last executing test programs: 17.348443892s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x61, 0x1, {{0x4a, 0x4, 0x3, 0x4, 0x128, 0x64, 0x0, 0xb, 0x2f, 0x0, @local, @multicast2, {[@rr={0x7, 0x17, 0xf4, [@dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @remote]}, @generic={0x94, 0xf, "4419d7406a73d45b4e9d2eb9d8"}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0xd, [{@loopback, 0xce60470}]}, @timestamp_addr={0x44, 0x44, 0xf, 0x1, 0x6, [{@multicast2, 0x3ff}, {@loopback, 0x5}, {@broadcast, 0xffff}, {@local, 0xfb}, {@multicast2, 0x5}, {@loopback, 0x8}, {@broadcast, 0x1}, {@private=0xa010101, 0x7}]}, @noop, @rr={0x7, 0x27, 0xb5, [@local, @private=0xa010102, @multicast1, @multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @noop, @timestamp={0x44, 0x1c, 0x69, 0x0, 0x4, [0xd9, 0x1, 0xff, 0x7f, 0xa, 0xfffffff9]}, @timestamp={0x44, 0x14, 0x17, 0x0, 0x3, [0xfffffffe, 0x8000, 0x4, 0xfffffffa]}, @timestamp_addr={0x44, 0x44, 0x33, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x73287359}, {@multicast2, 0x3}, {@empty, 0x4}, {@empty, 0xfff}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5}, {@empty, 0x5}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000240)=@newchain={0x5f0, 0x64, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xf}, {0x1, 0xfff2}, {0x5, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x590, 0x2, [@TCA_CGROUP_EMATCHES={0x184, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6}, {0x9e5, 0x9, 0xfffff5b5, 0xebf}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xff}, {0x4, 0x1, 0x0, "0e"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xfc01, 0x2, 0x2}, {0x9, 0x7, 0x0, "3ca3019af1d423"}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x2, 0x9, 0xff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x110, 0x1, 0x1}, {0xe1, 0x9, 0x3, 0x1, 0x7, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xdc, 0x1, 0x0, 0x0, {{0xf800, 0x0, 0xb}, "c8f04df3392c8e03d3077a2a5698ffaa47418433a2954575c8c47775e458a37c48836a12e66329e27ffae54c3e5cb096bc70ed2c0751d4d2d499545daeab57259e41cff3345b3ceb108dff78f1c853cf08d08aa0bfda980d67e4f2d82d780044c725c36a9bb831eae37fe0907f4979ef4d1edfae3062b7da887b5d47d7ae5427e2775926bb32d003202b9323e4ed261970c0923ce8465813d6b271548563c3a6cb5d4bbeff96525a0cc625d2d718a58244b97c17117c6c353a708d51594574d384f9a6e808bb9148639d0845e4"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x6, 0x400, 0xa, 0xacc, 0x8, 0x9, 0x8001, 0x5af01d93, 0x0, 0xe, 0x9, 0x0, 0x1, 0x7, 0x6, 0xffffffff, 0x6, 0x7, 0x4, 0xd3a7, 0x3, 0x2, 0x0, 0x100, 0x35b, 0xde8, 0x9, 0x1ff, 0x3, 0x2, 0x1000, 0x2, 0x10, 0x9, 0x62b1, 0x7, 0xb2, 0x2, 0x5, 0x1, 0xb2, 0x1, 0xd, 0x9, 0x4, 0x3, 0x8, 0x4, 0x1000, 0x4, 0x1, 0x6, 0xe4, 0x3, 0xffff8001, 0x6, 0x6, 0x0, 0x9, 0xfffffffc, 0x5, 0xfd84, 0xfffffffa, 0x7edc41d1, 0x1, 0xb5, 0x3, 0x3, 0x4, 0xa, 0x2, 0x6, 0x7, 0x400, 0x2, 0x400, 0x80000001, 0x4, 0x0, 0xfffff801, 0x9, 0x1, 0x6, 0x400, 0x8, 0xdb, 0xffffffff, 0x5, 0x4, 0x2, 0x0, 0x6, 0x6, 0x0, 0xfffffff2, 0x9, 0x7fffffff, 0x5, 0xfffffffd, 0x8, 0x4, 0x9, 0xffff7fff, 0x6, 0x8001, 0x6, 0x2, 0x7, 0xa, 0xa63, 0x7, 0x0, 0x0, 0x5, 0x8, 0x44, 0x8, 0x5, 0xc, 0x1, 0x6, 0x7, 0x0, 0xc535, 0x8, 0x9, 0x92ab, 0x7f, 0x8, 0x4, 0x80000001, 0x3, 0x4, 0x9, 0x8, 0xed19, 0x9, 0x1, 0x7, 0x1ff, 0x7, 0x3, 0xffff, 0x9, 0x4, 0x46f, 0x5b250389, 0x80000001, 0x7fff, 0x7, 0x5, 0x3ff8000, 0x4, 0x38, 0xfff, 0x9, 0x7, 0x5, 0x1, 0x3, 0x0, 0x91e, 0x0, 0x1, 0xfb, 0xcf, 0x8, 0x1, 0x9, 0xfffff8cb, 0x2, 0x0, 0x7, 0x3be, 0x6, 0x81, 0x80000000, 0xffff, 0x9, 0x7, 0xdd10, 0x7, 0x10000, 0x3, 0xb, 0x0, 0x3ff, 0x3, 0x100, 0x9, 0x7, 0x8, 0x9, 0xff, 0x3, 0x9, 0x5, 0xdc6, 0xc0000000, 0x7, 0xe, 0x9, 0x2, 0x4, 0x3, 0x83b, 0x3, 0x1ff, 0x2f0e, 0x1ff, 0x6, 0xff, 0x6, 0x6, 0x1, 0x5, 0x9, 0x9, 0x2, 0x8, 0x2, 0x0, 0x8, 0x1, 0x1000, 0x6, 0x2, 0x8000, 0xeb, 0x6, 0x10001, 0x5, 0xffffffff, 0x3ff, 0x1d9, 0x0, 0xd, 0x101, 0xa, 0x9, 0x9, 0xc5, 0x7, 0x0, 0x2, 0x4, 0x4, 0x400, 0x6, 0x800, 0x1, 0x4, 0x9, 0x9]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xffffff00}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xff}]}}, @TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x618e, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x127a, 0xffffffffffffffff) 16.465215017s ago: executing program 1 (id=8): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0xb, 0x800, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0xe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000b00000002000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYBLOB="00000000000000ba0aa000"/25], 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]}) bind$inet(r2, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x78, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x58, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004055, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r8, 0x1, &(0x7f00000001c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 15.87276535s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xb0, 0x30, 0x1, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_ct={0x44, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xd, 0x6, "6af581c68d5ebf2eeb"}, {0xc}, {0xc}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000500)=[{0x0, 0x0, {0x1, 0xff, 0x2}, {0xcff1d168e5f8bb45, 0x0, 0x4}, 0xfd, 0xff}, {0x2, 0x2, {0x0, 0x1}, {0x2, 0x1, 0x1}, 0xfe, 0xfe}, {0x3, 0x2, {0x0, 0xf0}, {0x2, 0x0, 0x3}, 0xff}, {0x2, 0x0, {0x2, 0xff, 0x4}, {0x1, 0xf0, 0x2}, 0x2, 0x1}], 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000640)={0x0, 0xffffffffffffff8e, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2000c810}, 0x1000c8c4) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) sendto$inet6(r0, &(0x7f0000847fff)="e3", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15.205459558s ago: executing program 4 (id=5): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) vmsplice(r0, 0x0, 0xf00, 0x0) 15.096395048s ago: executing program 3 (id=9): r0 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0xa, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0xfffffffd}, 0x50) 15.094970769s ago: executing program 1 (id=10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x61799d37, 0x8000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) modify_ldt$read(0x0, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0200000d0a010e98d00bb8003000000000000000000000000000006df209fe5af432930000000000000000"], 0x2c}}, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x801, 0x331}, &(0x7f00000001c0), &(0x7f0000000080)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x8001, @private0, 0x7fffffff}}, 0x0, 0x0, 0x4a, 0x0, "1befe6a416c85aabb4c3937dfb7310110fb227d83f9a06e8b107fac4702fac53b5646e3d6f57a442f51c55ac43a374eb91c867ed5fa094f41d7ed83ee40e0a68b93139f660a7136500d8e5c5e44a0b7a"}, 0xd8) 15.074435504s ago: executing program 4 (id=11): socket(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) timer_create(0x0, &(0x7f00000003c0)={0x0, 0xd, 0x0, @tid=r5}, &(0x7f0000000400)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r6 = getpid() syz_open_procfs(r6, &(0x7f00000001c0)='net/fib_triestat\x00') ptrace$setregs(0xf, r6, 0x3, &(0x7f0000000280)="f7f82adae58ecc2470508549c9d87f0da82193e1795721ca0449fd9ac7b294837f2c94e079d93cbdf9c3f161bd3a2907296d419761d502bfed534af9e310d0eae3a330e60e7fe32739b11ce4a0bebe240954f692ee7c0bcd3ff6247bb15496522b4635b894ac96e864ba44b6e03606d899291d2820a1d5482f48f6e3a6ca6aeb15814bb69060bdb735f929e2855ba9b498ee2095024eda94e7b5cb79193958aff09cbe405bf8165aebb721fc4545302987dd9ddec24eed7014854053726e2a3be7884730e5c8a13961486b8a8add3b0e6065a46b") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) eventfd(0x0) socket$can_bcm(0x1d, 0x2, 0x2) 14.85578247s ago: executing program 2 (id=12): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000c40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022cbd7000fddbdf256c000000050018013200000005001801020000000800a10002000000bee8c627549783467351cc9edfb9bd263e1296788749b6378f491e"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783f13cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db234687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a5aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x4, {0x3, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x3, 0x20000, 0x0, 0x4, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001080)={&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000840)}, {&(0x7f0000000880)="2d14026665471eff83208ebfeffd9bd45b9dc70cebabb4686698444b297933fc8c85e4a8f96bcbc8d8cbaa5c599f5b2e280032fd3e3ecef2d082075428c8c4f77fad4b6ca3e7fdc154706755ae5a48b4dd763b5006b6adf07630e28f36890d1259c38f9de04021c912361805098b2127ac726f3a9749ddff05265988", 0x7c}, {&(0x7f0000000900)="96d700862e532d2eca33c551c822934f4335ad8a5986a8a8faa38ca65ecea10390b3dc11ea5d7d7c3a6f60cf4ce121b6049fb944f486bb53a1397b20afc5772b383779651fc49ed115d4e2f75024e755e36434a68d429f3903317a7c34137974fe4f7660e5f16aab0ac9421142129c449b5ce93b614c62efc66d55871a9df736bd759fd21488c3e788631af9149dfefaa4fdb4446fb7300515308bfa2c007cab54b8593a61b541cec90ba6402621d54e9a51f64c0c9428cc3a128896c7e43275bd4f9ecd", 0xc4}, {&(0x7f0000000a00)="59cfeca007c6e30ed9910cbe954d59a546c6ee2fe46a7487afbd2f058bad253316b0371a8dd176aa5b348d3133a98ecf59c2199bfd123d6b81fa5a6008e8880b257b32ad07b344f5159b47ffc4bd897dc45c25a549882ff603d5df71f70b7ea8a24aba5432b29352404cd04e616b53a54d2d6cc495352f6a3294f078dc6170e21a3fe9aae2235861f3836e8760da95de466becdbbf91f88812fd20c8ed8a9cac2107df7b98d54b41a59f3c1f59a63f30315054120c83d9df17de6a26d60ecc96e784c777d7ef2cca781b9b4d958d64c32c9840c08494da3a04d37670d55bee5c7deb2d93e95d200d", 0xe8}], 0x4, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x20, 0x1, 0x1, [r2, r4, r3, r4]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r3, 0xffffffffffffffff, r4, r3]}}, @cred={{0x1c}}], 0xf8, 0x40000c4}, 0x24040800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) r8 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r7, 0xa8, 0xf1}, &(0x7f0000000480)={'enc=', 'oaep', ' hash=', {'sha256-ssse3\x00'}}, &(0x7f0000000500)="c5807ef4e4d4ac476d08ec78d69a45dfb0a296bc420ce32a24e1df6df0a014bc3688ce7b8e21de907cd88ebb7a4e025be7b8814285e6afd4253f9e9a948461742c60a4a63a1118840b1afa5ba850de6cb7b8b08b2b7ac144faa6df0a054ef4cdc4998f21bdca14b048ec6187b1d31a7a3722fba8bc850317ae1e38241f742a99e8e856b4e51fa5430f190bb6948847cee381da6b3040f3bb4b8f465e5cd41a2088b95ee49464d1b5", &(0x7f00000005c0)="c7e89df095f8c41e2fa472b1d0986138d23297e3ba3c7116e3b6b32621a737421156b30683fcefe5d76ba34cb58d137981862f6c50cbbef73108da9d418cadb8e3fd9c9aa8552214a23fa8e1d5acd466556ac628eb2e606e49b0cb1d87d8d6612075cc8047a91a00f9d084be8ee511cd153fe701ec025ec92ddb74021fd854757b281571d42c600246a45deee673d2277bd76f1af0ee18a04f89c7fa3861f6d833b495784e73dc9d32a7e15abb0a06d6b127c4375a2a972e5b71843666d46f869b3b4a802522faa1c0b0a50c34839e48409b84596947cfb132553565e28911ddebd8221d7c5b5eeb48706603a99c7c5735") io_setup(0x9, &(0x7f0000000100)) write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fbef8d4b", 0x35) 14.85540405s ago: executing program 3 (id=13): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xf1, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) 14.056321038s ago: executing program 4 (id=14): r0 = socket(0xa, 0x3, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) io_uring_enter(r5, 0x2241, 0x1b86, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7ffe}, {0xf, 0x2}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3fb, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x5c}}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000003060108000000000000000013000008050001000700000016a238e0980d0900dcb8117e9af8089860f8597d6797f3e56a6b324597219d24c73dcd2b78aeffeb4658a553b22c14051c0525a03fd416b71c711ac2904e55c60f2b1f58b3a868214bc3df3c378695e49abcadc372f3fcdb5a31e03ed83703ac09b2b929a4606bc5b2824e256f1f744f87fdebf32d76618f93c9810000000000000025e1d8e084b023d4ee8053d4e44d83a54511e53f97cf71bf1f62a4a1cdfb50f8bb334d6d6c14e9dcc6dacaa03eb29927e5ea7121ff"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x44084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) 13.857604047s ago: executing program 0 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x5) syz_emit_ethernet(0xd1, &(0x7f0000000100)={@random="f6256886642a", @empty, @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x0, 0x1, 0x3}}, {@x25={0x805, {0x2, 0x4, 0xf7, "72851ec07d8012514083d5d9f703fe68928a7067c7c6ea69bf69f75c7a92b4cb744857dd6b43e12017e82fbf596025d8eb58786cff89a46bc737f0fa8837e20d75b7129e15aa6a59371682a18d58d8ab49999646dde3617aafc42383fde8fbb689d6050b15d57e6097292f693cfb00c542d72ba387e61bf15552d823529494b1744d05d80ae47e93929d39007cbd2d8a44e4d595467a5c1e9a19feebc0a7633099d8f4badbb677c44008ea0746063816f8331b235682df37"}}}}, 0x0) 13.749018577s ago: executing program 3 (id=16): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe7, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1, r2}) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x6bed, 0x3, 0x4, 0x9}, 0x27, [0x1, 0x6, 0x200, 0xfffffffa, 0x9, 0x1, 0x97b, 0xa, 0x9, 0x6, 0x0, 0xada, 0x1ff, 0x4, 0x8, 0x9, 0x3, 0x10000, 0x652, 0x5, 0x8001, 0x5e, 0x0, 0x493, 0x5, 0x5, 0x8, 0x38, 0x6, 0x4, 0x0, 0x8, 0x3, 0x1, 0xfff, 0xea, 0x10000, 0xfff, 0x3, 0xffffffff, 0x4, 0x10000, 0x2, 0x9, 0x7, 0xffff, 0x0, 0x3, 0x6, 0x9, 0x200, 0x5, 0x2, 0x3, 0xa, 0x7f80000, 0xf, 0xb, 0x0, 0x2, 0xfffffffe, 0xa, 0x4], [0x9f671f5d, 0x4, 0x8a, 0xfffffffe, 0x9, 0x74, 0x400, 0xa, 0xcf, 0x4, 0x100, 0x7, 0x200, 0xfff, 0x5, 0x0, 0xf, 0x6, 0xfffffff7, 0xb, 0x2, 0x4, 0x3, 0x8248, 0x6, 0xffff59cd, 0x9, 0x1, 0x5, 0x9, 0x9, 0x2, 0x8898, 0x80000001, 0xa711, 0x1ff, 0x9, 0x200, 0x7fffffff, 0x3, 0x100, 0x6, 0x203, 0x1, 0x2, 0xa, 0x7, 0x0, 0x400, 0x36ec3f38, 0x80, 0xf0e, 0x4, 0x6, 0x4, 0x0, 0x0, 0x9, 0x1, 0x80000001, 0x9dd, 0x5, 0x400000, 0x7f], [0x4, 0x0, 0x5, 0x9, 0x8, 0x856, 0x5, 0x76d0, 0x5, 0x52d6aca5, 0x8, 0x0, 0xfffffff7, 0x6, 0xe680, 0x6, 0x6, 0xb, 0x0, 0x0, 0x8, 0x5, 0x7, 0x800, 0xfffffffa, 0x3, 0x7f, 0x7, 0x3, 0x1, 0x46, 0x4, 0x9, 0x5, 0x10, 0x9, 0xfff, 0x8, 0x2, 0xa, 0x96, 0x7ff, 0x6, 0x7, 0xe67, 0x9, 0x6, 0xa, 0xfffffffe, 0x8000, 0x80000001, 0x5, 0x2, 0x7, 0x1, 0x5, 0x6, 0xd, 0xffffff3c, 0x9, 0x19f, 0x6, 0x80000001, 0x2], [0x1, 0x5, 0xf, 0x1cf1, 0x0, 0x7, 0x8b30, 0x9, 0xfffffff7, 0x6, 0x95, 0xdd8a, 0x4, 0x4, 0x1, 0x2, 0x10000, 0x26e, 0x3, 0x9, 0x6, 0xffffffff, 0x5, 0x9, 0x8, 0x3a71, 0x8, 0x9, 0x4, 0xfffffc00, 0x2, 0x0, 0x2, 0x5, 0x101, 0x6, 0xffffff38, 0x2, 0x7f29, 0x0, 0x9, 0x7, 0x9, 0x234, 0x2, 0x6, 0x8, 0x6, 0x8, 0x7, 0x0, 0x3, 0x7f, 0x7f, 0x5, 0x1, 0x7, 0x1, 0x6, 0x9, 0x5000000, 0x64, 0x6, 0x1000]}, 0x45c) r3 = syz_open_dev$vcsa(&(0x7f0000000580), 0x98bb, 0x111000) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0x0, &(0x7f00000005c0)='./file0\x00') r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x2) connect$l2tp6(r0, &(0x7f0000000640)={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x3}, 0x20) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000680)={{0x2, 0x3, 0x6000, 0x9}, 'syz1\x00', 0x1}) setsockopt$packet_int(r2, 0x107, 0x5, &(0x7f0000000700)=0x8, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000740)=""/54, &(0x7f0000000780)=0x36) syz_open_dev$MSR(&(0x7f00000007c0), 0x9, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000800), 0xa01, 0x0) bind$alg(r5, &(0x7f0000000840)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(lrw-twofish-3way,rmd160-generic)\x00'}, 0x58) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000008c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000900)={0x0, 0x0, 0x9e, 0x0, 0xffffff93}) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)={0xa, {{0x2, 0x4e23, @broadcast}}, 0x0, 0x4, [{{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x290) read$char_usb(r0, &(0x7f0000000c00), 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000c40)={0x6, 0x7, 0x2, 0x0, 0x0, [{{r1}, 0x1}, {{r4}, 0x2}]}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x80) ppoll(&(0x7f0000000dc0)=[{r5, 0x400}, {r1, 0x500}, {r1, 0x200}], 0x3, &(0x7f0000000e00), &(0x7f0000000e40)={[0x40]}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000f80)={0x18, 0x0, &(0x7f0000000e80)=[@enter_looper, @increfs_done={0x40106308, 0x3}], 0x9e, 0x0, &(0x7f0000000ec0)="fb15c0d6ef3f57fbea1c4fbbc9f3e1e5b6164f173f4acb46429b100021389c542303d89d695bce4633f453296a542d13362c98be7face0145fea998684a155690c9674c5ead2b77e662a490c157ca308799a9fa4ba89cfbdae9ca2ab02010b766043931f6a68a932dba7c82f214a58b8d6c11adb7cd9a9409a1d6021360366afd2fa2c0642ef1c81d4e56aba734bc41b14c3d24a1bcbf410a4503a45b0ff"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r0, {0x685}}, './file0\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f0000001000)) 13.172397692s ago: executing program 3 (id=17): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000280)={0x3, @win={{0xd, 0x0, 0x7f}, 0x0, 0x0, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x3, 0x0, 0x40}}) 13.171968085s ago: executing program 0 (id=18): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000c40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022cbd7000fddbdf256c000000050018013200000005001801020000000800a10002000000bee8c627549783467351cc9edfb9bd263e1296788749b6378f491e"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783f13cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db234687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a5aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x4, {0x3, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x3, 0x20000, 0x0, 0x4, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001080)={&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000840)}, {&(0x7f0000000880)="2d14026665471eff83208ebfeffd9bd45b9dc70cebabb4686698444b297933fc8c85e4a8f96bcbc8d8cbaa5c599f5b2e280032fd3e3ecef2d082075428c8c4f77fad4b6ca3e7fdc154706755ae5a48b4dd763b5006b6adf07630e28f36890d1259c38f9de04021c912361805098b2127ac726f3a9749ddff05265988", 0x7c}, {&(0x7f0000000900)="96d700862e532d2eca33c551c822934f4335ad8a5986a8a8faa38ca65ecea10390b3dc11ea5d7d7c3a6f60cf4ce121b6049fb944f486bb53a1397b20afc5772b383779651fc49ed115d4e2f75024e755e36434a68d429f3903317a7c34137974fe4f7660e5f16aab0ac9421142129c449b5ce93b614c62efc66d55871a9df736bd759fd21488c3e788631af9149dfefaa4fdb4446fb7300515308bfa2c007cab54b8593a61b541cec90ba6402621d54e9a51f64c0c9428cc3a128896c7e43275bd4f9ecd", 0xc4}, {&(0x7f0000000a00)="59cfeca007c6e30ed9910cbe954d59a546c6ee2fe46a7487afbd2f058bad253316b0371a8dd176aa5b348d3133a98ecf59c2199bfd123d6b81fa5a6008e8880b257b32ad07b344f5159b47ffc4bd897dc45c25a549882ff603d5df71f70b7ea8a24aba5432b29352404cd04e616b53a54d2d6cc495352f6a3294f078dc6170e21a3fe9aae2235861f3836e8760da95de466becdbbf91f88812fd20c8ed8a9cac2107df7b98d54b41a59f3c1f59a63f30315054120c83d9df17de6a26d60ecc96e784c777d7ef2cca781b9b4d958d64c32c9840c08494da3a04d37670d55bee5c7deb2d93e95d200d", 0xe8}], 0x4, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x20, 0x1, 0x1, [r2, r4, r3, r4]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r3, 0xffffffffffffffff, r4, r3]}}, @cred={{0x1c}}], 0xf8, 0x40000c4}, 0x24040800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) r8 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r7, 0xa8, 0xf1}, &(0x7f0000000480)={'enc=', 'oaep', ' hash=', {'sha256-ssse3\x00'}}, &(0x7f0000000500)="c5807ef4e4d4ac476d08ec78d69a45dfb0a296bc420ce32a24e1df6df0a014bc3688ce7b8e21de907cd88ebb7a4e025be7b8814285e6afd4253f9e9a948461742c60a4a63a1118840b1afa5ba850de6cb7b8b08b2b7ac144faa6df0a054ef4cdc4998f21bdca14b048ec6187b1d31a7a3722fba8bc850317ae1e38241f742a99e8e856b4e51fa5430f190bb6948847cee381da6b3040f3bb4b8f465e5cd41a2088b95ee49464d1b5", &(0x7f00000005c0)="c7e89df095f8c41e2fa472b1d0986138d23297e3ba3c7116e3b6b32621a737421156b30683fcefe5d76ba34cb58d137981862f6c50cbbef73108da9d418cadb8e3fd9c9aa8552214a23fa8e1d5acd466556ac628eb2e606e49b0cb1d87d8d6612075cc8047a91a00f9d084be8ee511cd153fe701ec025ec92ddb74021fd854757b281571d42c600246a45deee673d2277bd76f1af0ee18a04f89c7fa3861f6d833b495784e73dc9d32a7e15abb0a06d6b127c4375a2a972e5b71843666d46f869b3b4a802522faa1c0b0a50c34839e48409b84596947cfb132553565e28911ddebd8221d7c5b5eeb48706603a99c7c5735") io_setup(0x9, &(0x7f0000000100)) write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fbef8d4b", 0x35) 12.915416799s ago: executing program 3 (id=19): openat$tun(0xffffffffffffff9c, 0x0, 0x141000, 0x0) socket$kcm(0x2, 0x0, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40004, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8000000000000001, 0x83}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r2 = fsopen(&(0x7f00000000c0)='iso9660\x00', 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x10) socket(0x10, 0x803, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0xe}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000104000000000800000000000000", @ANYRES32=r3, @ANYRESHEX=r2], 0x20}}, 0x4000040) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x28000000, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0xffffffffffffffd3) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) 12.902223305s ago: executing program 4 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="6a03e63a4905f8e8dc01cf21f8f7", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 12.280258392s ago: executing program 4 (id=21): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}}, 0x4000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r4, 0x0, 0xd, 0x0, &(0x7f00000000c0)) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xe}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 11.842070214s ago: executing program 2 (id=22): mknod(0x0, 0x8001420, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000b80), 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000300)=@ethtool_stats={0x1d, 0x6, [0x1, 0x3, 0x5, 0x8, 0x6, 0x6]}}) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x26da8e97, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8000002) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000280)=0x6) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) 11.715425356s ago: executing program 4 (id=23): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x200080d0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "741cb976"}]}}, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) 10.719145022s ago: executing program 0 (id=24): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) accept$ax25(r1, 0x0, &(0x7f0000000040)) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 10.656290136s ago: executing program 1 (id=25): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="e17f6ee9ce2b89c26658d58a1812a6e2b440e038d0f4e99b86b78afed1aec06e8c7c7764839b00c11156eb679ba04c116dc7fa281c23624f922af64433331138fd2a6aa6aa6b453f2a62512baecfc39b1c36cf25ec31361b693b530b4772b6580b56cd4f20505c3e5fef6058", 0xfffffeac}], 0x6, &(0x7f0000000040), 0xfffffffffffffc9e, 0x20040005}, 0x20000001) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x1020, &(0x7f00000001c0)='\x01') 10.620060957s ago: executing program 1 (id=26): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x3a, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x1fe, 0xff000000, 0xffffff00, 0xff], 0x4e21, 0x4e23, 0x4e22, 0x4e21, 0xd04, 0x7f, 0x0, 0x6, 0x8}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff], [0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x3, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'virt_wifi0\x00', {0x0, 0x0, 0x40004, 0x0, 0xffffffff, 0x7, 0x3ff, 0x98}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) 10.559243009s ago: executing program 0 (id=27): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="e17f6ee9ce2b89c26658d58a1812a6e2b440e038d0f4e99b86b78afed1aec06e8c7c7764839b00c11156eb679ba04c116dc7fa281c23624f922af64433331138fd2a6aa6aa6b453f2a62512baecfc39b1c36cf25ec31361b693b530b4772b6580b56cd4f20505c3e5fef6058", 0xfffffeac}], 0x6, &(0x7f0000000040), 0xfffffffffffffc9e, 0x20040005}, 0x20000001) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (fail_nth: 4) 10.464326533s ago: executing program 1 (id=28): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x4, {0x1}}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (fail_nth: 2) accept$ax25(r1, 0x0, &(0x7f0000000040)) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 10.26459675s ago: executing program 0 (id=29): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40004, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x83}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) fsopen(&(0x7f00000000c0)='iso9660\x00', 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4000010) r2 = socket(0x10, 0x803, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0xe}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000104000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001"], 0x20}}, 0x4000040) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x28000000, 0x0, 0xfffffffffffffe25) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20000891}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000400002400000024000000020000000000000000000003000200080200000002000000000000000000000000000005000000000000"], 0x0, 0x3e}, 0x28) r5 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r5, &(0x7f0000001e80)=""/96, 0x60) 9.903934589s ago: executing program 2 (id=30): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x2880, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="6a03e63a4905f8e8dc01cf21f8f7", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.840277805s ago: executing program 1 (id=31): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000) syz_io_uring_setup(0x985, &(0x7f0000000080)={0x0, 0xb3a5, 0x8000, 0x1, 0x178, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000200)) sync() 8.943153174s ago: executing program 3 (id=32): socket$inet6(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="86dd86dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 0s ago: executing program 2 (id=33): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 55.768568][ T30] audit: type=1400 audit(1753556159.872:62): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.773029][ T5815] cgroup: Unknown subsys name 'net' [ 55.791357][ T30] audit: type=1400 audit(1753556159.872:63): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.819119][ T30] audit: type=1400 audit(1753556159.902:64): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.944076][ T5815] cgroup: Unknown subsys name 'cpuset' [ 55.951737][ T5815] cgroup: Unknown subsys name 'rlimit' [ 56.096293][ T30] audit: type=1400 audit(1753556160.202:65): avc: denied { setattr } for pid=5815 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.119686][ T30] audit: type=1400 audit(1753556160.202:66): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.156925][ T30] audit: type=1400 audit(1753556160.202:67): avc: denied { write } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.178135][ T30] audit: type=1400 audit(1753556160.202:68): avc: denied { read } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.196172][ T5818] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 56.198966][ T30] audit: type=1400 audit(1753556160.232:69): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.231803][ T30] audit: type=1400 audit(1753556160.232:70): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.255779][ T30] audit: type=1400 audit(1753556160.252:71): avc: denied { read } for pid=5498 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.092701][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.303948][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.311982][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.319723][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.340194][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.341310][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.348282][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.362320][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.370186][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.370456][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.377951][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.384361][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.399413][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.406772][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.414298][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.422213][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.426045][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.430619][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.436821][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.443871][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.450817][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.457804][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.471324][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.474985][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.486405][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.487048][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.856328][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 59.969597][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 60.073424][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 60.084923][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 60.127273][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.135330][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.142683][ T5839] bridge_slave_0: entered allmulticast mode [ 60.149305][ T5839] bridge_slave_0: entered promiscuous mode [ 60.187063][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 60.200765][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.207897][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.215278][ T5839] bridge_slave_1: entered allmulticast mode [ 60.222527][ T5839] bridge_slave_1: entered promiscuous mode [ 60.246268][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.253493][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.260567][ T5828] bridge_slave_0: entered allmulticast mode [ 60.267420][ T5828] bridge_slave_0: entered promiscuous mode [ 60.279811][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.287157][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.294467][ T5828] bridge_slave_1: entered allmulticast mode [ 60.301260][ T5828] bridge_slave_1: entered promiscuous mode [ 60.354968][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.397884][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.422864][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.429948][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.437291][ T5829] bridge_slave_0: entered allmulticast mode [ 60.444604][ T5829] bridge_slave_0: entered promiscuous mode [ 60.452203][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.459269][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.466432][ T5829] bridge_slave_1: entered allmulticast mode [ 60.474175][ T5829] bridge_slave_1: entered promiscuous mode [ 60.486473][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.504911][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.512031][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.519088][ T5826] bridge_slave_0: entered allmulticast mode [ 60.526499][ T5826] bridge_slave_0: entered promiscuous mode [ 60.551165][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.571977][ T5839] team0: Port device team_slave_0 added [ 60.577872][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.585158][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.592585][ T5826] bridge_slave_1: entered allmulticast mode [ 60.599150][ T5826] bridge_slave_1: entered promiscuous mode [ 60.639077][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.647545][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.654715][ T5837] bridge_slave_0: entered allmulticast mode [ 60.661647][ T5837] bridge_slave_0: entered promiscuous mode [ 60.669228][ T5839] team0: Port device team_slave_1 added [ 60.692688][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.704689][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.715517][ T5828] team0: Port device team_slave_0 added [ 60.724310][ T5828] team0: Port device team_slave_1 added [ 60.730137][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.737361][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.744646][ T5837] bridge_slave_1: entered allmulticast mode [ 60.751455][ T5837] bridge_slave_1: entered promiscuous mode [ 60.767569][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.774545][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.800472][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.814651][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.825591][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.872334][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.879290][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.905526][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.928483][ T5829] team0: Port device team_slave_0 added [ 60.937337][ T5829] team0: Port device team_slave_1 added [ 60.950083][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.957360][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.983475][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.996301][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.026803][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.033802][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.060141][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.076991][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.107492][ T5837] team0: Port device team_slave_0 added [ 61.115783][ T5826] team0: Port device team_slave_0 added [ 61.130376][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.137412][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.163856][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.176536][ T5837] team0: Port device team_slave_1 added [ 61.193517][ T5826] team0: Port device team_slave_1 added [ 61.200097][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.207252][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.233192][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.289297][ T5839] hsr_slave_0: entered promiscuous mode [ 61.295949][ T5839] hsr_slave_1: entered promiscuous mode [ 61.304241][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.311495][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.337737][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.367950][ T5828] hsr_slave_0: entered promiscuous mode [ 61.374035][ T5828] hsr_slave_1: entered promiscuous mode [ 61.379840][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.387685][ T5828] Cannot create hsr debugfs directory [ 61.404551][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.411593][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.437711][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.448924][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.456104][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.482023][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.494570][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.501536][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.527428][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.552390][ T51] Bluetooth: hci3: command tx timeout [ 61.552417][ T5835] Bluetooth: hci2: command tx timeout [ 61.557858][ T5838] Bluetooth: hci4: command tx timeout [ 61.564997][ T5154] Bluetooth: hci0: command tx timeout [ 61.568585][ T5843] Bluetooth: hci1: command tx timeout [ 61.619948][ T5829] hsr_slave_0: entered promiscuous mode [ 61.626445][ T5829] hsr_slave_1: entered promiscuous mode [ 61.632609][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.640229][ T5829] Cannot create hsr debugfs directory [ 61.716470][ T5837] hsr_slave_0: entered promiscuous mode [ 61.724460][ T5837] hsr_slave_1: entered promiscuous mode [ 61.730265][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.738424][ T5837] Cannot create hsr debugfs directory [ 61.755375][ T5826] hsr_slave_0: entered promiscuous mode [ 61.761910][ T5826] hsr_slave_1: entered promiscuous mode [ 61.767735][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.775468][ T5826] Cannot create hsr debugfs directory [ 62.062725][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.074563][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.085505][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.099929][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.151594][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.160794][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.172994][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.189507][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.238263][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.249135][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.272992][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.283973][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.359120][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.368997][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.378719][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.388074][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.459603][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.469307][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.505665][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.527530][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.534723][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.557631][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.569732][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.583408][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.592750][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.604996][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.612113][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.622625][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.642122][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.653169][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.660238][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.672954][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.704244][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.711356][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.734472][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.741577][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.766130][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.773198][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.813966][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.896281][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 62.896294][ T30] audit: type=1400 audit(1753556167.002:86): avc: denied { sys_module } for pid=5839 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.910337][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.948669][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.962917][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.996451][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.003576][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.028410][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.076929][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.084076][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.097203][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.104372][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.120800][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.127927][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.249035][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.349668][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.386432][ T5839] veth0_vlan: entered promiscuous mode [ 63.413033][ T5839] veth1_vlan: entered promiscuous mode [ 63.452721][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.554912][ T5839] veth0_macvtap: entered promiscuous mode [ 63.596628][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.629927][ T5839] veth1_macvtap: entered promiscuous mode [ 63.638102][ T5843] Bluetooth: hci4: command tx timeout [ 63.642144][ T5838] Bluetooth: hci3: command tx timeout [ 63.644863][ T5843] Bluetooth: hci0: command tx timeout [ 63.648866][ T5838] Bluetooth: hci2: command tx timeout [ 63.654960][ T51] Bluetooth: hci1: command tx timeout [ 63.666981][ T5826] veth0_vlan: entered promiscuous mode [ 63.697992][ T5826] veth1_vlan: entered promiscuous mode [ 63.747459][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.768259][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.782358][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.793721][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.802901][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.813641][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.822365][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.878864][ T5826] veth0_macvtap: entered promiscuous mode [ 63.892628][ T5829] veth0_vlan: entered promiscuous mode [ 63.902142][ T5826] veth1_macvtap: entered promiscuous mode [ 63.935617][ T5829] veth1_vlan: entered promiscuous mode [ 63.964236][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.997010][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.006994][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.017483][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.026374][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.035523][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.046713][ T5828] veth0_vlan: entered promiscuous mode [ 64.061894][ T5837] veth0_vlan: entered promiscuous mode [ 64.071945][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.080688][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.092983][ T5837] veth1_vlan: entered promiscuous mode [ 64.105845][ T5828] veth1_vlan: entered promiscuous mode [ 64.168692][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.177465][ T5829] veth0_macvtap: entered promiscuous mode [ 64.182238][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.223399][ T30] audit: type=1400 audit(1753556168.332:87): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.S5hIhZ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.234887][ T5829] veth1_macvtap: entered promiscuous mode [ 64.254070][ T30] audit: type=1400 audit(1753556168.332:88): avc: denied { mount } for pid=5839 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.279337][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.298624][ T30] audit: type=1400 audit(1753556168.332:89): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.S5hIhZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.307971][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.324317][ T30] audit: type=1400 audit(1753556168.332:90): avc: denied { mount } for pid=5839 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.358910][ T5837] veth0_macvtap: entered promiscuous mode [ 64.362364][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.368045][ T5837] veth1_macvtap: entered promiscuous mode [ 64.389449][ T30] audit: type=1400 audit(1753556168.332:91): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.S5hIhZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.419245][ T30] audit: type=1400 audit(1753556168.332:92): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.S5hIhZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.426325][ T5828] veth0_macvtap: entered promiscuous mode [ 64.453766][ T30] audit: type=1400 audit(1753556168.362:93): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.479766][ T30] audit: type=1400 audit(1753556168.402:94): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.516514][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.523843][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.534166][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.546232][ T30] audit: type=1400 audit(1753556168.402:95): avc: denied { mount } for pid=5839 comm="syz-executor" name="/" dev="gadgetfs" ino=6599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.600732][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.616804][ T5828] veth1_macvtap: entered promiscuous mode [ 64.656445][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.677624][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.706130][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.715204][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.725672][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.734620][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.753309][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.763664][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.797924][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.810118][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.849973][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.874646][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.886388][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.900299][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.910042][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.353542][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.432328][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.450206][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.494042][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.648660][ T5953] FAULT_INJECTION: forcing a failure. [ 65.648660][ T5953] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.651507][ T43] usb 1-1: device descriptor read/64, error -71 [ 65.671765][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.676196][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: syz.1.7 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 65.676215][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.676223][ T5953] Call Trace: [ 65.676228][ T5953] [ 65.676234][ T5953] dump_stack_lvl+0x16c/0x1f0 [ 65.676260][ T5953] should_fail_ex+0x512/0x640 [ 65.676287][ T5953] _copy_to_user+0x32/0xd0 [ 65.676303][ T5953] simple_read_from_buffer+0xcb/0x170 [ 65.676326][ T5953] proc_fail_nth_read+0x197/0x270 [ 65.676348][ T5953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.676370][ T5953] ? rw_verify_area+0xcf/0x680 [ 65.676389][ T5953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.676409][ T5953] vfs_read+0x1e1/0xc60 [ 65.676432][ T5953] ? __pfx___mutex_lock+0x10/0x10 [ 65.676447][ T5953] ? __pfx_vfs_read+0x10/0x10 [ 65.676472][ T5953] ? __fget_files+0x20e/0x3c0 [ 65.676492][ T5953] ksys_read+0x12a/0x250 [ 65.676511][ T5953] ? __pfx_ksys_read+0x10/0x10 [ 65.676537][ T5953] do_syscall_64+0xcd/0x4c0 [ 65.676552][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.676566][ T5953] RIP: 0033:0x7fd63b78d3bc [ 65.676579][ T5953] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.676591][ T5953] RSP: 002b:00007fd63c5e2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.676605][ T5953] RAX: ffffffffffffffda RBX: 00007fd63b9b5fa0 RCX: 00007fd63b78d3bc [ 65.676614][ T5953] RDX: 000000000000000f RSI: 00007fd63c5e20a0 RDI: 0000000000000004 [ 65.676622][ T5953] RBP: 00007fd63c5e2090 R08: 0000000000000000 R09: 0000000000000000 [ 65.676629][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.676637][ T5953] R13: 0000000000000000 R14: 00007fd63b9b5fa0 R15: 00007ffc59a773b8 [ 65.676657][ T5953] [ 65.712703][ T51] Bluetooth: hci2: command tx timeout [ 65.712736][ T51] Bluetooth: hci3: command tx timeout [ 65.712758][ T51] Bluetooth: hci4: command tx timeout [ 65.721545][ T5843] Bluetooth: hci1: command tx timeout [ 65.732832][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.761283][ T51] Bluetooth: hci0: command tx timeout [ 65.788615][ T5957] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.922359][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.981756][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.027888][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.049093][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.071134][ T43] usb 1-1: device descriptor read/64, error -71 [ 66.071995][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.175690][ T4533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.183317][ T43] usb usb1-port1: attempt power cycle [ 66.206530][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.207087][ T4533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.243865][ T5962] input: syz0 as /devices/virtual/input/input5 [ 66.263148][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.291554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.908335][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 66.941585][ T43] usb 1-1: device descriptor read/8, error -71 [ 67.234953][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.293734][ T5976] ubi31: attaching mtd0 [ 67.316870][ T5976] ubi31: scanning is finished [ 67.323324][ T5976] ubi31: empty MTD device detected [ 67.400192][ T5977] ======================================================= [ 67.400192][ T5977] WARNING: The mand mount option has been deprecated and [ 67.400192][ T5977] and is ignored by this kernel. Remove the mand [ 67.400192][ T5977] option from the mount to silence this warning. [ 67.400192][ T5977] ======================================================= [ 67.435054][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.768140][ T43] usb 1-1: device descriptor read/8, error -71 [ 67.801046][ T51] Bluetooth: hci1: command tx timeout [ 67.802106][ T5843] Bluetooth: hci4: command tx timeout [ 67.806889][ T5838] Bluetooth: hci3: command tx timeout [ 67.811834][ T5843] Bluetooth: hci2: command tx timeout [ 67.872285][ T5838] Bluetooth: hci0: command tx timeout [ 67.898115][ T43] usb usb1-port1: unable to enumerate USB device [ 68.156567][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 68.156581][ T30] audit: type=1400 audit(1753556172.262:154): avc: denied { create } for pid=5969 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.248169][ T30] audit: type=1400 audit(1753556172.112:153): avc: denied { create } for pid=5969 comm="syz.1.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.368428][ T30] audit: type=1400 audit(1753556172.292:155): avc: denied { setopt } for pid=5969 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.411144][ T5976] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 68.430205][ T5976] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 68.442742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.452749][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 68.476697][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14'. [ 68.486409][ T5976] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 68.625171][ T30] audit: type=1400 audit(1753556172.292:156): avc: denied { map } for pid=5969 comm="syz.1.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.649109][ T5976] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 68.659463][ T5976] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 68.666480][ T5976] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 68.860672][ T5976] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1442862545 [ 68.862585][ T5997] syz.4.14: attempt to access beyond end of device [ 68.862585][ T5997] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 68.871103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.893455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.901152][ T5976] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 68.922766][ T5996] ubi31: background thread "ubi_bgt31d" started, PID 5996 [ 68.990996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 69.003335][ T30] audit: type=1400 audit(1753556172.292:157): avc: denied { read write } for pid=5969 comm="syz.1.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.096500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.105333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.148031][ T5994] syz.4.14 (5994): drop_caches: 2 [ 69.160886][ T30] audit: type=1400 audit(1753556172.332:158): avc: denied { read write } for pid=5979 comm="syz.2.12" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 69.191081][ T30] audit: type=1400 audit(1753556172.332:159): avc: denied { open } for pid=5979 comm="syz.2.12" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 69.196594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.301344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.310106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.331079][ T30] audit: type=1400 audit(1753556172.472:160): avc: denied { sqpoll } for pid=5987 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.444729][ T6017] FAULT_INJECTION: forcing a failure. [ 69.444729][ T6017] name failslab, interval 1, probability 0, space 0, times 1 [ 69.492441][ T30] audit: type=1400 audit(1753556172.782:161): avc: denied { nlmsg_read } for pid=5987 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 69.534267][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: syz.4.20 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 69.534293][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.534303][ T6017] Call Trace: [ 69.534308][ T6017] [ 69.534315][ T6017] dump_stack_lvl+0x16c/0x1f0 [ 69.534345][ T6017] should_fail_ex+0x512/0x640 [ 69.534371][ T6017] ? __kmalloc_noprof+0xbf/0x510 [ 69.534398][ T6017] ? sk_prot_alloc+0x1a8/0x2a0 [ 69.534416][ T6017] should_failslab+0xc2/0x120 [ 69.534433][ T6017] __kmalloc_noprof+0xd2/0x510 [ 69.534463][ T6017] sk_prot_alloc+0x1a8/0x2a0 [ 69.534484][ T6017] sk_alloc+0x36/0xc20 [ 69.534509][ T6017] bpf_prog_test_run_skb+0x330/0x2280 [ 69.534530][ T6017] ? __fget_files+0x204/0x3c0 [ 69.534550][ T6017] ? __fget_files+0x20e/0x3c0 [ 69.534564][ T6017] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 69.534586][ T6017] ? fput+0x70/0xf0 [ 69.534606][ T6017] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 69.534624][ T6017] __sys_bpf+0x170a/0x4ea0 [ 69.534651][ T6017] ? __pfx___sys_bpf+0x10/0x10 [ 69.534674][ T6017] ? ksys_write+0x190/0x250 [ 69.534702][ T6017] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 69.534734][ T6017] ? fput+0x70/0xf0 [ 69.534750][ T6017] ? ksys_write+0x1ac/0x250 [ 69.534773][ T6017] ? __pfx_ksys_write+0x10/0x10 [ 69.534802][ T6017] __x64_sys_bpf+0x78/0xc0 [ 69.534823][ T6017] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.534848][ T6017] do_syscall_64+0xcd/0x4c0 [ 69.534865][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.534883][ T6017] RIP: 0033:0x7f426638e9a9 [ 69.534896][ T6017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.534911][ T6017] RSP: 002b:00007f42671c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.534927][ T6017] RAX: ffffffffffffffda RBX: 00007f42665b5fa0 RCX: 00007f426638e9a9 [ 69.534938][ T6017] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 69.534946][ T6017] RBP: 00007f42671c4090 R08: 0000000000000000 R09: 0000000000000000 [ 69.534955][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.534964][ T6017] R13: 0000000000000000 R14: 00007f42665b5fa0 R15: 00007ffec1235fa8 [ 69.534985][ T6017] [ 69.817557][ T30] audit: type=1400 audit(1753556172.792:162): avc: denied { mounton } for pid=5987 comm="syz.4.14" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 70.144504][ T6024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.272796][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.279205][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.381142][ T5919] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.524495][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 71.546400][ T5919] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 71.579311][ T5919] usb 5-1: config 0 has no interface number 0 [ 71.606497][ T5919] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.626514][ T5919] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.637173][ T5919] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.646506][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.705123][ T5919] usb 5-1: config 0 descriptor?? [ 71.726213][ T6042] FAULT_INJECTION: forcing a failure. [ 71.726213][ T6042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.739435][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.0.27 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 71.739459][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.739468][ T6042] Call Trace: [ 71.739473][ T6042] [ 71.739479][ T6042] dump_stack_lvl+0x16c/0x1f0 [ 71.739510][ T6042] should_fail_ex+0x512/0x640 [ 71.739541][ T6042] _copy_from_user+0x2e/0xd0 [ 71.739558][ T6042] copy_mount_options+0x76/0x190 [ 71.739581][ T6042] __x64_sys_mount+0x1ac/0x310 [ 71.739597][ T6042] ? __pfx___x64_sys_mount+0x10/0x10 [ 71.739620][ T6042] do_syscall_64+0xcd/0x4c0 [ 71.739638][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.739653][ T6042] RIP: 0033:0x7f53e958e9a9 [ 71.739667][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.739683][ T6042] RSP: 002b:00007f53ea320038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.739699][ T6042] RAX: ffffffffffffffda RBX: 00007f53e97b5fa0 RCX: 00007f53e958e9a9 [ 71.739709][ T6042] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 71.739719][ T6042] RBP: 00007f53ea320090 R08: 00002000000001c0 R09: 0000000000000000 [ 71.739735][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.739744][ T6042] R13: 0000000000000000 R14: 00007f53e97b5fa0 R15: 00007fff011d5968 [ 71.739765][ T6042] [ 71.883112][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.891281][ T6045] FAULT_INJECTION: forcing a failure. [ 71.891281][ T6045] name failslab, interval 1, probability 0, space 0, times 0 [ 71.917406][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.1.28 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 71.917431][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.917444][ T6045] Call Trace: [ 71.917450][ T6045] [ 71.917456][ T6045] dump_stack_lvl+0x16c/0x1f0 [ 71.917488][ T6045] should_fail_ex+0x512/0x640 [ 71.917513][ T6045] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 71.917542][ T6045] should_failslab+0xc2/0x120 [ 71.917559][ T6045] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 71.917585][ T6045] ? __alloc_skb+0x2b2/0x380 [ 71.917615][ T6045] __alloc_skb+0x2b2/0x380 [ 71.917640][ T6045] ? __pfx___alloc_skb+0x10/0x10 [ 71.917667][ T6045] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 71.917692][ T6045] netlink_alloc_large_skb+0x69/0x130 [ 71.917713][ T6045] netlink_sendmsg+0x6a1/0xdd0 [ 71.917736][ T6045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.917765][ T6045] ____sys_sendmsg+0xa98/0xc70 [ 71.917786][ T6045] ? copy_msghdr_from_user+0x10a/0x160 [ 71.917802][ T6045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.917835][ T6045] ___sys_sendmsg+0x134/0x1d0 [ 71.917852][ T6045] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.917866][ T6045] ? __lock_acquire+0x622/0x1c90 [ 71.917913][ T6045] __sys_sendmsg+0x16d/0x220 [ 71.917929][ T6045] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.917962][ T6045] do_syscall_64+0xcd/0x4c0 [ 71.917984][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.918002][ T6045] RIP: 0033:0x7fd63b78e9a9 [ 71.918015][ T6045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.918030][ T6045] RSP: 002b:00007fd63c5c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.918047][ T6045] RAX: ffffffffffffffda RBX: 00007fd63b9b6080 RCX: 00007fd63b78e9a9 [ 71.918058][ T6045] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 71.918067][ T6045] RBP: 00007fd63c5c1090 R08: 0000000000000000 R09: 0000000000000000 [ 71.918077][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.918086][ T6045] R13: 0000000000000000 R14: 00007fd63b9b6080 R15: 00007ffc59a773b8 [ 71.918109][ T6045] [ 72.184242][ T6047] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 72.378858][ T5919] uclogic 0003:256C:006D.0001: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1 [ 78.320619][ C0] sched: DL replenish lagged too much [ 195.630959][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 195.637988][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5950/1:b..l P6055/1:b..l P4533/1:b..l [ 195.648561][ C1] rcu: (detected by 1, t=10502 jiffies, g=7525, q=1541 ncpus=2) [ 195.656292][ C1] task:kworker/u8:9 state:R running task stack:23768 pid:4533 tgid:4533 ppid:2 task_flags:0x24248060 flags:0x00004000 [ 195.670875][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 195.676893][ C1] Call Trace: [ 195.680169][ C1] [ 195.683099][ C1] __schedule+0x116a/0x5dd0 [ 195.687613][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 195.692815][ C1] ? wb_workfn+0x14d/0xbe0 [ 195.697239][ C1] ? __pfx___schedule+0x10/0x10 [ 195.702101][ C1] ? mark_held_locks+0x49/0x80 [ 195.706880][ C1] preempt_schedule_irq+0x51/0x90 [ 195.711908][ C1] irqentry_exit+0x36/0x90 [ 195.716317][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 195.722321][ C1] RIP: 0010:__page_table_check_zero+0x2f3/0x5d0 [ 195.728575][ C1] Code: c6 48 89 04 24 e8 2d e1 8e ff 48 8b 04 24 48 85 c0 0f 84 9c 00 00 00 e8 ab e5 8e ff 48 8b 44 24 18 80 38 00 0f 85 96 02 00 00 <4c> 03 25 46 6a b5 18 48 83 c5 01 e8 8d e5 8e ff 4d 85 e4 0f 85 ca [ 195.748217][ C1] RSP: 0018:ffffc9000ea16f98 EFLAGS: 00000246 [ 195.754315][ C1] RAX: fffffbfff35c4da8 RBX: 0000000000056e77 RCX: ffffffff822d02d3 [ 195.762286][ C1] RDX: ffff88803579a440 RSI: ffffffff822d02e5 RDI: 0000000000000007 [ 195.770256][ C1] RBP: 0000000000000006 R08: 0000000000000007 R09: 0000000000000000 [ 195.778254][ C1] R10: 0000000000006e77 R11: 0000000000000001 R12: ffff88801e6284e0 [ 195.786245][ C1] R13: ffff88801e62852c R14: 0000000000000003 R15: dffffc0000000000 [ 195.794226][ C1] ? __page_table_check_zero+0x2d3/0x5d0 [ 195.799871][ C1] ? __page_table_check_zero+0x2e5/0x5d0 [ 195.805503][ C1] ? __page_table_check_zero+0x2e5/0x5d0 [ 195.811142][ C1] ? __pfx___page_table_check_zero+0x10/0x10 [ 195.817122][ C1] ? __reset_page_owner+0x137/0x1a0 [ 195.822335][ C1] __free_frozen_pages+0x7df/0x1180 [ 195.827539][ C1] ? mod_node_page_state+0x10/0x150 [ 195.832744][ C1] __put_partials+0x16d/0x1c0 [ 195.837424][ C1] qlist_free_all+0x4d/0x120 [ 195.842017][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 195.847500][ C1] __kasan_slab_alloc+0x69/0x90 [ 195.852358][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 195.857823][ C1] ? jbd2__journal_start+0x249/0x6a0 [ 195.863134][ C1] ? __pfx___might_resched+0x10/0x10 [ 195.868441][ C1] jbd2__journal_start+0x249/0x6a0 [ 195.873561][ C1] __ext4_journal_start_sb+0x195/0x690 [ 195.879024][ C1] ? ext4_do_writepages+0xc5f/0x3490 [ 195.884316][ C1] ext4_do_writepages+0xc5f/0x3490 [ 195.889453][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 195.895013][ C1] ? ext4_writepages+0x37a/0x7d0 [ 195.899952][ C1] ext4_writepages+0x37a/0x7d0 [ 195.904715][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 195.910011][ C1] ? wb_update_bandwidth+0xa0/0xe0 [ 195.915152][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 195.920119][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 195.925429][ C1] do_writepages+0x277/0x600 [ 195.930042][ C1] ? __pfx_do_writepages+0x10/0x10 [ 195.935161][ C1] ? reacquire_held_locks+0xcd/0x1f0 [ 195.940442][ C1] ? writeback_sb_inodes+0x3a4/0xf90 [ 195.945730][ C1] __writeback_single_inode+0x160/0xfb0 [ 195.951278][ C1] ? __pfx___writeback_single_inode+0x10/0x10 [ 195.957346][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 195.962570][ C1] writeback_sb_inodes+0x601/0xf90 [ 195.967693][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 195.973322][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 195.978287][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 195.983664][ C1] ? wb_writeback+0x6bd/0xb70 [ 195.988353][ C1] wb_writeback+0x419/0xb70 [ 195.992870][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 195.997906][ C1] ? mark_held_locks+0x49/0x80 [ 196.002706][ C1] wb_workfn+0x14d/0xbe0 [ 196.006956][ C1] ? try_to_wake_up+0x157/0x1680 [ 196.011895][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 196.016688][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.021461][ C1] process_one_work+0x9cc/0x1b70 [ 196.026411][ C1] ? __pfx_wb_update_bandwidth_workfn+0x10/0x10 [ 196.032660][ C1] ? __pfx_process_one_work+0x10/0x10 [ 196.038040][ C1] ? assign_work+0x1a0/0x250 [ 196.042632][ C1] worker_thread+0x6c8/0xf10 [ 196.047229][ C1] ? __kthread_parkme+0x19e/0x250 [ 196.052346][ C1] ? __pfx_worker_thread+0x10/0x10 [ 196.057455][ C1] kthread+0x3c2/0x780 [ 196.061559][ C1] ? __pfx_kthread+0x10/0x10 [ 196.066152][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.070924][ C1] ? __pfx_kthread+0x10/0x10 [ 196.075513][ C1] ret_from_fork+0x5d4/0x6f0 [ 196.080107][ C1] ? __pfx_kthread+0x10/0x10 [ 196.084698][ C1] ret_from_fork_asm+0x1a/0x30 [ 196.089476][ C1] [ 196.092492][ C1] task:fido_id state:R running task stack:23384 pid:6055 tgid:6055 ppid:5834 task_flags:0x400000 flags:0x00004002 [ 196.105979][ C1] Call Trace: [ 196.109257][ C1] [ 196.112191][ C1] __schedule+0x116a/0x5dd0 [ 196.116717][ C1] ? __lock_acquire+0x622/0x1c90 [ 196.121679][ C1] ? __pfx___schedule+0x10/0x10 [ 196.126663][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 196.131879][ C1] ? mark_held_locks+0x49/0x80 [ 196.136653][ C1] preempt_schedule_irq+0x51/0x90 [ 196.141685][ C1] irqentry_exit+0x36/0x90 [ 196.146101][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.152090][ C1] RIP: 0010:lock_release+0x201/0x2f0 [ 196.157487][ C1] Code: 8b 78 08 4c 89 e2 48 89 de e8 1b dc fe ff 65 ff 0d 04 7b 37 12 0f 85 39 fe ff ff e8 29 e0 93 ff e9 2f fe ff ff e8 7f e4 08 00 <84> c0 0f 85 42 fe ff ff 80 3d 73 0b f9 0e 00 0f 85 35 fe ff ff c6 [ 196.177106][ C1] RSP: 0018:ffffc9000518ee48 EFLAGS: 00000286 [ 196.183183][ C1] RAX: 0000000000000001 RBX: ffffffff8e5c4e00 RCX: ffffc90005190001 [ 196.191157][ C1] RDX: 0000000000000000 RSI: ffffffff8c157460 RDI: ffffffff8df3eda8 [ 196.199130][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 196.207115][ C1] R10: 0000000000000000 R11: 00000000000a7d34 R12: ffffffff816adac4 [ 196.215091][ C1] R13: ffffc9000518ef00 R14: ffffc9000518f3a0 R15: ffffc9000518ef34 [ 196.223077][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 196.228289][ C1] ? lock_release+0x201/0x2f0 [ 196.232966][ C1] unwind_next_frame+0x3f9/0x20a0 [ 196.237986][ C1] ? mas_alloc_nodes+0x18b/0x8b0 [ 196.242929][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 196.249088][ C1] arch_stack_walk+0x94/0x100 [ 196.253776][ C1] ? mas_node_count_gfp+0x105/0x130 [ 196.258993][ C1] stack_trace_save+0x8e/0xc0 [ 196.263677][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 196.269054][ C1] ? __lock_acquire+0x622/0x1c90 [ 196.274029][ C1] save_stack+0x160/0x1f0 [ 196.278421][ C1] ? __pfx_save_stack+0x10/0x10 [ 196.283316][ C1] ? __free_frozen_pages+0x7fe/0x1180 [ 196.288699][ C1] ? __put_partials+0x16d/0x1c0 [ 196.293559][ C1] ? qlist_free_all+0x4d/0x120 [ 196.298332][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 196.303989][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 196.309046][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 196.314695][ C1] ? mas_alloc_nodes+0x18b/0x8b0 [ 196.319644][ C1] ? page_ext_put+0x3e/0xd0 [ 196.324158][ C1] __reset_page_owner+0x84/0x1a0 [ 196.329111][ C1] __free_frozen_pages+0x7fe/0x1180 [ 196.334320][ C1] __put_partials+0x16d/0x1c0 [ 196.339012][ C1] qlist_free_all+0x4d/0x120 [ 196.343608][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 196.349075][ C1] __kasan_slab_alloc+0x69/0x90 [ 196.353935][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 196.359399][ C1] ? mas_alloc_nodes+0x18b/0x8b0 [ 196.364356][ C1] mas_alloc_nodes+0x18b/0x8b0 [ 196.369135][ C1] mas_node_count_gfp+0x105/0x130 [ 196.374167][ C1] mas_preallocate+0x7e0/0xde0 [ 196.378938][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 196.384232][ C1] ? vm_area_alloc+0x1f/0x160 [ 196.388915][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 196.394292][ C1] __mmap_region+0x1104/0x25e0 [ 196.399067][ C1] ? __pfx___mmap_region+0x10/0x10 [ 196.404198][ C1] ? __lock_acquire+0x622/0x1c90 [ 196.409155][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 196.414568][ C1] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 196.420469][ C1] mmap_region+0x1ab/0x3f0 [ 196.424893][ C1] ? __get_unmapped_area+0x267/0x440 [ 196.430220][ C1] do_mmap+0xa3e/0x1210 [ 196.434388][ C1] ? __pfx_do_mmap+0x10/0x10 [ 196.438981][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 196.444643][ C1] vm_mmap_pgoff+0x281/0x450 [ 196.449243][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 196.454386][ C1] vm_mmap+0x8e/0xc0 [ 196.458285][ C1] elf_load+0x36d/0x780 [ 196.462455][ C1] load_elf_binary+0x13c8/0x4f00 [ 196.467415][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 196.472704][ C1] ? find_held_lock+0x2b/0x80 [ 196.477383][ C1] ? bprm_execve+0x8a2/0x1650 [ 196.482087][ C1] bprm_execve+0x8c3/0x1650 [ 196.486598][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 196.491535][ C1] ? copy_strings.isra.0+0x48b/0x950 [ 196.496835][ C1] do_execveat_common.isra.0+0x4a5/0x610 [ 196.502482][ C1] __x64_sys_execve+0x8e/0xb0 [ 196.507175][ C1] do_syscall_64+0xcd/0x4c0 [ 196.511684][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.517582][ C1] RIP: 0033:0x7fd620c1a107 [ 196.521998][ C1] RSP: 002b:00007fff2103f318 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 196.530415][ C1] RAX: ffffffffffffffda RBX: 000055891fff4140 RCX: 00007fd620c1a107 [ 196.538386][ C1] RDX: 0000558957b76f40 RSI: 00007fff2103f430 RDI: 00007fff2103fc30 [ 196.546375][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 196.554366][ C1] R10: 0000000000000008 R11: 0000000000000206 R12: 0000558957b76f40 [ 196.562358][ C1] R13: 00007fff2103f430 R14: 000000000000000d R15: 0000000000000009 [ 196.570341][ C1] [ 196.573359][ C1] task:kworker/0:7 state:R running task stack:25240 pid:5950 tgid:5950 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 196.586946][ C1] Workqueue: events_power_efficient gc_worker [ 196.593035][ C1] Call Trace: [ 196.596327][ C1] [ 196.599287][ C1] __schedule+0x116a/0x5dd0 [ 196.603831][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 196.609059][ C1] ? __pfx___schedule+0x10/0x10 [ 196.613929][ C1] ? __mod_timer+0x8ed/0xd30 [ 196.618517][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.623282][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 196.628486][ C1] ? mark_held_locks+0x49/0x80 [ 196.633265][ C1] preempt_schedule_irq+0x51/0x90 [ 196.638299][ C1] irqentry_exit+0x36/0x90 [ 196.642714][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.648698][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 196.653895][ C1] Code: 76 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 b8 10 0f 0f 82 74 02 00 00 8b 35 fa e9 10 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 a9 75 37 12 0f 85 c7 02 00 00 48 83 c4 [ 196.673525][ C1] RSP: 0018:ffffc9000439fae0 EFLAGS: 00000206 [ 196.679602][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 00000000450c12e1 [ 196.687608][ C1] RDX: 0000000000000000 RSI: ffffffff8de0b1d5 RDI: ffffffff8c1574e0 [ 196.695599][ C1] RBP: 0000000000000002 R08: 2c4b88301fba7ebf R09: 0000000000000000 [ 196.703583][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 196.711557][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.719543][ C1] ? __pfx___might_resched+0x10/0x10 [ 196.724844][ C1] ? gc_worker+0x999/0x16e0 [ 196.729359][ C1] gc_worker+0x241/0x16e0 [ 196.733714][ C1] ? gc_worker+0x230/0x16e0 [ 196.738230][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 196.743877][ C1] ? __pfx_gc_worker+0x10/0x10 [ 196.748646][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.753414][ C1] process_one_work+0x9cc/0x1b70 [ 196.758355][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 196.764023][ C1] ? __pfx_process_one_work+0x10/0x10 [ 196.769404][ C1] ? assign_work+0x1a0/0x250 [ 196.773995][ C1] worker_thread+0x6c8/0xf10 [ 196.778596][ C1] ? __pfx_worker_thread+0x10/0x10 [ 196.783707][ C1] kthread+0x3c2/0x780 [ 196.787773][ C1] ? __pfx_kthread+0x10/0x10 [ 196.792364][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.797133][ C1] ? __pfx_kthread+0x10/0x10 [ 196.801727][ C1] ret_from_fork+0x5d4/0x6f0 [ 196.806325][ C1] ? __pfx_kthread+0x10/0x10 [ 196.810914][ C1] ret_from_fork_asm+0x1a/0x30 [ 196.815691][ C1] [ 196.818717][ C1] rcu: rcu_preempt kthread starved for 9859 jiffies! g7525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 196.829738][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 196.839705][ C1] rcu: RCU grace-period kthread stack dump: [ 196.845608][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 196.859119][ C1] Call Trace: [ 196.862396][ C1] [ 196.865331][ C1] __schedule+0x116a/0x5dd0 [ 196.869854][ C1] ? __lock_acquire+0x622/0x1c90 [ 196.874813][ C1] ? __pfx___schedule+0x10/0x10 [ 196.879673][ C1] ? find_held_lock+0x2b/0x80 [ 196.884362][ C1] ? schedule+0x2d7/0x3a0 [ 196.888699][ C1] schedule+0xe7/0x3a0 [ 196.892771][ C1] schedule_timeout+0x123/0x290 [ 196.897625][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 196.903031][ C1] ? __pfx_process_timeout+0x10/0x10 [ 196.908333][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 196.914161][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 196.919631][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 196.924398][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 196.929684][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.934915][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 196.939851][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 196.944704][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 196.950520][ C1] rcu_gp_kthread+0x270/0x380 [ 196.955219][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 196.960412][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.965181][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.970407][ C1] ? __kthread_parkme+0x19e/0x250 [ 196.975442][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 196.980637][ C1] kthread+0x3c2/0x780 [ 196.984881][ C1] ? __pfx_kthread+0x10/0x10 [ 196.989469][ C1] ? rcu_is_watching+0x12/0xc0 [ 196.994236][ C1] ? __pfx_kthread+0x10/0x10 [ 196.998822][ C1] ret_from_fork+0x5d4/0x6f0 [ 197.003415][ C1] ? __pfx_kthread+0x10/0x10 [ 197.008001][ C1] ret_from_fork_asm+0x1a/0x30 [ 197.012777][ C1] [ 197.015797][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 197.022121][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 197.033748][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.043810][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 197.049461][ C1] Code: 6b 6d 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 79 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 197.069088][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 197.075181][ C1] RAX: 000000000180dc69 RBX: 0000000000000001 RCX: ffffffff8b869c99 [ 197.083161][ C1] RDX: 0000000000000000 RSI: ffffffff8de30472 RDI: ffffffff8c1574e0 [ 197.091128][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 197.099101][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 197.107072][ C1] R13: ffff88801e2b2440 R14: ffffffff90a94250 R15: 0000000000000000 [ 197.115049][ C1] FS: 0000000000000000(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 197.123978][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.130560][ C1] CR2: 000055558c1405c8 CR3: 0000000060c1a000 CR4: 00000000003526f0 [ 197.138529][ C1] Call Trace: [ 197.141806][ C1] [ 197.144731][ C1] default_idle+0x13/0x20 [ 197.149071][ C1] default_idle_call+0x6d/0xb0 [ 197.153870][ C1] do_idle+0x391/0x510 [ 197.157962][ C1] ? __pfx_do_idle+0x10/0x10 [ 197.162559][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 197.167766][ C1] cpu_startup_entry+0x4f/0x60 [ 197.172559][ C1] start_secondary+0x21d/0x2b0 [ 197.177356][ C1] ? __pfx_start_secondary+0x10/0x10 [ 197.182664][ C1] common_startup_64+0x13e/0x148 [ 197.187618][ C1] [ 197.631775][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.643768][ T1298] ieee802154 phy1 wpan1: encryption failed: -22