last executing test programs: 17.476989116s ago: executing program 3 (id=155): syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x8, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80a, 0x401, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x2, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x6, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x868b, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x3, 0x400, 0x41, 0x6, 0xee4b, 0x2008004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdaa, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.401903992s ago: executing program 3 (id=162): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r1, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="5c020000400001002abd700004000000010000003902488008003c00282a2b001300ce002f6465762f6472692f63ffff0000fd1ff0688c50753a2bc136967024941c04e680c58ecacab8ee59c61e839757d387143e8895005e86d7ecb32336457859bc9f039e4679583bdfb942d95656cc7eac0d0e", @ANYRES32=0x0, @ANYBLOB="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"/548], 0x25c}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x40080b4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') timerfd_create(0x2, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) write$binfmt_elf64(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46022e0208ffffffffffffff7f02003e000200000059030000000000000100010009003800000004000f000500b27b3f98beab13eafe025e1e33ced08759cc6048e4bab4f19caa8e68f878de7ceaeda0afb5e1b4150babe5af1e5362d31e13579917c0ac1f4d31037d772c4ae539995b3a1eeaa11d10120b6964800d668f8029f6c8b3109b85ab5c9f1969368350de3475ce582ad8d8eb33e61a55fa1ac1ccb4bb99625e3d370a47ab1cd1fdc5db77d35a8b330cc6bb7f2f4cc5721b"], 0xcf) io_uring_setup(0x343, &(0x7f0000000000)={0x0, 0x70e6, 0x4, 0x4, 0xf2}) io_setup(0x80000001, &(0x7f0000000080)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x8a01) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000180)={0x0, 0x6, 0x5, 0x4, 0x5, 0x7, 0x7}) write(r5, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r5, 0x8b253000) 13.323941532s ago: executing program 4 (id=166): socket(0x10, 0x2, 0x0) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) open(0x0, 0x141080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_notify(r0, 0x0) 12.95235257s ago: executing program 3 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$cdc_ncm(0x2, 0x99, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x9, 0x60, 0xc, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "f9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x400}, [@dmm={0x7, 0x24, 0x14, 0x6, 0xfff}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x9, 0x60}, @dmm={0x7, 0x24, 0x14, 0x7, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x9b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x81, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x9, 0xde}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x52, 0x0, 0x3, 0x8, 0x5}, 0x61, &(0x7f00000005c0)={0x5, 0xf, 0x61, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x4, 0x2, 0xfffe}, @generic={0x3, 0x10, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5611199444cfdd81e41816a1a9baaf59"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x5, 0x7, 0xffff}, @generic={0x2e, 0x10, 0x3, "ec60eecb4eae7d6946e052683910b7e301379d63e328d3acab5e77369950ee1b60377c390d05e7d9a45366"}]}, 0x6, [{0x96, &(0x7f0000000700)=@string={0x96, 0x3, "983194256bbc4b2cba508cdad963071de2c3b21f2ea74c0f3d0c7751d4d9388e5992546f572e211f235948ec229a58dbae31d1ccfd8f82229f84e4c171442ebaf9fca6ad569444f514decb34ad0e1ae86cd66a860bb2fb07e55b89f77ccfdf500d0a1bac437379538828df7999727e7ec7b791be330fa4a7f59753cdf154f7193dc632ba14144b7e03208b6848b7f4023595ff29"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x419}}, {0x0, 0x0}, {0x94, &(0x7f0000000840)=@string={0x94, 0x3, "ace43be61def9a3a5506129152d62cafb6d876a01bef7aff57b050207ceffd3e99422c1e949218e4c4638094ec9f7c9d5651b98404541624286213ac96835f55175a69ce800fe6f3ac3449ff3e74f533b041a68bf4c4b4a8fabfbeabfe233d29d677a2a92d6f7438da2ddea42809d3f8e333aa8673fb2d80da0d2a65e548b1c8ac7ab4ae83c0e5076fb48d187fb1a7677337"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x429}}, {0x56, &(0x7f0000000940)=@string={0x56, 0x3, "f7198a6f32d1abbc28e50f3da6fdc6edecb2463278a626dbfea3027d3bf148e34c3dd68e9167e23b4c8b06a2876715ec2bdc3f2e7e48b00c15d03a00f3b17020400025af6d022a5318f29904d2ee9b8818b27668"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x20, 0x26, 0x14, {0x14, 0xf, "ef9c3861602230199f8fb49f2514a319b31d"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000b00)={0x40, 0xe, 0x67, "57a549fbe5fb00e47814732848b5c8f01d5443318560de4cb99c6a38fa6ac02428dad7db8cdec96e6bfac021ed01cd816458cbd28bbd72dedaa56f4d66e3eff37d07a802916c814efb562af21b3c7c96a90e54092f0bdff76274cbd368305e751fc8efa0006c5a"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x5, 0x100, 0x8, 0xfffc, 0x3, 0x101, 0x3, 0xec, 0xfff9, 0x1, 0xf}}, &(0x7f0000000c40)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000c80)={0x20, 0x83, 0x2}, &(0x7f0000000cc0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000d00)={0x20, 0x89, 0x2, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x400, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000240)={0xa, 0x0, [{0x0, 0x0, 0x1}, {0x2, 0x0, 0xffffffff}, {0x5, 0x0, 0x9}, {0x6, 0x0, 0x8}, {0x6, 0x0, 0xdb0}, {0x1, 0x0, 0x6}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x80100007}, {0xb, 0x0, 0x6}, {0xabe, 0x0, 0xb}, {0x9, 0x0, 0x8000000000000a}, {0x3, 0x0, 0x6}, {0x2, 0x0, 0x400000000004}, {0xc374, 0x0, 0x4}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x79}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x8000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r2, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x1, 0x4, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 10.094384939s ago: executing program 2 (id=175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a010102000000000000000000000000060000000403"], 0xfc}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 9.423142292s ago: executing program 2 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) poll(&(0x7f00000001c0)=[{r4, 0x1000}], 0x1, 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x404c0d1}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) 7.6982155s ago: executing program 0 (id=180): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) inotify_init() r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) 7.59015884s ago: executing program 3 (id=181): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}, @IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000100)={0x10, 0xc, {0x54, 0x8000, 0x10, {0x1ff, 0x5}, {0x10, 0x3}, @cond=[{0x4, 0x0, 0xd5, 0x31, 0x9, 0xf001}, {0x90, 0x1, 0x8, 0x30f, 0x3, 0x2c05}]}, {0x53, 0x1, 0x0, {0x2, 0x400}, {0x8000, 0xfffe}, @const={0x5d1, {0x2, 0x4901, 0xa, 0x5e87}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x2, 0xdc2, 0x3}}, 0x1e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x0, 0x2, 0x2, 0xfffe}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719}) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000400), 0x6, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x7, 0x2, 0x200001b, 0x8, "6151a422b8cd415a4496ce07e53081ccb9a88abe3c77c13ffffb461a34c722402f057da97e5acd032e9e2deed80662093f9b653975d7ae2f04351bb8eac503f5", "9091011ca49d27b1e3fe286c8cdd541463caedfe82d251dd41e2b34f5e8a75c6", [0x100004, 0x1000000000007]}) ioctl$LOOP_CLR_FD(r8, 0x4c01) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000080)={r3}) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) 6.377143146s ago: executing program 1 (id=183): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r1, 0x6000) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xee9a93054f3f10d5, 0x4000010, 0xffffffffffffffff, 0x7d16a000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00007f6000/0x3000)=nil, 0x3000}, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) 6.267019367s ago: executing program 2 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="58000000020601010700000000000000050000050c000780050015001d0000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x814}, 0xc400) 6.15658886s ago: executing program 4 (id=185): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) r2 = socket(0xf, 0x0, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r7}, {0x0, 0x7, 0x0, 0x0, 0x80000000000000, 0x6, 0x20000000000, 0xffffffff}, {0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x3, 0x1, 0xb7, 0x1fb, 0xfffffffb, 0xfffffff9}}, 0xe8) pipe2(&(0x7f00000003c0), 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peekuser(0x3, r8, 0x88) 6.011781875s ago: executing program 2 (id=186): r0 = socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r4 = socket$netlink(0x10, 0x3, 0x9) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xd, 0xf) mkdir(0x0, 0x0) mkdir(0x0, 0x14b) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000010100000000000000000018110000", @ANYRES32, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bca20001000000000000d94f86ffffffb70b000008000000b70400000000000085000000330000009500000000000000a24632e8ecfc5a828296"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000040)={0xc, r7}) ioctl$IOMMU_VFIO_SET_IOMMU(r6, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 6.011581006s ago: executing program 1 (id=187): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}]}, 0xa0}, 0x1, 0x0, 0x80ffffffffffffff}, 0x0) 5.210091303s ago: executing program 1 (id=188): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a010102000000000000000000000000060000000403"], 0xfc}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 5.097851929s ago: executing program 2 (id=189): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}, @IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000100)={0x10, 0xc, {0x54, 0x8000, 0x10, {0x1ff, 0x5}, {0x10, 0x3}, @cond=[{0x4, 0x0, 0xd5, 0x31, 0x9, 0xf001}, {0x90, 0x1, 0x8, 0x30f, 0x3, 0x2c05}]}, {0x53, 0x1, 0x0, {0x2, 0x400}, {0x8000, 0xfffe}, @const={0x5d1, {0x2, 0x4901, 0xa, 0x5e87}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x2, 0xdc2, 0x3}}, 0x1e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x0, 0x2, 0x2, 0xfffe}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719}) ioctl(r4, 0x8b32, &(0x7f0000000040)) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000400), 0x6, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x7, 0x2, 0x200001b, 0x8, "6151a422b8cd415a4496ce07e53081ccb9a88abe3c77c13ffffb461a34c722402f057da97e5acd032e9e2deed80662093f9b653975d7ae2f04351bb8eac503f5", "9091011ca49d27b1e3fe286c8cdd541463caedfe82d251dd41e2b34f5e8a75c6", [0x100004, 0x1000000000007]}) ioctl$LOOP_CLR_FD(r6, 0x4c01) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) 4.444074052s ago: executing program 1 (id=190): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket(0x10, 0x803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) inotify_init1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 4.356363546s ago: executing program 0 (id=191): mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto(r1, 0x0, 0x20, 0x60ec, &(0x7f00000004c0)=@phonet={0x23, 0x6, 0x2, 0xf}, 0x80) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[], 0x24, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x1e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, {0xa, 0xac, 0x10000000fff, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x40800) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r6, 0x0, 0x0, 0x20008040, &(0x7f0000000000)={0xa, 0x2, 0xffff, @local, 0x9}, 0x1c) 3.292823984s ago: executing program 1 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.247433914s ago: executing program 3 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="49c8318f378cd554ed732e0748f60011a8862d", 0x13}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf500f0ff}, 0x0) 2.203127895s ago: executing program 0 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000020000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 2.202621967s ago: executing program 3 (id=195): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000100)='ecn\x00', 0x20800, &(0x7f0000000140)={@_ha_fsid={[0x1]}, {0x70e, 0x7, 0x1, 0x7}}, 0xd, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1}) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000280)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000080)="cd", 0x1) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x3, @vbi={0x2, 0x98, 0x1, 0x31435750, [0x3, 0x9], [0x3, 0x3958], 0x1}}) sendmmsg(r3, &(0x7f0000004380), 0x34000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102400, 0x19000) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x80042, 0x0) 2.129520438s ago: executing program 4 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x5, 0x2, {0x42}}}]}, 0x38}, 0x1, 0xf1ff}, 0x0) 1.812268915s ago: executing program 4 (id=197): syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x13, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0xfffd, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0xd6, @multicast1, 0x5, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}}}}}}}}, 0x0) 1.660926192s ago: executing program 0 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x4, {0xa, 0x4e23, 0x13, @empty, 0x3}}}, 0x80, 0x0, 0x0, 0x0, 0x50}, 0x4040000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x47, 0xa, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0xf400000000000000) 1.583799092s ago: executing program 4 (id=199): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x400081, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$tipc(r3, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r3, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x4}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ftruncate(r2, 0x6000000) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) r4 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xffffff7d, 0x10000, 0x1, 0x270}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) 1.368233247s ago: executing program 1 (id=200): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x21, 0x95, {0x95, 0xc, "c3f6667401fcb7d95b16bf8543c650cd6bed61da3424b8a284dacef920a5aafcb5661c31e332ca7d96a0a742d26ee0dcfd60c6bf510595cbf0340b20fe8024f9fcf3af3c3805d9928829460fb8384205aa18eac0c98719ba99f376558d80aa257d1f4fad0fb85c6f49f37e762d145558e31d0d5a963c5f9b0eeae1f33886815ff471ab14483b60df21f5f5f9b14ff692c32ae7"}}, &(0x7f0000000100)={0x0, 0x3, 0x42, @string={0x42, 0x3, "aeb508be992aed28e8fe85c85d631486637363cbe3830b867c6fa6b7633d2746fe58a4bf2a23efc56e5a727dcb9bf59a127949faf0a04c24befdf76e4f8a4d83"}}, &(0x7f00000007c0)={0x0, 0xf, 0x148, {0x5, 0xf, 0x148, 0x6, [@generic={0xba, 0x10, 0x3, "8c3a7eea1d642b78371431dd4e18656ade8063c4f39cc118496c096c08517e2b09f4c8850f4794eafc3ef80d38f12f8f26cf9b37b952dfc53e013e5feb665ff162c692b415d7c58f5f49e95e8f6350bcbebeb9ce62f74687f6284dc22847c6df64a703090ade005931d1e849b0f91d1b580cfe08584f1eb282be3a6656bfeda138ee92b1afd47f513cefb831f453112ff8e06c9504c3b9bc39a28e823c8bb2fa7ab72fd5f89cc7e6e371775d6e18867128b85ba6a65d2e"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x6, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1, 0x5, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xfb, 0x6, 0x5}, @generic={0x64, 0x10, 0x2, "c49573f6755cc9c88d2fc0ead95ae5b25dfd793869630c800a3d100c12a02ec69fa29151f640631d52ead4ec67ab4e608f500c421dd8ccd043e13965fd5bacbdee9d229013efbf0c73f0838f5908b6e2b366de38c5848b33c2ad4e7b6c134b5434"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x80, 0xfd, "39eb79b9", "a1e9d1d3"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x7f, 0x40, 0x1, 0x1, 0x7f}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000940)={0x5f65bc280d3c44f6, 0x3, 0xbd, "11ad77b71577a851785c76bca8cdd2b5671845fe770be332a88934c300df6f3a477157b5989062fa8b7d6c70628b5e4e006ac5c455701889e5b64f6a6ba5052c6017a6bfdac245caae64ab6329bf56020b8e271113976c065f119e3ede6ee615a9ed868b272e3963a868701f761c200477b996ecca4b8bfcbd93f117d9a683d38e7b83bdc855502c9eea22a899784c89e01d4e6feb2d2e836af351d89a61882127b13b0317532a91c209c179a4df77256ff293b30f140e21282219c40e"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x7}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "30e6"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1d}}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, '/$'}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0xb}}) syz_usb_connect(0x5, 0x33c, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0xe6, 0xe2, 0xd, 0x20, 0x110a, 0x1110, 0xbb39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32a, 0x1, 0x6, 0x5, 0x60, 0xb, "", [{{0x9, 0x4, 0xe6, 0x8, 0x6, 0xea, 0xbd, 0x11, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x7ff, 0xa8}, {0x6, 0x24, 0x1a, 0x3, 0x4}}], [{{0x9, 0x5, 0x7, 0x3, 0x40, 0x0, 0xff, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}, @generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x0, 0xcc, 0x4, [@generic={0x6c, 0x24, "a52b5085bc96203bedba42b80be5da19520c5a5aad29149e6f505af606aede3fd31fbb90394f2e94723484ac9a368cdeb9938e409c199eac1350dbf57120f765cb449c04c31209edb99a29c1706fcf6a2aa441eec99844d8a88edee115bac88d5d0c321c2611762ee712"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xf, 0x4, 0x5, [@generic={0xb1, 0x22, "0d41d4deeba96ab45a61ed87e16dca442a5ed3d88f5686ebfff45af1bb5d16bd7fe9e3685a76362cd611a69f55f5087e75cb49fb1a179e51b3373dae70368e2e00770bd07bd3f9112a1a0da3d417c3f5eb601c8979c4515b6d69981ba91bf2c85ae4d0eda4c799d2632b42e4965e579ff1265d8ecb50fb38f6c1959a77011bb5de7865e619e2b5e14a378855a2cc3e3bd23b6c33b818442372d1c9aee6546910a170dab7db7bac8818441dee789527"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x5, 0x10, 0x81, [@generic={0x66, 0xd, "27c2dbd23ba4200cc47a7f10ff41d6a80374e8fb3fcaa20d4c1055776b3810de4074ff09e06738da8dc9e83ed315f127d70f023c78ae0a6e0f1b353f7f8d35f60b59092a0e5adf548852db0271721669b15ee3c2189e8dba6bea82c9f6f4260646b40e36"}, @generic={0xe7, 0x4, "1e5c3733b44b45ab08faa978b6c6204fba940ce40938a95c7cb429b181026fdab42c9c2d11123da413faf51d49be456cff849a4551fd3d6ec6063f4920fd65f41f1d7b3226841cf6629b78fa7b29a3c578fffd79d577114b45d3245d59298726af99e5a03465990ea74ea49adbe6feb6284fc50cd083324f8662b14d6d1f69509b81fef4cfe32de49ee357032b5b5041e7a8475f085d78a4856a20a097f0976e3b37f0d03ee766de6b85dd04780f3b8fdb0a0a135c24e8c5d92baf6b9bee3ca43accd4865e7ed3b0352c9bd22a662258e57616d00accdae737a91126839f51458be52bf295"}]}}, {{0x9, 0x5, 0x80, 0xb, 0x400, 0x7f, 0x94, 0x9, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x2, 0x16, 0x400, 0xac, 0x8, 0x9, [@generic={0x50, 0xa, "a90c9c25dce0ccfc0c75f1e492b0d44984232b9d22b57344ab8f779381dee0fbc0d44be09cfd6617578ee345c930373185c9ff4ec94053b5710e8d5399c4c5353605260e2906e2de00bb23365028"}]}}]}}]}}]}}, 0x0) rename(0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.172439334s ago: executing program 2 (id=201): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) timer_create(0x0, 0x0, 0x0) ptrace$cont(0x1f, 0x0, 0x80, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) 1.035607882s ago: executing program 0 (id=202): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket(0x10, 0x803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) inotify_init1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 183.569555ms ago: executing program 4 (id=203): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4007901) 0s ago: executing program 0 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0xf5ffffff, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. [ 64.864079][ T29] audit: type=1400 audit(1775040450.439:62): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.888306][ T29] audit: type=1400 audit(1775040450.459:63): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.891523][ T5792] cgroup: Unknown subsys name 'net' [ 64.918459][ T29] audit: type=1400 audit(1775040450.489:64): avc: denied { unmount } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.055986][ T5792] cgroup: Unknown subsys name 'cpuset' [ 65.064292][ T5792] cgroup: Unknown subsys name 'rlimit' [ 65.166558][ T29] audit: type=1400 audit(1775040450.739:65): avc: denied { setattr } for pid=5792 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.201364][ T29] audit: type=1400 audit(1775040450.739:66): avc: denied { create } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.231915][ T29] audit: type=1400 audit(1775040450.739:67): avc: denied { write } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.256287][ T29] audit: type=1400 audit(1775040450.739:68): avc: denied { read } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.276808][ T29] audit: type=1400 audit(1775040450.739:69): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.302391][ T29] audit: type=1400 audit(1775040450.739:70): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.317013][ T5794] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.336393][ T29] audit: type=1400 audit(1775040450.909:71): avc: denied { relabelto } for pid=5794 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.279945][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.470030][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.477873][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.483893][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.486174][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.493160][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.503345][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.507331][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.521333][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.521454][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.531628][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.538230][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.550790][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.550903][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.559397][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.572887][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.573449][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.580692][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.594922][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.595071][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.605918][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.616476][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.625864][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.627407][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.640656][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.641887][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.117553][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 69.162378][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 69.238172][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 69.338671][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 69.381024][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.389423][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.397052][ T5813] bridge_slave_0: entered allmulticast mode [ 69.405021][ T5813] bridge_slave_0: entered promiscuous mode [ 69.453113][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.460223][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.467576][ T5813] bridge_slave_1: entered allmulticast mode [ 69.474503][ T5813] bridge_slave_1: entered promiscuous mode [ 69.519290][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.526457][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.533617][ T5807] bridge_slave_0: entered allmulticast mode [ 69.540381][ T5807] bridge_slave_0: entered promiscuous mode [ 69.547670][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 69.559618][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.566775][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.574120][ T5807] bridge_slave_1: entered allmulticast mode [ 69.581334][ T5807] bridge_slave_1: entered promiscuous mode [ 69.621116][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.628301][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.635476][ T5804] bridge_slave_0: entered allmulticast mode [ 69.642220][ T5804] bridge_slave_0: entered promiscuous mode [ 69.660626][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.672226][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.702221][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.709540][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.716776][ T5804] bridge_slave_1: entered allmulticast mode [ 69.723881][ T5804] bridge_slave_1: entered promiscuous mode [ 69.758854][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.776226][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.783854][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.790974][ T5805] bridge_slave_0: entered allmulticast mode [ 69.798016][ T5805] bridge_slave_0: entered promiscuous mode [ 69.806782][ T5813] team0: Port device team_slave_0 added [ 69.812475][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.819669][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.827661][ T5805] bridge_slave_1: entered allmulticast mode [ 69.834882][ T5805] bridge_slave_1: entered promiscuous mode [ 69.847668][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.866894][ T5813] team0: Port device team_slave_1 added [ 69.874702][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.913177][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.964792][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.983306][ T5807] team0: Port device team_slave_0 added [ 69.989748][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.997172][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.023203][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.044760][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.054106][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.061213][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.068447][ T5808] bridge_slave_0: entered allmulticast mode [ 70.075596][ T5808] bridge_slave_0: entered promiscuous mode [ 70.083918][ T5807] team0: Port device team_slave_1 added [ 70.094016][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.100959][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.126938][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.138887][ T5804] team0: Port device team_slave_0 added [ 70.152446][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.159760][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.166971][ T5808] bridge_slave_1: entered allmulticast mode [ 70.173785][ T5808] bridge_slave_1: entered promiscuous mode [ 70.196110][ T5804] team0: Port device team_slave_1 added [ 70.239618][ T5805] team0: Port device team_slave_0 added [ 70.266785][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.276627][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.283634][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.309789][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.331765][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.338762][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.365178][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.377914][ T5805] team0: Port device team_slave_1 added [ 70.393429][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.403294][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.410245][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.436222][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.468241][ T5813] hsr_slave_0: entered promiscuous mode [ 70.474936][ T5813] hsr_slave_1: entered promiscuous mode [ 70.488775][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.495967][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.521903][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.568276][ T5808] team0: Port device team_slave_0 added [ 70.588003][ T5807] hsr_slave_0: entered promiscuous mode [ 70.594304][ T5807] hsr_slave_1: entered promiscuous mode [ 70.600228][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 70.606080][ T5807] Cannot create hsr debugfs directory [ 70.612142][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.619476][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.645388][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.663644][ T51] Bluetooth: hci0: command tx timeout [ 70.663647][ T5817] Bluetooth: hci2: command tx timeout [ 70.663847][ T5817] Bluetooth: hci4: command tx timeout [ 70.673505][ T5808] team0: Port device team_slave_1 added [ 70.723031][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.729978][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.755966][ T5817] Bluetooth: hci3: command tx timeout [ 70.756232][ T5817] Bluetooth: hci1: command tx timeout [ 70.761536][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.825810][ T5804] hsr_slave_0: entered promiscuous mode [ 70.831938][ T5804] hsr_slave_1: entered promiscuous mode [ 70.838101][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 70.843952][ T5804] Cannot create hsr debugfs directory [ 70.849972][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.857060][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.883205][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.925660][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.932608][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.958732][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.033369][ T5805] hsr_slave_0: entered promiscuous mode [ 71.039676][ T5805] hsr_slave_1: entered promiscuous mode [ 71.045887][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 71.051609][ T5805] Cannot create hsr debugfs directory [ 71.113851][ T5808] hsr_slave_0: entered promiscuous mode [ 71.120523][ T5808] hsr_slave_1: entered promiscuous mode [ 71.126986][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 71.135672][ T5808] Cannot create hsr debugfs directory [ 71.227864][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.235304][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.466334][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.477664][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.507339][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.525674][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.575900][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.589646][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.604381][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.621839][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.713466][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.735547][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.745191][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.754793][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.809120][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.851760][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.866821][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.886580][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.896923][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.912337][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.919679][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.941464][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.985310][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.992427][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.006139][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.036825][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.057486][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.070951][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.080827][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.090698][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.110701][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.117931][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.144889][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.152016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.183984][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.230277][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.277320][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.284619][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.307210][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 72.307226][ T29] audit: type=1400 audit(1775040457.879:84): avc: denied { sys_module } for pid=5813 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.310820][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.352240][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.359355][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.464445][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.505363][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.537544][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.544706][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.562507][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.569689][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.639407][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.691956][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.731710][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.746326][ T5817] Bluetooth: hci0: command tx timeout [ 72.746380][ T51] Bluetooth: hci4: command tx timeout [ 72.762748][ T5821] Bluetooth: hci2: command tx timeout [ 72.769527][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.805463][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.812576][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.824477][ T5821] Bluetooth: hci1: command tx timeout [ 72.830879][ T51] Bluetooth: hci3: command tx timeout [ 72.837882][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.845079][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.890695][ T5813] veth0_vlan: entered promiscuous mode [ 72.920750][ T5813] veth1_vlan: entered promiscuous mode [ 72.967788][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.008230][ T5813] veth0_macvtap: entered promiscuous mode [ 73.050832][ T5813] veth1_macvtap: entered promiscuous mode [ 73.098169][ T5807] veth0_vlan: entered promiscuous mode [ 73.119021][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.147869][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.176658][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.185816][ T5807] veth1_vlan: entered promiscuous mode [ 73.196562][ T5804] veth0_vlan: entered promiscuous mode [ 73.236201][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.247802][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.272421][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.287488][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.319886][ T5804] veth1_vlan: entered promiscuous mode [ 73.368801][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.447525][ T5807] veth0_macvtap: entered promiscuous mode [ 73.473502][ T5807] veth1_macvtap: entered promiscuous mode [ 73.481757][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.484469][ T5804] veth0_macvtap: entered promiscuous mode [ 73.495676][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.504908][ T5805] veth0_vlan: entered promiscuous mode [ 73.541013][ T5805] veth1_vlan: entered promiscuous mode [ 73.568835][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.587576][ T5804] veth1_macvtap: entered promiscuous mode [ 73.601295][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.618465][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.630100][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.660390][ T29] audit: type=1400 audit(1775040459.229:85): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.p5QH4q/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.665231][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.714856][ T29] audit: type=1400 audit(1775040459.269:86): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.716903][ T5805] veth0_macvtap: entered promiscuous mode [ 73.754374][ T5805] veth1_macvtap: entered promiscuous mode [ 73.762867][ T29] audit: type=1400 audit(1775040459.269:87): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.p5QH4q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.790423][ T29] audit: type=1400 audit(1775040459.269:88): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.819490][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.828371][ T3463] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.832713][ T29] audit: type=1400 audit(1775040459.269:89): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.p5QH4q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.841050][ T3463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.873794][ T29] audit: type=1400 audit(1775040459.269:90): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.p5QH4q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.901523][ T29] audit: type=1400 audit(1775040459.279:91): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.904729][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.921439][ T29] audit: type=1400 audit(1775040459.309:92): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.961399][ T29] audit: type=1400 audit(1775040459.309:93): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=7017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.971946][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.005454][ T3463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.017020][ T3463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.054384][ T3463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.102123][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.122322][ T162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.133935][ T162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.166926][ T162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.223543][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.243801][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.260370][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.270625][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.317162][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.333833][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.363009][ T5808] veth0_vlan: entered promiscuous mode [ 74.433116][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.441849][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.474718][ T5808] veth1_vlan: entered promiscuous mode [ 74.519322][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.545153][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.568781][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.587282][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.687328][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.702559][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.723961][ T5808] veth0_macvtap: entered promiscuous mode [ 74.805198][ T5808] veth1_macvtap: entered promiscuous mode [ 74.837124][ T5821] Bluetooth: hci0: command tx timeout [ 74.842580][ T5821] Bluetooth: hci2: command tx timeout [ 74.843880][ T51] Bluetooth: hci4: command tx timeout [ 74.863636][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.888214][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.895861][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.904065][ T51] Bluetooth: hci1: command tx timeout [ 74.904153][ T5821] Bluetooth: hci3: command tx timeout [ 74.917458][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.995039][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.162347][ T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.640051][ T3463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.688407][ T3463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.164354][ T5952] Cannot find del_set index 0 as target [ 76.339243][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.386633][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.740354][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.764748][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.992769][ T5821] Bluetooth: hci4: command tx timeout [ 76.998347][ T5821] Bluetooth: hci0: command tx timeout [ 77.005934][ T5821] Bluetooth: hci2: command tx timeout [ 77.011603][ T5821] Bluetooth: hci1: command tx timeout [ 77.018638][ T5821] Bluetooth: hci3: command tx timeout [ 77.440943][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 77.440960][ T29] audit: type=1400 audit(1775040463.009:128): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 77.731845][ T29] audit: type=1400 audit(1775040463.299:129): avc: denied { create } for pid=5973 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.766898][ T29] audit: type=1400 audit(1775040463.299:130): avc: denied { perfmon } for pid=5973 comm="syz.2.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.794942][ T29] audit: type=1400 audit(1775040463.299:131): avc: denied { prog_run } for pid=5973 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.906811][ T29] audit: type=1400 audit(1775040463.409:132): avc: denied { read write } for pid=5972 comm="syz.4.5" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.931214][ T29] audit: type=1400 audit(1775040463.409:133): avc: denied { open } for pid=5972 comm="syz.4.5" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.374988][ T5987] input: syz0 as /devices/virtual/input/input5 [ 78.420804][ T29] audit: type=1400 audit(1775040463.459:134): avc: denied { ioctl } for pid=5972 comm="syz.4.5" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.531480][ T5989] netlink: 552 bytes leftover after parsing attributes in process `syz.1.16'. [ 78.835929][ T5989] openvswitch: netlink: Flow key attr not present in new flow. [ 78.851171][ T29] audit: type=1400 audit(1775040463.529:135): avc: denied { append } for pid=5979 comm="syz.1.16" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.882524][ T5991] process 'syz.0.15' launched './file2' with NULL argv: empty string added [ 79.001741][ T29] audit: type=1400 audit(1775040463.609:136): avc: denied { read write } for pid=5973 comm="syz.2.17" name="video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.045862][ T5980] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.092308][ T5980] loop6: detected capacity change from 0 to 8 [ 79.155693][ T29] audit: type=1400 audit(1775040463.609:137): avc: denied { open } for pid=5973 comm="syz.2.17" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.514996][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 80.074428][ T6012] fuseblk: Unknown parameter '}SÔdÜ™¼;ˆ¬×Í ­‹&:M«Éw‘™§G [ 80.074428][ T6012] IÊ*ÜýŠ7iÎ3îÆHµ^ÚT»Ù­ê#µAÐPPœîâO/zßÒ§]Šø7<øT9@Rø­ Èc¤vµ£ë%ûÕ@à<· [ 101.803065][ T6292] dump_stack_lvl+0x100/0x190 [ 101.803091][ T6292] should_fail_ex.cold+0x5/0xa [ 101.803106][ T6292] should_failslab+0xc2/0x120 [ 101.803119][ T6292] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.803134][ T6292] ? ima_inode_get+0x11f/0x580 [ 101.803154][ T6292] ima_inode_get+0x11f/0x580 [ 101.803171][ T6292] process_measurement+0x1213/0x2350 [ 101.803192][ T6292] ? __pfx_process_measurement+0x10/0x10 [ 101.803207][ T6292] ? avc_has_perm_noaudit+0x145/0x3b0 [ 101.803223][ T6292] ? __pfx_avc_has_perm+0x10/0x10 [ 101.803236][ T6292] ? find_held_lock+0x2b/0x80 [ 101.803250][ T6292] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 101.803277][ T6292] ? file_map_prot_check+0x236/0x3f0 [ 101.803292][ T6292] ima_file_mmap+0x1bb/0x1e0 [ 101.803308][ T6292] ? __pfx_ima_file_mmap+0x10/0x10 [ 101.803324][ T6292] ? proc_fail_nth_write+0x9f/0x220 [ 101.803343][ T6292] security_mmap_file+0x278/0x9b0 [ 101.803360][ T6292] vm_mmap_pgoff+0xec/0x470 [ 101.803374][ T6292] ? find_held_lock+0x2b/0x80 [ 101.803388][ T6292] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 101.803399][ T6292] ? __fget_files+0x215/0x3d0 [ 101.803413][ T6292] ? __fget_files+0x21f/0x3d0 [ 101.803428][ T6292] ksys_mmap_pgoff+0x3c8/0x650 [ 101.803442][ T6292] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 101.803453][ T6292] ? fput+0x79/0x100 [ 101.803465][ T6292] ? ksys_write+0x1ac/0x250 [ 101.803475][ T6292] ? __pfx_ksys_write+0x10/0x10 [ 101.803487][ T6292] __x64_sys_mmap+0x125/0x190 [ 101.803502][ T6292] do_syscall_64+0x106/0xf80 [ 101.803518][ T6292] ? clear_bhb_loop+0x40/0x90 [ 101.803532][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.803543][ T6292] RIP: 0033:0x7f4dc299c819 [ 101.803553][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.803566][ T6292] RSP: 002b:00007f4dc3940028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.803579][ T6292] RAX: ffffffffffffffda RBX: 00007f4dc2c15fa0 RCX: 00007f4dc299c819 [ 101.803587][ T6292] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 101.803593][ T6292] RBP: 00007f4dc3940090 R08: 0000000000000006 R09: 0000000000000000 [ 101.803599][ T6292] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 101.803606][ T6292] R13: 00007f4dc2c16038 R14: 00007f4dc2c15fa0 R15: 00007ffddc5b20c8 [ 101.803621][ T6292] [ 102.372762][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.99'. [ 103.216882][ T6315] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 103.532718][ T42] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.730730][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.772883][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 103.838289][ T42] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 103.875303][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.891731][ T42] usb 2-1: Product: syz [ 103.914669][ T42] usb 2-1: Manufacturer: syz [ 103.922920][ T42] usb 2-1: SerialNumber: syz [ 104.099157][ T6325] netlink: 552 bytes leftover after parsing attributes in process `syz.4.108'. [ 104.108259][ T6325] openvswitch: netlink: Flow key attr not present in new flow. [ 104.696266][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.725838][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.816527][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.109'. [ 105.252921][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 105.252937][ T29] audit: type=1400 audit(1775040490.819:329): avc: denied { create } for pid=6332 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.294128][ T42] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 105.307020][ T42] usb 2-1: USB disconnect, device number 6 [ 105.630157][ T29] audit: type=1400 audit(1775040491.029:330): avc: denied { read write } for pid=6343 comm="syz.2.114" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.711493][ T29] audit: type=1400 audit(1775040491.029:331): avc: denied { open } for pid=6343 comm="syz.2.114" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.738198][ T29] audit: type=1400 audit(1775040491.029:332): avc: denied { ioctl } for pid=6343 comm="syz.2.114" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.872847][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.953332][ T29] audit: type=1400 audit(1775040491.519:333): avc: denied { read write } for pid=6350 comm="syz.1.116" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 106.038021][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.052790][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.065445][ T29] audit: type=1400 audit(1775040491.529:334): avc: denied { open } for pid=6350 comm="syz.1.116" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 106.096177][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.134039][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.204349][ T29] audit: type=1400 audit(1775040491.549:335): avc: denied { mounton } for pid=6350 comm="syz.1.116" path="/26/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.237050][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.257376][ T9] usb 4-1: Product: syz [ 106.272705][ T9] usb 4-1: Manufacturer: syz [ 106.277491][ T9] usb 4-1: SerialNumber: syz [ 106.338226][ T29] audit: type=1400 audit(1775040491.549:336): avc: denied { mount } for pid=6350 comm="syz.1.116" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 106.411048][ T29] audit: type=1400 audit(1775040491.569:337): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.021018][ T9] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 108.047498][ T9] cdc_ncm 4-1:1.0: bind() failure [ 108.063180][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 108.070946][ T9] cdc_ncm 4-1:1.1: bind() failure [ 108.087142][ T9] usb 4-1: USB disconnect, device number 3 [ 109.163061][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 109.435282][ T29] audit: type=1400 audit(1775040494.999:338): avc: denied { write } for pid=6378 comm="syz.1.123" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.486410][ T6379] raw_sendmsg: syz.1.123 forgot to set AF_INET. Fix it! [ 110.135071][ T6371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6371 comm=syz.0.121 [ 110.274486][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 110.274501][ T29] audit: type=1400 audit(1775040495.849:347): avc: denied { connect } for pid=6390 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.399615][ T10] IPVS: starting estimator thread 0... [ 110.406628][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.415217][ T29] audit: type=1400 audit(1775040495.879:348): avc: denied { setopt } for pid=6390 comm="syz.1.126" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.437706][ T29] audit: type=1400 audit(1775040495.879:349): avc: denied { bind } for pid=6390 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.513621][ T6392] IPVS: using max 36 ests per chain, 86400 per kthread [ 110.982978][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 111.005517][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 111.030268][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.057509][ T9] usb 5-1: Product: syz [ 111.082885][ T9] usb 5-1: Manufacturer: syz [ 111.166333][ T9] usb 5-1: SerialNumber: syz [ 111.197563][ T9] usb 5-1: config 0 descriptor?? [ 111.211461][ T6398] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 111.224663][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 111.244163][ T9] usb 5-1: Detected FT-X [ 111.423811][ T29] audit: type=1400 audit(1775040496.999:350): avc: denied { execute_no_trans } for pid=6395 comm="syz.0.127" path="/24/file2" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.027573][ T29] audit: type=1400 audit(1775040497.099:351): avc: denied { write } for pid=6397 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.081439][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 112.097185][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 112.108206][ T9] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 112.138950][ T29] audit: type=1400 audit(1775040497.569:352): avc: denied { ioctl } for pid=6395 comm="syz.0.127" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.197215][ T6401] loop6: detected capacity change from 8 to 7 [ 112.211481][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 112.260929][ T9] usb 5-1: USB disconnect, device number 6 [ 112.270373][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 112.310738][ T29] audit: type=1400 audit(1775040497.569:353): avc: denied { read write } for pid=6395 comm="syz.0.127" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.311324][ T9] ftdi_sio 5-1:0.0: device disconnected [ 112.380818][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 112.392764][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.486035][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 112.551921][ T29] audit: type=1400 audit(1775040497.579:354): avc: denied { open } for pid=6395 comm="syz.0.127" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.630296][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.666483][ T29] audit: type=1400 audit(1775040497.619:355): avc: denied { create } for pid=6386 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.692243][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 112.703195][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.788078][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 112.815639][ T29] audit: type=1400 audit(1775040497.629:356): avc: denied { create } for pid=6386 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.969954][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.981555][ T6416] capability: warning: `syz.4.132' uses 32-bit capabilities (legacy support in use) [ 113.607393][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.640908][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.670586][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.709880][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.781600][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.972692][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.173954][ T9] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.189732][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 114.255074][ T9] usb 5-1: string descriptor 0 read error: -22 [ 114.267455][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.40 [ 114.279958][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.436731][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.462413][ T6401] ldm_validate_partition_table(): Disk read failed. [ 114.512377][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.562744][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.572658][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.610741][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 114.638201][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 114.655581][ T9] usb 5-1: USB disconnect, device number 7 [ 114.661074][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.991140][ T6401] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.009752][ T6401] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.081925][ T6401] Dev loop6: unable to read RDB block 0 [ 115.131250][ T6401] loop6: unable to read partition table [ 115.145658][ T6437] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 115.257726][ T6401] loop6: partition table beyond EOD, truncated [ 115.277289][ T6401] loop_reread_partitions: partition scan of loop6 (aQ¤"¸ÍAZD–Îå0̹¨Š¾started [ 139.736978][ C0] WARNING: net/mac80211/rx.c:5471 at ieee80211_rx_list+0x1547/0x2fc0, CPU#0: syz.2.201/6678 [ 139.742686][ T5882] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.750705][ C0] Modules linked in: [ 139.762308][ C0] CPU: 0 UID: 0 PID: 6678 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT(full) [ 139.771535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.781596][ C0] RIP: 0010:ieee80211_rx_list+0x1547/0x2fc0 [ 139.787507][ C0] Code: 3d 4e 1f dd 05 41 0f b6 d5 0f b6 f3 67 48 0f b9 3a e9 ad ef ff ff e8 78 8d fb f6 90 0f 0b 90 e9 58 ee ff ff e8 6a 8d fb f6 90 <0f> 0b 90 e9 91 ef ff ff e8 5c 8d fb f6 44 0f b6 75 48 bf 30 00 00 [ 139.807120][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00010246 [ 139.813194][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b0d57bd [ 139.821151][ C0] RDX: ffff8880337b24c0 RSI: ffffffff8b0d6a76 RDI: ffff8880337b24c0 [ 139.829129][ C0] RBP: ffff888057a02000 R08: 0000000000000001 R09: 0000000000000000 [ 139.837106][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888057a020d8 [ 139.845104][ C0] R13: ffff88802e2cb168 R14: ffff88802e2c8720 R15: ffff88802e2c8ec0 [ 139.853084][ C0] FS: 00007f4dc39406c0(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 139.862003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.868600][ C0] CR2: 00007fdf8912ba40 CR3: 0000000079606000 CR4: 00000000003526f0 [ 139.876590][ C0] Call Trace: [ 139.879855][ C0] [ 139.882707][ C0] ? __lock_acquire+0x4a5/0x2630 [ 139.887643][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 139.893109][ C0] ? __lock_acquire+0x4a5/0x2630 [ 139.898036][ C0] ? lock_acquire+0x1cf/0x380 [ 139.902780][ C0] ieee80211_rx_napi+0xdc/0x400 [ 139.907628][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 139.913102][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 139.918332][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 139.924191][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 139.930203][ C0] tasklet_action_common+0x2de/0x3d0 [ 139.935556][ C0] handle_softirqs+0x1eb/0x9e0 [ 139.940450][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 139.945763][ C0] ? __alloc_skb+0x5b7/0x710 [ 139.950348][ C0] do_softirq+0xac/0xe0 [ 139.954524][ C0] [ 139.957441][ C0] [ 139.960360][ C0] __local_bh_enable_ip+0xf8/0x120 [ 139.965498][ C0] __alloc_skb+0x5db/0x710 [ 139.969911][ C0] ? __alloc_skb+0x5b7/0x710 [ 139.974513][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 139.979876][ C0] ? if_nlmsg_size+0x5f6/0xd20 [ 139.984651][ C0] rtmsg_ifinfo_build_skb+0x81/0x260 [ 139.989966][ C0] rtmsg_ifinfo+0xa4/0x1b0 [ 139.994459][ C0] netif_close_many+0x2fc/0x630 [ 139.999315][ C0] ? __pfx_netif_close_many+0x10/0x10 [ 140.004740][ C0] ? __mutex_unlock_slowpath+0x15c/0x790 [ 140.010401][ C0] netif_close+0x17f/0x230 [ 140.014834][ C0] ? __pfx_netif_close+0x10/0x10 [ 140.019764][ C0] dev_close+0xaa/0x240 [ 140.023938][ C0] nl80211_del_interface+0xec/0x190 [ 140.029129][ C0] genl_family_rcv_msg_doit+0x214/0x300 [ 140.034691][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.040755][ C0] ? bpf_lsm_capable+0x9/0x10 [ 140.045452][ C0] ? security_capable+0x80/0x260 [ 140.050388][ C0] ? ns_capable+0xd2/0xf0 [ 140.054761][ C0] genl_rcv_msg+0x560/0x800 [ 140.059262][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.064300][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 140.069663][ C0] ? __pfx_nl80211_del_interface+0x10/0x10 [ 140.075480][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 140.080939][ C0] netlink_rcv_skb+0x159/0x420 [ 140.085768][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.090786][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.096105][ C0] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.101387][ C0] genl_rcv+0x28/0x40 [ 140.105381][ C0] netlink_unicast+0x5aa/0x870 [ 140.110143][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 140.115469][ C0] netlink_sendmsg+0x8b0/0xda0 [ 140.120240][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.125558][ C0] ? __might_fault+0x90/0x140 [ 140.130297][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 140.135092][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.140393][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.145735][ C0] ? try_to_wake_up+0x644/0x1a80 [ 140.150676][ C0] ___sys_sendmsg+0x190/0x1e0 [ 140.155372][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.160561][ C0] ? futex_private_hash_put+0x107/0x1c0 [ 140.166153][ C0] __sys_sendmsg+0x170/0x220 [ 140.170739][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.175868][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 140.180804][ C0] do_syscall_64+0x106/0xf80 [ 140.185443][ C0] ? clear_bhb_loop+0x40/0x90 [ 140.190108][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.196004][ C0] RIP: 0033:0x7f4dc299c819 [ 140.200410][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.220048][ C0] RSP: 002b:00007f4dc3940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.228486][ C0] RAX: ffffffffffffffda RBX: 00007f4dc2c15fa0 RCX: 00007f4dc299c819 [ 140.236463][ C0] RDX: 0000000002000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 140.244445][ C0] RBP: 00007f4dc2a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 140.252398][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.260370][ C0] R13: 00007f4dc2c16038 R14: 00007f4dc2c15fa0 R15: 00007ffddc5b20c8 [ 140.268353][ C0] [ 140.271360][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.278624][ C0] CPU: 0 UID: 0 PID: 6678 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT(full) [ 140.287799][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.297837][ C0] Call Trace: [ 140.301118][ C0] [ 140.303967][ C0] dump_stack_lvl+0x100/0x190 [ 140.308645][ C0] vpanic+0x552/0x970 [ 140.312616][ C0] ? __pfx_vpanic+0x10/0x10 [ 140.317122][ C0] panic+0xd1/0xe0 [ 140.320823][ C0] ? __pfx_panic+0x10/0x10 [ 140.325226][ C0] ? check_panic_on_warn+0x1f/0x90 [ 140.330319][ C0] check_panic_on_warn.cold+0x19/0x34 [ 140.335668][ C0] ? ieee80211_rx_list+0x1547/0x2fc0 [ 140.340953][ C0] __warn.cold+0x191/0x348 [ 140.345352][ C0] __report_bug+0x296/0x3d0 [ 140.349838][ C0] ? ieee80211_rx_list+0x1547/0x2fc0 [ 140.355124][ C0] ? __pfx___report_bug+0x10/0x10 [ 140.360132][ C0] ? lock_acquire+0x1cf/0x380 [ 140.364795][ C0] ? find_held_lock+0x2b/0x80 [ 140.369453][ C0] ? ieee80211_get_buffered_bc+0x4fe/0x8d0 [ 140.375242][ C0] ? ieee80211_get_buffered_bc+0x4fe/0x8d0 [ 140.381039][ C0] ? ieee80211_rx_list+0x1547/0x2fc0 [ 140.386308][ C0] report_bug+0xb2/0x220 [ 140.390536][ C0] ? ieee80211_rx_list+0x1547/0x2fc0 [ 140.395806][ C0] handle_bug+0x16a/0x2a0 [ 140.400115][ C0] exc_invalid_op+0x17/0x50 [ 140.404683][ C0] asm_exc_invalid_op+0x1a/0x20 [ 140.409512][ C0] RIP: 0010:ieee80211_rx_list+0x1547/0x2fc0 [ 140.415389][ C0] Code: 3d 4e 1f dd 05 41 0f b6 d5 0f b6 f3 67 48 0f b9 3a e9 ad ef ff ff e8 78 8d fb f6 90 0f 0b 90 e9 58 ee ff ff e8 6a 8d fb f6 90 <0f> 0b 90 e9 91 ef ff ff e8 5c 8d fb f6 44 0f b6 75 48 bf 30 00 00 [ 140.434980][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00010246 [ 140.441027][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b0d57bd [ 140.448979][ C0] RDX: ffff8880337b24c0 RSI: ffffffff8b0d6a76 RDI: ffff8880337b24c0 [ 140.456931][ C0] RBP: ffff888057a02000 R08: 0000000000000001 R09: 0000000000000000 [ 140.464880][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888057a020d8 [ 140.472831][ C0] R13: ffff88802e2cb168 R14: ffff88802e2c8720 R15: ffff88802e2c8ec0 [ 140.480789][ C0] ? ieee80211_rx_list+0x28d/0x2fc0 [ 140.485974][ C0] ? ieee80211_rx_list+0x1546/0x2fc0 [ 140.491250][ C0] ? __lock_acquire+0x4a5/0x2630 [ 140.496171][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 140.501612][ C0] ? __lock_acquire+0x4a5/0x2630 [ 140.506616][ C0] ? lock_acquire+0x1cf/0x380 [ 140.511275][ C0] ieee80211_rx_napi+0xdc/0x400 [ 140.516111][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 140.521551][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 140.526734][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 140.532526][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 140.538487][ C0] tasklet_action_common+0x2de/0x3d0 [ 140.543760][ C0] handle_softirqs+0x1eb/0x9e0 [ 140.548508][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 140.553776][ C0] ? __alloc_skb+0x5b7/0x710 [ 140.558351][ C0] do_softirq+0xac/0xe0 [ 140.562497][ C0] [ 140.565404][ C0] [ 140.568311][ C0] __local_bh_enable_ip+0xf8/0x120 [ 140.573493][ C0] __alloc_skb+0x5db/0x710 [ 140.577891][ C0] ? __alloc_skb+0x5b7/0x710 [ 140.582462][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 140.587379][ C0] ? if_nlmsg_size+0x5f6/0xd20 [ 140.592129][ C0] rtmsg_ifinfo_build_skb+0x81/0x260 [ 140.597401][ C0] rtmsg_ifinfo+0xa4/0x1b0 [ 140.601816][ C0] netif_close_many+0x2fc/0x630 [ 140.606647][ C0] ? __pfx_netif_close_many+0x10/0x10 [ 140.611997][ C0] ? __mutex_unlock_slowpath+0x15c/0x790 [ 140.617617][ C0] netif_close+0x17f/0x230 [ 140.622011][ C0] ? __pfx_netif_close+0x10/0x10 [ 140.626932][ C0] dev_close+0xaa/0x240 [ 140.631078][ C0] nl80211_del_interface+0xec/0x190 [ 140.636255][ C0] genl_family_rcv_msg_doit+0x214/0x300 [ 140.641782][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.647832][ C0] ? bpf_lsm_capable+0x9/0x10 [ 140.652488][ C0] ? security_capable+0x80/0x260 [ 140.657410][ C0] ? ns_capable+0xd2/0xf0 [ 140.661720][ C0] genl_rcv_msg+0x560/0x800 [ 140.666206][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.671208][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 140.676586][ C0] ? __pfx_nl80211_del_interface+0x10/0x10 [ 140.682376][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 140.687829][ C0] netlink_rcv_skb+0x159/0x420 [ 140.692584][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.697604][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.702879][ C0] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.708154][ C0] genl_rcv+0x28/0x40 [ 140.712118][ C0] netlink_unicast+0x5aa/0x870 [ 140.716868][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 140.722146][ C0] netlink_sendmsg+0x8b0/0xda0 [ 140.726900][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.732190][ C0] ? __might_fault+0x90/0x140 [ 140.736870][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 140.741632][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.746921][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.752197][ C0] ? try_to_wake_up+0x644/0x1a80 [ 140.757135][ C0] ___sys_sendmsg+0x190/0x1e0 [ 140.761809][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.766990][ C0] ? futex_private_hash_put+0x107/0x1c0 [ 140.772541][ C0] __sys_sendmsg+0x170/0x220 [ 140.777133][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.782265][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 140.787196][ C0] do_syscall_64+0x106/0xf80 [ 140.791775][ C0] ? clear_bhb_loop+0x40/0x90 [ 140.796436][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.802336][ C0] RIP: 0033:0x7f4dc299c819 [ 140.806733][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.826323][ C0] RSP: 002b:00007f4dc3940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.834742][ C0] RAX: ffffffffffffffda RBX: 00007f4dc2c15fa0 RCX: 00007f4dc299c819 [ 140.842698][ C0] RDX: 0000000002000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 140.850648][ C0] RBP: 00007f4dc2a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 140.858598][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.866556][ C0] R13: 00007f4dc2c16038 R14: 00007f4dc2c15fa0 R15: 00007ffddc5b20c8 [ 140.874521][ C0] [ 140.877829][ C0] Kernel Offset: disabled [ 140.882142][ C0] Rebooting in 86400 seconds..