last executing test programs: 6m11.234777033s ago: executing program 4 (id=175): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x1000000005, 0x141001) dup(r1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe8f, &(0x7f0000000000)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x4000032f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x44, 0x4007, @fd_index=0x1, 0x1, 0x0, 0x0, 0x14, 0x1, {0x8000}}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80642) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000100)={0x4, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x6, '\x00', @value64=0x7}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) socket$unix(0x1, 0x2, 0x0) 6m9.85356974s ago: executing program 4 (id=178): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 6m9.554703898s ago: executing program 4 (id=181): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0xa, 0x1b2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000004000010000200000000002000"/36], 0x24, 0x3) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r8, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}]) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0x7, 0xfffffffffffffea5) listen(r3, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) dup3(r1, r0, 0x0) 6m6.889520994s ago: executing program 4 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x994f3b11acfed17e, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 6m6.15093236s ago: executing program 4 (id=199): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m5.806844042s ago: executing program 2 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000800000900020073797a3000000000240007800c00028008000140e00000020c00018008000140e0000002050014001f0000000500050002000000050001"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="c1188e19b95d02ff4284860186dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x2f, 0x36, 0x8, 0x3, 0x41, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x1, 0x80, 0x7a, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x2f, 0x36, 0x8, 0x3, 0x41, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x1, 0x80, 0x7a, 0x6}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0xb8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x90, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x4}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0x8}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}]}, 0xb8}}, 0x0) 6m3.717593891s ago: executing program 4 (id=205): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='./file0\x00', 0x1400037e) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffe000) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000005c0)=0x9) r2 = socket$inet6(0xa, 0x3, 0xfe) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="290000e288000000"], 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x0, 0x1210c2) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000280)="73ed3cb3746c19f6f40205c3b9c4f54a84ccbe0be39b851af2b3fc4fb201cc26b1e65e237189d0df793ac4132eaa27c6cf653b", 0x33}, {&(0x7f00000002c0)="8ee61a516f218299a5b7760392", 0xd}], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, r3) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES64=r9, @ANYRES16=r3, @ANYRESDEC=r3, @ANYRES32=r11, @ANYRES8=r6], 0x2c}, 0x1, 0x0, 0x0, 0x404c041}, 0x8000) ioctl$KVM_RUN(r10, 0xae80, 0x0) 6m3.617383283s ago: executing program 2 (id=207): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 6m2.42557964s ago: executing program 32 (id=205): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='./file0\x00', 0x1400037e) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffe000) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000005c0)=0x9) r2 = socket$inet6(0xa, 0x3, 0xfe) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="290000e288000000"], 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x0, 0x1210c2) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000280)="73ed3cb3746c19f6f40205c3b9c4f54a84ccbe0be39b851af2b3fc4fb201cc26b1e65e237189d0df793ac4132eaa27c6cf653b", 0x33}, {&(0x7f00000002c0)="8ee61a516f218299a5b7760392", 0xd}], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, r3) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES64=r9, @ANYRES16=r3, @ANYRESDEC=r3, @ANYRES32=r11, @ANYRES8=r6], 0x2c}, 0x1, 0x0, 0x0, 0x404c041}, 0x8000) ioctl$KVM_RUN(r10, 0xae80, 0x0) 6m2.400365885s ago: executing program 2 (id=211): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6m1.706745438s ago: executing program 2 (id=214): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) pipe(&(0x7f0000000500)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x709, 0x70bd25, 0xfffffffd}, 0x14}}, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r10, 0x1, {0x0, 0x1, 0x2}, 0xff}, 0x18) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000180)={0x1d, r10, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x8}, 0x94) 6m0.927428544s ago: executing program 2 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (fail_nth: 1) 6m0.383447535s ago: executing program 2 (id=220): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 5m52.896517454s ago: executing program 0 (id=236): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x985201) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1b, 0x0, "8d99a645ed46d5335dfa4efb80cc9bd36b93b23705000000a539ec68114b5aba1c98911df53a93ea4d0436aa3592a4791300", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd819923000000000000000000000000000200", [0x80, 0x87]}}) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff, 0x4000) getpgrp(0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000000100), 0x41000004, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x2, 0x2, 0x10, 0x1d, "22b409b08352294f11220b333898db01a0cabd40f4ab6fd3d77c222fce572f35a956e7922ed67d4a8a5d47375dafa2face2ae4a77b721d437a1395578ec747c3", "1cae94a1e05df9e1478038136088ce23dc3cc42ebe9a8ab6769db2db8d8e9b52", [0x7, 0x80]}) 5m52.28675241s ago: executing program 0 (id=237): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002e80)=@delchain={0x120, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xb0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_simple={0x94, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x65, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae05188ecbd7a056448e5395b1276519371d89230f9862fd732"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) inotify_init1(0x80800) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000090) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c0100, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000080)={0x93b, 0x1, 0x4000}) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r7, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000000)) 5m51.1735762s ago: executing program 0 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={r3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = fcntl$dupfd(r7, 0x406, r0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x1114, 0x2c, 0x300, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10e4, 0x2, [@TCA_CGROUP_EMATCHES={0x10e0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0xa}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x38, 0x3, 0x0, 0x0, {{0x800, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x101}, {0x7, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x401, 0x1, 0xb}, {0x0, 0x0, 0x4, 0x1, 0xf, 0x2, 0x3}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x9}, {0x0, 0xa, 0x2, "864c91c4886a55aa5749"}}}]}, @TCA_EMATCH_TREE_LIST={0x1048, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x5}, {0xfffffffd, 0x6, 0x9, 0x2}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x5}, "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"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x3}, {0x9, 0xa, 0x2, "065f715b4b04c40dcce0"}}}]}]}]}}]}, 0x1114}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 5m50.577232024s ago: executing program 0 (id=243): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000", @ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m49.662722374s ago: executing program 0 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x6, 0xcbff, 0x0, {0x5, 0x6, 0x200000003, 0x6c, 0x7, 0x40000000000d, 0x3, 0xfffff2df, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x100, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) setpgid(r0, 0x0) setpgid(0x0, r0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r4, 0x400455c8, 0x9) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f00000011c0)}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) creat(&(0x7f0000001380)='./file0\x00', 0x4) 5m47.166507607s ago: executing program 0 (id=254): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x400) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (fail_nth: 1) 5m44.823123276s ago: executing program 33 (id=220): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 5m31.994796091s ago: executing program 34 (id=254): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x400) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (fail_nth: 1) 5m5.433639244s ago: executing program 3 (id=360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) recvmsg(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}, 0x0) 5m5.122353019s ago: executing program 3 (id=362): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket(0x2a, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000580)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000140)=')', 0x1}], 0x2}}], 0x1, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, r1}}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0xc00, 0x0) fsync(r4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60dfaeed0010110000000000000000000000b5f3a65d247a4426986efc820000000000ff0200001a000000000000000000000100000e22"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r8, 0x11a, 0x3, 0x0, 0x0) 5m3.928235817s ago: executing program 6 (id=366): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x1, 0x3, 0x1800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 5m3.640903733s ago: executing program 3 (id=369): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 5m3.060573583s ago: executing program 6 (id=370): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x60800) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f00000011c0)) (fail_nth: 1) 5m2.575500328s ago: executing program 3 (id=373): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaeabb80000000000086dd61"], 0x0) 5m2.238625003s ago: executing program 6 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)) 5m1.98681588s ago: executing program 3 (id=377): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r5, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e00)='auxv\x00') readv(r7, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)=""/213, 0xd5}], 0x2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) write$sndseq(r6, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xfc}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b04101e8c00000001090212000100000000090401"], 0x0) 5m1.480902009s ago: executing program 6 (id=379): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x20, &(0x7f0000001140)=0x0) r4 = syz_clone(0x40000, &(0x7f0000000300)="421a29e86a768f729b791e40bf590ed297b19ab4c8ea33240f49b955976a9bc840d1ed4e9c6718e52230a60bbbeedc9e279524a25782267b23b5c0f362a5931af0262e44a11087ed6e5055fb754c47bb929c5db446b9d1dddca6196f5a5abb7a", 0x60, &(0x7f0000000140), &(0x7f0000000380), &(0x7f00000003c0)="2253efcc071c0535c661ca9fab82273f4052a4f583") r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000540)=0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000480)={'\x00', 0x81, 0x4, 0x5223, 0x1, 0x54, 0xffffffffffffffff}) r8 = gettid() r9 = gettid() syz_clone3(&(0x7f0000000540)={0x100104000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x6}, &(0x7f00000000c0)=""/34, 0x22, &(0x7f0000000240)=""/139, &(0x7f0000000500)=[r4, r5, r6, r7, r8, r9, 0xffffffffffffffff, 0x0], 0x8, {r0}}, 0x58) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r0, 0x0, 0x0, 0x494}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x81, r2, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x0, r1}]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) (async) pipe(&(0x7f0000000200)) (async) io_setup(0x20, &(0x7f0000001140)) (async) syz_clone(0x40000, &(0x7f0000000300)="421a29e86a768f729b791e40bf590ed297b19ab4c8ea33240f49b955976a9bc840d1ed4e9c6718e52230a60bbbeedc9e279524a25782267b23b5c0f362a5931af0262e44a11087ed6e5055fb754c47bb929c5db446b9d1dddca6196f5a5abb7a", 0x60, &(0x7f0000000140), &(0x7f0000000380), &(0x7f00000003c0)="2253efcc071c0535c661ca9fab82273f4052a4f583") (async) getpid() (async) sched_setscheduler(r5, 0x2, &(0x7f0000000540)=0x6) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000480)={'\x00', 0x81, 0x4, 0x5223, 0x1, 0x54, 0xffffffffffffffff}) (async) gettid() (async) gettid() (async) syz_clone3(&(0x7f0000000540)={0x100104000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x6}, &(0x7f00000000c0)=""/34, 0x22, &(0x7f0000000240)=""/139, &(0x7f0000000500)=[r4, r5, r6, r7, r8, r9, 0xffffffffffffffff, 0x0], 0x8, {r0}}, 0x58) (async) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r0, 0x0, 0x0, 0x494}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x81, r2, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x0, r1}]) (async) 5m0.337020376s ago: executing program 6 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c000380"], 0x8c}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) r3 = socket$inet(0x2, 0x3, 0x6) flistxattr(r3, &(0x7f0000000000)=""/6, 0x6) r4 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x8}, &(0x7f0000000080), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000200)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4m57.843768468s ago: executing program 6 (id=393): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7f) (fail_nth: 1) 4m56.581229451s ago: executing program 3 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x3ff) syz_open_dev$ttys(0xc, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 4m41.9470122s ago: executing program 35 (id=393): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7f) (fail_nth: 1) 4m41.405987278s ago: executing program 36 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x3ff) syz_open_dev$ttys(0xc, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 13.108331191s ago: executing program 7 (id=1134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r4 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 12.809584248s ago: executing program 8 (id=1136): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 11.542096375s ago: executing program 8 (id=1139): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) 10.109222377s ago: executing program 5 (id=1141): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010", @ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.074274263s ago: executing program 9 (id=1142): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = accept(r0, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x161) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') socket(0x10, 0x3, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115800000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x88a, &(0x7f0000000140)={0x0, 0x90f7, 0x800, 0x2, 0x8001ae}, &(0x7f0000000240), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 7.553780714s ago: executing program 5 (id=1144): syz_open_dev$usbmon(0x0, 0x1, 0x43) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x12}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x3ccf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='8'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 7.417102541s ago: executing program 9 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r2, 0x80106408, &(0x7f0000000140)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) 7.185185316s ago: executing program 1 (id=1146): munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x115c, 0x3, 0x9, 0x801, 0x70bd28, 0x25dfdbfb, {0x5}, [@generic="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", @generic="1eeafead9975c68581ba8784de44554449dc8bdd3805ea05a1eb47d23722402813648e106f95212840717195fa2aab7b400ef24fbbb87397b7e8a497bc229ad53825e2c066589291decb5c5988a0569c2efa16ab64e6c3ec00f1378d6b2b34142d911e2de1afd2d3c058c7c72de1645cd6501ab70b9b94f4d738f91a9504c2039b1a20adcae32e77c1fb5edb5843e78b6f9e89bc723a6a021cdca070db7b94f81220da08e414c28f2be36a7f9edac3609585ce77a062f7e4f29044a6fb513d54e6d4622eb935f4c9b955d912d200d9740f9dfab0d105027cf3be692556afb56b2632e142489de69e13aed2", @generic="8ff4b5348788253860a2f1a4f939dc6035998c17b5476cc5e9c540e90ce836a9f2a0f8dc49d52287ef6e3356c8afed6639021ff3bb78970cd1487ed91b52de12aeaeb090ed17fa9f2524a128b93c6a950e07173544", @typed={0x8, 0xa4, 0x0, 0x0, @str='\\$\'\x00'}]}, 0x115c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x19}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.879499217s ago: executing program 7 (id=1147): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0), 0x0) 6.729577225s ago: executing program 7 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r2, 0x80106408, &(0x7f0000000140)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) 6.489797287s ago: executing program 8 (id=1149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) r3 = fsopen(&(0x7f00000000c0)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000100)='usrquota', &(0x7f00000002c0)='./file1\x00', 0xffffffffffffff9c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000c40)=[@in6={0xa, 0x4e24, 0x5, @private2, 0x4}, @in={0x2, 0x4e22, @local}], 0x2c) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000140)={@my=0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 6.399336187s ago: executing program 5 (id=1150): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000001c0)=[{0x3, 0x0, {0x2, 0xff, 0x1}, {0x2, 0xff}, 0x2, 0xff}, {0x0, 0x3, {0x1, 0xf0, 0x3}, {0x2, 0x1, 0x1}, 0xff, 0xfe}, {0x2, 0x1, {0x0, 0xf0}, {0x1, 0xff, 0x3}, 0xff}, {0x1, 0x1, {0x1, 0x1, 0x3}, {0x1, 0xff, 0x1}, 0xfd, 0x1}, {0x3, 0x2, {0x0, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xff}, {0x1, 0x1, {0x2, 0xff, 0x1}, {0x2, 0x0, 0x1}, 0x2, 0xfd}, {0x1, 0x2, {0x2, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0x1}], 0xe0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000000)={0x1000a, 0x380, 0x2c0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0x8090ae81, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 6.238817165s ago: executing program 9 (id=1151): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$pptp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (fail_nth: 1) 5.213182815s ago: executing program 1 (id=1152): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000016c0)=0xaea2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xd44, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x10}}, 0x1, 0x4658, 0x2, 0x8, 0x80000000}, &(0x7f00000001c0)=0x98) 4.424308995s ago: executing program 5 (id=1153): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x4d0, 0x198, 0x340, 0x230, 0x198, 0x340, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x6], 0x0, 0x6}}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) (fail_nth: 1) 4.416817814s ago: executing program 7 (id=1154): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="002000000000000079353a48ae67561dea73baca44e2b651000000000000859b00000e002000950021000000000035"], 0x0, 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x6) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000b3f000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='rxrpc_connect_call\x00', 0xffffffffffffffff, 0x0, 0x8000000010000000}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="760a00000000954dd847a82dd20100d826276aacbae1bd4d04a6d49e3e7100"/46], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 3.789437223s ago: executing program 5 (id=1155): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87e9"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x2000) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') fchdir(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) syz_clone3(&(0x7f0000001380)={0x0, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)=0x0, {0x8}, &(0x7f0000001280)=""/14, 0xe, &(0x7f00000012c0)=""/102, &(0x7f0000001340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000014c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x80, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/230, 0xe6) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x9, 0x1, 0xc, 0x6, 0x7, 0xba}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/4096) 2.642847892s ago: executing program 1 (id=1156): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x161, 0x40000867, r2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 2.457315592s ago: executing program 8 (id=1157): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2004c000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/smackfs/load\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x181900, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) 1.517597123s ago: executing program 1 (id=1158): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 1.357435878s ago: executing program 9 (id=1159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee0000, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, {0x0, 0xddccb000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x5000, 0xf, 0x8, 0x0, 0x0, 0x81, 0x0, 0x40, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0xa, 0x1, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x11000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0xff, 0x31, 0x0, 0x0, 0x84}, {0x3000, 0x8106800, 0x9, 0x0, 0x20}, {0x0, 0x0, 0xf, 0x82, 0x0, 0x0, 0x0, 0x25, 0x5}, {0x1}, {0x1, 0xfffe}, 0x60040030, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x900, [0x2, 0x0, 0x10000, 0x3]}) 1.28391271s ago: executing program 1 (id=1160): syz_open_dev$usbmon(0x0, 0x1, 0x43) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x12}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x3ccf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='8'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 1.008671067s ago: executing program 9 (id=1161): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x81) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x82) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000021c0)={0x7fffffff, 0x401, 0xfffffffd, 0x1000c4cb, 0xf, "0441920887e87fcb367800000000080100", 0x8, 0x3}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r7, &(0x7f00000001c0)=[{&(0x7f0000000180)="fdc6d6ad", 0x4}], 0x1, 0x5) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)="64a0", 0xfffffffffffffd7b}], 0x1, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000203030000000000000000f399a7ac2834a8e72bff5806182ab442ab29553333333c996d0c2d017d2528e8eac2969d62a49e834761c68e27cdeb2d80086e3664743ccf11e203dd9a0388fe443f4cabcd64e6cbc39cb0f3341d79b049f60c54aa89754b6e12bb6f519d652d8bc9523e18bfaea11ab5b8a1a6cd35204ae816c880aff98095ca4590fe21c9bbb66a406071dd88c6cfb37b6fea5919f4f22924a486b68110ee7ae69573ffb81f104260ca53c76db22d2d445cb5f38f7ce4798c1b1131f12b70d4d56e2eee7c5092198fcdd6833771a86280f6f022b4d4b62deffb5302972593848f0da38341b6dbafab4288334d7a2d251bd3bebad0f7d8b8f5215f81631f51d7c42a370514bcfb5e6fc13054c7c53897d2afa20300cea619939452a58fd400"/308], 0x1c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x83, &(0x7f0000000480), 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x0, 0x205}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) 897.473592ms ago: executing program 7 (id=1162): r0 = socket(0x200000100000011, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) socket$pptp(0x18, 0x1, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 839.286094ms ago: executing program 7 (id=1163): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0x40081, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x2800, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="0000009500"/17], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x1e0000}, 0x18) (async, rerun: 32) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) getitimer(0x2, &(0x7f0000000880)) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x48004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = userfaultfd(0x801) (rerun: 32) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r8 = socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)="c9ae85633eeeb0edd21d9b27d3409d46ebf71203ec01bb2428cef8b1572a31650936747ba48d2c785d5d8c75e6e68ed052385ef48529fff26a574af617bf5a90961b4d9c17e04892b6b8f2d4c48a3705e268fb1049dad630e6806cd9067554f82684e4492bd5c0c009c0426db694cd098863c3b9e6f8188257f4a472d075c8de84454c872defd10bcd941839278db45a7ff466fb4993ad3e3dcb585101f09d3dd3e02f1867a80ed077749fe115978ade2cebbacf1057eb3ce469368380556da5257cb7eb55abaed81c9f5456ea", 0xcd}, {&(0x7f0000000580)="ee7f9d1aa756c43ac750e672fd9c84cb65b1e4526dbb9b7d36e4caba5805b7d68f69aa4bc096ec2656ce8122c3261fe355063a00676f47e33780d2ca", 0x3c}, {&(0x7f0000000600)="1c1328e32e2b1e9d41747fb6f733664bcdb4d9699d9d5a9a4255233660f24a6abb1f9ba06a0d8cc9ee16036ba059cd7a67c401562b7cdaf2c2767cd6aa030aad4438801ce13e3ff3b9d4496df18a8898e270b9f36f0d0875135e86f8c49f81dc9187a29caa3cc445238068a9ffe75b9e9a050b5628fa2509dddcef1ee5ea7d9ebd344fc8ccf665261b7b21243b02f52a043e533473a0e24bd3ebfadde1fdfd54f16d4fc2619d9be5d4d12f10e3fe5cb17f7b74b96566203b6ab86ccd93ff71120b260ede2163a203ececf9202aa926764e2f", 0xd2}, {}, {&(0x7f00000002c0)="85aee6c2ae476d1ace8b1491", 0xc}, {&(0x7f0000000700)="730391b9acec6c8a9f15be6b241ce8b81d7bd0c5550f1b0f9bb9424c738fe1873f5c4abafc604ab0a6d9e42dcec7cdc2c3653dda53cdb9f91f88866f8d3b42b614bf9ec4d9b503b9e7dfa5f9def2d1cb14d5d5b70c86e6d51184052d40aa17b67c28a72369ce0f0ef23d8b34d09491b55f457d42799b50fae53631e90f3a5e6390a9858432b930bd34908a11b6532ee3ed9a91c44e7edbc946aab64b45cef1f896e790ab662f8976bd0b784e21a3501454dfb831a2c5c9770f50db088b4d7714e90ff23daeb11d1cb4b1", 0xca}], 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="2400000000000000010000000ab19b87", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x4005}, 0x84d) 822.733319ms ago: executing program 8 (id=1164): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000001200010228bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="101c00000110040008001d0089"], 0x28}, 0x1, 0x0, 0x0, 0x3000c054}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa1, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0x8000002) (fail_nth: 1) 428.874094ms ago: executing program 8 (id=1165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) add_key(0x0, 0x0, &(0x7f00000001c0)="0000000000000004ff6943b80000000800003fecf20000000086", 0x1a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r6, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r8}, 0x10) 372.7811ms ago: executing program 5 (id=1166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r1, 0x0) r2 = userfaultfd(0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="1e", 0x1, 0x4020084, &(0x7f0000000500)={0xa, 0x4e27, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)='X', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}, 0x1c) setsockopt(r1, 0x1004, 0x1, &(0x7f0000000100)="020000000d80ffff", 0x8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000fec000/0x14000)=nil, 0x14000}, 0x1}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 175.314462ms ago: executing program 1 (id=1167): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) 0s ago: executing program 9 (id=1168): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003", 0x3) kernel console output (not intermixed with test programs): ): Enslaving as an active interface with an up link [ 240.469697][ T120] usb 8-1: config 0 descriptor?? [ 240.479922][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.784159][ T120] radio-si470x 8-1:0.0: DeviceID=0xc8c8 ChipID=0xc500 [ 240.799445][ T120] radio-si470x 8-1:0.0: software version 200, hardware version 200 [ 240.845852][ T7793] team0: Port device team_slave_0 added [ 240.867137][ T7793] team0: Port device team_slave_1 added [ 240.921208][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.010808][ T120] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 241.209778][ T120] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 241.228458][ T120] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 241.248461][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.298174][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.331572][ T120] usb 8-1: USB disconnect, device number 3 [ 241.406086][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.541184][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.561872][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.646004][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.681958][ T36] bridge_slave_1: left allmulticast mode [ 241.688610][ T36] bridge_slave_1: left promiscuous mode [ 241.714290][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.831311][ T5847] Bluetooth: hci6: command tx timeout [ 241.960393][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.132974][ T36] bridge_slave_0: left allmulticast mode [ 242.138728][ T36] bridge_slave_0: left promiscuous mode [ 242.170034][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.441744][ T5847] Bluetooth: hci2: command tx timeout [ 243.001059][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.680393][ T7877] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.887070][ T5847] Bluetooth: hci6: command tx timeout [ 244.050421][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.515364][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.524779][ T5847] Bluetooth: hci2: command tx timeout [ 244.548167][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.565250][ T36] bond0 (unregistering): Released all slaves [ 244.633293][ T7858] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 245.080395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.431199][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 245.757879][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.928662][ T24] usb 8-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 245.960522][ T5847] Bluetooth: hci6: command tx timeout [ 246.130867][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.157810][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.524150][ T24] usb 8-1: config 0 descriptor?? [ 246.813769][ T24] usb 8-1: bad CDC descriptors [ 247.152970][ T7793] hsr_slave_0: entered promiscuous mode [ 247.160380][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.185820][ T7793] hsr_slave_1: entered promiscuous mode [ 247.217587][ T7793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.243121][ T7793] Cannot create hsr debugfs directory [ 247.255758][ T7808] chnl_net:caif_netlink_parms(): no params data found [ 247.997143][ T5895] usb 8-1: USB disconnect, device number 4 [ 248.125991][ T36] hsr_slave_0: left promiscuous mode [ 248.210394][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.258508][ T36] hsr_slave_1: left promiscuous mode [ 248.266775][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.336095][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.382337][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.751261][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.240383][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.575601][ T36] veth1_macvtap: left promiscuous mode [ 249.586571][ T36] veth0_macvtap: left promiscuous mode [ 249.593052][ T36] veth1_vlan: left promiscuous mode [ 249.598374][ T36] veth0_vlan: left promiscuous mode [ 250.290396][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.635462][ T36] team0 (unregistering): Port device team_slave_1 removed [ 250.678952][ T36] team0 (unregistering): Port device team_slave_0 removed [ 251.321136][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.328714][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.337223][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.345250][ T7808] bridge_slave_0: entered allmulticast mode [ 251.354927][ T7808] bridge_slave_0: entered promiscuous mode [ 251.369010][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.377412][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.387245][ T7808] bridge_slave_1: entered allmulticast mode [ 251.396233][ T7808] bridge_slave_1: entered promiscuous mode [ 251.624573][ T7808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.742325][ T7808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.106573][ T7808] team0: Port device team_slave_0 added [ 252.159144][ T7808] team0: Port device team_slave_1 added [ 252.370404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.386684][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.418164][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.471758][ T7808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.587249][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.609068][ T36] IPVS: stop unused estimator thread 0... [ 252.647258][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.761837][ T7808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.400443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.096825][ T2903] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.283857][ T7986] netlink: 'syz.5.478': attribute type 1 has an invalid length. [ 254.440726][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.746068][ T7808] hsr_slave_0: entered promiscuous mode [ 254.803296][ T7808] hsr_slave_1: entered promiscuous mode [ 254.809751][ T7808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.937447][ T7808] Cannot create hsr debugfs directory [ 255.093769][ T7793] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 255.147917][ T7793] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 255.324379][ T2903] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.425221][ T7793] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 255.480417][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.703525][ T7793] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 255.727881][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.734999][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.986710][ T8016] fuse: Bad value for 'fd' [ 256.297380][ T2903] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.520401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.391407][ T2903] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.418875][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'. [ 257.560383][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.601100][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.936729][ T7808] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 259.080159][ T7808] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 259.547120][ T7808] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 259.641065][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.684425][ T7808] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 259.794409][ T2903] bridge_slave_1: left allmulticast mode [ 259.809603][ T2903] bridge_slave_1: left promiscuous mode [ 259.830052][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.882852][ T2903] bridge_slave_0: left allmulticast mode [ 259.888609][ T2903] bridge_slave_0: left promiscuous mode [ 259.907936][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.680502][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.720388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.053679][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 262.078250][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: kworker/u9:5 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 262.078284][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.078299][ T5847] Workqueue: hci1 hci_rx_work [ 262.078327][ T5847] Call Trace: [ 262.078336][ T5847] [ 262.078346][ T5847] dump_stack_lvl+0x189/0x250 [ 262.078383][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 262.078414][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.078439][ T5847] ? __pfx__printk+0x10/0x10 [ 262.078471][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 262.078497][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 262.078527][ T5847] ? kernfs_path_from_node+0x22c/0x260 [ 262.078553][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 262.078584][ T5847] sysfs_create_dir_ns+0x259/0x280 [ 262.078614][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 262.078643][ T5847] ? do_raw_spin_unlock+0x122/0x240 [ 262.078681][ T5847] kobject_add_internal+0x59f/0xb40 [ 262.078721][ T5847] kobject_add+0x155/0x220 [ 262.078754][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 262.078783][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 262.078823][ T5847] ? get_device_parent+0x366/0x3a0 [ 262.078863][ T5847] device_add+0x408/0xb50 [ 262.078902][ T5847] hci_conn_add_sysfs+0xd5/0x1e0 [ 262.078942][ T5847] le_conn_complete_evt+0xc3a/0x1220 [ 262.078988][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 262.079019][ T5847] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 262.079044][ T5847] ? __asan_memcpy+0x40/0x70 [ 262.079078][ T5847] ? __pfx___mutex_lock+0x10/0x10 [ 262.079105][ T5847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.079129][ T5847] ? skb_pull_data+0xfb/0x200 [ 262.079161][ T5847] hci_le_conn_complete_evt+0x187/0x450 [ 262.079199][ T5847] hci_event_packet+0x78f/0x1200 [ 262.079226][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 262.079258][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 262.079284][ T5847] ? kcov_remote_start+0x4d3/0x7f0 [ 262.079316][ T5847] ? lockdep_hardirqs_on+0x90/0x150 [ 262.079343][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 262.079385][ T5847] hci_rx_work+0x46a/0xe80 [ 262.079420][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 262.079447][ T5847] process_scheduled_works+0xade/0x17b0 [ 262.079506][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.079552][ T5847] worker_thread+0x8a0/0xda0 [ 262.079607][ T5847] kthread+0x70e/0x8a0 [ 262.079642][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 262.079666][ T5847] ? __pfx_kthread+0x10/0x10 [ 262.079699][ T5847] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.079720][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.079741][ T5847] ? __pfx_kthread+0x10/0x10 [ 262.079773][ T5847] ret_from_fork+0x3fc/0x770 [ 262.079799][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 262.079829][ T5847] ? __switch_to_asm+0x39/0x70 [ 262.079856][ T5847] ? __switch_to_asm+0x33/0x70 [ 262.079882][ T5847] ? __pfx_kthread+0x10/0x10 [ 262.079914][ T5847] ret_from_fork_asm+0x1a/0x30 [ 262.079962][ T5847] [ 262.079992][ T5847] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 262.403974][ T5847] Bluetooth: hci1: failed to register connection device [ 262.551618][ T2903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.568649][ T2903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.581177][ T2903] bond0 (unregistering): Released all slaves [ 262.760610][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.159014][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.461856][ T8100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 263.800390][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.013190][ T8104] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.534206][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.745848][ T2903] hsr_slave_0: left promiscuous mode [ 264.793403][ T2903] hsr_slave_1: left promiscuous mode [ 264.819927][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.840412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.848657][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.997811][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.161130][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.465437][ T2903] veth1_macvtap: left promiscuous mode [ 265.477830][ T2903] veth0_macvtap: left promiscuous mode [ 265.501161][ T2903] veth1_vlan: left promiscuous mode [ 265.512458][ T2903] veth0_vlan: left promiscuous mode [ 265.804241][ T8126] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.508'. [ 265.880716][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.920388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.960389][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.227749][ T2903] team0 (unregistering): Port device team_slave_1 removed [ 268.304470][ T2903] team0 (unregistering): Port device team_slave_0 removed [ 269.000423][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.007632][ T5158] Bluetooth: hci1: command 0x0406 tx timeout [ 269.057694][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.064853][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.110233][ T8114] syz.7.506: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.138496][ T8114] CPU: 0 UID: 0 PID: 8114 Comm: syz.7.506 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 269.138527][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.138542][ T8114] Call Trace: [ 269.138551][ T8114] [ 269.138560][ T8114] dump_stack_lvl+0x189/0x250 [ 269.138594][ T8114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.138621][ T8114] ? __pfx__printk+0x10/0x10 [ 269.138651][ T8114] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 269.138681][ T8114] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 269.138711][ T8114] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 269.138742][ T8114] warn_alloc+0x214/0x310 [ 269.138777][ T8114] ? __pfx_warn_alloc+0x10/0x10 [ 269.138813][ T8114] ? __get_vm_area_node+0x28f/0x300 [ 269.138838][ T8114] ? fq_pie_init+0x430/0x840 [ 269.138869][ T8114] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 269.138921][ T8114] ? up_write+0x1c4/0x420 [ 269.138946][ T8114] ? tcf_block_get_ext+0x8d4/0x17d0 [ 269.138979][ T8114] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.139012][ T8114] ? rcu_is_watching+0x15/0xb0 [ 269.139038][ T8114] ? fq_pie_init+0x430/0x840 [ 269.139063][ T8114] ? fq_pie_init+0x430/0x840 [ 269.139086][ T8114] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 269.139111][ T8114] ? fq_pie_init+0x430/0x840 [ 269.139136][ T8114] ? tcf_block_get+0x67/0xa0 [ 269.139164][ T8114] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 269.139201][ T8114] fq_pie_init+0x430/0x840 [ 269.139230][ T8114] ? __pfx_fq_pie_init+0x10/0x10 [ 269.139257][ T8114] qdisc_create+0x7a9/0xea0 [ 269.139294][ T8114] tc_modify_qdisc+0x1538/0x20e0 [ 269.139345][ T8114] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 269.139407][ T8114] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 269.139432][ T8114] rtnetlink_rcv_msg+0x77c/0xb70 [ 269.139467][ T8114] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 269.139496][ T8114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.139523][ T8114] ? ref_tracker_free+0x63a/0x7d0 [ 269.139547][ T8114] ? __copy_skb_header+0xa7/0x550 [ 269.139571][ T8114] ? __pfx_ref_tracker_free+0x10/0x10 [ 269.139596][ T8114] ? __skb_clone+0x63/0x7a0 [ 269.139627][ T8114] netlink_rcv_skb+0x208/0x470 [ 269.139659][ T8114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.139692][ T8114] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.139739][ T8114] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.139770][ T8114] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.139808][ T8114] netlink_unicast+0x75c/0x8e0 [ 269.139850][ T8114] netlink_sendmsg+0x805/0xb30 [ 269.139893][ T8114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.139936][ T8114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.139958][ T8114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.139991][ T8114] __sock_sendmsg+0x219/0x270 [ 269.140021][ T8114] ____sys_sendmsg+0x505/0x830 [ 269.140063][ T8114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.140110][ T8114] ? import_iovec+0x74/0xa0 [ 269.140145][ T8114] ___sys_sendmsg+0x21f/0x2a0 [ 269.140184][ T8114] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.140261][ T8114] ? __fget_files+0x2a/0x420 [ 269.140291][ T8114] ? __fget_files+0x3a0/0x420 [ 269.140328][ T8114] __x64_sys_sendmsg+0x19b/0x260 [ 269.140373][ T8114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.140423][ T8114] ? rcu_is_watching+0x15/0xb0 [ 269.140454][ T8114] ? do_syscall_64+0xbe/0x3b0 [ 269.140484][ T8114] do_syscall_64+0xfa/0x3b0 [ 269.140508][ T8114] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.140532][ T8114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.140556][ T8114] ? clear_bhb_loop+0x60/0xb0 [ 269.140583][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.140606][ T8114] RIP: 0033:0x7f798818e9a9 [ 269.140626][ T8114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.140646][ T8114] RSP: 002b:00007f7988f19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.140670][ T8114] RAX: ffffffffffffffda RBX: 00007f79883b5fa0 RCX: 00007f798818e9a9 [ 269.140686][ T8114] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000004 [ 269.140702][ T8114] RBP: 00007f7988210d69 R08: 0000000000000000 R09: 0000000000000000 [ 269.140716][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.140729][ T8114] R13: 0000000000000000 R14: 00007f79883b5fa0 R15: 00007ffde575cab8 [ 269.140764][ T8114] [ 269.621496][ T8114] Mem-Info: [ 269.662393][ T8150] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 269.702353][ T8114] active_anon:285 inactive_anon:6931 isolated_anon:0 [ 269.702353][ T8114] active_file:14772 inactive_file:36767 isolated_file:0 [ 269.702353][ T8114] unevictable:768 dirty:125 writeback:0 [ 269.702353][ T8114] slab_reclaimable:10631 slab_unreclaimable:100149 [ 269.702353][ T8114] mapped:30555 shmem:1406 pagetables:1460 [ 269.702353][ T8114] sec_pagetables:0 bounce:0 [ 269.702353][ T8114] kernel_misc_reclaimable:0 [ 269.702353][ T8114] free:1308150 free_pcp:14572 free_cma:0 [ 269.821963][ T8114] Node 0 active_anon:1140kB inactive_anon:27724kB active_file:58892kB inactive_file:147068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122220kB dirty:496kB writeback:0kB shmem:4088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12744kB pagetables:5720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.856246][ T8114] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.891817][ T8114] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.921898][ T8114] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 269.932344][ T8114] Node 0 DMA32 free:1315584kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1136kB inactive_anon:27632kB active_file:57124kB inactive_file:147000kB unevictable:1536kB writepending:512kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:39964kB local_pcp:20856kB free_cma:0kB [ 269.965987][ T8114] lowmem_reserve[]: 0 0 1 1 1 [ 269.986052][ T8114] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1768kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 270.040537][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.043889][ T8114] lowmem_reserve[]: 0 0 0 0 0 [ 270.087904][ T8114] Node 1 Normal free:3902384kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17920kB local_pcp:8448kB free_cma:0kB [ 270.125618][ T8114] lowmem_reserve[]: 0 0 0 0 0 [ 270.131713][ T8114] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.153421][ T8114] Node 0 DMA32: 1924*4kB (UME) 730*8kB (UM) 762*16kB (UM) 700*32kB (UM) 423*64kB (UME) 183*128kB (UME) 134*256kB (UM) 82*512kB (UM) 34*1024kB (UME) 4*2048kB (UME) 268*4096kB (M) = 1315648kB [ 270.175710][ T8114] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 270.190800][ T8114] Node 1 Normal: 212*4kB (UME) 50*8kB (UME) 39*16kB (UME) 95*32kB (UME) 32*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 949*4096kB (M) = 3902384kB [ 270.231825][ T8114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.253968][ T8114] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.264486][ T8114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.274882][ T8114] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.285029][ T8114] 52941 total pagecache pages [ 270.289870][ T8114] 0 pages in swap cache [ 270.294848][ T8114] Free swap = 124996kB [ 270.299113][ T8114] Total swap = 124996kB [ 270.304003][ T8114] 2097051 pages RAM [ 270.308800][ T8114] 0 pages HighMem/MovableOnly [ 270.315469][ T8114] 424695 pages reserved [ 270.331113][ T8114] 0 pages cma reserved [ 270.552878][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.560043][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.687422][ T7808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.826013][ T7808] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.902340][ T8160] FAULT_INJECTION: forcing a failure. [ 270.902340][ T8160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.916379][ T8160] CPU: 0 UID: 0 PID: 8160 Comm: syz.1.517 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 270.916410][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.916424][ T8160] Call Trace: [ 270.916432][ T8160] [ 270.916442][ T8160] dump_stack_lvl+0x189/0x250 [ 270.916473][ T8160] ? __pfx____ratelimit+0x10/0x10 [ 270.916497][ T8160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.916522][ T8160] ? __pfx__printk+0x10/0x10 [ 270.916551][ T8160] ? __might_fault+0xb0/0x130 [ 270.916586][ T8160] should_fail_ex+0x414/0x560 [ 270.916615][ T8160] _copy_from_user+0x2d/0xb0 [ 270.916647][ T8160] ___sys_recvmsg+0x12e/0x510 [ 270.916676][ T8160] ? __pfx____sys_recvmsg+0x10/0x10 [ 270.916727][ T8160] ? __fget_files+0x3a0/0x420 [ 270.916765][ T8160] do_recvmmsg+0x307/0x770 [ 270.916797][ T8160] ? __pfx_do_recvmmsg+0x10/0x10 [ 270.916833][ T8160] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 270.916879][ T8160] __x64_sys_recvmmsg+0x190/0x240 [ 270.916906][ T8160] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 270.916925][ T8160] ? rcu_is_watching+0x15/0xb0 [ 270.916956][ T8160] ? do_syscall_64+0xbe/0x3b0 [ 270.916985][ T8160] do_syscall_64+0xfa/0x3b0 [ 270.917009][ T8160] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.917032][ T8160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.917055][ T8160] ? clear_bhb_loop+0x60/0xb0 [ 270.917082][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.917141][ T8160] RIP: 0033:0x7f60c018e9a9 [ 270.917161][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.917181][ T8160] RSP: 002b:00007f60c0f22038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 270.917204][ T8160] RAX: ffffffffffffffda RBX: 00007f60c03b5fa0 RCX: 00007f60c018e9a9 [ 270.917221][ T8160] RDX: 0000000000000001 RSI: 000020000000a680 RDI: 0000000000000003 [ 270.917235][ T8160] RBP: 00007f60c0f22090 R08: 0000000000000000 R09: 0000000000000000 [ 270.917249][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.917262][ T8160] R13: 0000000000000000 R14: 00007f60c03b5fa0 R15: 00007ffc28fd5fb8 [ 270.917297][ T8160] [ 271.136986][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.200521][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.225387][ T7793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.236759][ T7793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.344342][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.351580][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.454949][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.462313][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.240757][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.281592][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.320376][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.444877][ T8193] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.524'. [ 275.588321][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.360379][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.401161][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.040226][ T7808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.067449][ T8232] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 278.440400][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.563629][ T7793] veth0_vlan: entered promiscuous mode [ 278.618277][ T7793] veth1_vlan: entered promiscuous mode [ 278.787968][ T7793] veth0_macvtap: entered promiscuous mode [ 278.824493][ T7793] veth1_macvtap: entered promiscuous mode [ 279.100036][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.186434][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.228401][ T7793] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.267151][ T7793] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.291396][ T7793] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.312095][ T7793] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.443675][ T8268] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 279.480609][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.797999][ T7808] veth0_vlan: entered promiscuous mode [ 280.452549][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.487597][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.520509][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.790120][ T7808] veth1_vlan: entered promiscuous mode [ 280.843787][ T7898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.877871][ T7898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.005644][ T7808] veth0_macvtap: entered promiscuous mode [ 281.051732][ T7808] veth1_macvtap: entered promiscuous mode [ 281.128605][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.452458][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.560735][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.853103][ T7808] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.242069][ T7808] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.287587][ T7808] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.321217][ T7808] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.555648][ T8291] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 282.600671][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.963024][ T6142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.002445][ T6142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.524029][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.571740][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.640660][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.680437][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.349215][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.441'. [ 285.404440][ T8328] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 285.720366][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.760410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.901210][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.549'. [ 287.810522][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.840386][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.845643][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 289.668686][ T8347] binder: 8342:8347 ioctl 4018620d 0 returned -22 [ 289.696620][ T8350] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.555'. [ 289.760158][ T8353] binder: 8342:8353 ioctl c018620c 0 returned -14 [ 289.880404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.920837][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.960386][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.000384][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.041049][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.081087][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.120388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.371835][ T8424] binder: 8420:8424 ioctl 4018620d 0 returned -22 [ 296.498405][ T8430] binder: 8420:8430 ioctl c018620c 0 returned -14 [ 297.170399][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.169012][ T8443] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 298.200373][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.261451][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.383752][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.495569][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.596723][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.154176][ T8496] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 303.709217][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.821741][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.933536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.044028][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.378247][ T8532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 308.156321][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.368096][ T8537] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.596'. [ 309.269001][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.457506][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.9.598'. [ 309.633804][ T8550] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 310.379855][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.491291][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.018975][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 312.030227][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: kworker/u9:5 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 312.030259][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.030275][ T5847] Workqueue: hci6 hci_rx_work [ 312.030303][ T5847] Call Trace: [ 312.030312][ T5847] [ 312.030322][ T5847] dump_stack_lvl+0x189/0x250 [ 312.030350][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 312.030381][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.030406][ T5847] ? __pfx__printk+0x10/0x10 [ 312.030438][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 312.030465][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 312.030494][ T5847] ? kernfs_path_from_node+0x22c/0x260 [ 312.030520][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 312.030552][ T5847] sysfs_create_dir_ns+0x259/0x280 [ 312.030582][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 312.030611][ T5847] ? do_raw_spin_unlock+0x122/0x240 [ 312.030647][ T5847] kobject_add_internal+0x59f/0xb40 [ 312.030685][ T5847] kobject_add+0x155/0x220 [ 312.030718][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 312.030746][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 312.030785][ T5847] ? get_device_parent+0x366/0x3a0 [ 312.030831][ T5847] device_add+0x408/0xb50 [ 312.030869][ T5847] hci_conn_add_sysfs+0xd5/0x1e0 [ 312.030908][ T5847] le_conn_complete_evt+0xc3a/0x1220 [ 312.030953][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 312.030985][ T5847] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 312.031009][ T5847] ? __asan_memcpy+0x40/0x70 [ 312.031044][ T5847] ? __pfx___mutex_lock+0x10/0x10 [ 312.031071][ T5847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 312.031096][ T5847] ? skb_pull_data+0xfb/0x200 [ 312.031128][ T5847] hci_le_conn_complete_evt+0x187/0x450 [ 312.031166][ T5847] hci_event_packet+0x78f/0x1200 [ 312.031193][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 312.031225][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 312.031252][ T5847] ? kcov_remote_start+0x4d3/0x7f0 [ 312.031284][ T5847] ? lockdep_hardirqs_on+0x90/0x150 [ 312.031312][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 312.031347][ T5847] hci_rx_work+0x46a/0xe80 [ 312.031381][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 312.031409][ T5847] process_scheduled_works+0xade/0x17b0 [ 312.031468][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.031513][ T5847] worker_thread+0x8a0/0xda0 [ 312.031570][ T5847] kthread+0x70e/0x8a0 [ 312.031605][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 312.031630][ T5847] ? __pfx_kthread+0x10/0x10 [ 312.031663][ T5847] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.031684][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.031705][ T5847] ? __pfx_kthread+0x10/0x10 [ 312.031737][ T5847] ret_from_fork+0x3fc/0x770 [ 312.031762][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 312.031792][ T5847] ? __switch_to_asm+0x39/0x70 [ 312.031830][ T5847] ? __switch_to_asm+0x33/0x70 [ 312.031857][ T5847] ? __pfx_kthread+0x10/0x10 [ 312.031889][ T5847] ret_from_fork_asm+0x1a/0x30 [ 312.031938][ T5847] [ 312.031967][ T5847] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 312.367555][ T5847] Bluetooth: hci6: failed to register connection device [ 312.604912][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.712731][ T8597] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.610'. [ 313.407523][ T8606] binder: 8604:8606 ioctl 4018620d 0 returned -22 [ 313.514620][ T8608] binder: 8604:8608 ioctl c018620c 0 returned -14 [ 313.659787][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 313.716307][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.193206][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.7.614'. [ 314.572269][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout [ 314.837462][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.517335][ T8634] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 315.938617][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.699207][ T8639] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.622'. [ 316.821081][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 316.832927][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: kworker/u9:5 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 316.832960][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.832974][ T5847] Workqueue: hci2 hci_rx_work [ 316.833003][ T5847] Call Trace: [ 316.833012][ T5847] [ 316.833023][ T5847] dump_stack_lvl+0x189/0x250 [ 316.833052][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 316.833082][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.833107][ T5847] ? __pfx__printk+0x10/0x10 [ 316.833137][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 316.833163][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 316.833193][ T5847] ? kernfs_path_from_node+0x22c/0x260 [ 316.833220][ T5847] ? kernfs_path_from_node+0x2c/0x260 [ 316.833250][ T5847] sysfs_create_dir_ns+0x259/0x280 [ 316.833279][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 316.833307][ T5847] ? do_raw_spin_unlock+0x122/0x240 [ 316.833343][ T5847] kobject_add_internal+0x59f/0xb40 [ 316.833383][ T5847] kobject_add+0x155/0x220 [ 316.833416][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 316.833454][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 316.833495][ T5847] ? get_device_parent+0x366/0x3a0 [ 316.833535][ T5847] device_add+0x408/0xb50 [ 316.833575][ T5847] hci_conn_add_sysfs+0xd5/0x1e0 [ 316.833616][ T5847] le_conn_complete_evt+0xc3a/0x1220 [ 316.833661][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 316.833694][ T5847] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 316.833718][ T5847] ? __asan_memcpy+0x40/0x70 [ 316.833752][ T5847] ? __pfx___mutex_lock+0x10/0x10 [ 316.833777][ T5847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.833801][ T5847] ? skb_pull_data+0xfb/0x200 [ 316.833831][ T5847] hci_le_conn_complete_evt+0x187/0x450 [ 316.833869][ T5847] hci_event_packet+0x78f/0x1200 [ 316.833897][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 316.833929][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 316.833955][ T5847] ? kcov_remote_start+0x4d3/0x7f0 [ 316.833988][ T5847] ? lockdep_hardirqs_on+0x90/0x150 [ 316.834015][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 316.834050][ T5847] hci_rx_work+0x46a/0xe80 [ 316.834083][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 316.834111][ T5847] process_scheduled_works+0xade/0x17b0 [ 316.834171][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.834217][ T5847] worker_thread+0x8a0/0xda0 [ 316.834275][ T5847] kthread+0x70e/0x8a0 [ 316.834309][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 316.834334][ T5847] ? __pfx_kthread+0x10/0x10 [ 316.834367][ T5847] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.834388][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.834409][ T5847] ? __pfx_kthread+0x10/0x10 [ 316.834449][ T5847] ret_from_fork+0x3fc/0x770 [ 316.834475][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 316.834506][ T5847] ? __switch_to_asm+0x39/0x70 [ 316.834533][ T5847] ? __switch_to_asm+0x33/0x70 [ 316.834559][ T5847] ? __pfx_kthread+0x10/0x10 [ 316.834591][ T5847] ret_from_fork_asm+0x1a/0x30 [ 316.834639][ T5847] [ 316.834670][ T5847] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 317.050974][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.190839][ T5847] Bluetooth: hci2: failed to register connection device [ 318.162237][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.471351][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.483181][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.858017][ T8661] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 319.284741][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.361337][ T5158] Bluetooth: hci6: command 0x0406 tx timeout [ 320.014507][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.633'. [ 320.139558][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.7.634'. [ 320.385901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.132187][ T8687] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.636'. [ 321.499079][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.573903][ T8693] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 322.216808][ T8700] binder: 8696:8700 ioctl 4018620d 0 returned -22 [ 322.323439][ T8702] binder: 8696:8702 ioctl c018620c 0 returned -14 [ 322.609547][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.476510][ T8710] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 323.721364][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.833253][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.209336][ T5158] Bluetooth: hci2: command 0x0406 tx timeout [ 325.409208][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 325.936417][ T8738] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 325.953280][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.056827][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.082188][ T8748] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 328.170025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.210788][ T8757] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 329.281901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.391934][ T8760] binder: 8753:8760 ioctl 4018620d 0 returned -22 [ 330.402978][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.503381][ T8761] binder: 8753:8761 ioctl c018620c 0 returned -14 [ 330.865790][ T8767] syzkaller1: entered promiscuous mode [ 330.907913][ T8765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.953640][ T8767] syzkaller1: entered allmulticast mode [ 331.028381][ T8767] FAULT_INJECTION: forcing a failure. [ 331.028381][ T8767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.216948][ T8767] CPU: 0 UID: 0 PID: 8767 Comm: syz.5.659 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 331.216980][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.216995][ T8767] Call Trace: [ 331.217004][ T8767] [ 331.217014][ T8767] dump_stack_lvl+0x189/0x250 [ 331.217043][ T8767] ? __pfx____ratelimit+0x10/0x10 [ 331.217067][ T8767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.217104][ T8767] ? __pfx__printk+0x10/0x10 [ 331.217132][ T8767] ? __might_fault+0xb0/0x130 [ 331.217165][ T8767] should_fail_ex+0x414/0x560 [ 331.217192][ T8767] _copy_from_user+0x2d/0xb0 [ 331.217222][ T8767] core_sys_select+0x4b7/0xa20 [ 331.217257][ T8767] ? __pfx_core_sys_select+0x10/0x10 [ 331.217305][ T8767] ? __pfx_set_user_sigmask+0x10/0x10 [ 331.217340][ T8767] __se_sys_pselect6+0x27a/0x300 [ 331.217368][ T8767] ? __pfx___se_sys_pselect6+0x10/0x10 [ 331.217390][ T8767] ? __pfx_ksys_write+0x10/0x10 [ 331.217407][ T8767] ? rcu_is_watching+0x15/0xb0 [ 331.217434][ T8767] ? __x64_sys_pselect6+0x21/0xf0 [ 331.217476][ T8767] do_syscall_64+0xfa/0x3b0 [ 331.217500][ T8767] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.217539][ T8767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.217561][ T8767] ? clear_bhb_loop+0x60/0xb0 [ 331.217589][ T8767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.217610][ T8767] RIP: 0033:0x7f3c03d8e9a9 [ 331.217629][ T8767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.217648][ T8767] RSP: 002b:00007f3c04c28038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 331.217683][ T8767] RAX: ffffffffffffffda RBX: 00007f3c03fb5fa0 RCX: 00007f3c03d8e9a9 [ 331.217699][ T8767] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 331.217713][ T8767] RBP: 00007f3c04c28090 R08: 0000000000000000 R09: 0000000000000000 [ 331.217727][ T8767] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 331.217740][ T8767] R13: 0000000000000000 R14: 00007f3c03fb5fa0 R15: 00007ffd152c3a58 [ 331.217773][ T8767] [ 331.504120][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.558263][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.663'. [ 332.616056][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.728062][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.890039][ T8806] vivid-000: disconnect [ 333.958024][ T8799] vivid-000: reconnect [ 334.354355][ T8820] binder: 8814:8820 ioctl 4018620d 0 returned -22 [ 334.414592][ T8820] binder: 8814:8820 ioctl c018620c 0 returned -14 [ 334.835234][ T8835] binder: 8831:8835 ioctl 4018620d 0 returned -22 [ 334.844148][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.036630][ T8841] binder: 8831:8841 ioctl c018620c 0 returned -14 [ 335.951412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.253501][ T8854] FAULT_INJECTION: forcing a failure. [ 336.253501][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 336.268251][ T8854] CPU: 1 UID: 0 PID: 8854 Comm: syz.7.680 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 336.268299][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.268312][ T8854] Call Trace: [ 336.268321][ T8854] [ 336.268331][ T8854] dump_stack_lvl+0x189/0x250 [ 336.268369][ T8854] ? __pfx____ratelimit+0x10/0x10 [ 336.268395][ T8854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.268420][ T8854] ? __pfx__printk+0x10/0x10 [ 336.268456][ T8854] ? __pfx___might_resched+0x10/0x10 [ 336.268479][ T8854] ? fs_reclaim_acquire+0x7d/0x100 [ 336.268512][ T8854] should_fail_ex+0x414/0x560 [ 336.268541][ T8854] should_failslab+0xa8/0x100 [ 336.268567][ T8854] __kmalloc_noprof+0xcb/0x4f0 [ 336.268586][ T8854] ? kfree+0x4d/0x440 [ 336.268616][ T8854] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 336.268652][ T8854] tomoyo_realpath_from_path+0xe3/0x5d0 [ 336.268683][ T8854] ? tomoyo_domain+0xda/0x130 [ 336.268720][ T8854] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 336.268744][ T8854] tomoyo_path_number_perm+0x1e8/0x5a0 [ 336.268771][ T8854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 336.268796][ T8854] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 336.268848][ T8854] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 336.268879][ T8854] ? __fget_files+0x2a/0x420 [ 336.268930][ T8854] ? __rcu_read_unlock+0x84/0xe0 [ 336.268961][ T8854] ? __fget_files+0x2a/0x420 [ 336.268985][ T8854] ? __fget_files+0x3a0/0x420 [ 336.269008][ T8854] ? __fget_files+0x2a/0x420 [ 336.269037][ T8854] security_file_ioctl+0xcb/0x2d0 [ 336.269066][ T8854] __se_sys_ioctl+0x47/0x170 [ 336.269102][ T8854] do_syscall_64+0xfa/0x3b0 [ 336.269128][ T8854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.269149][ T8854] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 336.269171][ T8854] ? clear_bhb_loop+0x60/0xb0 [ 336.269198][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.269220][ T8854] RIP: 0033:0x7f798818e9a9 [ 336.269239][ T8854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.269258][ T8854] RSP: 002b:00007f7985fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.269281][ T8854] RAX: ffffffffffffffda RBX: 00007f79883b6160 RCX: 00007f798818e9a9 [ 336.269297][ T8854] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000006 [ 336.269312][ T8854] RBP: 00007f7985fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 336.269325][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.269338][ T8854] R13: 0000000000000000 R14: 00007f79883b6160 R15: 00007ffde575cab8 [ 336.269382][ T8854] [ 336.269415][ T8854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.063233][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.295114][ T8867] vivid-004: disconnect [ 337.306654][ T8866] vivid-004: reconnect [ 337.590039][ T8869] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.686'. [ 338.175054][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.286884][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.460481][ T8900] binder: 8894:8900 ioctl 4018620d 0 returned -22 [ 339.600329][ T8907] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 339.647099][ T8910] binder: 8894:8910 ioctl c018620c 0 returned -14 [ 340.399474][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.511943][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.121434][ T8932] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 342.622405][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.928663][ T8942] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.700'. [ 343.745747][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.623472][ T1209] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 344.843790][ T1209] usb 9-1: config 0 has an invalid interface number: 242 but max is 0 [ 344.856709][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.909267][ T1209] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.036025][ T1209] usb 9-1: config 0 has no interface number 0 [ 345.332055][ T1209] usb 9-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 345.579114][ T1209] usb 9-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 345.844783][ T1209] usb 9-1: config 0 interface 242 has no altsetting 0 [ 345.856011][ T1209] usb 9-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 345.880791][ T1209] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.906221][ T1209] usb 9-1: Product: syz [ 345.910450][ T1209] usb 9-1: Manufacturer: syz [ 345.916622][ T1209] usb 9-1: SerialNumber: syz [ 345.929146][ T1209] usb 9-1: config 0 descriptor?? [ 345.957837][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 346.783063][ T1209] usb 9-1: USB disconnect, device number 2 [ 347.069645][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.181481][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.293286][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.491791][ T9012] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 350.415798][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 351.516935][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 351.635484][ T9031] netlink: 'syz.9.724': attribute type 1 has an invalid length. [ 352.628759][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.740575][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.397105][ T9052] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.863100][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.121538][ T9057] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 355.974941][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.175050][ T9069] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 357.076047][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.444566][ T9080] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 357.560930][ T9078] vivid-004: disconnect [ 357.737247][ T9075] vivid-004: reconnect [ 358.187873][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.258250][ T5158] Bluetooth: hci1: command 0x0406 tx timeout [ 359.300392][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.652629][ T9101] netlink: 'syz.9.738': attribute type 39 has an invalid length. [ 360.411522][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.534040][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.872680][ T9128] FAULT_INJECTION: forcing a failure. [ 361.872680][ T9128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.942406][ T9128] CPU: 1 UID: 0 PID: 9128 Comm: syz.8.746 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 361.942439][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.942453][ T9128] Call Trace: [ 361.942462][ T9128] [ 361.942471][ T9128] dump_stack_lvl+0x189/0x250 [ 361.942508][ T9128] ? __pfx____ratelimit+0x10/0x10 [ 361.942532][ T9128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.942556][ T9128] ? __pfx__printk+0x10/0x10 [ 361.942581][ T9128] ? __might_fault+0xb0/0x130 [ 361.942607][ T9128] should_fail_ex+0x414/0x560 [ 361.942631][ T9128] _copy_from_user+0x2d/0xb0 [ 361.942656][ T9128] __sys_connect+0x123/0x440 [ 361.942686][ T9128] ? __fget_files+0x3a0/0x420 [ 361.942707][ T9128] ? __pfx___sys_connect+0x10/0x10 [ 361.942741][ T9128] ? __pfx_ksys_write+0x10/0x10 [ 361.942755][ T9128] ? rcu_is_watching+0x15/0xb0 [ 361.942780][ T9128] __x64_sys_connect+0x7a/0x90 [ 361.942805][ T9128] do_syscall_64+0xfa/0x3b0 [ 361.942823][ T9128] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.942841][ T9128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.942858][ T9128] ? clear_bhb_loop+0x60/0xb0 [ 361.942879][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.942895][ T9128] RIP: 0033:0x7f3fb8d8e9a9 [ 361.942910][ T9128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.942926][ T9128] RSP: 002b:00007f3fb9b0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 361.942944][ T9128] RAX: ffffffffffffffda RBX: 00007f3fb8fb5fa0 RCX: 00007f3fb8d8e9a9 [ 361.942957][ T9128] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000006 [ 361.942968][ T9128] RBP: 00007f3fb9b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 361.942979][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.942989][ T9128] R13: 0000000000000000 R14: 00007f3fb8fb5fa0 R15: 00007fff1ebede18 [ 361.943015][ T9128] [ 362.510825][ T9134] vivid-004: disconnect [ 362.522569][ T9130] vivid-004: reconnect [ 362.635192][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.192656][ T9143] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 363.746992][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.484276][ T5158] Bluetooth: hci2: command 0x0406 tx timeout [ 364.860141][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.970663][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.226253][ T9169] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 367.082462][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.194284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.332743][ T9190] vivid-002: disconnect [ 368.370997][ T9187] vivid-002: reconnect [ 369.045674][ T9198] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 369.306113][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.417930][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.529767][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.641607][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.761878][ T9227] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 373.753419][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.865220][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.987751][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.588155][ T9256] xt_TCPMSS: Only works on TCP SYN packets [ 377.099566][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.037478][ T9274] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.782'. [ 378.202206][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.365416][ T9287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.814280][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.9.788'. [ 379.312741][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.424371][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.536951][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.647991][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.759814][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.844429][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.7.803'. [ 384.110959][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.118490][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.179547][ T5847] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 384.871634][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.480226][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 385.983465][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.096652][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.207116][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.225017][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.9.817'. [ 389.318945][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.365508][ T9421] binder: 9414:9421 ioctl 4018620d 0 returned -22 [ 389.460028][ T9424] binder: 9414:9424 ioctl c018620c 0 returned -14 [ 390.430868][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.542752][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.089545][ T9453] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.654535][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.766637][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.014378][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.830'. [ 394.853833][ T9494] binder: 9488:9494 ioctl 4018620d 0 returned -22 [ 394.888894][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.945291][ T9498] binder: 9488:9498 ioctl c018620c 0 returned -14 [ 395.990013][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.113842][ T9520] fuse: Bad value for 'user_id' [ 396.154418][ T9520] fuse: Bad value for 'user_id' [ 397.101907][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.213632][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.574829][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 399.325500][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.438690][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.549012][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.533929][ T9592] fuse: Bad value for 'user_id' [ 402.571529][ T9592] fuse: Bad value for 'user_id' [ 402.660802][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.079857][ T9601] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 403.772631][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.885075][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.999016][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.108118][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.219922][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.333098][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.443586][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.556786][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.149934][ T9694] overlayfs: failed to resolve './file1': -2 [ 412.667276][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.410323][ T9708] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 413.467830][ T9708] kvm: pic: single mode not supported [ 413.779053][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.839680][ T9718] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 413.874284][ T9718] FAULT_INJECTION: forcing a failure. [ 413.874284][ T9718] name failslab, interval 1, probability 0, space 0, times 0 [ 414.025034][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.8.876 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 414.025073][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.025099][ T9718] Call Trace: [ 414.025109][ T9718] [ 414.025118][ T9718] dump_stack_lvl+0x189/0x250 [ 414.025151][ T9718] ? __pfx____ratelimit+0x10/0x10 [ 414.025176][ T9718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.025201][ T9718] ? __pfx__printk+0x10/0x10 [ 414.025236][ T9718] ? __pfx___might_resched+0x10/0x10 [ 414.025259][ T9718] ? fs_reclaim_acquire+0x7d/0x100 [ 414.025291][ T9718] should_fail_ex+0x414/0x560 [ 414.025320][ T9718] should_failslab+0xa8/0x100 [ 414.025346][ T9718] __kmalloc_noprof+0xcb/0x4f0 [ 414.025366][ T9718] ? kfree+0x4d/0x440 [ 414.025397][ T9718] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 414.025432][ T9718] tomoyo_realpath_from_path+0xe3/0x5d0 [ 414.025464][ T9718] ? tomoyo_domain+0xda/0x130 [ 414.025499][ T9718] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 414.025523][ T9718] tomoyo_path_number_perm+0x1e8/0x5a0 [ 414.025550][ T9718] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 414.025594][ T9718] ? __lock_acquire+0xab9/0xd20 [ 414.025638][ T9718] ? __fget_files+0x2a/0x420 [ 414.025666][ T9718] ? __fget_files+0x2a/0x420 [ 414.025689][ T9718] ? __fget_files+0x3a0/0x420 [ 414.025712][ T9718] ? __fget_files+0x2a/0x420 [ 414.025741][ T9718] security_file_ioctl+0xcb/0x2d0 [ 414.025768][ T9718] __se_sys_ioctl+0x47/0x170 [ 414.025805][ T9718] do_syscall_64+0xfa/0x3b0 [ 414.025834][ T9718] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.025858][ T9718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.025880][ T9718] ? clear_bhb_loop+0x60/0xb0 [ 414.025907][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.025929][ T9718] RIP: 0033:0x7f3fb8d8e9a9 [ 414.025948][ T9718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.025966][ T9718] RSP: 002b:00007f3fb9b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.025990][ T9718] RAX: ffffffffffffffda RBX: 00007f3fb8fb5fa0 RCX: 00007f3fb8d8e9a9 [ 414.026006][ T9718] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 414.026020][ T9718] RBP: 00007f3fb9b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 414.026034][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.026047][ T9718] R13: 0000000000000000 R14: 00007f3fb8fb5fa0 R15: 00007fff1ebede18 [ 414.026086][ T9718] [ 414.026163][ T9718] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.458100][ T9718] kvm: pic: single mode not supported [ 414.890871][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.851883][ T9745] overlayfs: failed to resolve './file1': -2 [ 416.002691][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.114512][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.852207][ T9766] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 418.226334][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.729574][ T9776] binder: 9769:9776 ioctl 4018620d 0 returned -22 [ 418.968887][ T9780] binder: 9769:9780 ioctl c018620c 0 returned -14 [ 419.338165][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.214411][ T9797] overlayfs: failed to resolve './file1': -2 [ 420.450267][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.769276][ T9803] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 421.563416][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.645166][ T9808] netlink: 28 bytes leftover after parsing attributes in process `syz.9.896'. [ 421.817753][ T9810] binder: 9809:9810 ioctl 4018620d 0 returned -22 [ 422.115850][ T9817] binder: 9809:9817 ioctl c018620c 0 returned -14 [ 422.360324][ T9823] FAULT_INJECTION: forcing a failure. [ 422.360324][ T9823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.376303][ T9823] CPU: 1 UID: 0 PID: 9823 Comm: syz.7.898 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 422.376333][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.376348][ T9823] Call Trace: [ 422.376358][ T9823] [ 422.376367][ T9823] dump_stack_lvl+0x189/0x250 [ 422.376398][ T9823] ? __pfx____ratelimit+0x10/0x10 [ 422.376422][ T9823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.376448][ T9823] ? __pfx__printk+0x10/0x10 [ 422.376493][ T9823] should_fail_ex+0x414/0x560 [ 422.376523][ T9823] _copy_from_user+0x2d/0xb0 [ 422.376555][ T9823] copy_from_sockptr+0x48/0x70 [ 422.376589][ T9823] ip_mroute_setsockopt+0x763/0xf60 [ 422.376634][ T9823] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 422.376681][ T9823] ? vfs_write+0x8d8/0xa90 [ 422.376705][ T9823] ? rcu_is_watching+0x15/0xb0 [ 422.376733][ T9823] do_ip_setsockopt+0xf11/0x2d00 [ 422.376768][ T9823] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 422.376819][ T9823] ? __fget_files+0x2a/0x420 [ 422.376849][ T9823] ip_setsockopt+0x66/0x110 [ 422.376875][ T9823] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 422.376914][ T9823] do_sock_setsockopt+0x179/0x1b0 [ 422.376953][ T9823] __x64_sys_setsockopt+0x13f/0x1b0 [ 422.376992][ T9823] do_syscall_64+0xfa/0x3b0 [ 422.377019][ T9823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.377040][ T9823] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 422.377062][ T9823] ? clear_bhb_loop+0x60/0xb0 [ 422.377102][ T9823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.377123][ T9823] RIP: 0033:0x7f798818e9a9 [ 422.377142][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.377162][ T9823] RSP: 002b:00007f7985fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 422.377185][ T9823] RAX: ffffffffffffffda RBX: 00007f79883b6160 RCX: 00007f798818e9a9 [ 422.377201][ T9823] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 422.377214][ T9823] RBP: 00007f7985fd5090 R08: 000000000000003c R09: 0000000000000000 [ 422.377227][ T9823] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 422.377241][ T9823] R13: 0000000000000000 R14: 00007f79883b6160 R15: 00007ffde575cab8 [ 422.377274][ T9823] [ 422.684589][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.348186][ T9830] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 423.786790][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.897282][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.905021][ T9858] FAULT_INJECTION: forcing a failure. [ 425.905021][ T9858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.965902][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: syz.1.909 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 425.965936][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.965953][ T9858] Call Trace: [ 425.965966][ T9858] [ 425.965975][ T9858] dump_stack_lvl+0x189/0x250 [ 425.966006][ T9858] ? __pfx____ratelimit+0x10/0x10 [ 425.966030][ T9858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.966055][ T9858] ? __pfx__printk+0x10/0x10 [ 425.966083][ T9858] ? __might_fault+0xb0/0x130 [ 425.966117][ T9858] should_fail_ex+0x414/0x560 [ 425.966146][ T9858] _copy_from_user+0x2d/0xb0 [ 425.966177][ T9858] do_sock_getsockopt+0x17d/0x450 [ 425.966215][ T9858] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 425.966250][ T9858] ? do_syscall_64+0x20/0x3b0 [ 425.966272][ T9858] ? __fget_files+0x3a0/0x420 [ 425.966296][ T9858] ? __fget_files+0x2a/0x420 [ 425.966328][ T9858] __x64_sys_getsockopt+0x1a5/0x250 [ 425.966361][ T9858] ? do_syscall_64+0x20/0x3b0 [ 425.966387][ T9858] ? do_syscall_64+0x20/0x3b0 [ 425.966415][ T9858] do_syscall_64+0xfa/0x3b0 [ 425.966438][ T9858] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.966461][ T9858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.966483][ T9858] ? clear_bhb_loop+0x60/0xb0 [ 425.966509][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.966531][ T9858] RIP: 0033:0x7f60c018e9a9 [ 425.966550][ T9858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.966569][ T9858] RSP: 002b:00007f60c0f22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 425.966592][ T9858] RAX: ffffffffffffffda RBX: 00007f60c03b5fa0 RCX: 00007f60c018e9a9 [ 425.966608][ T9858] RDX: 000000000000000b RSI: 0000000000000006 RDI: 0000000000000003 [ 425.966621][ T9858] RBP: 00007f60c0f22090 R08: 0000200000000180 R09: 0000000000000000 [ 425.966636][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.966648][ T9858] R13: 0000000000000000 R14: 00007f60c03b5fa0 R15: 00007ffc28fd5fb8 [ 425.966681][ T9858] [ 426.171173][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.104277][ T9865] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.913'. [ 427.219055][ T9876] fuse: Bad value for 'group_id' [ 427.224064][ T9876] fuse: Bad value for 'group_id' [ 427.291988][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.555501][ T9869] IPv6: Can't replace route, no match found [ 427.572952][ T9869] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 428.414493][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.616016][ T9884] FAULT_INJECTION: forcing a failure. [ 428.616016][ T9884] name failslab, interval 1, probability 0, space 0, times 0 [ 428.694619][ T9884] CPU: 0 UID: 0 PID: 9884 Comm: syz.5.915 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 428.694653][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.694667][ T9884] Call Trace: [ 428.694675][ T9884] [ 428.694685][ T9884] dump_stack_lvl+0x189/0x250 [ 428.694715][ T9884] ? __pfx____ratelimit+0x10/0x10 [ 428.694740][ T9884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.694764][ T9884] ? __pfx__printk+0x10/0x10 [ 428.694798][ T9884] ? __pfx___might_resched+0x10/0x10 [ 428.694821][ T9884] ? fs_reclaim_acquire+0x7d/0x100 [ 428.694849][ T9884] should_fail_ex+0x414/0x560 [ 428.694874][ T9884] should_failslab+0xa8/0x100 [ 428.694897][ T9884] __kmalloc_noprof+0xcb/0x4f0 [ 428.694914][ T9884] ? kfree+0x4d/0x440 [ 428.694938][ T9884] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.694968][ T9884] tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.694995][ T9884] ? tomoyo_domain+0xda/0x130 [ 428.695025][ T9884] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 428.695045][ T9884] tomoyo_path_number_perm+0x1e8/0x5a0 [ 428.695069][ T9884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.695107][ T9884] ? __lock_acquire+0xab9/0xd20 [ 428.695146][ T9884] ? __fget_files+0x2a/0x420 [ 428.695169][ T9884] ? __fget_files+0x2a/0x420 [ 428.695189][ T9884] ? __fget_files+0x3a0/0x420 [ 428.695208][ T9884] ? __fget_files+0x2a/0x420 [ 428.695233][ T9884] security_file_ioctl+0xcb/0x2d0 [ 428.695266][ T9884] __se_sys_ioctl+0x47/0x170 [ 428.695297][ T9884] do_syscall_64+0xfa/0x3b0 [ 428.695317][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.695337][ T9884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.695355][ T9884] ? clear_bhb_loop+0x60/0xb0 [ 428.695378][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.695397][ T9884] RIP: 0033:0x7f3c03d8e9a9 [ 428.695414][ T9884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.695432][ T9884] RSP: 002b:00007f3c04c28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.695452][ T9884] RAX: ffffffffffffffda RBX: 00007f3c03fb5fa0 RCX: 00007f3c03d8e9a9 [ 428.695466][ T9884] RDX: 0000200000000080 RSI: 00000000c0405602 RDI: 0000000000000003 [ 428.695480][ T9884] RBP: 00007f3c04c28090 R08: 0000000000000000 R09: 0000000000000000 [ 428.695492][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.695504][ T9884] R13: 0000000000000000 R14: 00007f3c03fb5fa0 R15: 00007ffd152c3a58 [ 428.695534][ T9884] [ 428.971316][ T9884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.515620][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.688889][ T9893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 430.627491][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.967161][ T9901] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 431.131352][ T9819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 431.257116][ T9898] IPVS: persistence engine module ip_vs_pe_ not found [ 431.297165][ T9898] tipc: Started in network mode [ 431.303573][ T9898] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 431.310928][ T9898] tipc: Enabled bearer , priority 10 [ 431.322011][ T9898] lo speed is unknown, defaulting to 1000 [ 431.329367][ T9898] lo speed is unknown, defaulting to 1000 [ 431.339749][ T9898] lo speed is unknown, defaulting to 1000 [ 431.352068][ T9898] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 431.366529][ T9819] usb 6-1: Using ep0 maxpacket: 32 [ 431.371825][ T9898] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 431.403035][ T9898] lo speed is unknown, defaulting to 1000 [ 431.412575][ T9898] lo speed is unknown, defaulting to 1000 [ 431.421463][ T9898] lo speed is unknown, defaulting to 1000 [ 431.428512][ T9898] lo speed is unknown, defaulting to 1000 [ 431.436966][ T9898] lo speed is unknown, defaulting to 1000 [ 431.462844][ T9898] netlink: 240 bytes leftover after parsing attributes in process `syz.9.921'. [ 431.566690][ T9819] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 431.605835][ T9819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.674135][ T9819] usb 6-1: config 0 descriptor?? [ 431.739295][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.940843][ T9910] fuse: Bad value for 'fd' [ 432.208732][ T9819] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 432.256875][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.924'. [ 432.499732][ T8154] tipc: Node number set to 10005162 [ 432.500715][ T9819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 432.660155][ T9819] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 432.716072][ T9819] usb 6-1: media controller created [ 432.795671][ T9919] IPVS: set_ctl: invalid protocol: 44 172.30.1.6:20004 [ 432.802785][ T9819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.852443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.226739][ T9819] az6027: usb out operation failed. (-71) [ 433.306049][ T9923] lo speed is unknown, defaulting to 1000 [ 433.319722][ T9819] az6027: usb out operation failed. (-71) [ 433.336546][ T9819] stb0899_attach: Driver disabled by Kconfig [ 433.357468][ T9819] az6027: no front-end attached [ 433.357468][ T9819] [ 433.788750][ T9819] az6027: usb out operation failed. (-71) [ 433.962922][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.004700][ T9819] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 434.153217][ T9819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 434.227624][ T9819] dvb-usb: schedule remote query interval to 400 msecs. [ 434.257444][ T9819] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 434.335517][ T9819] usb 6-1: USB disconnect, device number 3 [ 434.657239][ T9819] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 435.074748][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.186567][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.499820][ T9954] FAULT_INJECTION: forcing a failure. [ 436.499820][ T9954] name failslab, interval 1, probability 0, space 0, times 0 [ 436.514177][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.9.937 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 436.514208][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.514221][ T9954] Call Trace: [ 436.514230][ T9954] [ 436.514240][ T9954] dump_stack_lvl+0x189/0x250 [ 436.514270][ T9954] ? __pfx____ratelimit+0x10/0x10 [ 436.514294][ T9954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.514319][ T9954] ? __pfx__printk+0x10/0x10 [ 436.514353][ T9954] ? __pfx___might_resched+0x10/0x10 [ 436.514378][ T9954] ? fs_reclaim_acquire+0x7d/0x100 [ 436.514408][ T9954] should_fail_ex+0x414/0x560 [ 436.514429][ T9954] should_failslab+0xa8/0x100 [ 436.514448][ T9954] kmem_cache_alloc_noprof+0x73/0x3c0 [ 436.514463][ T9954] ? getname_flags+0xb8/0x540 [ 436.514485][ T9954] getname_flags+0xb8/0x540 [ 436.514506][ T9954] do_sys_openat2+0xbc/0x1c0 [ 436.514529][ T9954] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.514552][ T9954] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 436.514570][ T9954] ? __pfx_ksys_write+0x10/0x10 [ 436.514587][ T9954] __x64_sys_openat+0x138/0x170 [ 436.514612][ T9954] do_syscall_64+0xfa/0x3b0 [ 436.514630][ T9954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.514652][ T9954] ? asm_sysvec_call_function_single+0x1a/0x20 [ 436.514668][ T9954] ? clear_bhb_loop+0x60/0xb0 [ 436.514686][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.514701][ T9954] RIP: 0033:0x7f93c9d8e9a9 [ 436.514715][ T9954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.514728][ T9954] RSP: 002b:00007f93cabff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.514744][ T9954] RAX: ffffffffffffffda RBX: 00007f93c9fb6080 RCX: 00007f93c9d8e9a9 [ 436.514756][ T9954] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 436.514766][ T9954] RBP: 00007f93cabff090 R08: 0000000000000000 R09: 0000000000000000 [ 436.514776][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.514785][ T9954] R13: 0000000000000000 R14: 00007f93c9fb6080 R15: 00007ffef966c858 [ 436.514808][ T9954] [ 437.309235][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.410205][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.725007][ T9969] FAULT_INJECTION: forcing a failure. [ 438.725007][ T9969] name failslab, interval 1, probability 0, space 0, times 0 [ 438.830108][ T9969] CPU: 1 UID: 0 PID: 9969 Comm: syz.9.939 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 438.830141][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.830154][ T9969] Call Trace: [ 438.830163][ T9969] [ 438.830178][ T9969] dump_stack_lvl+0x189/0x250 [ 438.830209][ T9969] ? __pfx____ratelimit+0x10/0x10 [ 438.830233][ T9969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.830257][ T9969] ? __pfx__printk+0x10/0x10 [ 438.830291][ T9969] ? __pfx___might_resched+0x10/0x10 [ 438.830315][ T9969] ? fs_reclaim_acquire+0x7d/0x100 [ 438.830346][ T9969] should_fail_ex+0x414/0x560 [ 438.830374][ T9969] should_failslab+0xa8/0x100 [ 438.830399][ T9969] __kmalloc_noprof+0xcb/0x4f0 [ 438.830419][ T9969] ? kfree+0x4d/0x440 [ 438.830448][ T9969] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.830482][ T9969] tomoyo_realpath_from_path+0xe3/0x5d0 [ 438.830513][ T9969] ? tomoyo_domain+0xda/0x130 [ 438.830547][ T9969] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 438.830571][ T9969] tomoyo_path_number_perm+0x1e8/0x5a0 [ 438.830597][ T9969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 438.830639][ T9969] ? __lock_acquire+0xab9/0xd20 [ 438.830682][ T9969] ? __fget_files+0x2a/0x420 [ 438.830710][ T9969] ? __fget_files+0x2a/0x420 [ 438.830732][ T9969] ? __fget_files+0x3a0/0x420 [ 438.830755][ T9969] ? __fget_files+0x2a/0x420 [ 438.830783][ T9969] security_file_ioctl+0xcb/0x2d0 [ 438.830810][ T9969] __se_sys_ioctl+0x47/0x170 [ 438.830845][ T9969] do_syscall_64+0xfa/0x3b0 [ 438.830868][ T9969] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.830890][ T9969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.830911][ T9969] ? clear_bhb_loop+0x60/0xb0 [ 438.830937][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.830958][ T9969] RIP: 0033:0x7f93c9d8e9a9 [ 438.830976][ T9969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.830995][ T9969] RSP: 002b:00007f93cabff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.831018][ T9969] RAX: ffffffffffffffda RBX: 00007f93c9fb6080 RCX: 00007f93c9d8e9a9 [ 438.831034][ T9969] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 438.831047][ T9969] RBP: 00007f93cabff090 R08: 0000000000000000 R09: 0000000000000000 [ 438.831061][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.831073][ T9969] R13: 0000000000000001 R14: 00007f93c9fb6080 R15: 00007ffef966c858 [ 438.831106][ T9969] [ 438.831115][ T9969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 439.522168][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.862201][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 440.114463][ T9987] FAULT_INJECTION: forcing a failure. [ 440.114463][ T9987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.129150][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: syz.8.945 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 440.129182][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.129193][ T9987] Call Trace: [ 440.129200][ T9987] [ 440.129207][ T9987] dump_stack_lvl+0x189/0x250 [ 440.129229][ T9987] ? __pfx____ratelimit+0x10/0x10 [ 440.129246][ T9987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.129263][ T9987] ? __pfx__printk+0x10/0x10 [ 440.129283][ T9987] ? __might_fault+0xb0/0x130 [ 440.129306][ T9987] should_fail_ex+0x414/0x560 [ 440.129326][ T9987] _copy_from_user+0x2d/0xb0 [ 440.129350][ T9987] ___sys_recvmsg+0x12e/0x510 [ 440.129371][ T9987] ? __pfx____sys_recvmsg+0x10/0x10 [ 440.129404][ T9987] ? __fget_files+0x3a0/0x420 [ 440.129430][ T9987] do_recvmmsg+0x307/0x770 [ 440.129451][ T9987] ? __pfx_do_recvmmsg+0x10/0x10 [ 440.129475][ T9987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 440.129507][ T9987] __x64_sys_recvmmsg+0x190/0x240 [ 440.129524][ T9987] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 440.129538][ T9987] ? rcu_is_watching+0x15/0xb0 [ 440.129559][ T9987] ? do_syscall_64+0xbe/0x3b0 [ 440.129579][ T9987] do_syscall_64+0xfa/0x3b0 [ 440.129595][ T9987] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.129611][ T9987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.129627][ T9987] ? clear_bhb_loop+0x60/0xb0 [ 440.129646][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.129661][ T9987] RIP: 0033:0x7f3fb8d8e9a9 [ 440.129675][ T9987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.129688][ T9987] RSP: 002b:00007f3fb6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 440.129704][ T9987] RAX: ffffffffffffffda RBX: 00007f3fb8fb6080 RCX: 00007f3fb8d8e9a9 [ 440.129715][ T9987] RDX: 0000000000000001 RSI: 0000200000002040 RDI: 000000000000000a [ 440.129725][ T9987] RBP: 00007f3fb6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 440.129735][ T9987] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 440.129744][ T9987] R13: 0000000000000000 R14: 00007f3fb8fb6080 R15: 00007fff1ebede18 [ 440.129768][ T9987] [ 440.344315][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.634002][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.414029][T10000] ubi8: attaching mtd0 [ 441.538255][T10000] ubi8: scanning is finished [ 441.567444][T10000] ubi8: empty MTD device detected [ 441.756487][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.944009][T10000] ubi8 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt8d", error -4 [ 442.857950][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.797073][T10025] binder: 10021:10025 ioctl 4018620d 0 returned -22 [ 443.980129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.022625][T10028] binder: 10021:10028 ioctl c018620c 0 returned -14 [ 444.794051][ T9819] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 444.993624][ T9819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.005239][ T9819] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.019369][ T9819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 445.092082][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.137911][ T9819] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 445.468441][ T9819] usb 6-1: string descriptor 0 read error: -22 [ 445.487909][ T9819] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.520393][ T9819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.569502][ T9819] usb 6-1: 0:2 : does not exist [ 446.193449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.267557][ T5158] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 447.304915][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.029322][ T8154] usb 6-1: USB disconnect, device number 4 [ 448.040447][T10068] lo speed is unknown, defaulting to 1000 [ 448.416704][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.539256][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.793016][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.800809][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.640384][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.084278][T10099] FAULT_INJECTION: forcing a failure. [ 451.084278][T10099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.185299][T10099] CPU: 0 UID: 0 PID: 10099 Comm: syz.7.976 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 451.185335][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.185348][T10099] Call Trace: [ 451.185361][T10099] [ 451.185371][T10099] dump_stack_lvl+0x189/0x250 [ 451.185401][T10099] ? __pfx____ratelimit+0x10/0x10 [ 451.185425][T10099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.185449][T10099] ? __pfx__printk+0x10/0x10 [ 451.185478][T10099] ? __might_fault+0xb0/0x130 [ 451.185512][T10099] should_fail_ex+0x414/0x560 [ 451.185540][T10099] _copy_from_user+0x2d/0xb0 [ 451.185572][T10099] ___sys_sendmsg+0x158/0x2a0 [ 451.185610][T10099] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.185684][T10099] ? __fget_files+0x2a/0x420 [ 451.185708][T10099] ? __fget_files+0x3a0/0x420 [ 451.185744][T10099] __sys_sendmmsg+0x227/0x430 [ 451.185785][T10099] ? __pfx___sys_sendmmsg+0x10/0x10 [ 451.185817][T10099] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 451.185877][T10099] ? ksys_write+0x22a/0x250 [ 451.185900][T10099] ? __pfx_ksys_write+0x10/0x10 [ 451.185918][T10099] ? rcu_is_watching+0x15/0xb0 [ 451.185950][T10099] __x64_sys_sendmmsg+0xa0/0xc0 [ 451.185987][T10099] do_syscall_64+0xfa/0x3b0 [ 451.186010][T10099] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.186033][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.186055][T10099] ? clear_bhb_loop+0x60/0xb0 [ 451.186091][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.186112][T10099] RIP: 0033:0x7f798818e9a9 [ 451.186132][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.186151][T10099] RSP: 002b:00007f7988f19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 451.186175][T10099] RAX: ffffffffffffffda RBX: 00007f79883b5fa0 RCX: 00007f798818e9a9 [ 451.186192][T10099] RDX: 0000000000000002 RSI: 0000200000001180 RDI: 0000000000000003 [ 451.186205][T10099] RBP: 00007f7988f19090 R08: 0000000000000000 R09: 0000000000000000 [ 451.186218][T10099] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 451.186232][T10099] R13: 0000000000000000 R14: 00007f79883b5fa0 R15: 00007ffde575cab8 [ 451.186265][T10099] [ 451.752260][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.864048][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.975869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.864821][T10122] FAULT_INJECTION: forcing a failure. [ 454.864821][T10122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.928777][T10122] CPU: 0 UID: 0 PID: 10122 Comm: syz.8.982 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 454.928813][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.928826][T10122] Call Trace: [ 454.928835][T10122] [ 454.928845][T10122] dump_stack_lvl+0x189/0x250 [ 454.928876][T10122] ? __pfx____ratelimit+0x10/0x10 [ 454.928900][T10122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.928925][T10122] ? __pfx__printk+0x10/0x10 [ 454.928966][T10122] should_fail_ex+0x414/0x560 [ 454.928994][T10122] _copy_to_user+0x31/0xb0 [ 454.929027][T10122] simple_read_from_buffer+0xe1/0x170 [ 454.929056][T10122] proc_fail_nth_read+0x1df/0x250 [ 454.929087][T10122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.929116][T10122] ? rw_verify_area+0x258/0x650 [ 454.929147][T10122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.929175][T10122] vfs_read+0x200/0x980 [ 454.929219][T10122] ? __pfx_vfs_read+0x10/0x10 [ 454.929256][T10122] ? do_sys_openat2+0x154/0x1c0 [ 454.929283][T10122] ? kmem_cache_free+0x18f/0x400 [ 454.929322][T10122] ksys_read+0x145/0x250 [ 454.929345][T10122] ? __pfx_ksys_read+0x10/0x10 [ 454.929371][T10122] ? do_syscall_64+0xbe/0x3b0 [ 454.929401][T10122] do_syscall_64+0xfa/0x3b0 [ 454.929424][T10122] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.929447][T10122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.929469][T10122] ? clear_bhb_loop+0x60/0xb0 [ 454.929496][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.929523][T10122] RIP: 0033:0x7f3fb8d8d3bc [ 454.929542][T10122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 454.929562][T10122] RSP: 002b:00007f3fb9b0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.929585][T10122] RAX: ffffffffffffffda RBX: 00007f3fb8fb5fa0 RCX: 00007f3fb8d8d3bc [ 454.929602][T10122] RDX: 000000000000000f RSI: 00007f3fb9b0f0a0 RDI: 0000000000000004 [ 454.929616][T10122] RBP: 00007f3fb9b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 454.929630][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.929641][T10122] R13: 0000000000000000 R14: 00007f3fb8fb5fa0 R15: 00007fff1ebede18 [ 454.929672][T10122] [ 455.156474][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.284936][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.396737][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.634208][T10150] lo speed is unknown, defaulting to 1000 [ 458.519237][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.621744][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.219953][T10168] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 460.732832][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.045059][T10171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.844025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.955844][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.067662][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.166588][T10197] lo speed is unknown, defaulting to 1000 [ 464.380614][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1005'. [ 464.477394][T10204] input: syz1 as /devices/virtual/input/input14 [ 465.179549][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.080694][T10214] lo speed is unknown, defaulting to 1000 [ 466.292548][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.433596][T10217] netlink: 'syz.1.1009': attribute type 72 has an invalid length. [ 467.413828][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.444203][T10237] Bluetooth: hci6: command 0x0406 tx timeout [ 468.514979][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.182295][T10255] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 469.628263][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.738659][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.144292][T10259] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 471.851814][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.190038][T10267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.962256][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.665335][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1025'. [ 474.075574][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.187302][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.364613][T10237] Bluetooth: hci4: command 0x0c1a tx timeout [ 475.463070][T10291] lo speed is unknown, defaulting to 1000 [ 475.524960][T10282] lo speed is unknown, defaulting to 1000 [ 475.695075][T10296] FAULT_INJECTION: forcing a failure. [ 475.695075][T10296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.754177][T10296] CPU: 0 UID: 0 PID: 10296 Comm: syz.1.1034 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 475.754210][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.754223][T10296] Call Trace: [ 475.754232][T10296] [ 475.754242][T10296] dump_stack_lvl+0x189/0x250 [ 475.754274][T10296] ? __pfx____ratelimit+0x10/0x10 [ 475.754298][T10296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.754322][T10296] ? __pfx__printk+0x10/0x10 [ 475.754369][T10296] ? __might_fault+0xb0/0x130 [ 475.754404][T10296] should_fail_ex+0x414/0x560 [ 475.754432][T10296] _copy_from_user+0x2d/0xb0 [ 475.754471][T10296] ___sys_sendmsg+0x158/0x2a0 [ 475.754508][T10296] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.754584][T10296] ? __fget_files+0x2a/0x420 [ 475.754607][T10296] ? __fget_files+0x3a0/0x420 [ 475.754644][T10296] __x64_sys_sendmsg+0x19b/0x260 [ 475.754680][T10296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.754726][T10296] ? __pfx_ksys_write+0x10/0x10 [ 475.754743][T10296] ? rcu_is_watching+0x15/0xb0 [ 475.754773][T10296] ? do_syscall_64+0xbe/0x3b0 [ 475.754801][T10296] do_syscall_64+0xfa/0x3b0 [ 475.754824][T10296] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.754846][T10296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.754867][T10296] ? clear_bhb_loop+0x60/0xb0 [ 475.754894][T10296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.754915][T10296] RIP: 0033:0x7f60c018e9a9 [ 475.754934][T10296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.754954][T10296] RSP: 002b:00007f60c0f22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.754978][T10296] RAX: ffffffffffffffda RBX: 00007f60c03b5fa0 RCX: 00007f60c018e9a9 [ 475.754994][T10296] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 475.755008][T10296] RBP: 00007f60c0f22090 R08: 0000000000000000 R09: 0000000000000000 [ 475.755021][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.755034][T10296] R13: 0000000000000000 R14: 00007f60c03b5fa0 R15: 00007ffc28fd5fb8 [ 475.755068][T10296] [ 476.297778][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.904494][T10302] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 477.410969][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.603525][T10301] lo speed is unknown, defaulting to 1000 [ 477.961217][T10315] input: syz1 as /devices/virtual/input/input15 [ 478.521456][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.138325][T10326] xt_CT: No such helper "snmp" [ 479.518683][ T5849] lo speed is unknown, defaulting to 1000 [ 479.633200][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.053605][T10350] overlayfs: failed to resolve './file1': -2 [ 480.746415][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.867532][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.200450][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 482.968665][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.809967][T10386] FAULT_INJECTION: forcing a failure. [ 483.809967][T10386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.838221][T10386] CPU: 1 UID: 0 PID: 10386 Comm: syz.7.1061 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 483.838253][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.838263][T10386] Call Trace: [ 483.838269][T10386] [ 483.838276][T10386] dump_stack_lvl+0x189/0x250 [ 483.838298][T10386] ? __pfx____ratelimit+0x10/0x10 [ 483.838315][T10386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.838333][T10386] ? __pfx__printk+0x10/0x10 [ 483.838355][T10386] ? __might_fault+0xb0/0x130 [ 483.838379][T10386] should_fail_ex+0x414/0x560 [ 483.838399][T10386] _copy_from_user+0x2d/0xb0 [ 483.838422][T10386] netlink_setsockopt+0x1af/0x770 [ 483.838450][T10386] ? __pfx_netlink_setsockopt+0x10/0x10 [ 483.838476][T10386] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 483.838492][T10386] ? __pfx_netlink_setsockopt+0x10/0x10 [ 483.838521][T10386] do_sock_setsockopt+0x179/0x1b0 [ 483.838548][T10386] __x64_sys_setsockopt+0x13f/0x1b0 [ 483.838575][T10386] do_syscall_64+0xfa/0x3b0 [ 483.838592][T10386] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.838613][T10386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.838629][T10386] ? clear_bhb_loop+0x60/0xb0 [ 483.838648][T10386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.838663][T10386] RIP: 0033:0x7f798818e9a9 [ 483.838677][T10386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.838691][T10386] RSP: 002b:00007f7988f19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 483.838707][T10386] RAX: ffffffffffffffda RBX: 00007f79883b5fa0 RCX: 00007f798818e9a9 [ 483.838719][T10386] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000003 [ 483.838728][T10386] RBP: 00007f7988f19090 R08: 0000000000000004 R09: 0000000000000000 [ 483.838737][T10386] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 483.838747][T10386] R13: 0000000000000000 R14: 00007f79883b5fa0 R15: 00007ffde575cab8 [ 483.838770][T10386] [ 484.080482][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.659108][T10394] overlayfs: failed to resolve './file1': -2 [ 485.115960][T10401] Driver unsupported XDP return value 0 on prog (id 172) dev N/A, expect packet loss! [ 485.192320][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 486.304169][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.426761][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.339329][T10429] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 488.538470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.128004][T10444] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 489.650301][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.754448][T10447] FAULT_INJECTION: forcing a failure. [ 489.754448][T10447] name failslab, interval 1, probability 0, space 0, times 0 [ 489.951588][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.7.1079 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 489.951621][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.951633][T10447] Call Trace: [ 489.951642][T10447] [ 489.951651][T10447] dump_stack_lvl+0x189/0x250 [ 489.951680][T10447] ? __pfx____ratelimit+0x10/0x10 [ 489.951702][T10447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.951726][T10447] ? __pfx__printk+0x10/0x10 [ 489.951759][T10447] ? __pfx___might_resched+0x10/0x10 [ 489.951787][T10447] should_fail_ex+0x414/0x560 [ 489.951814][T10447] should_failslab+0xa8/0x100 [ 489.951839][T10447] kmem_cache_alloc_noprof+0x73/0x3c0 [ 489.951859][T10447] ? getname_flags+0xb8/0x540 [ 489.951889][T10447] getname_flags+0xb8/0x540 [ 489.951918][T10447] __x64_sys_renameat2+0xad/0xe0 [ 489.951944][T10447] do_syscall_64+0xfa/0x3b0 [ 489.951973][T10447] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.951994][T10447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.952015][T10447] ? clear_bhb_loop+0x60/0xb0 [ 489.952040][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.952061][T10447] RIP: 0033:0x7f798818e9a9 [ 489.952078][T10447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.952095][T10447] RSP: 002b:00007f7988f19038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 489.952118][T10447] RAX: ffffffffffffffda RBX: 00007f79883b5fa0 RCX: 00007f798818e9a9 [ 489.952133][T10447] RDX: ffffffffffffffff RSI: 0000200000000180 RDI: ffffffffffffff9c [ 489.952148][T10447] RBP: 00007f7988f19090 R08: 0000000000000000 R09: 0000000000000000 [ 489.952161][T10447] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.952173][T10447] R13: 0000000000000000 R14: 00007f79883b5fa0 R15: 00007ffde575cab8 [ 489.952205][T10447] [ 490.144097][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.751426][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.009956][T10455] binder: 10453:10455 ioctl 4018620d 0 returned -22 [ 491.085253][T10458] binder: 10453:10458 ioctl c018620c 0 returned -14 [ 491.220077][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1082'. [ 491.864599][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 492.976061][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.030602][T10474] fuse: Unknown parameter 'user_id00000000000000000000' [ 493.337384][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.369175][T10237] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 493.373563][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 493.719326][T10491] loop7: detected capacity change from 0 to 16384 [ 493.752496][T10494] binder: 10492:10494 ioctl 4018620d 0 returned -22 [ 493.860421][T10498] binder: 10492:10498 ioctl c018620c 0 returned -14 [ 494.086978][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 494.210800][T10497] loop7: detected capacity change from 16384 to 0 [ 494.220454][ C0] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 494.416728][T10504] fuse: Bad value for 'fd' [ 495.198731][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 496.321245][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 496.630599][ T5158] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 497.172209][T10537] sctp: [Deprecated]: syz.1.1110 (pid 10537) Use of int in max_burst socket option deprecated. [ 497.172209][T10537] Use struct sctp_assoc_value instead [ 497.422370][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 497.770935][T10547] binder: 10546:10547 ioctl 4018620d 0 returned -22 [ 497.835398][T10549] binder: 10546:10549 ioctl c018620c 0 returned -14 [ 498.534199][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 498.824328][T10554] binder: BINDER_SET_CONTEXT_MGR already set [ 498.830473][T10554] binder: 10551:10554 ioctl 4018620d 200000000040 returned -16 [ 499.646010][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 499.683575][T10556] FAULT_INJECTION: forcing a failure. [ 499.683575][T10556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.770380][T10556] CPU: 0 UID: 0 PID: 10556 Comm: syz.7.1117 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 499.770415][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.770430][T10556] Call Trace: [ 499.770439][T10556] [ 499.770448][T10556] dump_stack_lvl+0x189/0x250 [ 499.770480][T10556] ? __pfx____ratelimit+0x10/0x10 [ 499.770505][T10556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.770530][T10556] ? __pfx__printk+0x10/0x10 [ 499.770559][T10556] ? __might_fault+0xb0/0x130 [ 499.770593][T10556] should_fail_ex+0x414/0x560 [ 499.770630][T10556] _copy_from_user+0x2d/0xb0 [ 499.770662][T10556] do_ipv6_setsockopt+0x32d/0x2fb0 [ 499.770708][T10556] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 499.770750][T10556] ? rcu_read_lock_any_held+0xb3/0x120 [ 499.770776][T10556] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 499.770807][T10556] ? vfs_write+0x8d8/0xa90 [ 499.770844][T10556] ? __lock_acquire+0xab9/0xd20 [ 499.770887][T10556] ? __fget_files+0x2a/0x420 [ 499.770917][T10556] ipv6_setsockopt+0x59/0x170 [ 499.770936][T10556] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 499.770968][T10556] do_sock_setsockopt+0x179/0x1b0 [ 499.771006][T10556] __x64_sys_setsockopt+0x13f/0x1b0 [ 499.771045][T10556] do_syscall_64+0xfa/0x3b0 [ 499.771068][T10556] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.771092][T10556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.771114][T10556] ? clear_bhb_loop+0x60/0xb0 [ 499.771140][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.771161][T10556] RIP: 0033:0x7f798818e9a9 [ 499.771180][T10556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.771199][T10556] RSP: 002b:00007f7988f19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.771223][T10556] RAX: ffffffffffffffda RBX: 00007f79883b5fa0 RCX: 00007f798818e9a9 [ 499.771239][T10556] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 499.771253][T10556] RBP: 00007f7988f19090 R08: 0000000000000438 R09: 0000000000000000 [ 499.771267][T10556] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 499.771281][T10556] R13: 0000000000000000 R14: 00007f79883b5fa0 R15: 00007ffde575cab8 [ 499.771318][T10556] [ 500.120499][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1119'. [ 500.407220][T10564] FAULT_INJECTION: forcing a failure. [ 500.407220][T10564] name failslab, interval 1, probability 0, space 0, times 0 [ 500.428116][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz.7.1121 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 500.428149][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.428162][T10564] Call Trace: [ 500.428171][T10564] [ 500.428181][T10564] dump_stack_lvl+0x189/0x250 [ 500.428210][T10564] ? __pfx____ratelimit+0x10/0x10 [ 500.428245][T10564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.428269][T10564] ? __pfx__printk+0x10/0x10 [ 500.428303][T10564] ? __pfx___might_resched+0x10/0x10 [ 500.428325][T10564] ? fs_reclaim_acquire+0x7d/0x100 [ 500.428356][T10564] should_fail_ex+0x414/0x560 [ 500.428385][T10564] should_failslab+0xa8/0x100 [ 500.428409][T10564] __kmalloc_noprof+0xcb/0x4f0 [ 500.428427][T10564] ? kfree+0x4d/0x440 [ 500.428455][T10564] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 500.428487][T10564] tomoyo_realpath_from_path+0xe3/0x5d0 [ 500.428509][T10564] ? tomoyo_domain+0xda/0x130 [ 500.428533][T10564] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 500.428550][T10564] tomoyo_path_number_perm+0x1e8/0x5a0 [ 500.428568][T10564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 500.428605][T10564] ? __lock_acquire+0xab9/0xd20 [ 500.428634][T10564] ? __fget_files+0x2a/0x420 [ 500.428653][T10564] ? __fget_files+0x2a/0x420 [ 500.428669][T10564] ? __fget_files+0x3a0/0x420 [ 500.428685][T10564] ? __fget_files+0x2a/0x420 [ 500.428704][T10564] security_file_ioctl+0xcb/0x2d0 [ 500.428723][T10564] __se_sys_ioctl+0x47/0x170 [ 500.428747][T10564] do_syscall_64+0xfa/0x3b0 [ 500.428764][T10564] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.428779][T10564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.428794][T10564] ? clear_bhb_loop+0x60/0xb0 [ 500.428812][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.428827][T10564] RIP: 0033:0x7f798818e9a9 [ 500.428840][T10564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.428853][T10564] RSP: 002b:00007f7988f19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.428869][T10564] RAX: ffffffffffffffda RBX: 00007f79883b5fa0 RCX: 00007f798818e9a9 [ 500.428880][T10564] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 500.428890][T10564] RBP: 00007f7988f19090 R08: 0000000000000000 R09: 0000000000000000 [ 500.428899][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.428908][T10564] R13: 0000000000000000 R14: 00007f79883b5fa0 R15: 00007ffde575cab8 [ 500.428930][T10564] [ 500.428937][T10564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 500.757851][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 501.869998][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 502.097408][T10595] binder: 10593:10595 ioctl 4018620d 0 returned -22 [ 502.161109][T10599] binder: 10593:10599 ioctl c018620c 0 returned -14 [ 502.992167][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 503.115879][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1132'. [ 503.600862][ T5158] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 504.103995][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 505.125225][T10624] trusted_key: syz.5.1138 sent an empty control message without MSG_MORE. [ 505.168787][T10623] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 505.215948][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 506.316984][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 506.708486][ T30] audit: type=1326 audit(1753446214.253:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10633 comm="syz.1.1140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60c018e9a9 code=0x0 [ 506.889931][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 507.429156][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 507.772679][T10643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 508.521095][T10648] overlayfs: failed to resolve './file0': -2 [ 508.541033][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 509.312602][T10651] binder: 10650:10651 ioctl 4018620d 0 returned -22 [ 509.399908][T10653] binder: 10650:10653 ioctl c018620c 0 returned -14 [ 509.653205][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 510.764248][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 511.439715][T10670] geneve1: entered promiscuous mode [ 511.495145][T10670] geneve1: left promiscuous mode [ 511.858423][T10679] FAULT_INJECTION: forcing a failure. [ 511.858423][T10679] name failslab, interval 1, probability 0, space 0, times 0 [ 511.886763][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 511.946544][T10679] CPU: 0 UID: 0 PID: 10679 Comm: syz.9.1151 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 511.946575][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.946589][T10679] Call Trace: [ 511.946597][T10679] [ 511.946606][T10679] dump_stack_lvl+0x189/0x250 [ 511.946637][T10679] ? __pfx____ratelimit+0x10/0x10 [ 511.946661][T10679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.946686][T10679] ? __pfx__printk+0x10/0x10 [ 511.946720][T10679] ? __pfx___might_resched+0x10/0x10 [ 511.946744][T10679] ? fs_reclaim_acquire+0x7d/0x100 [ 511.946776][T10679] should_fail_ex+0x414/0x560 [ 511.946805][T10679] should_failslab+0xa8/0x100 [ 511.946831][T10679] __kmalloc_cache_noprof+0x70/0x3d0 [ 511.946852][T10679] ? do_shmat+0x658/0xca0 [ 511.946887][T10679] do_shmat+0x658/0xca0 [ 511.946912][T10679] ? do_shmat+0x2b2/0xca0 [ 511.946938][T10679] ? __pfx_do_shmat+0x10/0x10 [ 511.946962][T10679] ? __pfx_ksys_write+0x10/0x10 [ 511.946975][T10679] ? rcu_is_watching+0x15/0xb0 [ 511.946999][T10679] __x64_sys_shmat+0x9c/0xf0 [ 511.947026][T10679] do_syscall_64+0xfa/0x3b0 [ 511.947044][T10679] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.947062][T10679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.947079][T10679] ? clear_bhb_loop+0x60/0xb0 [ 511.947099][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.947128][T10679] RIP: 0033:0x7f93c9d8e9a9 [ 511.947143][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.947158][T10679] RSP: 002b:00007f93cabde038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 511.947176][T10679] RAX: ffffffffffffffda RBX: 00007f93c9fb6160 RCX: 00007f93c9d8e9a9 [ 511.947189][T10679] RDX: 0000000000007000 RSI: 0000200000ffd000 RDI: 0000000000000000 [ 511.947199][T10679] RBP: 00007f93cabde090 R08: 0000000000000000 R09: 0000000000000000 [ 511.947210][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.947220][T10679] R13: 0000000000000000 R14: 00007f93c9fb6160 R15: 00007ffef966c858 [ 511.947244][T10679] [ 512.232301][T10683] FAULT_INJECTION: forcing a failure. [ 512.232301][T10683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.412633][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.5.1153 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 512.412668][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.412682][T10683] Call Trace: [ 512.412691][T10683] [ 512.412700][T10683] dump_stack_lvl+0x189/0x250 [ 512.412730][T10683] ? __pfx____ratelimit+0x10/0x10 [ 512.412753][T10683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.412777][T10683] ? __pfx__printk+0x10/0x10 [ 512.412804][T10683] ? __might_fault+0xb0/0x130 [ 512.412834][T10683] should_fail_ex+0x414/0x560 [ 512.412860][T10683] _copy_from_user+0x2d/0xb0 [ 512.412889][T10683] do_ipt_set_ctl+0x696/0xcd0 [ 512.412922][T10683] ? rcu_is_watching+0x15/0xb0 [ 512.412944][T10683] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 512.412992][T10683] ? __pfx___mutex_lock+0x10/0x10 [ 512.413015][T10683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 512.413055][T10683] nf_setsockopt+0x26c/0x290 [ 512.413089][T10683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 512.413119][T10683] do_sock_setsockopt+0x179/0x1b0 [ 512.413154][T10683] __x64_sys_setsockopt+0x13f/0x1b0 [ 512.413207][T10683] do_syscall_64+0xfa/0x3b0 [ 512.413229][T10683] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.413250][T10683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.413281][T10683] ? clear_bhb_loop+0x60/0xb0 [ 512.413306][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.413325][T10683] RIP: 0033:0x7f3c03d8e9a9 [ 512.413344][T10683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.413361][T10683] RSP: 002b:00007f3c04c28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 512.413384][T10683] RAX: ffffffffffffffda RBX: 00007f3c03fb5fa0 RCX: 00007f3c03d8e9a9 [ 512.413400][T10683] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 512.413413][T10683] RBP: 00007f3c04c28090 R08: 0000000000000530 R09: 0000000000000000 [ 512.413426][T10683] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 512.413439][T10683] R13: 0000000000000000 R14: 00007f3c03fb5fa0 R15: 00007ffd152c3a58 [ 512.413472][T10683] [ 512.987892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 513.801852][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 513.983857][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 514.013903][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.037252][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.055601][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 514.090386][ T9] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 514.100412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 514.187725][ T9] usb 6-1: Product: syz [ 514.191955][ T9] usb 6-1: Manufacturer: syz [ 514.198174][ T9] usb 6-1: SerialNumber: syz [ 514.235523][ T9] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input16 [ 514.545561][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1157'. [ 515.211545][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 515.403460][ T9] usb 6-1: USB disconnect, device number 5 [ 515.450884][ T9] appletouch 6-1:1.0: input: appletouch disconnected [ 515.467251][T10707] binder: 10706:10707 ioctl 4018620d 0 returned -22 [ 515.477321][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.485564][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.534565][T10709] binder: 10706:10709 ioctl c018620c 0 returned -14 [ 515.701885][T10237] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 515.827993][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1161'. [ 515.840758][T10722] FAULT_INJECTION: forcing a failure. [ 515.840758][T10722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.856980][T10722] CPU: 0 UID: 0 PID: 10722 Comm: syz.8.1164 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 515.857012][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.857026][T10722] Call Trace: [ 515.857034][T10722] [ 515.857044][T10722] dump_stack_lvl+0x189/0x250 [ 515.857073][T10722] ? __pfx____ratelimit+0x10/0x10 [ 515.857097][T10722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.857122][T10722] ? __pfx__printk+0x10/0x10 [ 515.857151][T10722] ? __might_fault+0xb0/0x130 [ 515.857186][T10722] should_fail_ex+0x414/0x560 [ 515.857214][T10722] _copy_from_user+0x2d/0xb0 [ 515.857247][T10722] ___sys_sendmsg+0x158/0x2a0 [ 515.857285][T10722] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.857361][T10722] ? __fget_files+0x2a/0x420 [ 515.857385][T10722] ? __fget_files+0x3a0/0x420 [ 515.857422][T10722] __x64_sys_sendmsg+0x19b/0x260 [ 515.857460][T10722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.857505][T10722] ? __pfx_ksys_write+0x10/0x10 [ 515.857524][T10722] ? rcu_is_watching+0x15/0xb0 [ 515.857554][T10722] ? do_syscall_64+0xbe/0x3b0 [ 515.857583][T10722] do_syscall_64+0xfa/0x3b0 [ 515.857607][T10722] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.857630][T10722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.857652][T10722] ? clear_bhb_loop+0x60/0xb0 [ 515.857679][T10722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.857700][T10722] RIP: 0033:0x7f3fb8d8e9a9 [ 515.857720][T10722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.857738][T10722] RSP: 002b:00007f3fb9b0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.857780][T10722] RAX: ffffffffffffffda RBX: 00007f3fb8fb5fa0 RCX: 00007f3fb8d8e9a9 [ 515.857796][T10722] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 515.857811][T10722] RBP: 00007f3fb9b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.857824][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.857837][T10722] R13: 0000000000000000 R14: 00007f3fb8fb5fa0 R15: 00007fff1ebede18 [ 515.857871][T10722] [ 516.323362][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 516.746846][T10727] 9pnet_fd: Insufficient options for proto=fd [ 517.435212][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available Connection to 10.128.0.249 closed by remote host. [ 518.548328][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 519.099479][T10353] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.391410][T10353] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.658968][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 519.760694][T10353] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.963541][T10353] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.040850][T10726] ================================================================== [ 520.048961][T10726] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 520.058174][T10726] Read of size 8 at addr ffff88805d23a558 by task syz.5.1166/10726 [ 520.066156][T10726] [ 520.068489][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.5.1166 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 520.068510][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.068520][T10726] Call Trace: [ 520.068527][T10726] [ 520.068535][T10726] dump_stack_lvl+0x189/0x250 [ 520.068553][T10726] ? __kasan_check_byte+0x12/0x40 [ 520.068570][T10726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.068586][T10726] ? lock_release+0x4b/0x3e0 [ 520.068603][T10726] ? __virt_addr_valid+0x4a5/0x5c0 [ 520.068622][T10726] print_report+0xca/0x240 [ 520.068644][T10726] ? __list_del_entry_valid_or_report+0x92/0x190 [ 520.068667][T10726] kasan_report+0x118/0x150 [ 520.068683][T10726] ? __list_del_entry_valid_or_report+0x92/0x190 [ 520.068709][T10726] __list_del_entry_valid_or_report+0x92/0x190 [ 520.068734][T10726] bt_accept_unlink+0x39/0x240 [ 520.068753][T10726] l2cap_sock_teardown_cb+0x17e/0x460 [ 520.068778][T10726] l2cap_chan_del+0xb5/0x5e0 [ 520.068799][T10726] l2cap_conn_del+0x388/0x680 [ 520.068821][T10726] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 520.068842][T10726] hci_conn_hash_flush+0x10d/0x230 [ 520.068866][T10726] hci_dev_close_sync+0xaef/0x1330 [ 520.068889][T10726] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 520.068907][T10726] ? up_write+0x1c4/0x420 [ 520.068929][T10726] hci_unregister_dev+0x21a/0x510 [ 520.068946][T10726] vhci_release+0x80/0xd0 [ 520.068965][T10726] ? __pfx_vhci_release+0x10/0x10 [ 520.068982][T10726] __fput+0x449/0xa70 [ 520.069006][T10726] task_work_run+0x1d1/0x260 [ 520.069028][T10726] ? __pfx_task_work_run+0x10/0x10 [ 520.069050][T10726] ? kmem_cache_free+0x18f/0x400 [ 520.069067][T10726] do_exit+0x6b5/0x22e0 [ 520.069089][T10726] ? do_raw_spin_lock+0x121/0x290 [ 520.069110][T10726] ? __pfx_do_exit+0x10/0x10 [ 520.069135][T10726] do_group_exit+0x21c/0x2d0 [ 520.069156][T10726] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.069192][T10726] get_signal+0x125e/0x1310 [ 520.069216][T10726] arch_do_signal_or_restart+0x9a/0x750 [ 520.069239][T10726] ? __fget_files+0x2a/0x420 [ 520.069255][T10726] ? __fget_files+0x3a0/0x420 [ 520.069271][T10726] ? __fget_files+0x2a/0x420 [ 520.069288][T10726] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 520.069317][T10726] ? exit_to_user_mode_loop+0x40/0x110 [ 520.069333][T10726] exit_to_user_mode_loop+0x75/0x110 [ 520.069348][T10726] do_syscall_64+0x2bd/0x3b0 [ 520.069365][T10726] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.069380][T10726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.069395][T10726] ? clear_bhb_loop+0x60/0xb0 [ 520.069413][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.069428][T10726] RIP: 0033:0x7f3c03d8e9a9 [ 520.069441][T10726] Code: Unable to access opcode bytes at 0x7f3c03d8e97f. [ 520.069449][T10726] RSP: 002b:00007f3c04c28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 520.069466][T10726] RAX: 0000000000018ff8 RBX: 00007f3c03fb5fa0 RCX: 00007f3c03d8e9a9 [ 520.069477][T10726] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 000000000000000a [ 520.069488][T10726] RBP: 00007f3c03e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 520.069498][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.069507][T10726] R13: 0000000000000000 R14: 00007f3c03fb5fa0 R15: 00007ffd152c3a58 [ 520.069525][T10726] [ 520.069530][T10726] [ 520.384300][T10726] Allocated by task 10560: [ 520.388723][T10726] kasan_save_track+0x3e/0x80 [ 520.393428][T10726] __kasan_kmalloc+0x93/0xb0 [ 520.398028][T10726] __kmalloc_noprof+0x27a/0x4f0 [ 520.402894][T10726] sk_prot_alloc+0xe7/0x220 [ 520.407412][T10726] sk_alloc+0x3a/0x370 [ 520.411495][T10726] bt_sock_alloc+0x3b/0x310 [ 520.416004][T10726] l2cap_sock_create+0x147/0x300 [ 520.420964][T10726] bt_sock_create+0x163/0x240 [ 520.425667][T10726] __sock_create+0x4b0/0x9f0 [ 520.430267][T10726] __sys_socket+0xd7/0x1b0 [ 520.434795][T10726] __x64_sys_socket+0x7a/0x90 [ 520.439499][T10726] do_syscall_64+0xfa/0x3b0 [ 520.444017][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.449932][T10726] [ 520.452272][T10726] Freed by task 10559: [ 520.456349][T10726] kasan_save_track+0x3e/0x80 [ 520.461043][T10726] kasan_save_free_info+0x46/0x50 [ 520.466081][T10726] __kasan_slab_free+0x62/0x70 [ 520.470863][T10726] kfree+0x18e/0x440 [ 520.474863][T10726] __sk_destruct+0x4e1/0x660 [ 520.479479][T10726] l2cap_sock_release+0x158/0x1d0 [ 520.484518][T10726] sock_close+0xc3/0x240 [ 520.488767][T10726] __fput+0x449/0xa70 [ 520.492758][T10726] task_work_run+0x1d1/0x260 [ 520.497369][T10726] exit_to_user_mode_loop+0xec/0x110 [ 520.502666][T10726] do_syscall_64+0x2bd/0x3b0 [ 520.507266][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.513250][T10726] [ 520.515605][T10726] The buggy address belongs to the object at ffff88805d23a000 [ 520.515605][T10726] which belongs to the cache kmalloc-2k of size 2048 [ 520.529757][T10726] The buggy address is located 1368 bytes inside of [ 520.529757][T10726] freed 2048-byte region [ffff88805d23a000, ffff88805d23a800) [ 520.543737][T10726] [ 520.546067][T10726] The buggy address belongs to the physical page: [ 520.552502][T10726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d239000 pfn:0x5d238 [ 520.562571][T10726] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 520.571094][T10726] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 520.579606][T10726] page_type: f5(slab) [ 520.583596][T10726] raw: 00fff00000000240 ffff88801a442000 ffffea00015f4e10 ffffea0001abec10 [ 520.592184][T10726] raw: ffff88805d239000 0000000000080002 00000000f5000000 0000000000000000 [ 520.600774][T10726] head: 00fff00000000240 ffff88801a442000 ffffea00015f4e10 ffffea0001abec10 [ 520.609457][T10726] head: ffff88805d239000 0000000000080002 00000000f5000000 0000000000000000 [ 520.618133][T10726] head: 00fff00000000003 ffffea0001748e01 00000000ffffffff 00000000ffffffff [ 520.626829][T10726] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 520.635527][T10726] page dumped because: kasan: bad access detected [ 520.641950][T10726] page_owner tracks the page as allocated [ 520.647704][T10726] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7095, tgid 7095 (syz-executor), ts 193036401861, free_ts 192979559755 [ 520.668653][T10726] post_alloc_hook+0x240/0x2a0 [ 520.673436][T10726] get_page_from_freelist+0x21d5/0x22b0 [ 520.679006][T10726] __alloc_frozen_pages_noprof+0x181/0x370 [ 520.684843][T10726] alloc_pages_mpol+0x232/0x4a0 [ 520.689725][T10726] allocate_slab+0x8a/0x3b0 [ 520.694255][T10726] ___slab_alloc+0xbfc/0x1480 [ 520.698946][T10726] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 520.705381][T10726] kmalloc_reserve+0x136/0x290 [ 520.710174][T10726] pskb_expand_head+0x18e/0x1150 [ 520.715133][T10726] netlink_trim+0x1d5/0x2e0 [ 520.719653][T10726] netlink_broadcast_filtered+0x80/0x1140 [ 520.725395][T10726] nlmsg_notify+0xf0/0x1a0 [ 520.729833][T10726] __dev_notify_flags+0xf4/0x2e0 [ 520.734788][T10726] rtnl_configure_link+0x22c/0x350 [ 520.739919][T10726] veth_newlink+0x4a5/0xa50 [ 520.744436][T10726] rtnl_newlink_create+0x30d/0xb00 [ 520.749564][T10726] page last free pid 7095 tgid 7095 stack trace: [ 520.755908][T10726] __free_frozen_pages+0xc65/0xe60 [ 520.761032][T10726] __put_partials+0x161/0x1c0 [ 520.765735][T10726] put_cpu_partial+0x17c/0x250 [ 520.770508][T10726] __slab_free+0x2f7/0x400 [ 520.774940][T10726] qlist_free_all+0x97/0x140 [ 520.779558][T10726] kasan_quarantine_reduce+0x148/0x160 [ 520.785050][T10726] __kasan_slab_alloc+0x22/0x80 [ 520.789914][T10726] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 520.793669][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 520.795820][T10726] __alloc_skb+0x112/0x2d0 [ 520.807276][T10726] netlink_ack+0x146/0xa50 [ 520.811703][T10726] netlink_rcv_skb+0x28c/0x470 [ 520.816493][T10726] netlink_unicast+0x75c/0x8e0 [ 520.821286][T10726] netlink_sendmsg+0x805/0xb30 [ 520.826068][T10726] __sock_sendmsg+0x219/0x270 [ 520.830756][T10726] __sys_sendto+0x3bd/0x520 [ 520.835298][T10726] __x64_sys_sendto+0xde/0x100 [ 520.840094][T10726] [ 520.842428][T10726] Memory state around the buggy address: [ 520.848063][T10726] ffff88805d23a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.856135][T10726] ffff88805d23a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.864200][T10726] >ffff88805d23a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.872263][T10726] ^ [ 520.879197][T10726] ffff88805d23a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.887262][T10726] ffff88805d23a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 520.895329][T10726] ================================================================== [ 520.920186][T10726] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 520.927525][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.5.1166 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 520.939602][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.949688][T10726] Call Trace: [ 520.953003][T10726] [ 520.955934][T10726] dump_stack_lvl+0x99/0x250 [ 520.960549][T10726] ? __asan_memcpy+0x40/0x70 [ 520.965154][T10726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.970354][T10726] ? __pfx__printk+0x10/0x10 [ 520.974970][T10726] panic+0x2db/0x790 [ 520.978920][T10726] ? __pfx_panic+0x10/0x10 [ 520.983343][T10726] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 520.989247][T10726] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 520.995607][T10726] ? print_memory_metadata+0x314/0x400 [ 521.001083][T10726] ? __list_del_entry_valid_or_report+0x92/0x190 [ 521.007460][T10726] check_panic_on_warn+0x89/0xb0 [ 521.012407][T10726] ? __list_del_entry_valid_or_report+0x92/0x190 [ 521.018746][T10726] end_report+0x78/0x160 [ 521.023005][T10726] kasan_report+0x129/0x150 [ 521.027529][T10726] ? __list_del_entry_valid_or_report+0x92/0x190 [ 521.033898][T10726] __list_del_entry_valid_or_report+0x92/0x190 [ 521.040074][T10726] bt_accept_unlink+0x39/0x240 [ 521.044875][T10726] l2cap_sock_teardown_cb+0x17e/0x460 [ 521.050285][T10726] l2cap_chan_del+0xb5/0x5e0 [ 521.054884][T10726] l2cap_conn_del+0x388/0x680 [ 521.059576][T10726] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 521.065053][T10726] hci_conn_hash_flush+0x10d/0x230 [ 521.070197][T10726] hci_dev_close_sync+0xaef/0x1330 [ 521.075326][T10726] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 521.080905][T10726] ? up_write+0x1c4/0x420 [ 521.085265][T10726] hci_unregister_dev+0x21a/0x510 [ 521.090298][T10726] vhci_release+0x80/0xd0 [ 521.094631][T10726] ? __pfx_vhci_release+0x10/0x10 [ 521.099656][T10726] __fput+0x449/0xa70 [ 521.103673][T10726] task_work_run+0x1d1/0x260 [ 521.108278][T10726] ? __pfx_task_work_run+0x10/0x10 [ 521.113404][T10726] ? kmem_cache_free+0x18f/0x400 [ 521.118344][T10726] do_exit+0x6b5/0x22e0 [ 521.122511][T10726] ? do_raw_spin_lock+0x121/0x290 [ 521.127544][T10726] ? __pfx_do_exit+0x10/0x10 [ 521.132145][T10726] do_group_exit+0x21c/0x2d0 [ 521.136746][T10726] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.141947][T10726] get_signal+0x125e/0x1310 [ 521.146464][T10726] arch_do_signal_or_restart+0x9a/0x750 [ 521.152025][T10726] ? __fget_files+0x2a/0x420 [ 521.156630][T10726] ? __fget_files+0x3a0/0x420 [ 521.161309][T10726] ? __fget_files+0x2a/0x420 [ 521.165902][T10726] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 521.172086][T10726] ? exit_to_user_mode_loop+0x40/0x110 [ 521.177548][T10726] exit_to_user_mode_loop+0x75/0x110 [ 521.182844][T10726] do_syscall_64+0x2bd/0x3b0 [ 521.187455][T10726] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.192677][T10726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.198750][T10726] ? clear_bhb_loop+0x60/0xb0 [ 521.203464][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.209373][T10726] RIP: 0033:0x7f3c03d8e9a9 [ 521.213797][T10726] Code: Unable to access opcode bytes at 0x7f3c03d8e97f. [ 521.220809][T10726] RSP: 002b:00007f3c04c28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.229236][T10726] RAX: 0000000000018ff8 RBX: 00007f3c03fb5fa0 RCX: 00007f3c03d8e9a9 [ 521.237222][T10726] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 000000000000000a [ 521.245198][T10726] RBP: 00007f3c03e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 521.253212][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.261198][T10726] R13: 0000000000000000 R14: 00007f3c03fb5fa0 R15: 00007ffd152c3a58 [ 521.269182][T10726] [ 521.272600][T10726] Kernel Offset: disabled [ 521.276935][T10726] Rebooting in 86400 seconds..