close_range(r4, 0xffffffffffffffff, 0x0) 5.003912011s ago: executing program 4 (id=2928): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (fail_nth: 3) 3.723591359s ago: executing program 3 (id=2929): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000004c0)={"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"}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000005c000000000000000f00e035200000000f22"], 0x5c}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x4f, 0x2, 0x2, 0x180, 0x4, 0x800, 0xf1, 0x50, 0x9, 0x5, 0x8, 0x9, 0x0, 0x2, 0xfffffffffffffffd, 0xbdb], 0xffff1001, 0x180182}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7, 0x7, 0xbd8, 0x2, {{0x2d, 0x4, 0x0, 0x2, 0xb4, 0x65, 0x0, 0xdf, 0x2f, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xb7, 0x3, 0x7, [{@remote}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0x0, [{@remote, 0x5}, {@private=0xa010101, 0x10001}, {@multicast1, 0x7515ab7c}, {@multicast2, 0xe}]}, @lsrr={0x83, 0xb, 0xb0, [@rand_addr=0x64010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x2d, [@rand_addr=0x64010101, @private=0xa010102, @local, @empty, @broadcast]}, @end, @timestamp_addr={0x44, 0xc, 0xb1, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x80000000}]}, @timestamp={0x44, 0x14, 0x86, 0x0, 0x0, [0x8, 0x7f, 0x3, 0x7fffffff]}, @timestamp={0x44, 0x1c, 0xe6, 0x0, 0x5, [0x4, 0x9, 0x3, 0x9, 0xfff, 0x6]}]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfffffeff, 0x7ff, 0xfffffffa, 0x108, 0xffffffffffffffff, 0xd, '\x00', r6, r7, 0x0, 0x3, 0x2, 0xe}, 0x50) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="e110010000c5c789a77bc849cf2874810024406b8cd30a7fe5f802767bb0ae396f8ad0c20d5f2661db"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) 3.72122458s ago: executing program 7 (id=2930): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000100)={'some', 0x20, 0x1, 0x20, 0x6}, 0x2f) (fail_nth: 3) 3.6922701s ago: executing program 1 (id=2931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x300, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) 2.918694265s ago: executing program 4 (id=2932): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0xfe) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) open(&(0x7f0000000100)='./file0\x00', 0x2cc002, 0x22) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 2.918420824s ago: executing program 7 (id=2933): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x1e00) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r6}, 0x73) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r7, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000600)={r11, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) (fail_nth: 7) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x80, 0x3ff, 0x34325241, 0x0, [r12, 0x0, 0x0, r13], [0x2ba], [], [0x400000000000000, 0x0, 0xc]}) 2.785990287s ago: executing program 1 (id=2934): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x48}}, 0xc0) socket(0x1d, 0x80000, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32"], 0x6c}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r5 = socket$inet6(0xa, 0x6, 0xba) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0x101, 0x4053e5, 0x20}, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0x9d) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, 0x0) mount(&(0x7f0000000440)=@md0, &(0x7f0000000080)='./bus\x00', 0x0, 0x81000, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000400)={0x9, "888f671eecac2f34465f3ebb119d9532932cf6ca60b5b60a8946d9f6d5c1061d", 0x2, 0xc0000000, 0x1, 0x0, 0xa00, 0x8}) syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x205}, 0x0) 2.349414952s ago: executing program 7 (id=2936): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000615969dfa2d6d231428f99e13744aac971d7ed6178ce7668aca3869e9e8b82abbcbbf2a7d3bbcbe0c77890aa964c8045273daa5bcf399f7978d359e7ea9c3003d828c76ee587e973d3858df387bf20910f5789626ae086229d6b17161385f8d45f78afaa13b0bcdc174babbc774727b9c6abc1931cc26db28fa0b3eb44fd887a314c247600667aa70c20447bc5b4d6a5d0cbd589b814cdbf4ca81b8b"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xba2, 0x88000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x2000) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000180)) 1.867017221s ago: executing program 7 (id=2937): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="c8", 0x1}], 0x1) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0xf400, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4000c50) 1.549853594s ago: executing program 1 (id=2938): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0xa, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0xfffffffd}, 0x50) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd41, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0x7fffffff) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 1.413013526s ago: executing program 5 (id=2939): syz_clone(0x2a080b00, &(0x7f0000000340)="3a02a92d02e267f8d301fd569a66bc61b2b527095e27", 0x16, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000388a8190081003d0008"], 0x0) 1.33868612s ago: executing program 7 (id=2940): r0 = creat(0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x1000, 0x1, 0x1}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2404c805) write$rfkill(r2, &(0x7f0000000080)={0xfd, 0x0, 0x3, 0x1}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) 1.298423083s ago: executing program 5 (id=2941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x80, 0x6, {0xffffffffffffffff}, {0xee00}, 0xb0, 0x878e}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xb, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x1, 0x619, 0x6, 'snmp\x00', 'syz0\x00', {0x631}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@generic={0x3, 0x2}]}}}}}}}, 0x0) 1.019923292s ago: executing program 5 (id=2942): mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) bind$phonet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket(0xa, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) 989.539827ms ago: executing program 5 (id=2943): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) fgetxattr(r3, &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f00000000c0)=""/185, 0xb9) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="091800000000000000000100"], 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00"], 0x114}], 0x1}, 0x0) 910.902456ms ago: executing program 5 (id=2944): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 910.512174ms ago: executing program 5 (id=2945): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0xfe) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) open(&(0x7f0000000100)='./file0\x00', 0x2cc002, 0x22) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 376.248685ms ago: executing program 3 (id=2946): mount$9p_virtio(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x4, &(0x7f0000000b00)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x7ff}}, {@cache_readahead}, {@access_client}, {@privport}, {@noextend}, {@cache_readahead}, {@cache_loose}, {}, {@posixacl}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}]}}) syz_emit_ethernet(0x1ca, &(0x7f0000000000)={@empty, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x194, 0x2f, 0x0, @private2, @local, {[@fragment={0x1d, 0x0, 0x9, 0x0, 0x0, 0x17, 0x65}, @hopopts={0x87, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x7ff}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0x6, 0x1, [0x9, 0x1, 0x0, 0xcc8d, 0x6, 0x1, 0x4, 0xb2, 0x2]}}, @calipso={0x7, 0x38, {0xa908f88f14ad9ee9, 0xc, 0x81, 0xd, [0x6, 0x8, 0x3, 0x4c, 0x7, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}, @hopopts={0x1d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x1}]}, @fragment={0x16, 0x0, 0x5f, 0x0, 0x0, 0x1c, 0x66}, @routing={0x0, 0xe, 0x2, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, @private0, @dev={0xfe, 0x80, '\x00', 0x33}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0x2a}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "57e0"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x6ede, 0x4, 0x8]}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x27, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@map_fd={0x18, 0x2}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf, @jmp={0x5, 0x1, 0x2, 0x3, 0x6, 0xfffffffffffffff8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x533d8d1903566111}}}, &(0x7f0000000340)='GPL\x00', 0x6201, 0xde, &(0x7f0000000380)=""/222, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x5, 0x3, 0x354}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x1, 0x3, 0x6, 0x9}, {0x5, 0x5, 0xd, 0xa}, {0x1, 0x4, 0xf, 0x6}, {0x0, 0x2, 0x1, 0x5}, {0x3, 0x1, 0xc, 0xb}], 0x10, 0x5}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wg2\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0x1, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x2f, 0x39, 0x3, 0x0, 0x2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0x1, 0x6}}) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x400c084) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000000dc0)={0x730, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x3d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'defcontext'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-\\%,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'defcontext'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'trans=virtio,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "43600e6223b670866b9b1614a5b63898d2cfb3fe0e5ef4aba0c983dd8f9381a174890b5276693604a86473870f02bba17a2c2ba7a662453ae8c1991133f4e0cb9311c20d0998658fe87df2ec7ef779521e83646e207a20e7a223d5dc2dcf8c9931874453055a47d7d53d9f31b77f82a84cbb8ccb1c246e99e519d7587cdd8725e31243b1a79e06b01712a2"}, @ETHTOOL_A_BITSET_VALUE={0xf4, 0x4, "469a7f4ec622c3a23976a310f7a285eff43d47f0037450861b6156fb50f7acdb26c6eecedfed0fe450041ae9f4df945fb1c25536df3bed1de2bc9de86b18a4447b963d5bf5465b678371b627908d278a4923502d0f72d11a8f525d48650a4a6d5432588449910a07625af2ee324ffb77db6f54e81294f8a4a05a1720ac8af974d09b35bc8031889a22bd868491aba0b0d016a21432f3fa5d821b70ca05b27a3574b2e35e398f9a08fe460fd123ac05695348b6584ac7ec71ca164da53e1e15cda79af0af4dc51c51487b61c3de540669defdcbc2ecb8f9d478aa3d0eadf07d817f60ff7829922f3a83e14140b7ed787a"}, @ETHTOOL_A_BITSET_MASK={0x61, 0x5, "d114b0fd49db9399119ac013a093f683f6dc4658801e4ec0ea60477a295f123eb78a8689e6f06714899eb519d70b5f13670c75d368b0efe1671910ed9b89f62b8df1dd2b921ffb0b96adf0cb02b59a135d6d9b11b8df7591c5b01445a2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "5d5d2cd18fa517924b541f548e16c694080432abecad1474f04136cb554aa965e1cccb56198fdc7c89a4b071403d7e3a251e4df3c9bea6bb8c65649a7e6e0420d641970669cadc955272a22c139623c4bf4a87d7002f2d1ca33fb7d78fa11bff175e07024766869c9deb0bb5c7ca6276db0abda61fd431b7675c2017fb7627d51ddd0c29b69858c2575539d1904e65078cd1d769ae2e3a94ad0bf144fb5968a5a530b56460dc4593aec1313ebb5e2c225cce1c38f9856b74ce33d67897a0df6ec4b59aa480fae1db5f63b6b57c004610e3091f315336e9a4aca78be832982d23a6dc09c0f88f10a7c936a76fa620eea8f1a273a0bb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x264, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe4, 0x5, "2c32f4a150704b3af2ec5bf7d21198fb9264790b2a2aaaeaaa5b283602ab9107adbe39268d1c8ae481f9d06379423a24262a2d438df527a5f84d43266ea6783be46ce8b0ba07365e0478f618cfd0680b378f77962dea268b18f76e6c471a963f0a27f6b50cb73fc13f331110c73ed7a86e5375eee0b2c29c26f7ecc0f13e1cb1f5daddc81f3f830a84d9ba703011f8483738dbbddc14f001c3bced5c88002c4d4d10a9fc67705dd12cd4bd4d7d6afe15d6b3ef2ff7b4cd9d0abe6b9077865c79cf59859d7163a5fa81c571e38149c382706c86ede743d6aa12b732a8f7aa1dc9"}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "08b7baafbc91356924b12671c79183a682eaacc88574f2a7a7bf39acd9faa6f87ec7af534809b1ad43adeca1065d514051b25403daf780c83c26ed"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "bfef7548d0f10502ad4f95953e734864c551c138ab9fdd19a2619b56ab6ff8fd4c90cd2fc10704481efcf30c7c28c3bb7e7c7f27d0ad628335d0f1f9c33ac260a972bc93cca7264cf5bdfb64515e0490fd7e64fbb9d9885e20c7bcfc3983c65b08f846484c80f433d5a7cf4424414731402664da7893946cb50c01da1af45ed066b2e9eafcb4b12e3bbf4707df7af49d3f2fcd3e101047f32af573289b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'syz\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{@@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x730}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r0, 0x0, 0xf, 0xe2, &(0x7f0000000680)="ee81361c57dc4919693a61d8a95bcc", &(0x7f00000006c0)=""/226, 0x8, 0x0, 0xea, 0xfe, &(0x7f00000007c0)="5b57ebf6589a923cc417c40ae7697bc36cfb0312f0c2465158196841a36ae8ce8bcb0103d5684242bb00969786064d3b1289e14601b7469decd59420a1e6462373fd2992cd95c8e384a63b217caece239c0e11d104ff902dace98411e9cec5205265da40f6fe86f751d2081c92617cdc74a8a6b2308c130ee35a2092a9e9d2c1c8c13875e20b6c3731b7755bd310da9f4a99512432bfffbfa3f441d43310f1629abd6a3ade29b807bea1795311ab2d25992ac4f1ea88ff936c84c6f53f47c9acdbcd5816786f1e285c6232369d4eb1a5d1b7d0c2f143cc1736babc2f16ccaa9d46c425f0ff1a4d17ff9b", &(0x7f00000008c0)="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", 0x4, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=2947): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b1", 0xc7}], 0x1}, 0x0) ioperm(0x2, 0x1, 0x9) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0xfe44, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) listen(r3, 0xf) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/70, 0x46}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 709.550673][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 709.566229][ T43] usb 4-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.605018][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 709.969766][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 709.982070][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.996601][ T43] usb 4-1: Product: syz [ 710.008682][ T43] usb 4-1: Manufacturer: syz [ 710.026944][ T43] usb 4-1: SerialNumber: syz [ 710.153086][T13362] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1803'. [ 710.412653][ T43] usbhid 4-1:1.0: can't add hid device: -71 [ 710.418736][ T43] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 710.435490][ T43] usb 4-1: USB disconnect, device number 25 [ 712.983822][T13413] overlayfs: failed to clone upperpath [ 713.175849][T13420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1820'. [ 713.214876][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1818'. [ 713.238653][T13421] kvm: apic: phys broadcast and lowest prio [ 717.749060][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1834'. [ 717.975911][T13476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1837'. [ 718.160361][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 719.087063][T13489] binder: 13488:13489 ioctl c0306201 200000000640 returned -22 [ 719.152079][T13489] binder: 13488:13489 ioctl c04064aa 200000000240 returned -22 [ 719.881087][ T7269] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 720.136949][ T7269] usb 4-1: Using ep0 maxpacket: 32 [ 720.537434][ T30] audit: type=1326 audit(1752946845.731:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13506 comm="syz.1.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35758e9a9 code=0x7ffe0000 [ 721.970949][ T7269] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 721.979464][ T7269] usb 4-1: config 0 has no interface number 0 [ 721.990790][ T7269] usb 4-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 722.020587][ T7269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 722.029357][ T7269] usb 4-1: SerialNumber: syz [ 722.049604][ T7269] usb 4-1: config 0 descriptor?? [ 722.062361][ T7269] ftdi_sio 4-1:0.50: FTDI USB Serial Device converter detected [ 722.084274][ T7269] ftdi_sio ttyUSB0: unknown device type: 0xbf71 [ 722.128540][ T7269] usb 4-1: USB disconnect, device number 26 [ 722.138964][ T7269] ftdi_sio 4-1:0.50: device disconnected [ 723.839138][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1854'. [ 723.850324][T13527] kvm: apic: phys broadcast and lowest prio [ 725.532300][ T30] audit: type=1400 audit(1752946850.721:846): avc: denied { create } for pid=13550 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 726.450668][ T30] audit: type=1400 audit(1752946850.761:847): avc: denied { bind } for pid=13550 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 726.471662][ T30] audit: type=1400 audit(1752946850.761:848): avc: denied { accept } for pid=13550 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 728.989382][ T30] audit: type=1400 audit(1752946854.181:849): avc: denied { read } for pid=13586 comm="syz.3.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 730.893640][T13615] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1878'. [ 730.982172][ T30] audit: type=1400 audit(1752946856.181:850): avc: denied { read } for pid=13616 comm="syz.4.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 731.637640][T13635] tipc: Enabled bearer , priority 0 [ 731.658185][T13635] syzkaller0: entered promiscuous mode [ 731.664314][T13635] syzkaller0: entered allmulticast mode [ 731.675390][T13635] tipc: Resetting bearer [ 731.737081][T13635] tipc: Disabling bearer [ 733.179288][T13651] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1891'. [ 733.258321][T13653] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1892'. [ 733.316121][ T30] audit: type=1400 audit(1752946858.511:851): avc: denied { shutdown } for pid=13652 comm="syz.5.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 733.425135][T13655] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 735.620894][ T7269] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 735.770655][ T7269] usb 4-1: Using ep0 maxpacket: 32 [ 735.778762][ T7269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.796170][ T7269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.806501][ T7269] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 735.818712][ T7269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.842494][ T7269] usb 4-1: config 0 descriptor?? [ 736.321585][ T7269] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 736.533444][ T30] audit: type=1400 audit(1752946861.731:852): avc: denied { map } for pid=13679 comm="syz.3.1901" path="socket:[59210]" dev="sockfs" ino=59210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 737.135649][T13706] tipc: Enabled bearer , priority 0 [ 737.148247][T13708] fuse: Unknown parameter '/dev/virtual_nci' [ 737.156395][ T30] audit: type=1400 audit(1752946862.351:853): avc: denied { module_load } for pid=13707 comm="syz.4.1909" path="/sys/power/wakeup_count" dev="sysfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 737.164539][T13706] syzkaller0: entered promiscuous mode [ 737.186931][T13706] syzkaller0: entered allmulticast mode [ 737.196894][T13705] tipc: Resetting bearer [ 737.221945][T13705] tipc: Disabling bearer [ 738.377425][T13718] hub 6-0:1.0: USB hub found [ 738.382349][T13718] hub 6-0:1.0: 1 port detected [ 738.464916][ T5962] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 739.491782][ T5962] usb 4-1: device descriptor read/64, error -71 [ 739.840795][ T5962] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 739.938746][ T5962] usb 4-1: device reset changed ep0 maxpacket size! [ 740.043182][ T975] usb 4-1: USB disconnect, device number 27 [ 740.338092][T13736] lo speed is unknown, defaulting to 1000 [ 740.353244][ T975] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 740.532857][T13749] kvm: pic: non byte write [ 740.545533][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.567571][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.580826][T13746] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 740.589411][ T975] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 740.599912][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.618711][ T975] usb 4-1: config 0 descriptor?? [ 741.037988][ T975] usbhid 4-1:0.0: can't add hid device: -32 [ 741.044119][ T975] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 741.543961][T13762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.174885][ T7769] usb 4-1: USB disconnect, device number 28 [ 743.278957][T13789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13789 comm=syz.5.1932 [ 744.362528][T13803] netlink: 'syz.3.1936': attribute type 13 has an invalid length. [ 744.376052][T13803] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 744.492795][T13803] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 744.527340][T13803] gretap1: entered promiscuous mode [ 744.542981][T13803] gretap1: entered allmulticast mode [ 746.548104][T13841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.784539][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.795611][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.660576][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 747.804692][T13853] overlayfs: failed to resolve './file0': -2 [ 748.700663][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 749.740627][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.143331][T13891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.281940][T13893] lo speed is unknown, defaulting to 1000 [ 750.388344][T13893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.780604][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.899558][T13900] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 750.991983][T13900] Error validating options; rc = [-22] [ 751.023329][T13909] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1962'. [ 751.050884][T13909] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1962'. [ 751.260692][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 751.830679][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.110726][ T5962] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 752.370699][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 752.436043][ T5962] usb 4-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 752.466386][ T5962] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 6 [ 752.498283][T13926] tls_set_device_offload: netdev not found [ 752.498303][ T5962] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 752.498329][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.720989][ T5962] usb 4-1: config 0 descriptor?? [ 754.095344][T13949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.165743][ T30] audit: type=1400 audit(1752946879.351:854): avc: denied { ioctl } for pid=13943 comm="syz.5.1972" path="socket:[60747]" dev="sockfs" ino=60747 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 755.587536][ T30] audit: type=1400 audit(1752946879.831:855): avc: denied { search } for pid=13955 comm="syz.7.1975" name="/" dev="configfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 756.554499][T13972] binder: 13967:13972 ioctl 8933 2000000000c0 returned -22 [ 757.016698][ T30] audit: type=1400 audit(1752946882.211:856): avc: denied { name_connect } for pid=13970 comm="syz.1.1978" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 757.206626][ T975] usb 4-1: USB disconnect, device number 29 [ 757.744660][T13983] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1983'. [ 757.823266][T13991] PKCS7: Unknown OID: [5] (bad) [ 757.828136][T13991] PKCS7: Only support pkcs7_signedData type [ 757.872469][T13993] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1988'. [ 757.980705][ T5962] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 758.328224][T14008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 758.592051][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.603240][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.613050][ T5962] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 758.622260][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.633312][ T5962] usb 4-1: config 0 descriptor?? [ 758.967226][T14014] lo speed is unknown, defaulting to 1000 [ 759.261497][ T5962] usbhid 4-1:0.0: can't add hid device: -32 [ 759.292324][ T5962] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 759.617966][ T30] audit: type=1400 audit(1752946884.811:857): avc: denied { write } for pid=14026 comm="syz.7.1998" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 759.641815][ T30] audit: type=1400 audit(1752946884.811:858): avc: denied { bind } for pid=14026 comm="syz.7.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 759.802731][T14030] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 760.105204][T14034] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2001'. [ 760.272667][ T30] audit: type=1400 audit(1752946885.471:859): avc: denied { read } for pid=14041 comm="syz.7.2005" path="socket:[61592]" dev="sockfs" ino=61592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 760.440757][ T30] audit: type=1400 audit(1752946885.631:860): avc: denied { create } for pid=14050 comm="syz.5.2007" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 760.743973][ T30] audit: type=1400 audit(1752946885.911:861): avc: denied { mounton } for pid=14050 comm="syz.5.2007" path="/258/file0" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 761.114621][ T7269] usb 4-1: USB disconnect, device number 30 [ 761.279236][ T30] audit: type=1400 audit(1752946886.471:862): avc: denied { write } for pid=14055 comm="syz.3.2009" name="file0" dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 761.656193][ T30] audit: type=1400 audit(1752946886.851:863): avc: denied { connect } for pid=14055 comm="syz.3.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 761.941499][T14061] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 762.111573][T14062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3095185786 (6190371572 ns) > initial count (5484635560 ns). Using initial count to start timer. [ 762.194096][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2011'. [ 762.214814][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2011'. [ 762.248698][T14067] tmpfs: Bad value for 'size' [ 762.250947][ T7269] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 762.456903][ T7269] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 762.466995][ T7269] usb 4-1: config 0 has no interface number 0 [ 762.475644][ T7269] usb 4-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 762.488993][ T7269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.497468][ T7269] usb 4-1: Product: syz [ 762.503487][ T7269] usb 4-1: Manufacturer: syz [ 762.508198][ T7269] usb 4-1: SerialNumber: syz [ 762.519637][ T7269] usb 4-1: config 0 descriptor?? [ 762.536709][ T7269] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 763.032271][T14069] overlayfs: statfs failed on './file0' [ 763.062854][ T7269] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 763.082420][ T7269] gspca_pac7302 4-1:0.101: probe with driver gspca_pac7302 failed with error -110 [ 763.106311][ T7269] usb 4-1: USB disconnect, device number 31 [ 763.626240][ T30] audit: type=1400 audit(1752946888.821:864): avc: denied { mount } for pid=14084 comm="syz.7.2018" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 763.731846][ T30] audit: type=1400 audit(1752946888.931:865): avc: denied { mounton } for pid=14084 comm="syz.7.2018" path="/258/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 764.064366][T14085] overlayfs: missing 'lowerdir' [ 764.089482][ T30] audit: type=1400 audit(1752946889.281:866): avc: denied { unmount } for pid=9481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 764.480773][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 764.676068][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.695904][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.707933][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 764.717483][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.735158][ T10] usb 4-1: config 0 descriptor?? [ 765.485665][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 765.492705][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 767.998026][ T5962] usb 4-1: USB disconnect, device number 32 [ 768.140154][T14127] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2029'. [ 773.005371][T14210] smc: net device bond0 applied user defined pnetid SYZ2 [ 773.012848][T14210] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 773.827667][T14219] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2056'. [ 773.913526][T14226] team0: Device gtp0 is of different type [ 773.943836][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2060'. [ 776.430161][T14241] syzkaller0: entered promiscuous mode [ 776.437943][T14241] syzkaller0: entered allmulticast mode [ 777.095889][T14257] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2070'. [ 777.289428][T14264] netlink: 'syz.5.2073': attribute type 2 has an invalid length. [ 778.824974][T14284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2078'. [ 779.026756][T14286] lo speed is unknown, defaulting to 1000 [ 780.162964][T14304] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2085'. [ 780.268149][T14306] fuse: Unknown parameter './file0' [ 780.719470][ T30] audit: type=1400 audit(1752946905.911:867): avc: denied { write } for pid=14311 comm="syz.5.2087" path="socket:[62190]" dev="sockfs" ino=62190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 781.550751][T14324] netlink: 'syz.1.2091': attribute type 4 has an invalid length. [ 782.540864][T14334] comedi comedi0: s526: I/O port conflict (0x30,64) [ 783.724293][ T30] audit: type=1400 audit(1752946908.151:868): avc: denied { watch } for pid=14336 comm="syz.4.2095" path="/232/file0" dev="rpc_pipefs" ino=62315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 786.282290][ T30] audit: type=1400 audit(1752946911.471:869): avc: denied { ioctl } for pid=14365 comm="syz.1.2104" path="/258/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 786.481742][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 787.084107][T14378] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2108'. [ 787.361838][T14383] hub 6-0:1.0: USB hub found [ 787.370580][T14383] hub 6-0:1.0: 1 port detected [ 789.328667][T13135] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 789.874538][ T30] audit: type=1400 audit(1752946915.071:870): avc: denied { write } for pid=14418 comm="syz.4.2118" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 789.929428][ T30] audit: type=1400 audit(1752946915.071:871): avc: denied { open } for pid=14418 comm="syz.4.2118" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 789.964480][T14419] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2118'. [ 790.832047][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 790.873482][T14431] kvm: apic: phys broadcast and lowest prio [ 792.491212][T14457] netlink: 'syz.3.2127': attribute type 4 has an invalid length. [ 792.499078][T14457] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2127'. [ 792.534925][T14457] : renamed from bond0 (while UP) [ 792.872767][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2132'. [ 792.930266][T14476] tmpfs: Bad value for 'mpol' [ 793.425181][T14480] random: crng reseeded on system resumption [ 793.632141][T14487] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 793.638603][T14487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 793.644730][T14487] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 793.711976][T14487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 795.027119][T14513] netlink: 'syz.1.2142': attribute type 4 has an invalid length. [ 795.035165][T14513] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2142'. [ 795.090540][T14513] : renamed from bond0 (while UP) [ 795.733137][T13135] Bluetooth: hci4: command 0x0406 tx timeout [ 795.740587][T13135] Bluetooth: hci2: command 0x0c1a tx timeout [ 795.746680][T13135] Bluetooth: hci3: command 0x0406 tx timeout [ 797.236845][T14537] can0: slcan on ptm0. [ 797.768114][T14537] can0 (unregistered): slcan off ptm0. [ 797.871566][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 798.302798][T14560] netlink: 'syz.4.2155': attribute type 4 has an invalid length. [ 798.311433][T14560] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2155'. [ 798.317300][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2158'. [ 798.327648][T14560] : renamed from bond0 (while UP) [ 798.501445][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2158'. [ 798.510584][ T30] audit: type=1400 audit(1752946923.691:872): avc: denied { listen } for pid=14555 comm="syz.1.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 798.638383][T14559] erspan0: entered promiscuous mode [ 798.663663][T14559] batadv_slave_1: entered promiscuous mode [ 799.142764][T14572] overlayfs: failed to clone upperpath [ 802.523161][T14618] block device autoloading is deprecated and will be removed. [ 802.999572][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 803.021854][ T30] audit: type=1400 audit(1752946928.211:873): avc: denied { create } for pid=14622 comm="syz.5.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 803.145682][ T30] audit: type=1400 audit(1752946928.211:874): avc: denied { getopt } for pid=14622 comm="syz.5.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 803.237309][ T30] audit: type=1400 audit(1752946928.431:875): avc: denied { getopt } for pid=14629 comm="syz.3.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 803.258453][ T30] audit: type=1400 audit(1752946928.451:876): avc: denied { listen } for pid=14629 comm="syz.3.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 803.278110][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.367268][ T30] audit: type=1400 audit(1752946928.501:877): avc: denied { setopt } for pid=14629 comm="syz.3.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 803.561004][ T7269] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 803.746173][ T7269] usb 4-1: device descriptor read/64, error -71 [ 804.168209][ T7269] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 804.400899][ T7269] usb 4-1: device descriptor read/64, error -71 [ 804.511584][ T7269] usb usb4-port1: attempt power cycle [ 804.671507][T14648] No control pipe specified [ 804.900559][ T7269] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 804.931071][ T7269] usb 4-1: device descriptor read/8, error -71 [ 805.189568][ T7269] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 805.270683][ T7269] usb 4-1: device descriptor read/8, error -71 [ 805.389592][ T7269] usb usb4-port1: unable to enumerate USB device [ 805.977843][T14671] fuse: Bad value for 'fd' [ 806.160386][ T30] audit: type=1400 audit(1752946931.351:878): avc: denied { remount } for pid=14668 comm="syz.4.2192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 806.192141][T14674] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 806.336159][T14687] ptrace attach of "./syz-executor exec"[10480] was attempted by ""[14687] [ 806.625400][T14696] overlayfs: failed to clone upperpath [ 807.153621][ T5962] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 807.179939][ T5962] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 807.236625][T14701] [U]  [ 807.388526][ T30] audit: type=1400 audit(1752946932.571:879): avc: denied { create } for pid=14704 comm="syz.7.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 807.506070][ T30] audit: type=1400 audit(1752946932.581:880): avc: denied { ioctl } for pid=14704 comm="syz.7.2204" path="socket:[64155]" dev="sockfs" ino=64155 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 808.778343][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.784816][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.834181][ T30] audit: type=1400 audit(1752946932.581:881): avc: denied { getopt } for pid=14704 comm="syz.7.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 809.062441][ T5843] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 809.417959][T14736] siw: device registration error -23 [ 809.432515][T14733] tipc: Enabled bearer , priority 10 [ 809.840298][T14741] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2214'. [ 810.164473][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 810.220133][ T30] audit: type=1400 audit(1752946935.411:882): avc: denied { listen } for pid=14754 comm="syz.5.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 810.550809][ T5962] tipc: Node number set to 3595846843 [ 810.901911][T14769] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2222'. [ 811.062652][T14772] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2224'. [ 811.170814][T14775] netlink: 'syz.7.2226': attribute type 5 has an invalid length. [ 811.178605][T14775] netlink: 'syz.7.2226': attribute type 7 has an invalid length. [ 812.067179][T14784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2228'. [ 812.297815][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'. [ 812.369977][T14793] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 812.379170][T14793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 812.726928][T14795] FAULT_INJECTION: forcing a failure. [ 812.726928][T14795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.740321][T14795] CPU: 0 UID: 0 PID: 14795 Comm: syz.4.2231 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 812.740347][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 812.740356][T14795] Call Trace: [ 812.740362][T14795] [ 812.740368][T14795] dump_stack_lvl+0x16c/0x1f0 [ 812.740400][T14795] should_fail_ex+0x512/0x640 [ 812.740430][T14795] _copy_to_user+0x32/0xd0 [ 812.740451][T14795] simple_read_from_buffer+0xcb/0x170 [ 812.740481][T14795] proc_fail_nth_read+0x197/0x270 [ 812.740508][T14795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.740535][T14795] ? rw_verify_area+0xcf/0x680 [ 812.740558][T14795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.740583][T14795] vfs_read+0x1e1/0xc60 [ 812.740612][T14795] ? __pfx___mutex_lock+0x10/0x10 [ 812.740630][T14795] ? __pfx_vfs_read+0x10/0x10 [ 812.740661][T14795] ? __fget_files+0x20e/0x3c0 [ 812.740685][T14795] ksys_read+0x12a/0x250 [ 812.740709][T14795] ? __pfx_ksys_read+0x10/0x10 [ 812.740742][T14795] do_syscall_64+0xcd/0x4c0 [ 812.740762][T14795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.740780][T14795] RIP: 0033:0x7f903cb8d3bc [ 812.740796][T14795] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 812.740814][T14795] RSP: 002b:00007f903a9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 812.740833][T14795] RAX: ffffffffffffffda RBX: 00007f903cdb5fa0 RCX: 00007f903cb8d3bc [ 812.740845][T14795] RDX: 000000000000000f RSI: 00007f903a9f60a0 RDI: 0000000000000004 [ 812.740856][T14795] RBP: 00007f903a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.740867][T14795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.740878][T14795] R13: 0000000000000000 R14: 00007f903cdb5fa0 R15: 00007ffda3a44d28 [ 812.740903][T14795] [ 815.052070][T14826] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 815.070669][T14826] audit: out of memory in audit_log_start [ 815.244685][T14832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.354055][ T30] audit: type=1400 audit(1752946940.541:883): avc: denied { connect } for pid=14827 comm="syz.1.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 815.558041][ T30] audit: type=1400 audit(1752946940.551:884): avc: denied { write } for pid=14827 comm="syz.1.2242" laddr=fe80::11 lport=4 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 816.599295][T14846] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2246'. [ 816.643525][T14848] netlink: 'syz.1.2248': attribute type 21 has an invalid length. [ 816.661684][T14848] netlink: 'syz.1.2248': attribute type 1 has an invalid length. [ 816.670148][T14848] netlink: 15978 bytes leftover after parsing attributes in process `syz.1.2248'. [ 819.199369][T14867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14867 comm=syz.1.2254 [ 819.539708][ T5843] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 819.547682][ T30] audit: type=1400 audit(1752946944.741:885): avc: denied { audit_read } for pid=14868 comm="syz.5.2255" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 820.606252][T14884] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2260'. [ 820.712464][T14887] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.721621][T14887] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.730307][T14887] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.739176][T14887] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.977557][T14910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2268'. [ 822.028403][T14912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14912 comm=syz.4.2268 [ 822.210282][T14908] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 822.582381][T14926] bridge0: entered promiscuous mode [ 823.153429][T14926] macvlan2: entered promiscuous mode [ 823.356329][T14936] snd_dummy snd_dummy.0: control 3:0:4:syz0:0 is already present [ 824.145013][ T30] audit: type=1400 audit(1752946949.291:886): avc: denied { getopt } for pid=14944 comm="syz.7.2275" lport=39907 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 824.192710][T14943] lo speed is unknown, defaulting to 1000 [ 825.348890][T14967] 9pnet_fd: Insufficient options for proto=fd [ 825.597162][T14974] netlink: 'syz.4.2284': attribute type 4 has an invalid length. [ 825.605843][T14974] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2284'. [ 828.180793][ T30] audit: type=1326 audit(1752946953.271:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 828.472642][ T30] audit: type=1326 audit(1752946953.271:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 828.556186][ T30] audit: type=1326 audit(1752946953.271:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 828.643414][ T30] audit: type=1326 audit(1752946953.271:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 828.982482][ T30] audit: type=1326 audit(1752946953.271:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 829.020649][ T30] audit: type=1326 audit(1752946953.271:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 829.061737][ T30] audit: type=1326 audit(1752946953.271:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 829.085123][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.136414][ T30] audit: type=1326 audit(1752946953.271:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 829.315879][ T30] audit: type=1326 audit(1752946953.271:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 829.339892][ T30] audit: type=1326 audit(1752946953.271:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 829.363348][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.763339][ T30] audit: type=1326 audit(1752946953.271:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 830.061470][ T30] audit: type=1326 audit(1752946953.271:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 830.084880][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.240551][ T30] audit: type=1326 audit(1752946953.271:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 830.263979][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.368724][ T30] audit: type=1326 audit(1752946953.271:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 830.402384][T15038] FAULT_INJECTION: forcing a failure. [ 830.402384][T15038] name failslab, interval 1, probability 0, space 0, times 0 [ 830.445585][ T30] audit: type=1326 audit(1752946953.271:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 830.445610][T15038] CPU: 0 UID: 0 PID: 15038 Comm: syz.7.2303 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 830.445632][T15038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 830.445642][T15038] Call Trace: [ 830.445647][T15038] [ 830.445653][T15038] dump_stack_lvl+0x16c/0x1f0 [ 830.445685][T15038] should_fail_ex+0x512/0x640 [ 830.445710][T15038] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 830.445738][T15038] should_failslab+0xc2/0x120 [ 830.445754][T15038] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 830.445778][T15038] ? __alloc_skb+0x2b2/0x380 [ 830.445806][T15038] __alloc_skb+0x2b2/0x380 [ 830.445829][T15038] ? __pfx___alloc_skb+0x10/0x10 [ 830.445851][T15038] ? percpu_counter_add_batch+0xb8/0x1f0 [ 830.445876][T15038] ? __lock_acquire+0x622/0x1c90 [ 830.445895][T15038] __ip_append_data+0x3128/0x4240 [ 830.445920][T15038] ? __pfx_raw_getfrag+0x10/0x10 [ 830.445950][T15038] ? ip_dst_mtu_maybe_forward.constprop.0+0x311/0x6e0 [ 830.445974][T15038] ? __pfx___ip_append_data+0x10/0x10 [ 830.445998][T15038] ip_append_data+0x10f/0x1a0 [ 830.446020][T15038] ? __pfx_raw_getfrag+0x10/0x10 [ 830.446043][T15038] raw_sendmsg+0xf01/0x3820 [ 830.446077][T15038] ? __pfx_raw_sendmsg+0x10/0x10 [ 830.446105][T15038] ? avc_has_perm+0x11a/0x1c0 [ 830.446135][T15038] ? sock_has_perm+0x259/0x2f0 [ 830.446171][T15038] ? __pfx_raw_sendmsg+0x10/0x10 [ 830.446195][T15038] inet_sendmsg+0x11c/0x140 [ 830.446225][T15038] __sys_sendto+0x43c/0x520 [ 830.446248][T15038] ? __pfx___sys_sendto+0x10/0x10 [ 830.446290][T15038] ? ksys_write+0x1ac/0x250 [ 830.446313][T15038] ? __pfx_ksys_write+0x10/0x10 [ 830.446338][T15038] __x64_sys_sendto+0xe0/0x1c0 [ 830.446359][T15038] ? do_syscall_64+0x91/0x4c0 [ 830.446375][T15038] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.446398][T15038] do_syscall_64+0xcd/0x4c0 [ 830.446415][T15038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.446431][T15038] RIP: 0033:0x7f2c3d98e9a9 [ 830.446445][T15038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.446460][T15038] RSP: 002b:00007f2c3e7de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 830.446477][T15038] RAX: ffffffffffffffda RBX: 00007f2c3dbb5fa0 RCX: 00007f2c3d98e9a9 [ 830.446488][T15038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 830.446497][T15038] RBP: 00007f2c3e7de090 R08: 0000200000000280 R09: 0000000000000010 [ 830.446508][T15038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.446517][T15038] R13: 0000000000000000 R14: 00007f2c3dbb5fa0 R15: 00007fff2c95f278 [ 830.446539][T15038] [ 830.468794][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.850887][ T30] audit: type=1326 audit(1752946953.361:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c3d985967 code=0x7ffc0000 [ 830.880197][ T30] audit: type=1326 audit(1752946953.361:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c3d92ab89 code=0x7ffc0000 [ 830.903729][ T30] audit: type=1326 audit(1752946953.361:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3d98e9a9 code=0x7ffc0000 [ 830.906865][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2305'. [ 830.988941][T15043] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2305'. [ 834.664171][T15095] netlink: 'syz.3.2321': attribute type 4 has an invalid length. [ 834.673691][T15095] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2321'. [ 834.976404][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 835.065577][T15116] kernel read not supported for file /z¿ (pid: 15116 comm: syz.3.2324) [ 835.077862][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 835.077879][ T30] audit: type=1800 audit(1752946960.271:910): pid=15116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2324" name=7ABF17 dev="mqueue" ino=65860 res=0 errno=0 [ 835.591535][T15102] tmpfs: Unknown parameter 'usrquota0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.591535][T15102] 0 [ 835.775949][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.748151][T15147] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 837.757161][T15147] syzkaller0: entered allmulticast mode [ 837.966764][T15150] netlink: 'syz.7.2335': attribute type 4 has an invalid length. [ 837.974863][T15150] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2335'. [ 838.017748][T15150] : renamed from bond0 (while UP) [ 838.187480][T15146] syzkaller0: left allmulticast mode [ 838.415559][T15160] netlink: 'syz.3.2339': attribute type 2 has an invalid length. [ 838.423599][T15160] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2339'. [ 838.824672][ T975] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 838.992964][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.011498][ T975] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 839.031605][ T975] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 839.052301][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.072638][ T975] usb 4-1: config 0 descriptor?? [ 840.885074][ T7769] usb 4-1: USB disconnect, device number 37 [ 843.416307][T15196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 844.620519][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 845.386873][ T7769] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 845.531807][ T7769] usb 4-1: device descriptor read/64, error -71 [ 845.656981][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 845.665970][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 845.780841][ T7769] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 845.930730][ T7769] usb 4-1: device descriptor read/64, error -71 [ 846.050878][ T7769] usb usb4-port1: attempt power cycle [ 846.661526][ T7769] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 846.714617][ T7769] usb 4-1: device descriptor read/8, error -71 [ 846.984427][ T7769] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 847.080239][ T7769] usb 4-1: device descriptor read/8, error -71 [ 847.191495][ T7769] usb usb4-port1: unable to enumerate USB device [ 847.985067][ T30] audit: type=1400 audit(1752946973.181:911): avc: denied { mount } for pid=15248 comm="syz.1.2366" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 848.140201][ T30] audit: type=1400 audit(1752946973.331:912): avc: denied { unmount } for pid=9288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 848.365709][T15266] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2371'. [ 848.987086][T15272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.003311][T15272] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 849.121546][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 849.189972][ T6838] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 850.573179][ T30] audit: type=1400 audit(1752946975.741:913): avc: denied { remount } for pid=15305 comm="syz.3.2383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 851.221246][T15312] FAULT_INJECTION: forcing a failure. [ 851.221246][T15312] name failslab, interval 1, probability 0, space 0, times 0 [ 851.312486][T15312] CPU: 1 UID: 0 PID: 15312 Comm: syz.4.2385 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 851.312519][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 851.312532][T15312] Call Trace: [ 851.312539][T15312] [ 851.312547][T15312] dump_stack_lvl+0x16c/0x1f0 [ 851.312584][T15312] should_fail_ex+0x512/0x640 [ 851.312611][T15312] ? fs_reclaim_acquire+0xae/0x150 [ 851.312636][T15312] ? tomoyo_encode2+0x100/0x3e0 [ 851.312653][T15312] should_failslab+0xc2/0x120 [ 851.312672][T15312] __kmalloc_noprof+0xd2/0x510 [ 851.312700][T15312] ? d_absolute_path+0x136/0x1a0 [ 851.312728][T15312] tomoyo_encode2+0x100/0x3e0 [ 851.312750][T15312] tomoyo_encode+0x29/0x50 [ 851.312767][T15312] tomoyo_realpath_from_path+0x18f/0x6e0 [ 851.312802][T15312] tomoyo_path_number_perm+0x245/0x580 [ 851.312828][T15312] ? tomoyo_path_number_perm+0x237/0x580 [ 851.312856][T15312] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 851.312884][T15312] ? find_held_lock+0x2b/0x80 [ 851.312932][T15312] ? find_held_lock+0x2b/0x80 [ 851.312954][T15312] ? hook_file_ioctl_common+0x145/0x410 [ 851.312982][T15312] ? __fget_files+0x20e/0x3c0 [ 851.313004][T15312] security_file_ioctl+0x9b/0x240 [ 851.313035][T15312] __x64_sys_ioctl+0xb7/0x210 [ 851.313062][T15312] do_syscall_64+0xcd/0x4c0 [ 851.313082][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.313100][T15312] RIP: 0033:0x7f903cb8e9a9 [ 851.313116][T15312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.313133][T15312] RSP: 002b:00007f903a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.313152][T15312] RAX: ffffffffffffffda RBX: 00007f903cdb5fa0 RCX: 00007f903cb8e9a9 [ 851.313164][T15312] RDX: 0000000000000000 RSI: 0000000000009205 RDI: 0000000000000003 [ 851.313175][T15312] RBP: 00007f903a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 851.313186][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.313196][T15312] R13: 0000000000000000 R14: 00007f903cdb5fa0 R15: 00007ffda3a44d28 [ 851.313221][T15312] [ 851.561414][T15312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 851.703998][T15314] Cannot find set identified by id 0 to match [ 852.043827][T15323] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 853.024848][T15336] 9pnet_fd: Insufficient options for proto=fd [ 853.187987][ T30] audit: type=1400 audit(1752946978.381:914): avc: denied { write } for pid=15333 comm="syz.1.2391" lport=43802 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 853.235459][ T30] audit: type=1400 audit(1752946978.421:915): avc: denied { setopt } for pid=15333 comm="syz.1.2391" lport=43802 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 853.262160][ T5843] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 853.489902][T15348] netlink: 'syz.3.2395': attribute type 8 has an invalid length. [ 853.500694][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 853.740890][T15351] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2396'. [ 853.770629][T15351] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 853.789289][T15351] 0ªX¹¦D: entered allmulticast mode [ 853.794839][T15351] veth0_macvtap: entered allmulticast mode [ 853.811460][T15351] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 853.836061][T15352] pim6reg: entered allmulticast mode [ 853.881490][T15356] FAULT_INJECTION: forcing a failure. [ 853.881490][T15356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.917235][T15356] CPU: 1 UID: 0 PID: 15356 Comm: syz.1.2398 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 853.917265][T15356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 853.917276][T15356] Call Trace: [ 853.917283][T15356] [ 853.917291][T15356] dump_stack_lvl+0x16c/0x1f0 [ 853.917322][T15356] should_fail_ex+0x512/0x640 [ 853.917350][T15356] _copy_from_iter+0x29f/0x16f0 [ 853.917369][T15356] ? __alloc_skb+0x200/0x380 [ 853.917395][T15356] ? __pfx__copy_from_iter+0x10/0x10 [ 853.917413][T15356] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 853.917438][T15356] netlink_sendmsg+0x829/0xdd0 [ 853.917460][T15356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.917486][T15356] ____sys_sendmsg+0xa98/0xc70 [ 853.917506][T15356] ? copy_msghdr_from_user+0x10a/0x160 [ 853.917532][T15356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.917558][T15356] ? __pfx__kstrtoull+0x10/0x10 [ 853.917586][T15356] ___sys_sendmsg+0x134/0x1d0 [ 853.917614][T15356] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.917653][T15356] ? find_held_lock+0x2b/0x80 [ 853.917692][T15356] __sys_sendmmsg+0x200/0x420 [ 853.917711][T15356] ? __pfx___sys_sendmmsg+0x10/0x10 [ 853.917748][T15356] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 853.917776][T15356] ? fput+0x70/0xf0 [ 853.917796][T15356] ? ksys_write+0x1ac/0x250 [ 853.917821][T15356] ? __pfx_ksys_write+0x10/0x10 [ 853.917850][T15356] __x64_sys_sendmmsg+0x9c/0x100 [ 853.917865][T15356] ? lockdep_hardirqs_on+0x7c/0x110 [ 853.917892][T15356] do_syscall_64+0xcd/0x4c0 [ 853.917911][T15356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.917929][T15356] RIP: 0033:0x7ff35758e9a9 [ 853.917945][T15356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.917962][T15356] RSP: 002b:00007ff358418038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 853.917982][T15356] RAX: ffffffffffffffda RBX: 00007ff3577b5fa0 RCX: 00007ff35758e9a9 [ 853.917994][T15356] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 853.918006][T15356] RBP: 00007ff358418090 R08: 0000000000000000 R09: 0000000000000000 [ 853.918017][T15356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.918028][T15356] R13: 0000000000000000 R14: 00007ff3577b5fa0 R15: 00007ffea1f673d8 [ 853.918052][T15356] [ 854.208169][T15364] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 854.339344][T15368] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2400'. [ 854.349115][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 854.385828][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 854.705941][T15383] netlink: 'syz.3.2405': attribute type 4 has an invalid length. [ 854.713825][T15383] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2405'. [ 854.960612][ T30] audit: type=1400 audit(1752946980.121:916): avc: denied { mounton } for pid=15384 comm="syz.5.2408" path="/file0" dev="rootfs" ino=66720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 855.069969][T15387] netlink: 'syz.5.2409': attribute type 4 has an invalid length. [ 855.077912][T15387] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2409'. [ 855.089562][T15387] : renamed from bond0 (while UP) [ 857.066677][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2419'. [ 857.785995][T15397] lo speed is unknown, defaulting to 1000 [ 857.943539][T15441] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2425'. [ 858.238642][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 859.368692][T15464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.924699][ T30] audit: type=1400 audit(1752946986.111:917): avc: denied { unmount } for pid=9592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 861.218595][T15477] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2436'. [ 862.524543][T15504] netlink: 'syz.1.2445': attribute type 2 has an invalid length. [ 862.620718][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 862.809287][T15504] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2445'. [ 862.847689][T15507] : entered promiscuous mode [ 862.886451][T15509] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 864.094822][T15518] netlink: 'syz.1.2449': attribute type 4 has an invalid length. [ 864.103387][T15518] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2449'. [ 864.970356][T15526] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2453'. [ 865.548531][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 865.657876][T15542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.610682][T15558] veth1_macvtap: left promiscuous mode [ 866.616223][T15558] macsec0: entered promiscuous mode [ 866.622121][T15558] macsec0: entered allmulticast mode [ 866.646354][T15558] macsec0: left allmulticast mode [ 867.255489][ T7769] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 867.632060][ T7769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.662989][ T7769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.647057][ T7769] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 868.674568][ T7769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.969959][ T7769] usb 4-1: config 0 descriptor?? [ 869.410827][ T7769] usbhid 4-1:0.0: can't add hid device: -71 [ 869.420712][ T7769] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 869.574015][ T7769] usb 4-1: USB disconnect, device number 42 [ 869.664300][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.671157][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.746471][ T30] audit: type=1400 audit(1752946994.941:918): avc: denied { accept } for pid=15593 comm="syz.4.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 873.351174][ T7769] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 873.556129][ T7769] usb 4-1: config 201 has an invalid descriptor of length 128, skipping remainder of the config [ 873.624729][ T7769] usb 4-1: config 201 has 0 interfaces, different from the descriptor's value: 1 [ 873.667076][ T7769] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 873.676799][ T7769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.839855][ T7769] usb 4-1: Product: syz [ 873.845120][ T7769] usb 4-1: Manufacturer: syz [ 873.849842][ T7769] usb 4-1: SerialNumber: syz [ 876.037606][ T7769] usb 4-1: USB disconnect, device number 43 [ 876.560592][ T7769] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 877.091844][ T7769] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.102355][ T7769] usb 4-1: config 0 has no interfaces? [ 877.109714][ T7769] usb 4-1: New USB device found, idVendor=494f, idProduct=7e69, bcdDevice=51.78 [ 877.120079][ T7769] usb 4-1: New USB device strings: Mfr=123, Product=174, SerialNumber=30 [ 877.135114][ T7769] usb 4-1: Product: syz [ 877.140665][ T7769] usb 4-1: Manufacturer: syz [ 877.145283][ T7769] usb 4-1: SerialNumber: syz [ 877.185048][T15691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15691 comm=syz.1.2497 [ 877.361251][ T7769] usb 4-1: config 0 descriptor?? [ 877.534722][T15691] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15691 comm=syz.1.2497 [ 877.976044][T15709] syzkaller0: entered promiscuous mode [ 878.005192][T15709] syzkaller0: entered allmulticast mode [ 879.436980][ T10] usb 4-1: USB disconnect, device number 44 [ 879.451741][T15736] 9pnet_virtio: no channels available for device 127.0.0.1 [ 880.550575][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 880.756164][T15757] netlink: 'syz.4.2522': attribute type 4 has an invalid length. [ 880.764103][T15757] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2522'. [ 881.584694][T15770] overlayfs: failed to clone upperpath [ 882.721224][T15777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15777 comm=syz.4.2528 [ 882.891773][T15779] netlink: 'syz.3.2527': attribute type 4 has an invalid length. [ 882.901409][T15779] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2527'. [ 883.790684][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 883.940861][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 883.964628][ T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 883.995294][ T10] usb 4-1: New USB device found, idVendor=0d46, idProduct=9878, bcdDevice=82.92 [ 884.014477][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.024637][ T10] usb 4-1: Product: syz [ 884.030306][ T10] usb 4-1: Manufacturer: syz [ 884.217420][ T10] usb 4-1: SerialNumber: syz [ 884.812695][ T5962] usb 4-1: USB disconnect, device number 45 [ 884.926764][T15813] syzkaller0: entered promiscuous mode [ 884.933134][T15813] syzkaller0: entered allmulticast mode [ 885.849013][ T30] audit: type=1400 audit(1752947011.011:919): avc: denied { mount } for pid=15821 comm="syz.4.2541" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 886.382723][T15830] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 887.983628][ T30] audit: type=1400 audit(1752947013.181:920): avc: denied { write } for pid=15860 comm="syz.1.2553" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 889.109965][T15879] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 889.202822][ T975] IPVS: starting estimator thread 0... [ 889.320777][T15881] IPVS: using max 41 ests per chain, 98400 per kthread [ 890.364869][T15893] 9pnet_fd: Insufficient options for proto=fd [ 890.433940][T15892] lo speed is unknown, defaulting to 1000 [ 890.439706][T15892] lo speed is unknown, defaulting to 1000 [ 890.445926][T15892] lo speed is unknown, defaulting to 1000 [ 890.458315][T15892] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 890.508476][T15892] lo speed is unknown, defaulting to 1000 [ 890.515069][T15892] lo speed is unknown, defaulting to 1000 [ 890.521556][T15892] lo speed is unknown, defaulting to 1000 [ 890.528047][T15892] lo speed is unknown, defaulting to 1000 [ 890.534636][T15892] lo speed is unknown, defaulting to 1000 [ 890.562597][ T30] audit: type=1400 audit(1752947015.431:921): avc: denied { append } for pid=15888 comm="syz.3.2561" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 890.728584][T15897] FAULT_INJECTION: forcing a failure. [ 890.728584][T15897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.754854][T15897] CPU: 0 UID: 0 PID: 15897 Comm: syz.3.2563 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 890.754884][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 890.754894][T15897] Call Trace: [ 890.754901][T15897] [ 890.754908][T15897] dump_stack_lvl+0x16c/0x1f0 [ 890.754943][T15897] should_fail_ex+0x512/0x640 [ 890.754975][T15897] _copy_to_user+0x32/0xd0 [ 890.754998][T15897] drm_ioctl+0x5eb/0xc30 [ 890.755020][T15897] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 890.755051][T15897] ? __pfx_drm_ioctl+0x10/0x10 [ 890.755079][T15897] ? selinux_file_ioctl+0x180/0x270 [ 890.755106][T15897] ? selinux_file_ioctl+0xb4/0x270 [ 890.755136][T15897] ? __pfx_drm_ioctl+0x10/0x10 [ 890.755154][T15897] __x64_sys_ioctl+0x18e/0x210 [ 890.755182][T15897] do_syscall_64+0xcd/0x4c0 [ 890.755202][T15897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.755221][T15897] RIP: 0033:0x7ff06bd8e9a9 [ 890.755236][T15897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.755253][T15897] RSP: 002b:00007ff06ccd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.755271][T15897] RAX: ffffffffffffffda RBX: 00007ff06bfb5fa0 RCX: 00007ff06bd8e9a9 [ 890.755282][T15897] RDX: 0000200000000340 RSI: 00000000c06864a2 RDI: 0000000000000004 [ 890.755292][T15897] RBP: 00007ff06ccd3090 R08: 0000000000000000 R09: 0000000000000000 [ 890.755303][T15897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.755313][T15897] R13: 0000000000000000 R14: 00007ff06bfb5fa0 R15: 00007ffd2d12b738 [ 890.755338][T15897] [ 890.916868][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.254315][T15925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2571'. [ 892.363305][T15929] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2572'. [ 892.629954][T15935] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 892.642918][ T30] audit: type=1400 audit(1752947017.821:922): avc: denied { mounton } for pid=15934 comm="syz.5.2574" path=2F3431302FE91F7189591E9233614B dev="tmpfs" ino=2197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 893.791061][T15947] tipc: Enabling of bearer rejected, failed to enable media [ 894.843515][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2580'. [ 896.259329][T15972] syzkaller0: entered promiscuous mode [ 896.266196][T15972] syzkaller0: entered allmulticast mode [ 896.898263][T15981] bio_check_eod: 2 callbacks suppressed [ 896.898287][T15981] syz.7.2588: attempt to access beyond end of device [ 896.898287][T15981] nbd7: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 897.472882][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2594'. [ 898.186764][T16029] syzkaller0: entered promiscuous mode [ 898.192426][T16029] syzkaller0: entered allmulticast mode [ 899.639493][ T30] audit: type=1400 audit(1752947024.831:923): avc: denied { accept } for pid=16042 comm="syz.5.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 900.564655][ T30] audit: type=1400 audit(1752947025.761:924): avc: denied { ioctl } for pid=16060 comm="syz.3.2609" path="socket:[68940]" dev="sockfs" ino=68940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 902.143092][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.163893][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.181824][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.227612][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.571670][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.627261][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.650545][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.680621][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.715118][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 902.742809][T16084] netlink: 'syz.5.2613': attribute type 3 has an invalid length. [ 903.740000][T16102] ALSA: mixer_oss: invalid index 40000 [ 906.378195][T16143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=16143 comm=syz.5.2628 [ 907.161379][T16156] fuse: Unknown parameter 'T’DÑôÿG!ˆõrootmode' [ 907.195781][T16156] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 907.221083][T16156] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 907.261978][T16156] overlayfs: missing 'lowerdir' [ 907.453556][T16166] syz.4.2632: attempt to access beyond end of device [ 907.453556][T16166] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 907.602914][T16166] hpfs: hpfs_map_sector(): read error [ 908.595726][T16175] input: syz0 as /devices/virtual/input/input32 [ 908.602665][T16175] input: failed to attach handler leds to device input32, error: -6 [ 910.226602][T16202] veth3: entered allmulticast mode [ 911.067145][T16219] cifs: Bad value for 'port' [ 911.073635][T16219] overlayfs: missing 'lowerdir' [ 911.539159][T16228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2650'. [ 912.013615][T16239] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 912.033395][ T6821] Bluetooth: (null): Invalid header checksum [ 912.114889][ T6821] Bluetooth: (null): Invalid header checksum [ 912.182103][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2654'. [ 912.211730][T16242] FAULT_INJECTION: forcing a failure. [ 912.211730][T16242] name failslab, interval 1, probability 0, space 0, times 0 [ 912.227164][ T12] Bluetooth: (null): Invalid header checksum [ 912.247236][T16242] CPU: 0 UID: 0 PID: 16242 Comm: syz.7.2654 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 912.247271][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 912.247283][T16242] Call Trace: [ 912.247290][T16242] [ 912.247299][T16242] dump_stack_lvl+0x16c/0x1f0 [ 912.247339][T16242] should_fail_ex+0x512/0x640 [ 912.247369][T16242] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 912.247399][T16242] should_failslab+0xc2/0x120 [ 912.247418][T16242] __kmalloc_cache_noprof+0x6a/0x3e0 [ 912.247445][T16242] ? device_add+0xccc/0x1a70 [ 912.247471][T16242] device_add+0xccc/0x1a70 [ 912.247493][T16242] ? dev_set_name+0xc7/0x100 [ 912.247516][T16242] ? __pfx_dev_set_name+0x10/0x10 [ 912.247539][T16242] ? __pfx_device_add+0x10/0x10 [ 912.247559][T16242] ? lockdep_init_map_type+0x5c/0x280 [ 912.247586][T16242] ? __init_waitqueue_head+0xca/0x150 [ 912.247614][T16242] netdev_register_kobject+0x182/0x3a0 [ 912.247641][T16242] register_netdevice+0x13dc/0x2270 [ 912.247667][T16242] ? __pfx_register_netdevice+0x10/0x10 [ 912.247687][T16242] ? dev_addr_mod+0x316/0x540 [ 912.247715][T16242] macvlan_common_newlink+0x10e7/0x1a20 [ 912.247741][T16242] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 912.247762][T16242] ? rtnl_create_link+0xa4a/0xf90 [ 912.247780][T16242] ? __pfx_macvlan_newlink+0x10/0x10 [ 912.247801][T16242] rtnl_newlink+0xc42/0x2000 [ 912.247828][T16242] ? __pfx_rtnl_newlink+0x10/0x10 [ 912.247843][T16242] ? find_held_lock+0x2b/0x80 [ 912.247866][T16242] ? avc_has_perm_noaudit+0x117/0x3b0 [ 912.247893][T16242] ? avc_has_perm_noaudit+0x149/0x3b0 [ 912.247937][T16242] ? find_held_lock+0x2b/0x80 [ 912.247958][T16242] ? __pfx_rtnl_newlink+0x10/0x10 [ 912.247974][T16242] ? __pfx_rtnl_newlink+0x10/0x10 [ 912.247989][T16242] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 912.248008][T16242] ? __pfx_rtnl_newlink+0x10/0x10 [ 912.248026][T16242] rtnetlink_rcv_msg+0x95b/0xe90 [ 912.248047][T16242] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 912.248073][T16242] ? ref_tracker_free+0x37c/0x830 [ 912.248104][T16242] netlink_rcv_skb+0x155/0x420 [ 912.248126][T16242] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 912.248146][T16242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.248176][T16242] ? netlink_deliver_tap+0x1ae/0xd30 [ 912.248200][T16242] netlink_unicast+0x58d/0x850 [ 912.248224][T16242] ? __pfx_netlink_unicast+0x10/0x10 [ 912.248255][T16242] netlink_sendmsg+0x8d1/0xdd0 [ 912.248280][T16242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.248310][T16242] ____sys_sendmsg+0xa98/0xc70 [ 912.248334][T16242] ? copy_msghdr_from_user+0x10a/0x160 [ 912.248362][T16242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.248397][T16242] ___sys_sendmsg+0x134/0x1d0 [ 912.248428][T16242] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.248453][T16242] ? __lock_acquire+0x622/0x1c90 [ 912.248502][T16242] __sys_sendmsg+0x16d/0x220 [ 912.248529][T16242] ? __pfx___sys_sendmsg+0x10/0x10 [ 912.248579][T16242] do_syscall_64+0xcd/0x4c0 [ 912.248598][T16242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.248617][T16242] RIP: 0033:0x7f2c3d98e9a9 [ 912.248632][T16242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.248649][T16242] RSP: 002b:00007f2c3e7de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.248668][T16242] RAX: ffffffffffffffda RBX: 00007f2c3dbb5fa0 RCX: 00007f2c3d98e9a9 [ 912.248680][T16242] RDX: 0000000020000000 RSI: 00002000000002c0 RDI: 000000000000000e [ 912.248691][T16242] RBP: 00007f2c3e7de090 R08: 0000000000000000 R09: 0000000000000000 [ 912.248702][T16242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.248713][T16242] R13: 0000000000000000 R14: 00007f2c3dbb5fa0 R15: 00007fff2c95f278 [ 912.248738][T16242] [ 912.621971][ T7866] Bluetooth: (null): Invalid header checksum [ 912.733924][ T12] Bluetooth: (null): Invalid header checksum [ 912.904909][ T12] Bluetooth: (null): Invalid header checksum [ 912.943999][ T12] Bluetooth: (null): Invalid header checksum [ 913.160199][ T12] Bluetooth: (null): Invalid header checksum [ 913.430166][ T12] Bluetooth: (null): Invalid header checksum [ 913.457514][ T12] Bluetooth: (null): Invalid header checksum [ 913.480572][ T12] Bluetooth: (null): Invalid header checksum [ 913.501437][ T12] Bluetooth: (null): Invalid header checksum [ 913.668780][ T12] Bluetooth: (null): Invalid header checksum [ 913.781192][ T7866] Bluetooth: (null): Invalid header checksum [ 913.882540][ T7866] Bluetooth: (null): Invalid header checksum [ 913.961234][ T6838] Bluetooth: (null): Invalid header checksum [ 914.065604][ T6838] Bluetooth: (null): Invalid header checksum [ 914.174657][ T49] Bluetooth: (null): Invalid header checksum [ 914.285113][ T6821] Bluetooth: (null): Invalid header checksum [ 914.392062][ T12] Bluetooth: (null): Invalid header checksum [ 914.505023][ T6821] Bluetooth: (null): Invalid header checksum [ 914.621346][ T7866] Bluetooth: (null): Invalid header checksum [ 914.722491][ T12] Bluetooth: (null): Invalid header checksum [ 914.757651][T16276] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 914.902743][ T12] Bluetooth: (null): Invalid header checksum [ 914.957181][ T7866] Bluetooth: (null): Invalid header checksum [ 915.040448][T16281] hub 6-0:1.0: USB hub found [ 915.046027][T16281] hub 6-0:1.0: 1 port detected [ 915.083746][ T7866] Bluetooth: (null): Invalid header checksum [ 915.100560][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 915.432673][ T30] audit: type=1400 audit(1752947040.631:925): avc: denied { shutdown } for pid=16273 comm="syz.3.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 915.435733][T16274] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2662'. [ 916.553172][T16301] validate_nla: 40 callbacks suppressed [ 916.553208][T16301] netlink: 'syz.3.2668': attribute type 4 has an invalid length. [ 916.566606][T16301] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2668'. [ 917.055697][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2669'. [ 917.210160][T16288] lo speed is unknown, defaulting to 1000 [ 917.221986][T16288] lo speed is unknown, defaulting to 1000 [ 918.172788][T16335] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 918.183802][ T6824] Bluetooth: (null): Invalid header checksum [ 918.280901][ T6824] Bluetooth: (null): Invalid header checksum [ 918.391333][ T6821] Bluetooth: (null): Invalid header checksum [ 918.500680][ T6821] Bluetooth: (null): Invalid header checksum [ 918.733917][ T49] Bluetooth: (null): Invalid header checksum [ 918.741613][ T49] Bluetooth: (null): Invalid header checksum [ 918.831243][ T49] Bluetooth: (null): Invalid header checksum [ 918.941630][ T6824] Bluetooth: (null): Invalid header checksum [ 919.052671][ T6821] Bluetooth: (null): Invalid header checksum [ 919.171454][ T6824] Bluetooth: (null): Invalid header checksum [ 919.280772][ T49] Bluetooth: (null): Invalid header checksum [ 919.351673][T16347] FAULT_INJECTION: forcing a failure. [ 919.351673][T16347] name failslab, interval 1, probability 0, space 0, times 0 [ 919.351728][T16347] CPU: 1 UID: 0 PID: 16347 Comm: syz.3.2681 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 919.351751][T16347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 919.351761][T16347] Call Trace: [ 919.351768][T16347] [ 919.351776][T16347] dump_stack_lvl+0x16c/0x1f0 [ 919.351809][T16347] should_fail_ex+0x512/0x640 [ 919.351836][T16347] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 919.351866][T16347] should_failslab+0xc2/0x120 [ 919.351884][T16347] __kmalloc_cache_node_noprof+0x6d/0x420 [ 919.351911][T16347] ? __get_vm_area_node+0x101/0x330 [ 919.351937][T16347] __get_vm_area_node+0x101/0x330 [ 919.351963][T16347] __vmalloc_node_range_noprof+0x271/0x14b0 [ 919.351986][T16347] ? vc_uniscr_check+0x1a0/0x5a0 [ 919.352023][T16347] ? vc_uniscr_check+0x1a0/0x5a0 [ 919.352057][T16347] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 919.352092][T16347] ? vc_uniscr_check+0x1a0/0x5a0 [ 919.352118][T16347] __vmalloc_node_noprof+0xad/0xf0 [ 919.352141][T16347] ? vc_uniscr_check+0x1a0/0x5a0 [ 919.352171][T16347] vc_uniscr_check+0x1a0/0x5a0 [ 919.352206][T16347] do_con_write+0x662/0x8280 [ 919.352243][T16347] ? __pfx_do_con_write+0x10/0x10 [ 919.352275][T16347] con_write+0x23/0xb0 [ 919.352292][T16347] n_tty_write+0x412/0x1160 [ 919.352327][T16347] ? __pfx_n_tty_write+0x10/0x10 [ 919.352347][T16347] ? rcu_is_watching+0x12/0xc0 [ 919.352372][T16347] ? __pfx_woken_wake_function+0x10/0x10 [ 919.352395][T16347] ? kfree+0x24f/0x4d0 [ 919.352415][T16347] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 919.352435][T16347] ? __pfx_n_tty_write+0x10/0x10 [ 919.352459][T16347] file_tty_write.constprop.0+0x501/0x9b0 [ 919.352487][T16347] do_iter_readv_writev+0x654/0x950 [ 919.352516][T16347] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 919.352543][T16347] ? __import_iovec+0x1dd/0x650 [ 919.352559][T16347] ? avc_policy_seqno+0x9/0x20 [ 919.352578][T16347] ? selinux_file_permission+0x126/0x660 [ 919.352609][T16347] ? bpf_lsm_file_permission+0x9/0x10 [ 919.352629][T16347] ? security_file_permission+0x71/0x210 [ 919.352648][T16347] ? rw_verify_area+0xcf/0x680 [ 919.352674][T16347] vfs_writev+0x35f/0xde0 [ 919.352706][T16347] ? __pfx_vfs_writev+0x10/0x10 [ 919.352749][T16347] ? __fget_files+0x20e/0x3c0 [ 919.352764][T16347] ? __fget_files+0x200/0x3c0 [ 919.352787][T16347] ? do_writev+0x132/0x340 [ 919.352808][T16347] do_writev+0x132/0x340 [ 919.352832][T16347] ? __pfx_do_writev+0x10/0x10 [ 919.352862][T16347] do_syscall_64+0xcd/0x4c0 [ 919.352882][T16347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.352898][T16347] RIP: 0033:0x7ff06bd8e9a9 [ 919.352913][T16347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.352930][T16347] RSP: 002b:00007ff06ccd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 919.352947][T16347] RAX: ffffffffffffffda RBX: 00007ff06bfb5fa0 RCX: 00007ff06bd8e9a9 [ 919.352960][T16347] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 919.352970][T16347] RBP: 00007ff06ccd3090 R08: 0000000000000000 R09: 0000000000000000 [ 919.352981][T16347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.352991][T16347] R13: 0000000000000000 R14: 00007ff06bfb5fa0 R15: 00007ffd2d12b738 [ 919.353017][T16347] [ 919.353027][T16347] syz.3.2681: vmalloc error: size 24960, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 919.353194][T16347] CPU: 1 UID: 0 PID: 16347 Comm: syz.3.2681 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 919.353214][T16347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 919.353223][T16347] Call Trace: [ 919.353229][T16347] [ 919.353236][T16347] dump_stack_lvl+0x16c/0x1f0 [ 919.353264][T16347] warn_alloc+0x248/0x3a0 [ 919.353291][T16347] ? __pfx_warn_alloc+0x10/0x10 [ 919.353317][T16347] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 919.353347][T16347] ? __kasan_kmalloc+0x8a/0xb0 [ 919.353373][T16347] ? __get_vm_area_node+0x208/0x330 [ 919.353401][T16347] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 919.353434][T16347] ? vc_uniscr_check+0x1a0/0x5a0 [ 919.353468][T16347] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 919.353502][T16347] ? vc_uniscr_check+0x1a0/0x5a0 [ 919.353528][T16347] __vmalloc_node_noprof+0xad/0xf0 [ 919.353554][T16347] ? vc_uniscr_check+0x1a0/0x5a0 [ 919.353584][T16347] vc_uniscr_check+0x1a0/0x5a0 [ 919.353619][T16347] do_con_write+0x662/0x8280 [ 919.353656][T16347] ? __pfx_do_con_write+0x10/0x10 [ 919.353689][T16347] con_write+0x23/0xb0 [ 919.353708][T16347] n_tty_write+0x412/0x1160 [ 919.353741][T16347] ? __pfx_n_tty_write+0x10/0x10 [ 919.353760][T16347] ? rcu_is_watching+0x12/0xc0 [ 919.353783][T16347] ? __pfx_woken_wake_function+0x10/0x10 [ 919.353805][T16347] ? kfree+0x24f/0x4d0 [ 919.353823][T16347] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 919.353843][T16347] ? __pfx_n_tty_write+0x10/0x10 [ 919.353865][T16347] file_tty_write.constprop.0+0x501/0x9b0 [ 919.353889][T16347] do_iter_readv_writev+0x654/0x950 [ 919.353914][T16347] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 919.353936][T16347] ? __import_iovec+0x1dd/0x650 [ 919.353952][T16347] ? avc_policy_seqno+0x9/0x20 [ 919.353970][T16347] ? selinux_file_permission+0x126/0x660 [ 919.354002][T16347] ? bpf_lsm_file_permission+0x9/0x10 [ 919.354021][T16347] ? security_file_permission+0x71/0x210 [ 919.354037][T16347] ? rw_verify_area+0xcf/0x680 [ 919.354060][T16347] vfs_writev+0x35f/0xde0 [ 919.354090][T16347] ? __pfx_vfs_writev+0x10/0x10 [ 919.354123][T16347] ? __fget_files+0x20e/0x3c0 [ 919.354133][T16347] ? __fget_files+0x200/0x3c0 [ 919.354146][T16347] ? do_writev+0x132/0x340 [ 919.354160][T16347] do_writev+0x132/0x340 [ 919.354175][T16347] ? __pfx_do_writev+0x10/0x10 [ 919.354195][T16347] do_syscall_64+0xcd/0x4c0 [ 919.354207][T16347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.354218][T16347] RIP: 0033:0x7ff06bd8e9a9 [ 919.354227][T16347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.354238][T16347] RSP: 002b:00007ff06ccd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 919.354248][T16347] RAX: ffffffffffffffda RBX: 00007ff06bfb5fa0 RCX: 00007ff06bd8e9a9 [ 919.354255][T16347] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 919.354262][T16347] RBP: 00007ff06ccd3090 R08: 0000000000000000 R09: 0000000000000000 [ 919.354269][T16347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.354275][T16347] R13: 0000000000000000 R14: 00007ff06bfb5fa0 R15: 00007ffd2d12b738 [ 919.354291][T16347] [ 919.389939][T16347] Mem-Info: [ 919.389955][T16347] active_anon:28062 inactive_anon:1 isolated_anon:0 [ 919.389955][T16347] active_file:22115 inactive_file:40992 isolated_file:0 [ 919.389955][T16347] unevictable:768 dirty:299 writeback:0 [ 919.389955][T16347] slab_reclaimable:8935 slab_unreclaimable:106525 [ 919.389955][T16347] mapped:37291 shmem:22764 pagetables:1282 [ 919.389955][T16347] sec_pagetables:0 bounce:0 [ 919.389955][T16347] kernel_misc_reclaimable:0 [ 919.389955][T16347] free:1264069 free_pcp:14763 free_cma:0 [ 919.390000][T16347] Node 0 active_anon:112248kB inactive_anon:4kB active_file:88320kB inactive_file:163764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149024kB dirty:1196kB writeback:0kB shmem:89520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11868kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 919.390046][T16347] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 919.390091][T16347] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.390142][T16347] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 919.390181][T16347] Node 0 DMA32 free:1132132kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112236kB inactive_anon:4kB active_file:88320kB inactive_file:162436kB unevictable:1536kB writepending:1196kB present:3129332kB managed:2540188kB mlocked:0kB bounce:0kB free_pcp:52872kB local_pcp:17304kB free_cma:0kB [ 919.390230][T16347] lowmem_reserve[]: 0 0 1 1 1 [ 919.390267][T16347] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 919.390322][T16347] lowmem_reserve[]: 0 0 0 0 0 [ 919.390358][T16347] Node 1 Normal free:3908772kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6112kB local_pcp:4672kB free_cma:0kB [ 919.391319][ T6821] Bluetooth: (null): Invalid header checksum [ 919.391842][T16347] lowmem_reserve[]: 0 0 0 0 0 [ 919.391866][T16347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 919.391953][T16347] Node 0 DMA32: 1374*4kB (UM) 1545*8kB (UME) 1046*16kB (UME) 644*32kB (UME) 701*64kB (UME) 287*128kB (UME) 178*256kB (UME) 57*512kB (UME) 25*1024kB (UME) 3*2048kB (UM) 217*4096kB (UM) = 1132128kB [ 919.392052][T16347] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 919.392119][T16347] Node 1 Normal: 191*4kB (UME) 47*8kB (UME) 49*16kB (UME) 289*32kB (UME) 128*64kB (UME) 38*128kB (UE) 8*256kB (UM) 3*512kB (UM) 6*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3908772kB [ 919.392218][T16347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 919.392228][T16347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 919.392237][T16347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 919.392246][T16347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 919.392255][T16347] 85865 total pagecache pages [ 919.392260][T16347] 1 pages in swap cache [ 919.392265][T16347] Free swap = 124992kB [ 919.392269][T16347] Total swap = 124996kB [ 919.392274][T16347] 2097051 pages RAM [ 919.392283][T16347] 0 pages HighMem/MovableOnly [ 919.392287][T16347] 430026 pages reserved [ 919.392292][T16347] 0 pages cma reserved [ 919.544618][ T6824] Bluetooth: (null): Invalid header checksum [ 919.615451][ T6821] Bluetooth: (null): Invalid header checksum [ 919.733112][ T6821] Bluetooth: (null): Invalid header checksum [ 919.851135][ T7866] Bluetooth: (null): Invalid header checksum [ 919.961858][ T6824] Bluetooth: (null): Invalid header checksum [ 920.086672][ T6824] Bluetooth: (null): Invalid header checksum [ 921.698553][T16360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16360 comm=syz.4.2684 [ 922.207243][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 922.217387][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 924.286330][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2696'. [ 924.390555][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 924.462167][T16397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.555803][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.575400][T16401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.610193][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.614787][T16401] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 924.659097][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 924.683649][T16401] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 924.697057][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.721315][ T10] usb 4-1: config 0 descriptor?? [ 924.802493][T16402] macvlan2: entered promiscuous mode [ 924.836036][T16402] macvlan2: entered allmulticast mode [ 924.857207][T16402] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 925.021543][T16411] netlink: 'syz.1.2700': attribute type 29 has an invalid length. [ 925.069216][T16412] netlink: 'syz.1.2700': attribute type 29 has an invalid length. [ 925.454409][ T10] cp2112 0003:10C4:EA90.0016: item fetching failed at offset 5/7 [ 925.559125][ T10] cp2112 0003:10C4:EA90.0016: parse failed [ 925.607447][ T10] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -22 [ 927.593080][ T5962] usb 4-1: USB disconnect, device number 46 [ 927.765858][T16445] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 928.212591][T16449] syzkaller0: entered promiscuous mode [ 928.221087][T16449] syzkaller0: entered allmulticast mode [ 929.508953][ T30] audit: type=1400 audit(1752947054.701:926): avc: denied { map } for pid=16466 comm="syz.1.2717" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 929.630874][T16469] FAULT_INJECTION: forcing a failure. [ 929.630874][T16469] name failslab, interval 1, probability 0, space 0, times 0 [ 929.643697][T16469] CPU: 1 UID: 0 PID: 16469 Comm: syz.1.2717 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 929.643721][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 929.643732][T16469] Call Trace: [ 929.643738][T16469] [ 929.643745][T16469] dump_stack_lvl+0x16c/0x1f0 [ 929.643777][T16469] should_fail_ex+0x512/0x640 [ 929.643805][T16469] ? fs_reclaim_acquire+0xae/0x150 [ 929.643830][T16469] ? tomoyo_encode2+0x100/0x3e0 [ 929.643847][T16469] should_failslab+0xc2/0x120 [ 929.643865][T16469] __kmalloc_noprof+0xd2/0x510 [ 929.643892][T16469] ? d_absolute_path+0x136/0x1a0 [ 929.643920][T16469] tomoyo_encode2+0x100/0x3e0 [ 929.643942][T16469] tomoyo_encode+0x29/0x50 [ 929.643960][T16469] tomoyo_realpath_from_path+0x18f/0x6e0 [ 929.643987][T16469] tomoyo_path_number_perm+0x245/0x580 [ 929.644012][T16469] ? tomoyo_path_number_perm+0x237/0x580 [ 929.644039][T16469] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 929.644092][T16469] ? find_held_lock+0x2b/0x80 [ 929.644115][T16469] ? hook_file_ioctl_common+0x145/0x410 [ 929.644143][T16469] ? __fget_files+0x20e/0x3c0 [ 929.644165][T16469] security_file_ioctl+0x9b/0x240 [ 929.644194][T16469] __x64_sys_ioctl+0xb7/0x210 [ 929.644221][T16469] do_syscall_64+0xcd/0x4c0 [ 929.644247][T16469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.644267][T16469] RIP: 0033:0x7ff35758e9a9 [ 929.644282][T16469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.644298][T16469] RSP: 002b:00007ff3583f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.644316][T16469] RAX: ffffffffffffffda RBX: 00007ff3577b6080 RCX: 00007ff35758e9a9 [ 929.644329][T16469] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 929.644340][T16469] RBP: 00007ff3583f7090 R08: 0000000000000000 R09: 0000000000000000 [ 929.644351][T16469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.644361][T16469] R13: 0000000000000000 R14: 00007ff3577b6080 R15: 00007ffea1f673d8 [ 929.644387][T16469] [ 929.644475][T16469] ERROR: Out of memory at tomoyo_realpath_from_path. [ 930.617067][ T30] audit: type=1400 audit(1752947055.051:927): avc: denied { call } for pid=16466 comm="syz.1.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 930.637120][ T30] audit: type=1400 audit(1752947055.061:928): avc: denied { transfer } for pid=16466 comm="syz.1.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 930.896884][T16473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 931.113074][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.119424][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.060445][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 934.519611][T16519] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16519 comm=syz.1.2732 [ 936.103819][T16540] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2736'. [ 938.086770][T16545] batman_adv: batadv0: Adding interface: dummy0 [ 938.093661][T16545] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.119141][T16545] batman_adv: batadv0: Interface activated: dummy0 [ 939.022049][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 939.031086][T16555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2740'. [ 939.040903][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 939.482606][T16573] FAULT_INJECTION: forcing a failure. [ 939.482606][T16573] name fail_futex, interval 1, probability 0, space 0, times 1 [ 939.523180][T16573] CPU: 0 UID: 0 PID: 16573 Comm: syz.4.2744 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 939.523212][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.523223][T16573] Call Trace: [ 939.523230][T16573] [ 939.523237][T16573] dump_stack_lvl+0x16c/0x1f0 [ 939.523271][T16573] should_fail_ex+0x512/0x640 [ 939.523298][T16573] ? debug_object_activate+0x2ec/0x4c0 [ 939.523321][T16573] get_futex_key+0x1d0/0x1540 [ 939.523352][T16573] ? __pfx_get_futex_key+0x10/0x10 [ 939.523379][T16573] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 939.523405][T16573] ? timerqueue_add+0x1c2/0x330 [ 939.523429][T16573] futex_wait_multiple_setup+0x12f/0x740 [ 939.523449][T16573] ? find_held_lock+0x2b/0x80 [ 939.523475][T16573] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 939.523505][T16573] futex_wait_multiple+0xe6/0x480 [ 939.523528][T16573] ? __pfx_futex_wait_multiple+0x10/0x10 [ 939.523548][T16573] ? __kmalloc_noprof+0x242/0x510 [ 939.523581][T16573] __do_sys_futex_waitv+0x17f/0x2c0 [ 939.523608][T16573] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 939.523639][T16573] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 939.523669][T16573] do_syscall_64+0xcd/0x4c0 [ 939.523688][T16573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.523705][T16573] RIP: 0033:0x7f903cb8e9a9 [ 939.523720][T16573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.523737][T16573] RSP: 002b:00007f903a9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 939.523756][T16573] RAX: ffffffffffffffda RBX: 00007f903cdb5fa0 RCX: 00007f903cb8e9a9 [ 939.523768][T16573] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 939.523780][T16573] RBP: 00007f903a9f6090 R08: 0000000000000001 R09: 0000000000000000 [ 939.523791][T16573] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000002 [ 939.523802][T16573] R13: 0000000000000000 R14: 00007f903cdb5fa0 R15: 00007ffda3a44d28 [ 939.523827][T16573] [ 940.443733][T16589] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2748'. [ 942.242332][T16606] overlayfs: failed to clone upperpath [ 942.368858][T16610] FAULT_INJECTION: forcing a failure. [ 942.368858][T16610] name failslab, interval 1, probability 0, space 0, times 0 [ 942.435004][T16610] CPU: 1 UID: 0 PID: 16610 Comm: syz.4.2752 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 942.435033][T16610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 942.435045][T16610] Call Trace: [ 942.435052][T16610] [ 942.435060][T16610] dump_stack_lvl+0x16c/0x1f0 [ 942.435094][T16610] should_fail_ex+0x512/0x640 [ 942.435121][T16610] ? fs_reclaim_acquire+0xae/0x150 [ 942.435145][T16610] ? tomoyo_encode2+0x100/0x3e0 [ 942.435161][T16610] should_failslab+0xc2/0x120 [ 942.435179][T16610] __kmalloc_noprof+0xd2/0x510 [ 942.435203][T16610] ? d_absolute_path+0x136/0x1a0 [ 942.435229][T16610] tomoyo_encode2+0x100/0x3e0 [ 942.435249][T16610] tomoyo_encode+0x29/0x50 [ 942.435265][T16610] tomoyo_realpath_from_path+0x18f/0x6e0 [ 942.435289][T16610] tomoyo_path_number_perm+0x245/0x580 [ 942.435311][T16610] ? tomoyo_path_number_perm+0x237/0x580 [ 942.435334][T16610] ? io_schedule_timeout+0xd4/0x150 [ 942.435359][T16610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 942.435383][T16610] ? rcu_is_watching+0x12/0xc0 [ 942.435433][T16610] ? hook_file_ioctl_common+0x13e/0x410 [ 942.435455][T16610] ? hook_file_ioctl_common+0x145/0x410 [ 942.435480][T16610] ? __fget_files+0x20e/0x3c0 [ 942.435500][T16610] security_file_ioctl+0x9b/0x240 [ 942.435529][T16610] __x64_sys_ioctl+0xb7/0x210 [ 942.435554][T16610] do_syscall_64+0xcd/0x4c0 [ 942.435573][T16610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.435590][T16610] RIP: 0033:0x7f903cb8e9a9 [ 942.435605][T16610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.435621][T16610] RSP: 002b:00007f903a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 942.435639][T16610] RAX: ffffffffffffffda RBX: 00007f903cdb5fa0 RCX: 00007f903cb8e9a9 [ 942.435650][T16610] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 942.435661][T16610] RBP: 00007f903a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 942.435671][T16610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.435682][T16610] R13: 0000000000000000 R14: 00007f903cdb5fa0 R15: 00007ffda3a44d28 [ 942.435707][T16610] [ 942.436003][T16610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 942.958846][T16610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.013194][ T30] audit: type=1400 audit(1752947068.171:929): avc: denied { listen } for pid=16615 comm="syz.5.2755" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 943.344721][ T30] audit: type=1800 audit(1752947068.499:930): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2758" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 943.589044][T16633] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2759'. [ 944.000313][T16640] 9pnet_virtio: no channels available for device syz [ 944.557257][T16647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 945.729591][T16661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16661 comm=syz.5.2766 [ 945.865620][T16639] team0 (unregistering): Port device team_slave_0 removed [ 945.980445][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 946.026839][T16639] team0 (unregistering): Port device team_slave_1 removed [ 946.542409][T16676] ALSA: mixer_oss: invalid index 40000 [ 947.496728][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 950.287161][T16720] 9pnet_fd: Insufficient options for proto=fd [ 951.563404][ T30] audit: type=1400 audit(1752947076.759:931): avc: denied { listen } for pid=16744 comm="syz.7.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 951.594607][ T30] audit: type=1400 audit(1752947076.789:932): avc: denied { accept } for pid=16744 comm="syz.7.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 952.935989][T16776] ALSA: mixer_oss: invalid index 40000 [ 954.133941][T16788] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16788 comm=syz.7.2804 [ 954.185753][T16791] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 954.375822][ T6824] Bluetooth: (null): Invalid header checksum [ 954.876757][ T6824] Bluetooth: (null): Invalid header checksum [ 954.883602][ T6824] Bluetooth: (null): Invalid header checksum [ 954.890283][ T6824] Bluetooth: (null): Invalid header checksum [ 954.896787][ T6824] Bluetooth: (null): Invalid header checksum [ 954.903144][ T6824] Bluetooth: (null): Invalid header checksum [ 954.909198][ T6824] Bluetooth: (null): Invalid header checksum [ 954.915761][ T6824] Bluetooth: (null): Invalid header checksum [ 954.964859][ T6824] Bluetooth: (null): Invalid header checksum [ 955.457735][ T6824] Bluetooth: (null): Invalid header checksum [ 955.464115][ T6824] Bluetooth: (null): Invalid header checksum [ 955.471449][ T6824] Bluetooth: (null): Invalid header checksum [ 955.477647][ T6824] Bluetooth: (null): Invalid header checksum [ 955.531751][ T6824] Bluetooth: (null): Invalid header checksum [ 955.554309][T16807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48722 sclass=netlink_route_socket pid=16807 comm=syz.5.2809 [ 955.739219][ T6824] Bluetooth: (null): Invalid header checksum [ 955.752059][ T49] Bluetooth: (null): Invalid header checksum [ 955.889524][ T59] Bluetooth: (null): Invalid header checksum [ 955.981524][T14268] Bluetooth: (null): Invalid header checksum [ 956.101393][ T59] Bluetooth: (null): Invalid header checksum [ 956.219652][ T59] Bluetooth: (null): Invalid header checksum [ 956.320807][T14268] Bluetooth: (null): Invalid header checksum [ 956.431289][T14268] Bluetooth: (null): Invalid header checksum [ 956.551928][ T49] Bluetooth: (null): Invalid header checksum [ 956.747612][ T59] Bluetooth: (null): Invalid header checksum [ 956.858310][ T59] Bluetooth: (null): Invalid header checksum [ 957.989513][ T6824] Bluetooth: (null): Invalid header checksum [ 958.000456][ T6824] Bluetooth: (null): Invalid header checksum [ 958.006485][ T6824] Bluetooth: (null): Invalid header checksum [ 958.012505][ T6824] Bluetooth: (null): Invalid header checksum [ 958.018503][ T6824] Bluetooth: (null): Invalid header checksum [ 958.144175][ T6824] Bluetooth: (null): Invalid header checksum [ 958.150513][ T6824] Bluetooth: (null): Invalid header checksum [ 958.156556][ T6824] Bluetooth: (null): Invalid header checksum [ 958.169803][ T6824] Bluetooth: (null): Invalid header checksum [ 958.176005][ T6824] Bluetooth: (null): Invalid header checksum [ 958.946927][T16850] hub 6-0:1.0: USB hub found [ 958.953456][T16850] hub 6-0:1.0: 1 port detected [ 960.062871][T16862] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 960.076320][ T59] Bluetooth: (null): Invalid header checksum [ 960.171619][ T59] Bluetooth: (null): Invalid header checksum [ 960.291162][T14268] Bluetooth: (null): Invalid header checksum [ 960.405675][ T6824] Bluetooth: (null): Invalid header checksum [ 960.506905][T16868] delete_channel: no stack [ 960.511753][T14268] Bluetooth: (null): Invalid header checksum [ 960.631215][ T49] Bluetooth: (null): Invalid header checksum [ 960.746578][ T59] Bluetooth: (null): Invalid header checksum [ 960.853025][ T49] Bluetooth: (null): Invalid header checksum [ 960.967045][ T1323] Bluetooth: (null): Invalid header checksum [ 961.205829][ T59] Bluetooth: (null): Invalid header checksum [ 961.228126][ T59] Bluetooth: (null): Invalid header checksum [ 961.366033][ T3504] Bluetooth: (null): Invalid header checksum [ 961.430707][ T3504] Bluetooth: (null): Invalid header checksum [ 961.543194][ T59] Bluetooth: (null): Invalid header checksum [ 961.651561][ T3504] Bluetooth: (null): Invalid header checksum [ 961.778697][ T59] Bluetooth: (null): Invalid header checksum [ 961.877476][ T59] Bluetooth: (null): Invalid header checksum [ 961.988904][ T59] Bluetooth: (null): Invalid header checksum [ 962.102000][ T3504] Bluetooth: (null): Invalid header checksum [ 962.212568][ T3504] Bluetooth: (null): Invalid header checksum [ 962.276203][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.283495][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.323754][ T6824] Bluetooth: (null): Invalid header checksum [ 962.435230][ T6824] Bluetooth: (null): Invalid header checksum [ 962.541251][ T59] Bluetooth: (null): Invalid header checksum [ 962.618162][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.652428][ T3504] Bluetooth: (null): Invalid header checksum [ 962.665481][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.793392][ T6824] Bluetooth: (null): Invalid header checksum [ 962.864077][T16905] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.873107][T16905] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.884309][ T6824] Bluetooth: (null): Invalid header checksum [ 962.900176][T16905] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.910911][T16905] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.990992][ T59] Bluetooth: (null): Invalid header checksum [ 963.347139][ T1323] Bluetooth: (null): Invalid header checksum [ 963.365180][ T1323] Bluetooth: (null): Invalid header checksum [ 963.371970][ T1323] Bluetooth: (null): Invalid header checksum [ 963.404698][T16551] lo speed is unknown, defaulting to 1000 [ 963.407871][T16928] syz2: Port: 1 Link DOWN [ 963.414766][T16551] 3yz0: Port: 1 Link DOWN [ 963.787849][T16947] ALSA: mixer_oss: invalid index 40000 [ 964.199597][T16949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16949 comm=syz.7.2844 [ 964.662464][T16959] hub 6-0:1.0: USB hub found [ 964.668041][T16959] hub 6-0:1.0: 1 port detected [ 965.315043][T16964] digital: digital_start_poll: Unknown protocol [ 967.667299][ T30] audit: type=1400 audit(1752947092.859:933): avc: denied { relabelfrom } for pid=17005 comm="syz.4.2862" name="NETLINK" dev="sockfs" ino=72829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 967.667517][T17006] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 967.715381][ T30] audit: type=1400 audit(1752947092.899:934): avc: denied { relabelto } for pid=17005 comm="syz.4.2862" name="NETLINK" dev="sockfs" ino=72829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 967.980939][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2864'. [ 969.220449][ T30] audit: type=1400 audit(1752947094.409:935): avc: denied { node_bind } for pid=17021 comm="syz.5.2866" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 969.352475][T17028] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 969.376810][T17017] input: syz0 as /devices/virtual/input/input35 [ 969.407519][ T1323] Bluetooth: (null): Invalid header checksum [ 969.471976][ T1323] Bluetooth: (null): Invalid header checksum [ 969.570761][ T3504] Bluetooth: (null): Invalid header checksum [ 969.690839][ T1323] Bluetooth: (null): Invalid header checksum [ 969.811685][ T12] Bluetooth: (null): Invalid header checksum [ 969.852202][T16913] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 969.932744][ T3504] Bluetooth: (null): Invalid header checksum [ 969.973651][T17040] veth0_vlan: entered allmulticast mode [ 970.055936][T16913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.068359][T16913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.079081][T16913] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 970.103868][ T59] Bluetooth: (null): Invalid header checksum [ 970.116964][T16913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.142079][T16913] usb 4-1: config 0 descriptor?? [ 970.172069][ T3504] Bluetooth: (null): Invalid header checksum [ 970.292166][ T6824] Bluetooth: (null): Invalid header checksum [ 970.403565][ T3504] Bluetooth: (null): Invalid header checksum [ 970.406176][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2875'. [ 970.510956][ T3504] Bluetooth: (null): Invalid header checksum [ 970.573655][T16913] cp2112 0003:10C4:EA90.0017: item fetching failed at offset 5/7 [ 970.582205][T16913] cp2112 0003:10C4:EA90.0017: parse failed [ 970.588150][T16913] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -22 [ 970.621836][ T6824] Bluetooth: (null): Invalid header checksum [ 970.732432][ T6824] Bluetooth: (null): Invalid header checksum [ 970.851219][ T12] Bluetooth: (null): Invalid header checksum [ 970.963332][ T3504] Bluetooth: (null): Invalid header checksum [ 971.080776][ T3504] Bluetooth: (null): Invalid header checksum [ 971.200845][ T6824] Bluetooth: (null): Invalid header checksum [ 971.281949][T16920] libceph: connect (1)[c::]:6789 error -101 [ 971.287990][T16920] libceph: mon0 (1)[c::]:6789 connect error [ 971.321418][ T6821] Bluetooth: (null): Invalid header checksum [ 971.330298][T17054] ceph: No mds server is up or the cluster is laggy [ 971.432220][ T3504] Bluetooth: (null): Invalid header checksum [ 971.524323][T17069] FAULT_INJECTION: forcing a failure. [ 971.524323][T17069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.537721][T17069] CPU: 0 UID: 0 PID: 17069 Comm: syz.7.2882 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 971.537749][T17069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 971.537760][T17069] Call Trace: [ 971.537767][T17069] [ 971.537774][T17069] dump_stack_lvl+0x16c/0x1f0 [ 971.537808][T17069] should_fail_ex+0x512/0x640 [ 971.537847][T17069] _copy_from_user+0x2e/0xd0 [ 971.537867][T17069] __keyctl_dh_compute+0x1b6/0x10e0 [ 971.537889][T17069] ? get_pid_task+0xfc/0x250 [ 971.537909][T17069] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 971.537931][T17069] ? __lock_acquire+0xb8a/0x1c90 [ 971.537977][T17069] keyctl_dh_compute+0xd2/0x140 [ 971.537999][T17069] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 971.538024][T17069] ? ksys_write+0x1ac/0x250 [ 971.538051][T17069] ? __pfx_ksys_write+0x10/0x10 [ 971.538080][T17069] __do_sys_keyctl+0x4df/0x590 [ 971.538108][T17069] do_syscall_64+0xcd/0x4c0 [ 971.538127][T17069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.538147][T17069] RIP: 0033:0x7f2c3d98e9a9 [ 971.538162][T17069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.538180][T17069] RSP: 002b:00007f2c3e7de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 971.538198][T17069] RAX: ffffffffffffffda RBX: 00007f2c3dbb5fa0 RCX: 00007f2c3d98e9a9 [ 971.538210][T17069] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 971.538221][T17069] RBP: 00007f2c3e7de090 R08: 0000200000000000 R09: 0000000000000000 [ 971.538232][T17069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.538243][T17069] R13: 0000000000000000 R14: 00007f2c3dbb5fa0 R15: 00007fff2c95f278 [ 971.538267][T17069] [ 971.541821][ T12] Bluetooth: (null): Invalid header checksum [ 971.735777][ T12] Bluetooth: (null): Invalid header checksum [ 971.768283][T17078] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2884'. [ 971.783606][ T1323] Bluetooth: (null): Invalid header checksum [ 971.785574][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2884'. [ 971.915167][ T12] Bluetooth: (null): Invalid header checksum [ 972.026152][ T1323] Bluetooth: (null): Invalid header checksum [ 972.151808][ T1323] Bluetooth: (null): Invalid header checksum [ 972.217869][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2886'. [ 972.320157][ T12] Bluetooth: (null): Invalid header checksum [ 973.341957][ T3504] Bluetooth: (null): Invalid header checksum [ 973.348054][ T3504] Bluetooth: (null): Invalid header checksum [ 973.585581][ T3504] Bluetooth: (null): Invalid header checksum [ 973.630410][T16927] usb 4-1: USB disconnect, device number 47 [ 974.763217][T17115] kvm: emulating exchange as write [ 975.534465][T17134] syzkaller0: left promiscuous mode [ 975.550966][T17134] syzkaller0: left allmulticast mode [ 975.567327][T17134] macsec1: entered promiscuous mode [ 975.574902][T17134] bridge0: entered promiscuous mode [ 975.584825][T17134] bridge0: port 3(macsec1) entered blocking state [ 975.592650][T17134] bridge0: port 3(macsec1) entered disabled state [ 975.599346][T17134] macsec1: entered allmulticast mode [ 975.608070][T17134] bridge0: entered allmulticast mode [ 975.625994][T17134] macsec1: left allmulticast mode [ 975.631422][T17134] bridge0: left allmulticast mode [ 975.637646][T17134] bridge0: left promiscuous mode [ 975.769604][T17141] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 975.777842][ T59] Bluetooth: (null): Invalid header checksum [ 975.870918][ T6821] Bluetooth: (null): Invalid header checksum [ 975.990495][ T30] audit: type=1400 audit(1752947101.139:936): avc: denied { create } for pid=17142 comm="syz.7.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 976.031757][ T12] Bluetooth: (null): Invalid header checksum [ 976.090955][ T59] Bluetooth: (null): Invalid header checksum [ 976.205018][ T12] Bluetooth: (null): Invalid header checksum [ 976.381869][ T12] Bluetooth: (null): Invalid header checksum [ 976.421860][ T59] Bluetooth: (null): Invalid header checksum [ 976.530678][ T59] Bluetooth: (null): Invalid header checksum [ 976.640983][ T12] Bluetooth: (null): Invalid header checksum [ 976.711660][T16913] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 976.750832][ T6824] Bluetooth: (null): Invalid header checksum [ 976.871513][ T6821] Bluetooth: (null): Invalid header checksum [ 977.082048][ T6821] Bluetooth: (null): Invalid header checksum [ 977.096409][ T6821] Bluetooth: (null): Invalid header checksum [ 977.098326][T16913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.134645][T16913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.145960][T16913] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 977.155287][T16913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.165808][T16913] usb 4-1: config 0 descriptor?? [ 977.211166][ T1323] Bluetooth: (null): Invalid header checksum [ 977.320955][ T1323] Bluetooth: (null): Invalid header checksum [ 977.440852][ T59] Bluetooth: (null): Invalid header checksum [ 977.550783][ T6824] Bluetooth: (null): Invalid header checksum [ 977.675284][T16913] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 977.704148][ T6821] Bluetooth: (null): Invalid header checksum [ 977.711187][T16913] arvo 0003:1E7D:30D4.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 978.262329][ T6821] Bluetooth: (null): Invalid header checksum [ 978.268478][ T6821] Bluetooth: (null): Invalid header checksum [ 978.292154][ T6821] Bluetooth: (null): Invalid header checksum [ 978.297989][T17151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.300762][ T6821] Bluetooth: (null): Invalid header checksum [ 978.317003][ T6821] Bluetooth: (null): Invalid header checksum [ 978.321630][T17151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.504299][ T1323] Bluetooth: (null): Invalid header checksum [ 978.567714][ T1323] Bluetooth: (null): Invalid header checksum [ 978.590594][ T1323] Bluetooth: (null): Invalid header checksum [ 978.633890][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2913'. [ 979.382730][T17190] ./file0: Can't open blockdev [ 979.665755][T16913] arvo 0003:1E7D:30D4.0018: couldn't init struct arvo_device [ 979.838232][T17190] Trying to write to read-only block-device nullb0 [ 979.848293][T16913] arvo 0003:1E7D:30D4.0018: couldn't install keyboard [ 979.874380][T16913] arvo 0003:1E7D:30D4.0018: probe with driver arvo failed with error -71 [ 979.894925][T16913] usb 4-1: USB disconnect, device number 48 [ 980.102495][T17206] Device name cannot be null; rc = [-22] [ 980.893890][T16913] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 981.120526][T16913] usb 4-1: Using ep0 maxpacket: 32 [ 982.080455][T16913] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.275207][T16913] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 982.664908][T16913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 982.671919][T16913] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 982.681322][T16913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.879215][T16913] usb 4-1: config 0 descriptor?? [ 983.322546][T17233] ALSA: mixer_oss: invalid index 40000 [ 983.916316][T16913] usbhid 4-1:0.0: can't add hid device: -71 [ 983.922389][T16913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 983.934583][T16913] usb 4-1: USB disconnect, device number 49 [ 983.988163][T17240] FAULT_INJECTION: forcing a failure. [ 983.988163][T17240] name failslab, interval 1, probability 0, space 0, times 0 [ 984.005037][T17240] CPU: 0 UID: 0 PID: 17240 Comm: syz.7.2930 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 984.005072][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 984.005083][T17240] Call Trace: [ 984.005090][T17240] [ 984.005098][T17240] dump_stack_lvl+0x16c/0x1f0 [ 984.005132][T17240] should_fail_ex+0x512/0x640 [ 984.005159][T17240] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 984.005188][T17240] should_failslab+0xc2/0x120 [ 984.005207][T17240] __kmalloc_cache_noprof+0x6a/0x3e0 [ 984.005230][T17240] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 984.005249][T17240] ? psi_trigger_create+0x211/0xc40 [ 984.005280][T17240] psi_trigger_create+0x211/0xc40 [ 984.005308][T17240] ? __pfx_psi_trigger_create+0x10/0x10 [ 984.005339][T17240] ? kernfs_unbreak_active_protection+0x8c/0xa0 [ 984.005363][T17240] ? cgroup_kn_unlock+0xa4/0x3c0 [ 984.005394][T17240] pressure_write+0x203/0x850 [ 984.005419][T17240] cgroup_file_write+0x1ec/0x790 [ 984.005444][T17240] ? __pfx_cgroup_memory_pressure_write+0x10/0x10 [ 984.005467][T17240] ? __pfx_cgroup_file_write+0x10/0x10 [ 984.005490][T17240] ? trace_kmalloc+0x2b/0xd0 [ 984.005518][T17240] kernfs_fop_write_iter+0x351/0x510 [ 984.005542][T17240] ? __pfx_cgroup_file_write+0x10/0x10 [ 984.005571][T17240] vfs_write+0x6c7/0x1150 [ 984.005600][T17240] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 984.005626][T17240] ? __pfx___mutex_lock+0x10/0x10 [ 984.005644][T17240] ? __pfx_vfs_write+0x10/0x10 [ 984.005689][T17240] ksys_write+0x12a/0x250 [ 984.005716][T17240] ? __pfx_ksys_write+0x10/0x10 [ 984.005750][T17240] do_syscall_64+0xcd/0x4c0 [ 984.005771][T17240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.005789][T17240] RIP: 0033:0x7f2c3d98e9a9 [ 984.005805][T17240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.005822][T17240] RSP: 002b:00007f2c3e7de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 984.005839][T17240] RAX: ffffffffffffffda RBX: 00007f2c3dbb5fa0 RCX: 00007f2c3d98e9a9 [ 984.005852][T17240] RDX: 000000000000002f RSI: 0000200000000100 RDI: 0000000000000005 [ 984.005863][T17240] RBP: 00007f2c3e7de090 R08: 0000000000000000 R09: 0000000000000000 [ 984.005874][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.005885][T17240] R13: 0000000000000000 R14: 00007f2c3dbb5fa0 R15: 00007fff2c95f278 [ 984.005911][T17240] [ 984.696006][T17247] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 984.705018][ T36] Bluetooth: (null): Invalid header checksum [ 984.809063][ T3504] Bluetooth: (null): Invalid header checksum [ 984.917251][T17254] FAULT_INJECTION: forcing a failure. [ 984.917251][T17254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.930719][T17254] CPU: 0 UID: 0 PID: 17254 Comm: syz.7.2933 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 984.930745][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 984.930762][T17254] Call Trace: [ 984.930769][T17254] [ 984.930783][T17254] dump_stack_lvl+0x16c/0x1f0 [ 984.930816][T17254] should_fail_ex+0x512/0x640 [ 984.930847][T17254] _copy_to_user+0x32/0xd0 [ 984.930867][T17254] simple_read_from_buffer+0xcb/0x170 [ 984.930897][T17254] proc_fail_nth_read+0x197/0x270 [ 984.930925][T17254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.930954][T17254] ? rw_verify_area+0xcf/0x680 [ 984.930978][T17254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.931004][T17254] vfs_read+0x1e1/0xc60 [ 984.931034][T17254] ? __pfx___mutex_lock+0x10/0x10 [ 984.931052][T17254] ? __pfx_vfs_read+0x10/0x10 [ 984.931091][T17254] ? __fget_files+0x20e/0x3c0 [ 984.931116][T17254] ksys_read+0x12a/0x250 [ 984.931141][T17254] ? __pfx_ksys_read+0x10/0x10 [ 984.931167][T17254] ? fput+0x70/0xf0 [ 984.931191][T17254] do_syscall_64+0xcd/0x4c0 [ 984.931210][T17254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.931229][T17254] RIP: 0033:0x7f2c3d98d3bc [ 984.931243][T17254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 984.931260][T17254] RSP: 002b:00007f2c3e79c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 984.931279][T17254] RAX: ffffffffffffffda RBX: 00007f2c3dbb6160 RCX: 00007f2c3d98d3bc [ 984.931291][T17254] RDX: 000000000000000f RSI: 00007f2c3e79c0a0 RDI: 000000000000000a [ 984.931302][T17254] RBP: 00007f2c3e79c090 R08: 0000000000000000 R09: 0000000000000000 [ 984.931314][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.931324][T17254] R13: 0000000000000000 R14: 00007f2c3dbb6160 R15: 00007fff2c95f278 [ 984.931350][T17254] [ 985.129321][T16913] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 985.213103][ T36] Bluetooth: (null): Invalid header checksum [ 985.266495][ T1323] Bluetooth: (null): Invalid header checksum [ 985.275822][ T1323] Bluetooth: (null): Invalid header checksum [ 985.455875][T17260] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2934'. [ 985.626342][ T12] Bluetooth: (null): Invalid header checksum [ 986.038619][ T3504] Bluetooth: (null): Invalid header checksum [ 986.056418][ T3504] Bluetooth: (null): Invalid header checksum [ 986.080908][ T3504] Bluetooth: (null): Invalid header checksum [ 986.087005][ T3504] Bluetooth: (null): Invalid header checksum [ 986.107519][ T3504] Bluetooth: (null): Invalid header checksum [ 986.186457][ T3504] Bluetooth: (null): Invalid header checksum [ 986.200193][ T3504] Bluetooth: (null): Invalid header checksum [ 986.221641][ T3504] Bluetooth: (null): Invalid header checksum [ 986.263763][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 986.331839][ T12] Bluetooth: (null): Invalid header checksum [ 986.379246][ T30] audit: type=1400 audit(1752947111.569:937): avc: denied { read } for pid=17265 comm="syz.1.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 986.515709][ T3504] Bluetooth: (null): Invalid header checksum [ 986.516843][T17281] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 986.553864][ T1323] Bluetooth: (null): Invalid header checksum [ 986.685971][T17209] Bluetooth: (null): Invalid header checksum [ 986.998319][ T1323] Bluetooth: (null): Invalid header checksum [ 987.031187][ T1323] Bluetooth: (null): Invalid header checksum [ 987.037368][ T1323] Bluetooth: (null): Invalid header checksum [ 987.109195][ T1323] Bluetooth: (null): Invalid header checksum [ 987.132038][T17292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 987.132112][T17292] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 987.231003][T14268] Bluetooth: (null): Invalid header checksum [ 987.335049][T14268] Bluetooth: (null): Invalid header checksum [ 987.421330][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 987.507466][ T36] Bluetooth: (null): Invalid header checksum [ 987.542084][T14268] Bluetooth: (null): Invalid header checksum [ 987.564575][T17292] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 987.573402][T17292] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 987.621639][T17292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 987.639095][T17292] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 987.650681][ T36] Bluetooth: (null): Invalid header checksum [ 987.723888][T17292] ================================================================== [ 987.731980][T17292] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1d4/0x200 [ 987.741213][T17292] Read of size 8 at addr ffff888042a28558 by task syz.7.2940/17292 [ 987.749083][T17292] [ 987.751404][T17292] CPU: 0 UID: 0 PID: 17292 Comm: syz.7.2940 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 987.751420][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.751429][T17292] Call Trace: [ 987.751437][T17292] [ 987.751445][T17292] dump_stack_lvl+0x116/0x1f0 [ 987.751480][T17292] print_report+0xcd/0x610 [ 987.751494][T17292] ? __virt_addr_valid+0x81/0x610 [ 987.751510][T17292] ? __phys_addr+0xe8/0x180 [ 987.751523][T17292] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 987.751537][T17292] kasan_report+0xe0/0x110 [ 987.751548][T17292] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 987.751563][T17292] __list_del_entry_valid_or_report+0x1d4/0x200 [ 987.751576][T17292] bt_accept_unlink+0x34/0x2e0 [ 987.751595][T17292] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 987.751609][T17292] l2cap_chan_del+0xba/0x8f0 [ 987.751624][T17292] l2cap_conn_del+0x37a/0x730 [ 987.751639][T17292] ? hci_inquiry_cache_flush+0x14f/0x2f0 [ 987.751651][T17292] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 987.751666][T17292] l2cap_disconn_cfm+0x96/0xd0 [ 987.751681][T17292] hci_conn_hash_flush+0x10b/0x260 [ 987.751695][T17292] hci_dev_close_sync+0x602/0x11d0 [ 987.751708][T17292] ? __pfx_bt_err+0x10/0x10 [ 987.751732][T17292] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 987.751747][T17292] hci_dev_do_close+0x2e/0x90 [ 987.751759][T17292] hci_rfkill_set_block+0x225/0x360 [ 987.751772][T17292] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 987.751784][T17292] rfkill_set_block+0x1fe/0x550 [ 987.751800][T17292] rfkill_fop_write+0x2c0/0x580 [ 987.751814][T17292] ? __pfx_rfkill_fop_write+0x10/0x10 [ 987.751828][T17292] ? __pfx_bpf_lsm_inode_getlsmprop+0x10/0x10 [ 987.751842][T17292] ? security_file_permission+0x71/0x210 [ 987.751854][T17292] ? rw_verify_area+0xcf/0x680 [ 987.751869][T17292] ? __pfx_rfkill_fop_write+0x10/0x10 [ 987.751883][T17292] vfs_write+0x2a0/0x1150 [ 987.751901][T17292] ? __pfx_vfs_write+0x10/0x10 [ 987.751916][T17292] ? find_held_lock+0x2b/0x80 [ 987.751931][T17292] ? __fget_files+0x204/0x3c0 [ 987.751942][T17292] ? __fget_files+0x20e/0x3c0 [ 987.751953][T17292] ksys_write+0x1f8/0x250 [ 987.751971][T17292] ? __pfx_ksys_write+0x10/0x10 [ 987.751988][T17292] do_syscall_64+0xcd/0x4c0 [ 987.752000][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.752012][T17292] RIP: 0033:0x7f2c3d98e9a9 [ 987.752023][T17292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.752035][T17292] RSP: 002b:00007f2c3b3d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.752046][T17292] RAX: ffffffffffffffda RBX: 00007f2c3dbb6240 RCX: 00007f2c3d98e9a9 [ 987.752054][T17292] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 987.752061][T17292] RBP: 00007f2c3da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 987.752068][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.752075][T17292] R13: 0000000000000000 R14: 00007f2c3dbb6240 R15: 00007fff2c95f278 [ 987.752085][T17292] [ 987.752089][T17292] [ 988.049169][T17292] Allocated by task 17124: [ 988.053580][T17292] kasan_save_stack+0x33/0x60 [ 988.058242][T17292] kasan_save_track+0x14/0x30 [ 988.062899][T17292] __kasan_kmalloc+0xaa/0xb0 [ 988.067471][T17292] __kmalloc_noprof+0x223/0x510 [ 988.072303][T17292] sk_prot_alloc+0x1a8/0x2a0 [ 988.076870][T17292] sk_alloc+0x36/0xc20 [ 988.080919][T17292] bt_sock_alloc+0x3b/0x3a0 [ 988.085404][T17292] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 988.091186][T17292] l2cap_sock_create+0x123/0x1f0 [ 988.096098][T17292] bt_sock_create+0x185/0x350 [ 988.100755][T17292] __sock_create+0x338/0x8d0 [ 988.105325][T17292] __sys_socket+0x14d/0x260 [ 988.109816][T17292] __x64_sys_socket+0x72/0xb0 [ 988.114471][T17292] do_syscall_64+0xcd/0x4c0 [ 988.118950][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.124820][T17292] [ 988.127121][T17292] Freed by task 17124: [ 988.131163][T17292] kasan_save_stack+0x33/0x60 [ 988.135830][T17292] kasan_save_track+0x14/0x30 [ 988.140501][T17292] kasan_save_free_info+0x3b/0x60 [ 988.145514][T17292] __kasan_slab_free+0x51/0x70 [ 988.150259][T17292] kfree+0x2b4/0x4d0 [ 988.154149][T17292] __sk_destruct+0x740/0x980 [ 988.158722][T17292] sk_destruct+0xc2/0xf0 [ 988.162944][T17292] __sk_free+0xf4/0x3e0 [ 988.167081][T17292] sk_free+0x6a/0x90 [ 988.170958][T17292] l2cap_sock_kill+0x171/0x2d0 [ 988.175711][T17292] l2cap_sock_release+0x189/0x210 [ 988.180734][T17292] __sock_release+0xb0/0x270 [ 988.185394][T17292] sock_close+0x1c/0x30 [ 988.189534][T17292] __fput+0x3ff/0xb70 [ 988.193500][T17292] task_work_run+0x14d/0x240 [ 988.198076][T17292] exit_to_user_mode_loop+0xeb/0x110 [ 988.203346][T17292] do_syscall_64+0x3f6/0x4c0 [ 988.207910][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.213780][T17292] [ 988.216079][T17292] The buggy address belongs to the object at ffff888042a28000 [ 988.216079][T17292] which belongs to the cache kmalloc-2k of size 2048 [ 988.230105][T17292] The buggy address is located 1368 bytes inside of [ 988.230105][T17292] freed 2048-byte region [ffff888042a28000, ffff888042a28800) [ 988.244048][T17292] [ 988.246360][T17292] The buggy address belongs to the physical page: [ 988.252742][T17292] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42a28 [ 988.261487][T17292] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 988.269957][T17292] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 988.277489][T17292] page_type: f5(slab) [ 988.281458][T17292] raw: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 988.290017][T17292] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 988.298575][T17292] head: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 988.307329][T17292] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 988.315974][T17292] head: 00fff00000000003 ffffea00010a8a01 00000000ffffffff 00000000ffffffff [ 988.324633][T17292] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 988.333275][T17292] page dumped because: kasan: bad access detected [ 988.339660][T17292] page_owner tracks the page as allocated [ 988.345346][T17292] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10291, tgid 10290 (syz.8.946), ts 445477462547, free_ts 441199793876 [ 988.366766][T17292] post_alloc_hook+0x1c0/0x230 [ 988.371512][T17292] get_page_from_freelist+0x1321/0x3890 [ 988.377038][T17292] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 988.382910][T17292] alloc_pages_mpol+0x1fb/0x550 [ 988.387738][T17292] new_slab+0x23b/0x330 [ 988.391869][T17292] ___slab_alloc+0xd9c/0x1940 [ 988.396524][T17292] __slab_alloc.constprop.0+0x56/0xb0 [ 988.401873][T17292] __kmalloc_cache_noprof+0xfb/0x3e0 [ 988.407223][T17292] copy_verifier_state+0xbc8/0xfa0 [ 988.412312][T17292] do_check_common+0x541e/0xc0e0 [ 988.417236][T17292] bpf_check+0x83f0/0xbc50 [ 988.421626][T17292] bpf_prog_load+0xe41/0x2490 [ 988.426288][T17292] __sys_bpf+0x4d1a/0x4ea0 [ 988.430697][T17292] __x64_sys_bpf+0x78/0xc0 [ 988.435108][T17292] do_syscall_64+0xcd/0x4c0 [ 988.439584][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.445452][T17292] page last free pid 10192 tgid 10192 stack trace: [ 988.451922][T17292] __free_frozen_pages+0x7fe/0x1180 [ 988.457100][T17292] __folio_put+0x329/0x450 [ 988.461488][T17292] skb_release_data+0x7fb/0x9c0 [ 988.466311][T17292] __kfree_skb+0x4f/0x70 [ 988.470527][T17292] __tcp_close+0x24a/0xff0 [ 988.474920][T17292] tcp_close+0x28/0x120 [ 988.479053][T17292] inet_release+0xed/0x200 [ 988.483460][T17292] __sock_release+0xb0/0x270 [ 988.488024][T17292] sock_close+0x1c/0x30 [ 988.492151][T17292] __fput+0x3ff/0xb70 [ 988.496119][T17292] task_work_run+0x14d/0x240 [ 988.500692][T17292] do_exit+0x86c/0x2bd0 [ 988.504833][T17292] do_group_exit+0xd3/0x2a0 [ 988.509323][T17292] get_signal+0x2673/0x26d0 [ 988.513821][T17292] arch_do_signal_or_restart+0x8f/0x7d0 [ 988.519366][T17292] irqentry_exit_to_user_mode+0x12a/0x270 [ 988.525070][T17292] [ 988.527372][T17292] Memory state around the buggy address: [ 988.532974][T17292] ffff888042a28400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 988.541008][T17292] ffff888042a28480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 988.549043][T17292] >ffff888042a28500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 988.557074][T17292] ^ [ 988.563979][T17292] ffff888042a28580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 988.572013][T17292] ffff888042a28600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 988.580045][T17292] ================================================================== [ 988.671922][ T30] audit: type=1400 audit(1752947113.859:938): avc: denied { read } for pid=5184 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 988.700717][T17292] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 988.707929][T17292] CPU: 1 UID: 0 PID: 17292 Comm: syz.7.2940 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 988.719984][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 988.730025][T17292] Call Trace: [ 988.733296][T17292] [ 988.736226][T17292] dump_stack_lvl+0x3d/0x1f0 [ 988.740830][T17292] panic+0x71c/0x800 [ 988.744734][T17292] ? __pfx_panic+0x10/0x10 [ 988.749157][T17292] ? mark_held_locks+0x49/0x80 [ 988.753922][T17292] ? preempt_schedule_thunk+0x16/0x30 [ 988.759300][T17292] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 988.765713][T17292] ? preempt_schedule_common+0x44/0xc0 [ 988.771180][T17292] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 988.777596][T17292] check_panic_on_warn+0xab/0xb0 [ 988.782531][T17292] end_report+0x107/0x170 [ 988.786858][T17292] kasan_report+0xee/0x110 [ 988.791274][T17292] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 988.797690][T17292] __list_del_entry_valid_or_report+0x1d4/0x200 [ 988.803931][T17292] bt_accept_unlink+0x34/0x2e0 [ 988.808707][T17292] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 988.814079][T17292] l2cap_chan_del+0xba/0x8f0 [ 988.818675][T17292] l2cap_conn_del+0x37a/0x730 [ 988.823354][T17292] ? hci_inquiry_cache_flush+0x14f/0x2f0 [ 988.828996][T17292] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 988.834457][T17292] l2cap_disconn_cfm+0x96/0xd0 [ 988.839228][T17292] hci_conn_hash_flush+0x10b/0x260 [ 988.844342][T17292] hci_dev_close_sync+0x602/0x11d0 [ 988.849452][T17292] ? __pfx_bt_err+0x10/0x10 [ 988.853960][T17292] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 988.859514][T17292] hci_dev_do_close+0x2e/0x90 [ 988.864189][T17292] hci_rfkill_set_block+0x225/0x360 [ 988.869389][T17292] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 988.875110][T17292] rfkill_set_block+0x1fe/0x550 [ 988.879971][T17292] rfkill_fop_write+0x2c0/0x580 [ 988.884825][T17292] ? __pfx_rfkill_fop_write+0x10/0x10 [ 988.890198][T17292] ? __pfx_bpf_lsm_inode_getlsmprop+0x10/0x10 [ 988.896267][T17292] ? security_file_permission+0x71/0x210 [ 988.901900][T17292] ? rw_verify_area+0xcf/0x680 [ 988.906667][T17292] ? __pfx_rfkill_fop_write+0x10/0x10 [ 988.912039][T17292] vfs_write+0x2a0/0x1150 [ 988.916378][T17292] ? __pfx_vfs_write+0x10/0x10 [ 988.921146][T17292] ? find_held_lock+0x2b/0x80 [ 988.925828][T17292] ? __fget_files+0x204/0x3c0 [ 988.930502][T17292] ? __fget_files+0x20e/0x3c0 [ 988.935176][T17292] ksys_write+0x1f8/0x250 [ 988.939512][T17292] ? __pfx_ksys_write+0x10/0x10 [ 988.944374][T17292] do_syscall_64+0xcd/0x4c0 [ 988.948876][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.954769][T17292] RIP: 0033:0x7f2c3d98e9a9 [ 988.959173][T17292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.978756][T17292] RSP: 002b:00007f2c3b3d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 988.987142][T17292] RAX: ffffffffffffffda RBX: 00007f2c3dbb6240 RCX: 00007f2c3d98e9a9 [ 988.995089][T17292] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 989.003035][T17292] RBP: 00007f2c3da10d69 R08: 0000000000000000 R09: 0000000000000000 [ 989.010982][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.018928][T17292] R13: 0000000000000000 R14: 00007f2c3dbb6240 R15: 00007fff2c95f278 [ 989.026909][T17292] [ 989.030193][T17292] Kernel Offset: disabled [ 989.034516][T17292] Rebooting in 86400 seconds..