last executing test programs: 22m21.196779013s ago: executing program 4 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f00000005c0)={[{'+\\^%/\'},-\\@('}], [{@dont_appraise}, {@context={'context', 0x3d, 'root'}}, {@euid_gt}, {@dont_hash}, {@fowner_eq}, {@euid_lt}, {@subj_role={'subj_role', 0x3d, '\xbf-\'(,'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@%-:\x9e'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}) 22m18.812295882s ago: executing program 4 (id=528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) io_submit(0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r5, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 22m17.004272712s ago: executing program 4 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 22m14.651820088s ago: executing program 4 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x90) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'vlan0\x00', @random="01000200"}) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 22m12.035806304s ago: executing program 4 (id=539): socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x38}}, 0x0) write$rfkill(r0, &(0x7f00000002c0)={0x20000000, 0x8, 0x3, 0x3, 0xfd}, 0x8) 22m11.109868837s ago: executing program 4 (id=541): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) socket(0x8, 0x3, 0xf29b) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 21m55.968843383s ago: executing program 32 (id=541): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) socket(0x8, 0x3, 0xf29b) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 19m32.207970524s ago: executing program 3 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) semop(0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) 19m29.266198778s ago: executing program 3 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=0x0, @ANYRESOCT=r4], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 19m26.33370287s ago: executing program 3 (id=872): openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x80049367, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0xfffffffffffffffe) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) syz_emit_ethernet(0xfe53, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) r3 = epoll_create1(0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000010c0), 0x60901, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) 19m23.106771502s ago: executing program 3 (id=876): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff000000000000080445000030000000000001907800000000ffffffff2a009078000000004500000000000000000000007f000001e0000001"], 0x0) open$dir(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, r0, 0xd925000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FIONREAD(r3, 0x5453, 0xfffffffffffffffe) 19m21.145722159s ago: executing program 3 (id=882): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2339600000000000000000000000000bbff02000000000000000000000000000186009078000002000000002100000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc0405602, &(0x7f00000001c0)=@fd={0x6, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00\x00@\x00'}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4044) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x2, 0x0, 0x8000000000000000) memfd_create(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c0002"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 19m18.255111567s ago: executing program 3 (id=886): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x737222) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="3fd56ddd0394694a1f1d08af1735d16a51f0f2d946e857c6a43db4f68c90a91156aaba41d802fc83399bfca1bb37d036e61d2a7d37108c5ed0f440eb85eed4b0594e87108c59ef839471114ff948", 0x4e}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f00000006c0)="22ffb8517ddc31f6bfdd4e1d10cbbbd7c711950228cd1a5178172b4cd66519af680a31c5d8c98016c2064e7c1879e8c1c0e0d025438175c9b24e9119ced979f8c3ee1a3622c553d4d5717a48443d04a4a77950a8e3545d35d7a0654bdc0df9b8eefe355f80a03dac0fcb0ca3bd66cb364e5e293445b094d69fb31f05a965180926debcf1d6496da8c7ebe98ec3fa04fe7cecd92253b07ee0aa377f3afe5a926dac7fc7a45e", 0xa5}, {&(0x7f0000000180)="e5406738dfba920b0dc23f10be8aa6336f19c3b4bfa4310e3ca31539cd43d4a7dac8f127cd6e13153adb382b8c", 0x2d}], 0x4, &(0x7f0000001780)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xf0}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x90, 0x117, 0x2, 0x7c, "a2e2194e7e9b9696435793a0b8e3fae8888840fda83b34fe94356ca42e0c14d89fbb20c92c4bb782e95ea9a62b58d29236caca5e72998bc73f19cbd0dfe3e4a617e92f236fc6a5eb48066e9d442d24b3b12a5eb9296938c3ecc67461d7b4d17e2a10f4073889d5bd29993672f18168a908d73d0df534dbf95ea493af"}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x120, 0x40004000}], 0x1, 0x18001) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 19m2.528664003s ago: executing program 33 (id=886): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x737222) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="3fd56ddd0394694a1f1d08af1735d16a51f0f2d946e857c6a43db4f68c90a91156aaba41d802fc83399bfca1bb37d036e61d2a7d37108c5ed0f440eb85eed4b0594e87108c59ef839471114ff948", 0x4e}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f00000006c0)="22ffb8517ddc31f6bfdd4e1d10cbbbd7c711950228cd1a5178172b4cd66519af680a31c5d8c98016c2064e7c1879e8c1c0e0d025438175c9b24e9119ced979f8c3ee1a3622c553d4d5717a48443d04a4a77950a8e3545d35d7a0654bdc0df9b8eefe355f80a03dac0fcb0ca3bd66cb364e5e293445b094d69fb31f05a965180926debcf1d6496da8c7ebe98ec3fa04fe7cecd92253b07ee0aa377f3afe5a926dac7fc7a45e", 0xa5}, {&(0x7f0000000180)="e5406738dfba920b0dc23f10be8aa6336f19c3b4bfa4310e3ca31539cd43d4a7dac8f127cd6e13153adb382b8c", 0x2d}], 0x4, &(0x7f0000001780)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xf0}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x90, 0x117, 0x2, 0x7c, "a2e2194e7e9b9696435793a0b8e3fae8888840fda83b34fe94356ca42e0c14d89fbb20c92c4bb782e95ea9a62b58d29236caca5e72998bc73f19cbd0dfe3e4a617e92f236fc6a5eb48066e9d442d24b3b12a5eb9296938c3ecc67461d7b4d17e2a10f4073889d5bd29993672f18168a908d73d0df534dbf95ea493af"}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x120, 0x40004000}], 0x1, 0x18001) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 16m44.389459951s ago: executing program 1 (id=1179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) 16m43.190271346s ago: executing program 1 (id=1183): socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) copy_file_range(r3, &(0x7f00000000c0)=0xb, r3, &(0x7f0000000280)=0x80000000, 0xb, 0x0) 16m41.886783258s ago: executing program 1 (id=1186): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xf0, 0x2}) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000080)=0x2) r4 = socket(0x10, 0x803, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000001300), &(0x7f00000001c0)='%-010d \x00', 0x8}, 0x20) 16m38.856716737s ago: executing program 1 (id=1190): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) memfd_secret(0x0) close(r2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 16m35.925533802s ago: executing program 1 (id=1196): r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xa, @mcast2, 0x100}, {0xa, 0x4e21, 0x0, @loopback, 0xfffffffe}, 0xffffffffffffffff, 0xd}}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xffff921b}, &(0x7f0000000040)=0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setpriority(0x0, 0x1, 0xa7a8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffff9c, 0x0, 0x2, 0x0) sched_getattr(r2, &(0x7f0000000080)={0x38}, 0xfed9, 0x0) socket$netlink(0x10, 0x3, 0xf) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 16m34.622739439s ago: executing program 1 (id=1200): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x69deddea}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ppoll(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000380)={[0xa66e]}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103c02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16m25.415306952s ago: executing program 0 (id=1216): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x4000) close(r3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x9, 0xf5, 0xfa, 0x9}, {0x4, 0x9, 0x9, 0x3}, {0x7, 0x8, 0x1, 0x40000000}, {0xf511, 0x7, 0xf, 0xfffffffa}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001400010024051000fddbdf25021f8bc8", @ANYRES32=r5, @ANYBLOB="08000200ac14143c080009000100"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16m23.857389926s ago: executing program 0 (id=1221): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80801) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x5fd) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000280)={0x80000001, 0x1, 0x2, "6ea7b2c496e0ad6e4d10ee946bbdf4389931088c86f42d3e89b1a0018fd12613", 0x31364d59}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000480)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000005c0)="7cf8e52490cce8be0659c831f25b052361d426aba550fe1e784c389240522ad1ccd8b6bab1b40efbbdf9dca9f317f7e2a90f010b1b4e5e994060c83e2535863498ec63ef778f4b56a4d69f7867379a95caf5a35e90aeef1018408d2f061f8babb1e3a681181385df6dcd0965f7ef840bab947c570dfc4a73d90aafe09f2aa54775", 0x81) io_submit(0x0, 0xfffffffffffffcf9, 0x0) 16m22.397522191s ago: executing program 0 (id=1224): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x5, 0x200000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x28, r5, 0xb1d, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) 16m20.142111858s ago: executing program 0 (id=1230): sched_setscheduler(0x0, 0x2, 0x0) setrlimit(0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) eventfd(0xe494) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d40)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) 16m18.89888375s ago: executing program 34 (id=1200): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x69deddea}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ppoll(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000380)={[0xa66e]}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103c02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16m16.785701412s ago: executing program 0 (id=1237): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x200000000622c, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d80), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r7, &(0x7f0000000340), 0x0}, 0x20) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) 16m12.532934827s ago: executing program 0 (id=1245): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x14, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8400, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0xa]}}}}]}) r2 = syz_open_dev$dmmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0245720, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) pipe(&(0x7f0000000200)) write(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) 15m57.268299793s ago: executing program 35 (id=1245): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x14, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8400, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0xa]}}}}]}) r2 = syz_open_dev$dmmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0245720, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) pipe(&(0x7f0000000200)) write(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) 20.271904514s ago: executing program 6 (id=3236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x80080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 19.15469599s ago: executing program 5 (id=3239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = dup(0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000540)={{0x5, 0x0, 0x5, 0x100, '\x00', 0x401}, 0x3, 0x20, 0x6, r6, 0x5, 0x3, 'syz1\x00', &(0x7f0000000200)=[',&,,]\x00', '@{.}(\x00', '#! ', '#! ', '\x00'], 0x13}) getsockname(r0, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) socketpair(0x2b, 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 18.05899211s ago: executing program 6 (id=3242): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x0, 0xffffffff, @private0, 0x2000000}], 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r5 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x7000) socket$key(0xf, 0x3, 0x2) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x1fd6, @local, 0x100}], 0x1c) 16.097188462s ago: executing program 5 (id=3247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @empty, 0x400}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) madvise(&(0x7f000016f000/0x4000)=nil, 0x4000, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xa90b) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000019080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 13.315119644s ago: executing program 2 (id=3252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x80080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 13.24089204s ago: executing program 7 (id=3253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xe}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r6, 0x5608) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 13.239474883s ago: executing program 5 (id=3254): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 12.090593494s ago: executing program 2 (id=3255): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) io_submit(0x0, 0x0, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 12.039358682s ago: executing program 7 (id=3257): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd04) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x6, 0x79}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c00014000000000000000"], 0x118}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11.973636845s ago: executing program 6 (id=3258): syz_open_dev$I2C(0x0, 0x0, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x237, 0x0, &(0x7f00000000c0)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r1, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x4, &(0x7f0000000480)={0x6, 0x7c9ddb4d}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xfc, 0x0, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0xb0, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @private1}}}]}]}, 0xfc}}, 0x20000000) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0xfffffffffffffdcb) 9.384671101s ago: executing program 2 (id=3260): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xe}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf00001, 0x2}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) 8.635926848s ago: executing program 6 (id=3261): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000140)=[{r1, 0x14}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a3000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000"], 0x44}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x41) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000380)={0x5, 0xfffffffd, 0x0, 0x3, 0x12, "3e04000000000000000600000000000400"}) socket$inet6(0xa, 0x1, 0x80000000) 8.405145627s ago: executing program 7 (id=3262): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000017}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0xb6, 0x7fff1004}]}) link(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000340)={0x80}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) setrlimit(0xa, &(0x7f0000000000)={0x3, 0xfff}) iopl(0x3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r6 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmat(r6, &(0x7f0000ffd000/0x3000)=nil, 0x2000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000d00)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x80}, @broadcast, @broadcast, @from_mac=@device_b, {0x8, 0xd92}}, 0x800, 0x7, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x79, "158993c7e135bb0e017c30dec1c8698bc22dd27d7bbd0795131b48ff54048591d3c8306022f30b84c81bad351a00de2d11205acdc633d576f9fb12786a5fae86b4499fd1b0d5607f749ec5bf4a71c0086868410d36fa6c64d8b51ed7e1e1ab2d64d78e5b49c40ee459148bfcff361567dc21865e0d2b75603e"}, {0xdd, 0x9a, "60509551908b9579598ca5ea1dc509022053779a5001c36079ab6240ce9a3a71cca51f9b0fd9029d557255be52c5cc08f1f96a91e770f0910f1d5b100e655b39063a5150e17541b2763c082c0c2c2a53b1f59b2cd0aa8ce0d3c7279a9eef9a3e0574a0f24fad35c7152820d811f7c779047e66c363de971d17cb85b06e6cd051d360694cae41331a68a634961f37a2833f5847508aa2cabb6e10"}, {0xdd, 0xbf, "0849e5aa41f9773321bae6143e35ca00784fc46bf7bc17507d2e922bd1351d2d32237b0377ada285018d946d86ebac8b6d186c451039858807c389a6eb9fedc8754ee676beb376f3faa6b1af30f4d4dc3772ed5bf142116cca54779d527ed73924ac3ca7c8fe6f9c2ba2705667ffd5b7d3ad0aa1940a9e7a2e87e930b91a7eeeb238e240c351768a975450c293c01defa801ffd8b6f7de479ab6e85f9298ad3ef6c6a88e343b3de0bebcd62928223658c2593680d6be9703491ae600940d96"}, {0xdd, 0x2a, "6c59d34e62976389f927e4ca59468c5918e693856828d4857499200c76a3acfa7a4e337ea57493476c84"}, {0xdd, 0xeb, "6c6b9e66043565503abdb86957830bfb02efa1233fb2fade39182df6bae9e9cef8eb99c1e451652d872800944b76d3e624819ff14f065ac188194a73225ae055cdf75f1ce59b0041e0ae94fc73fc15c4aa7c112ea592999b81e3ae645aaa527a014fe4022a33f610068ee8d42dd6fef875667f3ac01361b4d2e31f08702c25d93bb25f91f888b966af6c28f4f4466879c5c702594063e47352bd7ee2298f532278c34a4e173e556e98ab8ec0f31d26551e0c6b7bb9aeccd11be5dc6bf384a105696d5d9be40e59c5e09a2ecea10f92c320da59a3ff1d8efc1edbb90025202e7dd405550f53cac4df72b5be"}]}, 0x31b) 7.861473667s ago: executing program 8 (id=3263): syz_open_dev$media(&(0x7f0000000380), 0x0, 0x103482) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0xe, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) process_vm_writev(0x0, &(0x7f0000001080), 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001180)=""/84, 0x54}, {&(0x7f0000001200)=""/249, 0xf9}], 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x202400, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d0bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a974448000000000000000000000000000000001600", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 7.682875704s ago: executing program 2 (id=3264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000080000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0700007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3fffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="d40a94b0c6"]}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r4) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x4}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0xf0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e030002000000000000000003", 0x3f}], 0x1) syz_usb_control_io$uac1(r2, 0x0, 0x0) 7.393599059s ago: executing program 8 (id=3265): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) chdir(&(0x7f00000000c0)='./file0\x00') r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 7.302940282s ago: executing program 6 (id=3266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x80080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 5.176065572s ago: executing program 6 (id=3267): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x1, 0x0, &(0x7f0000000380)="e4", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000380), 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x11, r1, 0x80000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f7274000000002294c1f21c7a6bbe2932f87cda814dd6f721a64e18fe84dd7aaf7fbd5ff57c02da263e2e929594ed56410d0c8828fc5a198eb544fd9e57daa3c1fb5c94a1e61c471039f934195de08301fc4272906b4fd77fe74f6175f87ceefcbf645b0d404a6ecafe6b61d95f7e8bb7b542910f768e29b905"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, &(0x7f0000000300)={0x5, @win={{0x4, 0x4a3, 0x1, 0x2b9}, 0x0, 0x964, &(0x7f0000000080)={{0x11, 0xf4ec, 0x2, 0x5}}, 0x2, &(0x7f00000001c0)="548fb3a4a855dc30f769c85b6b5c060b0b71feec3e5d8d06e6dd4582aefafba4b6abd6cac0e5"}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) userfaultfd(0x800) fsopen(&(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706050000000000000000000100ab3c99f5d1e72258fe47"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 5.116483423s ago: executing program 8 (id=3268): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000000080002"], 0x80}}, 0x0) getpid() madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x61) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000500)=[{0x6, 0x2, 0x2, 0x7ffefffd}, {0x9, 0x9, 0xda, 0x1000}, {0x1, 0x2, 0xa0, 0x8000}]}) r5 = fanotify_init(0x200, 0x40000) fanotify_mark(r5, 0x1, 0x8000018, r4, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r8, 0x2) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 5.065412542s ago: executing program 7 (id=3269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000000)={0x7, 0x2, 0x12, 0x29, 0x13b}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x0, 0x0, [@private2, @loopback, @local]}, 0x38) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}]}) r7 = epoll_create1(0x80000) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000180)={0x90000009}) mount(0x0, 0x0, 0x0, 0x40078, 0x0) socket$kcm(0x2, 0x2, 0x0) 5.064955299s ago: executing program 5 (id=3270): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) socket(0x2b, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) 4.84394619s ago: executing program 5 (id=3271): socket$alg(0x26, 0x5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000084) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x2}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000300)}, {0x0}, {&(0x7f00000008c0)=""/201, 0xc9}, {0x0}, {&(0x7f0000000280)=""/171, 0xab}, {0x0}, {&(0x7f0000001000)=""/180, 0xb4}, {&(0x7f00000010c0)=""/201, 0xc9}], 0x9, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x2, 0x60010000, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r5, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x441, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000180)=0x1) 3.976253585s ago: executing program 2 (id=3272): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041006469770014003300766c616e3100000000000010000000006ce289000043ae91806ab06f8e31161e4f067fe997345233c87e552677f62fd3962aa55a65a2453a8eef1bcc4c3915a8d5559d6e2b5d1774dbf3c172ce9a6325b5876878b60724232033f421b01ab8bbb85e00d0acd0efde934ecec5f41a654cc5619a4082b5ad6a9053a27a22789e4a3f4f0411b4b328e66b595c66744ff42b5b86b9daf32c7881fe3b434599fcc1483d"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {0x6000000}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x1, 0xc, 0x5, 0x0, 0x66, "9029ae779c789d090000130300000000aa9aa7", 0x2, 0x3}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, &(0x7f0000000080), 0x0}, 0x20) 2.878725615s ago: executing program 8 (id=3273): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) eventfd(0x80000000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x29fb) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0xc03d1a3552b56c2f) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4feff, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) 2.877015778s ago: executing program 5 (id=3274): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.549460796s ago: executing program 7 (id=3275): syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x2000005c) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x24) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r7}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) 1.546455911s ago: executing program 8 (id=3276): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) socket(0x2b, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r4 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 776.559947ms ago: executing program 2 (id=3277): r0 = socket(0x2b, 0x80801, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x3) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 29.67113ms ago: executing program 7 (id=3278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0) mq_getsetattr(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x1e, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 0s ago: executing program 8 (id=3279): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) utime(&(0x7f0000000000)='.\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x3, 0x2, &(0x7f0000000080)=[{&(0x7f0000000c40)="62a9668bc83cd0ffe855bf03ff748067ecf13d2506fbea683a84f46ed1a0077da9306c5aea8a8c76681ffa0f100e87bf4697c1842d016060e251dbc791ad5de49bf57f579d786be6fd21e11e992298d127d3a749ae2ad5eea56209347a9955e9c7c04f9a3ae4c5ddc857bd7d901ad8853156473319c84b6f1ef9b8d804c8a35d35fa4e3c68c309afa1933a754ca85e826b3f8b2b5f7ee854af1f87c668da2585fa1e1cbde29072e6f7ad44d45cee663a5e9d775f182f5b5e0fea39d0e7a0a5e3adf1fcc557405e29", 0xc8, 0x9a2, 0x1}, {&(0x7f0000000d40)="6a7c4df1204df9384b590f00fb5f7b27d9dc8276098bb56262c23ca521d87abeae392709e6eaaf0da7d61b6a30c1db63fa25cd55cfd16b1d5e7142f7c2defd1a4286f72b0c3d0b742fcbd07099cf5e22ba0dd22b47ccc19021a5920a11a89db90bb7266b852ee10eb5a13aa686956ea8c0d10d34bab0b5617a5f4a050b71d174263e7cb0a7ac0c32b299e392f49dd3893258f7320dc36611adf68e9218fe83c9a0969e609dc3bcbc884e3064315f870206ce631ef1ef322dfad72b36da2dbd813028e092375aebf0fdd394da1b1ac0aa54866d77d4b26802fb46feae9072b56aa87a579f28228aa40643d77dc2fca9031d778980772b458c", 0xf8, 0x8, 0x3}], 0x2a0000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) unshare(0x40000000) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0) syz_clone(0xa800000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ailed: -22 [ 1126.355498][T12007] ath6kl: Failed to read usb control message: -71 [ 1126.365229][T12007] ath6kl: Unable to read the bmi data from the device: -71 [ 1126.372630][T12007] ath6kl: Unable to recv target info: -71 [ 1126.395467][T12007] ath6kl: Failed to init ath6kl core: -71 [ 1126.402288][T12007] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1126.491953][T12007] usb 8-1: USB disconnect, device number 20 [ 1132.381737][T15678] netlink: 'syz.2.2067': attribute type 12 has an invalid length. [ 1132.810835][T15681] afs: Unknown parameter '#7dyn' [ 1132.818524][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2068'. [ 1133.623795][ T30] audit: type=1400 audit(1768573560.772:1249): avc: denied { create } for pid=15682 comm="syz.8.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1134.234365][ T30] audit: type=1400 audit(1768573561.072:1250): avc: denied { ioctl } for pid=15690 comm="syz.5.2071" path="socket:[45200]" dev="sockfs" ino=45200 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1134.648692][ T5889] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1135.068403][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.079812][ T5889] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1135.099708][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1135.115269][ T5889] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1135.248790][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.278592][ T5889] usb 3-1: config 0 descriptor?? [ 1135.293300][ T5889] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1137.323164][T15724] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1137.595249][T15724] Error validating options; rc = [-22] [ 1138.309541][ T6437] usb 3-1: USB disconnect, device number 21 [ 1138.943618][T15739] xt_ecn: cannot match TCP bits for non-tcp packets [ 1139.107716][ T30] audit: type=1400 audit(1768573565.814:1251): avc: denied { bind } for pid=15737 comm="syz.6.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1139.504548][ T30] audit: type=1400 audit(1768573566.123:1252): avc: denied { shutdown } for pid=15712 comm="syz.7.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1140.036870][ T5925] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1140.303903][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 1140.310829][ T5925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.738887][ T5925] usb 7-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 1140.748788][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.757125][ T5925] usb 7-1: Product: syz [ 1140.761730][ T5925] usb 7-1: Manufacturer: syz [ 1140.767040][ T5925] usb 7-1: SerialNumber: syz [ 1140.799458][ T5925] usb 7-1: config 0 descriptor?? [ 1140.895217][ T5925] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench found [ 1140.909309][ T5925] usb 7-1: selecting invalid altsetting 1 [ 1140.921423][ T5925] snd_usb_variax 7-1:0.0: set_interface failed [ 1140.934366][ T5925] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench now disconnected [ 1141.010023][T15761] can0: slcan on ttyS3. [ 1141.429666][ T5925] snd_usb_variax 7-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 1141.467446][T15757] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2085'. [ 1141.838635][T15761] can0 (unregistered): slcan off ttyS3. [ 1142.158858][T15767] ceph: No mds server is up or the cluster is laggy [ 1142.174759][T15770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1142.232749][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 1142.239123][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 1144.794118][ T5889] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1144.977064][ T5889] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1145.020435][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.061116][ T5889] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1145.310876][ T5889] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1145.451478][ T5889] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1145.467435][ T5889] usb 3-1: Manufacturer: syz [ 1145.476780][ T5889] usb 3-1: config 0 descriptor?? [ 1145.918128][T15805] openvswitch: netlink: IP tunnel dst address not specified [ 1145.931501][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2094'. [ 1145.945075][T15805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15805 comm=syz.8.2094 [ 1145.970421][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2094'. [ 1145.986538][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2094'. [ 1146.199356][ T90] usb 7-1: USB disconnect, device number 9 [ 1146.915364][ T5961] usb 3-1: USB disconnect, device number 22 [ 1148.252052][T15834] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2100'. [ 1149.444342][T15844] ubi: mtd0 is already attached to ubi31 [ 1150.571661][T15864] ip6t_srh: unknown srh match flags FF3F [ 1150.784650][T15871] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2103'. [ 1154.792399][ T30] audit: type=1326 audit(1768573580.622:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.6.2115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5fcd8f749 code=0x0 [ 1155.889006][ T30] audit: type=1326 audit(1768573581.024:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.6.2115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5fcd8f749 code=0x0 [ 1156.508063][T15938] Device name cannot be null; rc = [-22] [ 1156.551979][ T30] audit: type=1400 audit(1768573582.231:1255): avc: denied { audit_write } for pid=15930 comm="syz.7.2116" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1158.199983][ T5961] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1158.747049][ T5961] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1158.758882][ T5961] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1158.780208][ T5961] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1158.877639][ T5961] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1158.892964][ T5961] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1158.916244][ T5961] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1158.936882][ T5961] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1158.963208][ T5961] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1158.974993][ T5961] usb 8-1: Product: syz [ 1158.999879][ T5961] usb 8-1: Manufacturer: syz [ 1159.025556][T15949] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1159.079435][ T5961] cdc_wdm 8-1:1.0: skipping garbage [ 1159.092519][ T5961] cdc_wdm 8-1:1.0: skipping garbage [ 1159.229691][ T5961] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1159.707397][ T5961] cdc_wdm 8-1:1.0: Unknown control protocol [ 1159.784690][ T30] audit: type=1400 audit(1768573585.299:1256): avc: denied { read write } for pid=15948 comm="syz.7.2120" name="cdc-wdm0" dev="devtmpfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1159.812401][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.819197][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.826435][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.833010][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.839232][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.845818][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.852266][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.858839][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.865094][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.871681][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.877930][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.884494][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.890737][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.897298][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.903638][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.910197][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.916451][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.923017][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.929251][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1159.935841][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1159.943585][ T30] audit: type=1400 audit(1768573585.299:1257): avc: denied { map } for pid=15977 comm="syz.6.2126" path="socket:[45788]" dev="sockfs" ino=45788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1159.967838][ T30] audit: type=1400 audit(1768573585.299:1258): avc: denied { read accept } for pid=15977 comm="syz.6.2126" path="socket:[45788]" dev="sockfs" ino=45788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1160.037327][ T30] audit: type=1400 audit(1768573585.317:1259): avc: denied { open } for pid=15948 comm="syz.7.2120" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1160.417295][ T5924] usb 8-1: USB disconnect, device number 21 [ 1160.417345][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1162.408221][ T30] audit: type=1400 audit(1768573587.749:1260): avc: denied { setcheckreqprot } for pid=16006 comm="syz.7.2131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1163.863239][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 1163.884082][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 1163.905838][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 1163.949043][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 1164.453905][T16038] syz_tun: left promiscuous mode [ 1164.460385][T16038] bridge0: port 3(gretap0) entered blocking state [ 1164.466897][T16038] bridge0: port 3(gretap0) entered forwarding state [ 1164.473631][T16038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.480686][T16038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.487986][T16038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.495021][T16038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.534093][T16038] 8021q: adding VLAN 0 to HW filter on device .` [ 1164.625904][T16038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1166.763747][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2149'. [ 1166.780710][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2149'. [ 1166.820696][ T1082] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.835173][ T1082] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.349310][ T1082] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.360201][ T1082] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.641492][T16106] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1175.556182][T16120] Process accounting resumed [ 1176.081438][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2153'. [ 1177.864645][T16150] /dev/nullb0: Can't lookup blockdev [ 1178.926350][T16173] batman_adv: batadv0: Adding interface: gretap1 [ 1178.932894][T16173] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.958546][T16173] batman_adv: batadv0: Interface activated: gretap1 [ 1179.656402][ T5961] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1180.156745][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.167093][ T5961] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1180.201705][ T5961] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1180.226883][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.250870][ T5961] usb 3-1: config 0 descriptor?? [ 1180.852370][ T5961] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1180.870112][ T5961] dvb-usb: bulk message failed: -22 (3/0) [ 1180.890055][ T5961] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1180.929021][ T5961] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1180.978507][ T5961] usb 3-1: media controller created [ 1181.193241][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1181.623455][ T5961] dvb-usb: bulk message failed: -22 (6/0) [ 1181.743103][ T5961] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1181.809802][ T5961] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 1181.868477][ T5961] dvb-usb: schedule remote query interval to 150 msecs. [ 1181.888867][ T5961] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1182.054281][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 1182.065206][ T5961] dvb-usb: error while querying for an remote control event. [ 1182.253777][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 1182.303688][ T5961] dvb-usb: error while querying for an remote control event. [ 1182.425992][ T5882] usb 3-1: USB disconnect, device number 23 [ 1182.483139][ T5882] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1182.632994][T16200] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1182.654961][T16198] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1187.381360][ T30] audit: type=1400 audit(1768573610.882:1261): avc: denied { watch_sb } for pid=16237 comm="syz.5.2181" path="/341/file0" dev="tmpfs" ino=1830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1187.591532][T16249] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1187.600495][T16249] team0: Port device batadv1 added [ 1187.690344][T16251] 9p: Bad value for 'rfdno' [ 1188.153201][T16254] hub 9-0:1.0: USB hub found [ 1188.187242][T16254] hub 9-0:1.0: 1 port detected [ 1189.116224][ T30] audit: type=1326 audit(1768573612.706:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017718f749 code=0x7ffc0000 [ 1189.148847][ T30] audit: type=1326 audit(1768573612.715:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017718f749 code=0x7ffc0000 [ 1189.304399][ T30] audit: type=1326 audit(1768573612.715:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f017718f749 code=0x7ffc0000 [ 1189.428871][ T30] audit: type=1326 audit(1768573612.715:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017718f749 code=0x7ffc0000 [ 1189.641235][ T30] audit: type=1326 audit(1768573612.715:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017718f749 code=0x7ffc0000 [ 1189.762223][ T30] audit: type=1326 audit(1768573612.715:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f017718f749 code=0x7ffc0000 [ 1189.831045][ T30] audit: type=1400 audit(1768573612.715:1268): avc: denied { mount } for pid=16267 comm="syz.2.2186" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1189.996707][ T30] audit: type=1326 audit(1768573612.715:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017718f749 code=0x7ffc0000 [ 1190.058548][ T30] audit: type=1326 audit(1768573612.715:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017718f749 code=0x7ffc0000 [ 1191.356596][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1192.753429][T16303] team_slave_0: entered promiscuous mode [ 1192.759737][T16303] team_slave_1: entered promiscuous mode [ 1193.531083][T16307] pimreg3: entered allmulticast mode [ 1195.994679][T16320] syz.2.2199 (16320): drop_caches: 1 [ 1197.335195][ T5882] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1197.669719][ T5882] usb 9-1: Using ep0 maxpacket: 32 [ 1197.688150][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.042978][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.077775][ T5882] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1198.140656][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.170685][ T5882] usb 9-1: config 0 descriptor?? [ 1198.420655][T16334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.430940][T16334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.436046][ T5882] usbhid 9-1:0.0: can't add hid device: -71 [ 1200.457743][ T5882] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1200.483432][ T5882] usb 9-1: USB disconnect, device number 2 [ 1204.056001][T16419] openvswitch: netlink: Actions may not be safe on all matching packets [ 1204.415647][ T5961] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1204.566809][ T5961] usb 9-1: device descriptor read/64, error -71 [ 1205.480940][ T5961] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1205.762388][ T5961] usb 9-1: device descriptor read/64, error -71 [ 1206.376093][ T5961] usb usb9-port1: attempt power cycle [ 1206.709343][T16421] fuse: Bad value for 'fd' [ 1206.768033][ T5961] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1206.836715][T16452] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1206.847191][T16452] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1207.438720][ T5961] usb 9-1: device descriptor read/8, error -71 [ 1207.858687][ T5882] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1208.557010][ T5882] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1208.587066][ T5882] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1208.622940][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1208.658813][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1208.702145][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1208.771595][ T5882] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1208.787802][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1208.806644][ T5882] usb 7-1: Product: syz [ 1208.810872][ T5882] usb 7-1: Manufacturer: syz [ 1208.873220][ T5882] cdc_wdm 7-1:1.0: skipping garbage [ 1209.002213][ T5882] cdc_wdm 7-1:1.0: skipping garbage [ 1209.008912][ T5882] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1209.015334][ T5882] cdc_wdm 7-1:1.0: Unknown control protocol [ 1210.475851][ C0] wdm_int_callback: 2107 callbacks suppressed [ 1210.475881][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1210.488554][ C0] wdm_int_callback: 2107 callbacks suppressed [ 1210.488569][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1210.503695][ T5925] usb 7-1: USB disconnect, device number 10 [ 1210.505001][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1210.516186][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1210.522228][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1212.647184][ T5961] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1213.335972][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1213.335992][ T30] audit: type=1400 audit(1768573635.389:1292): avc: denied { append } for pid=16505 comm="syz.6.2235" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1213.371148][ T30] audit: type=1400 audit(1768573635.389:1293): avc: denied { open } for pid=16505 comm="syz.6.2235" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1213.417762][ T5961] usb 9-1: Using ep0 maxpacket: 8 [ 1213.440647][ T5961] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1213.450140][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.466876][ T5961] usb 9-1: Product: syz [ 1213.476858][ T5961] usb 9-1: Manufacturer: syz [ 1213.565859][ T5961] usb 9-1: SerialNumber: syz [ 1213.574096][ T5961] usb 9-1: config 0 descriptor?? [ 1213.585234][ T5961] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1213.597613][ T5961] dvb-usb: bulk message failed: -22 (2/0) [ 1213.620762][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1213.631350][ T5961] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1213.640248][ T5961] usb 9-1: media controller created [ 1213.740645][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1213.844765][T16511] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1213.950554][T16511] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1213.962270][T16511] overlayfs: failed to look up (tracing) for ino (-66) [ 1214.879625][T16496] cxusb: i2c rd: len=110 is too big! [ 1214.879625][T16496] [ 1215.027770][ T30] audit: type=1400 audit(1768573636.961:1294): avc: denied { ioctl } for pid=16508 comm="syz.7.2236" path="socket:[49925]" dev="sockfs" ino=49925 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1215.374407][ T5961] cxusb: set interface failed [ 1215.379166][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 1215.528790][ T5961] DVB: Unable to find symbol mt352_attach() [ 1215.536601][ T5961] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1215.841442][ T5961] rc_core: IR keymap rc-dvico-portable not found [ 1215.853779][ T5961] Registered IR keymap rc-empty [ 1215.860856][ T5961] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1216.271808][ T5961] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input16 [ 1216.287236][ T5961] dvb-usb: schedule remote query interval to 100 msecs. [ 1216.296477][ T5961] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1216.413555][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 1216.538609][ T90] dvb-usb: bulk message failed: -22 (1/0) [ 1216.544932][ T5961] usb 9-1: USB disconnect, device number 7 [ 1217.231630][T16547] openvswitch: netlink: IP tunnel dst address not specified [ 1217.248545][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1217.450610][ T5961] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1217.572389][T16550] overlayfs: failed to clone upperpath [ 1217.888877][T16552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16552 comm=syz.6.2241 [ 1218.138387][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1218.139082][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2241'. [ 1219.436341][ T5889] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1219.573917][ T5961] libceph: connect (1)[c::]:6789 error -101 [ 1219.583536][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 1219.617416][ T5889] usb 9-1: Using ep0 maxpacket: 32 [ 1219.625403][ T5889] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1219.667581][ T5889] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1219.763618][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1219.793412][ T5889] usb 9-1: Product: syz [ 1219.809953][ T5889] usb 9-1: Manufacturer: syz [ 1219.819795][ T5889] usb 9-1: SerialNumber: syz [ 1219.863585][ T5961] libceph: connect (1)[c::]:6789 error -101 [ 1219.872614][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 1220.685077][T16583] ptrace attach of "./syz-executor exec"[16582] was attempted by "./syz-executor exec"[16583] [ 1221.100311][T16581] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1221.129150][ T5961] libceph: connect (1)[c::]:6789 error -101 [ 1221.136644][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 1221.232826][T16571] ceph: No mds server is up or the cluster is laggy [ 1221.262650][ T5889] usb 9-1: config 0 descriptor?? [ 1221.278228][T16567] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1221.989713][T16593] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2251'. [ 1222.868033][ T5925] usb 9-1: USB disconnect, device number 8 [ 1223.046306][T16567] team0 (unregistering): Port device team_slave_0 removed [ 1223.068969][T16567] team0 (unregistering): Port device team_slave_1 removed [ 1223.172124][ T30] audit: type=1400 audit(1768573644.584:1295): avc: denied { accept } for pid=16598 comm="syz.2.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1223.321694][T16608] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1223.626475][ T90] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1223.789829][ T90] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1223.798066][ T90] usb 3-1: config 0 has no interface number 0 [ 1223.804899][ T90] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1223.826614][ T90] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1223.859126][ T90] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1223.889985][ T90] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1223.899369][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.907632][ T90] usb 3-1: Product: syz [ 1223.915109][ T90] usb 3-1: Manufacturer: syz [ 1223.919776][ T90] usb 3-1: SerialNumber: syz [ 1223.959376][ T90] usb 3-1: config 0 descriptor?? [ 1223.966641][T16601] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1223.976619][ T90] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1223.988381][ T90] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1224.052864][ T90] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1225.073125][T16623] overlayfs: failed to resolve './bus': -2 [ 1226.422444][ T90] usb 3-1: USB disconnect, device number 24 [ 1226.511196][ T90] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1226.534787][ T90] cyberjack 3-1:0.69: device disconnected [ 1227.710310][ T30] audit: type=1400 audit(1768573648.803:1296): avc: denied { connect } for pid=16644 comm="syz.8.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1232.877931][T16702] /dev/nullb0: Can't open blockdev [ 1232.888361][T16702] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2276'. [ 1232.897392][T16702] openvswitch: netlink: Flow key attr not present in new flow. [ 1241.018943][T16781] orangefs_mount: mount request failed with -4 [ 1241.188098][T16795] fuse: Bad value for 'fd' [ 1242.701341][T16801] input: syz1 as /devices/virtual/input/input17 [ 1243.292476][T16809] pimreg3: entered allmulticast mode [ 1243.324772][ T30] audit: type=1400 audit(1768573663.348:1297): avc: denied { create } for pid=16803 comm="syz.8.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1243.791414][T16802] 9pnet_fd: p9_fd_create_tcp (16802): problem connecting socket to 127.0.0.1 [ 1243.814707][T16802] 9pnet_fd: p9_fd_create_tcp (16802): problem connecting socket to 127.0.0.1 [ 1244.096085][T16820] netlink: 'syz.7.2299': attribute type 7 has an invalid length. [ 1244.103981][T16820] netlink: 'syz.7.2299': attribute type 8 has an invalid length. [ 1244.155480][ T30] audit: type=1400 audit(1768573664.153:1298): avc: denied { connect } for pid=16805 comm="syz.7.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1244.198435][T16802] 9pnet_fd: p9_fd_create_tcp (16802): problem connecting socket to 127.0.0.1 [ 1244.246132][T16802] 9pnet_fd: p9_fd_create_tcp (16802): problem connecting socket to 127.0.0.1 [ 1244.289009][T16802] 9pnet_fd: p9_fd_create_tcp (16802): problem connecting socket to 127.0.0.1 [ 1244.332477][T16826] PKCS8: Unsupported PKCS#8 version [ 1244.617918][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2301'. [ 1244.880191][ T30] audit: type=1400 audit(1768573664.892:1299): avc: denied { write } for pid=16812 comm="syz.8.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1247.231403][ T5924] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1248.628763][T16872] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1251.065499][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2318'. [ 1251.588158][T16900] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2319'. [ 1252.629313][T16911] lo speed is unknown, defaulting to 1000 [ 1252.635825][T16911] lo speed is unknown, defaulting to 1000 [ 1254.620209][ T5924] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1255.131644][ T5924] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1255.140037][ T5924] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.334746][ T5924] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1255.382205][ T5924] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1255.708152][ T5924] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1255.734083][ T5924] usb 8-1: Manufacturer: syz [ 1255.749232][ T5924] usb 8-1: config 0 descriptor?? [ 1256.918482][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1256.995619][T16947] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1257.125049][ T5961] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1257.194915][ T5924] usb 8-1: USB disconnect, device number 22 [ 1257.553154][ T5961] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1258.660519][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.668523][ T5961] usb 7-1: Product: syz [ 1258.691779][ T5961] usb 7-1: Manufacturer: syz [ 1258.696583][ T5961] usb 7-1: SerialNumber: syz [ 1259.266228][ T5961] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1259.408273][ T5882] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1259.453000][T16963] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1260.774393][ T5882] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1260.792141][ T5882] ath9k_htc: Failed to initialize the device [ 1260.871918][ T5882] usb 7-1: ath9k_htc: USB layer deinitialized [ 1261.198782][ T5961] usb 7-1: USB disconnect, device number 11 [ 1263.437348][T16993] tipc: New replicast peer: 255.255.255.255 [ 1263.444173][T16993] tipc: Enabled bearer , priority 10 [ 1263.457625][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2340'. [ 1263.466787][T16993] tipc: Disabling bearer [ 1264.389652][T16992] lo speed is unknown, defaulting to 1000 [ 1264.407718][T16992] lo speed is unknown, defaulting to 1000 [ 1265.653573][T16995] delete_channel: no stack [ 1266.681985][T17014] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1267.475811][T11549] Bluetooth: hci0: Frame reassembly failed (-90) [ 1267.487580][T11549] Bluetooth: hci0: Frame reassembly failed (-84) [ 1269.656128][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1271.626706][T17063] tipc: Started in network mode [ 1271.631986][T17063] tipc: Node identity 4, cluster identity 4711 [ 1271.638306][T17063] tipc: Node number set to 4 [ 1272.264684][ T6437] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1272.543398][T17073] 9p: Bad value for 'rfdno' [ 1272.933039][ T6437] usb 9-1: config 0 has an invalid interface number: 69 but max is 0 [ 1272.942380][ T6437] usb 9-1: config 0 has no interface number 0 [ 1272.949319][ T6437] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1272.979216][ T6437] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1273.107242][ T6437] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1273.691409][ T6437] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1273.828782][ T6437] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.850931][ T6437] usb 9-1: Product: syz [ 1273.860290][ T6437] usb 9-1: Manufacturer: syz [ 1273.870933][ T6437] usb 9-1: SerialNumber: syz [ 1274.416920][ T6437] usb 9-1: config 0 descriptor?? [ 1274.685229][T17082] delete_channel: no stack [ 1275.145187][T17092] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2363'. [ 1275.366875][ T6437] usb 9-1: can't set config #0, error -71 [ 1275.439073][T17094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17094 comm=syz.7.2363 [ 1275.463827][ T6437] usb 9-1: USB disconnect, device number 10 [ 1276.024342][T17091] netlink: 'syz.7.2363': attribute type 1 has an invalid length. [ 1276.032136][T17091] netlink: 'syz.7.2363': attribute type 2 has an invalid length. [ 1279.228110][ T30] audit: type=1400 audit(1768573696.602:1300): avc: denied { read } for pid=17125 comm="syz.2.2370" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1279.273766][ T30] audit: type=1400 audit(1768573696.602:1301): avc: denied { open } for pid=17125 comm="syz.2.2370" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1279.308357][ T30] audit: type=1400 audit(1768573696.611:1302): avc: denied { ioctl } for pid=17125 comm="syz.2.2370" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1282.561446][T17169] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿtmpfs' [ 1282.767211][T17169] futex_wake_op: syz.7.2378 tries to shift op by 144; fix this program [ 1286.629037][T17213] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2386'. [ 1286.753767][T17213] tipc: Started in network mode [ 1286.758977][T17213] tipc: Node identity ac1414aa, cluster identity 4711 [ 1286.767583][T17213] tipc: Enabled bearer , priority 10 [ 1287.037315][ T30] audit: type=1400 audit(1768573704.328:1303): avc: denied { write } for pid=17217 comm="syz.8.2388" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1288.071427][ T6437] tipc: Node number set to 2886997162 [ 1288.737039][ T30] audit: type=1400 audit(1768573705.919:1304): avc: denied { unmount } for pid=11882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1290.332774][T17248] tipc: Enabling of bearer rejected, failed to enable media [ 1290.493616][T17251] binder: 17243:17251 ioctl c0306201 0 returned -14 [ 1290.522935][T17251] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2395'. [ 1290.696732][ T30] audit: type=1400 audit(1768573707.584:1305): avc: denied { nlmsg_write } for pid=17243 comm="syz.2.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1291.904219][ T30] audit: type=1400 audit(1768573708.874:1306): avc: denied { map } for pid=17263 comm="syz.8.2400" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1292.196021][ T30] audit: type=1400 audit(1768573708.902:1307): avc: denied { execute } for pid=17263 comm="syz.8.2400" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1292.228617][T17268] pimreg3: entered allmulticast mode [ 1292.912663][ T30] audit: type=1400 audit(1768573708.902:1308): avc: denied { map } for pid=17263 comm="syz.8.2400" path="socket:[53740]" dev="sockfs" ino=53740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1293.019482][T17274] lo speed is unknown, defaulting to 1000 [ 1293.026333][T17274] lo speed is unknown, defaulting to 1000 [ 1294.040961][T17282] overlayfs: failed to get inode (-116) [ 1294.050017][T17282] overlayfs: failed to get inode (-116) [ 1296.101698][T17303] netlink: 'syz.7.2408': attribute type 4 has an invalid length. [ 1296.381546][ T5924] lo speed is unknown, defaulting to 1000 [ 1296.796795][ T5924] syz0: Port: 1 Link DOWN [ 1298.124823][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 1299.269625][T17311] lo speed is unknown, defaulting to 1000 [ 1299.290055][T17311] lo speed is unknown, defaulting to 1000 [ 1299.675418][T17336] netlink: 'syz.6.2415': attribute type 10 has an invalid length. [ 1299.690450][T17336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.708384][T17336] bond0: (slave team0): Enslaving as an active interface with an up link [ 1299.754772][T11547] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 1300.593663][T17343] lo speed is unknown, defaulting to 1000 [ 1300.600149][T17343] lo speed is unknown, defaulting to 1000 [ 1300.764301][T17332] delete_channel: no stack [ 1302.110271][T17358] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1302.583239][ T30] audit: type=1804 audit(1768573718.864:1309): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2418" name="/newroot/210/file0" dev="tmpfs" ino=1155 res=1 errno=0 [ 1302.637738][T17350] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 1302.649613][T17350] ref_ctr increment failed for inode: 0x483 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e7b0000 [ 1302.727556][T17362] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 1302.760968][T17362] ref_ctr decrement failed for inode: 0x483 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e7b0000 [ 1302.779444][T17362] uprobe: syz.8.2418:17362 failed to unregister, leaking uprobe [ 1305.614688][T17386] overlayfs: failed to resolve './bus': -2 [ 1306.134827][T17392] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1307.162644][T17411] overlayfs: failed to resolve './file0': -2 [ 1307.328651][T17412] netlink: 'syz.8.2432': attribute type 1 has an invalid length. [ 1307.707275][T17412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1311.056670][T17433] lo speed is unknown, defaulting to 1000 [ 1311.063752][T17433] lo speed is unknown, defaulting to 1000 [ 1314.029635][ T6437] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1314.332919][ T6437] usb 8-1: Using ep0 maxpacket: 8 [ 1314.386921][ T6437] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1314.995986][ T6437] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.023186][ T6437] usb 8-1: Product: syz [ 1315.027600][ T6437] usb 8-1: Manufacturer: syz [ 1315.063574][ T6437] usb 8-1: SerialNumber: syz [ 1315.089670][ T6437] usb 8-1: config 0 descriptor?? [ 1315.174100][T17483] lo: entered allmulticast mode [ 1315.188877][T17483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1315.526337][ T6437] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1315.549298][T17483] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1315.581615][ T6437] gspca_sq930x: reg_r 001f failed -71 [ 1315.621269][ T6437] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 1315.653705][T17483] block device autoloading is deprecated and will be removed. [ 1315.677147][ T6437] usb 8-1: USB disconnect, device number 23 [ 1315.985630][T17492] pimreg3: entered allmulticast mode [ 1316.779382][T17499] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2452'. [ 1318.120441][T17513] gfs2: gfs2 mount does not exist [ 1320.389687][T17543] isofs_fill_super: bread failed, dev=nbd7, iso_blknum=16, block=32 [ 1322.620397][ T30] audit: type=1400 audit(1768573737.413:1310): avc: denied { shutdown } for pid=17554 comm="syz.8.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1322.623124][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1323.005401][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2468'. [ 1323.018418][T17565] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1323.301562][T17570] UHID_CREATE from different security context by process 960 (syz.8.2470), this is not allowed. [ 1323.848282][T17574] overlayfs: failed to resolve './bus': -2 [ 1325.599731][T17585] netlink: 'syz.5.2474': attribute type 1 has an invalid length. [ 1326.326259][T17585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.550377][T17590] bond0: (slave ip6erspan0): making interface the new active one [ 1327.563674][ T5938] kworker/0:8 (5938) used greatest stack depth: 18088 bytes left [ 1327.744870][T17590] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1329.138643][T17608] ubi: mtd0 is already attached to ubi31 [ 1329.945839][ T30] audit: type=1400 audit(1768573744.466:1311): avc: denied { accept } for pid=17609 comm="syz.6.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1330.280520][T17626] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1330.813019][T17630] overlayfs: failed to resolve './bus': -2 [ 1332.108336][T17645] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1333.242137][T17654] sctp: [Deprecated]: syz.2.2489 (pid 17654) Use of int in max_burst socket option deprecated. [ 1333.242137][T17654] Use struct sctp_assoc_value instead [ 1335.372616][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2484'. [ 1336.959743][ T30] audit: type=1400 audit(1768573750.668:1312): avc: denied { listen } for pid=17685 comm="syz.6.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1339.137251][T17699] batman_adv: batadv0: Adding interface: gretap2 [ 1339.144225][T17699] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.170726][T17699] batman_adv: batadv0: Interface activated: gretap2 [ 1339.361358][T17709] overlayfs: failed to resolve './bus': -2 [ 1339.851738][T17715] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1340.414681][T17722] bond0: entered promiscuous mode [ 1340.421682][T17722] bond_slave_0: entered promiscuous mode [ 1340.443262][T17722] bond_slave_1: entered promiscuous mode [ 1340.448996][T17722] team0: entered promiscuous mode [ 1340.537500][T17722] team_slave_0: entered promiscuous mode [ 1340.554659][T17722] team_slave_1: entered promiscuous mode [ 1340.562088][T17722] batadv1: entered promiscuous mode [ 1340.691762][T17722] batadv0: entered promiscuous mode [ 1340.793603][T17722] debugfs: 'hsr1' already exists in 'hsr' [ 1340.831847][T17722] Cannot create hsr debugfs directory [ 1341.117243][T17722] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1341.158976][T17722] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1341.306718][T17722] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1341.352553][T17722] bond0: left promiscuous mode [ 1341.373346][T17722] bond_slave_0: left promiscuous mode [ 1341.394322][T17722] bond_slave_1: left promiscuous mode [ 1341.454477][T17722] team0: left promiscuous mode [ 1341.610878][T17722] team_slave_0: left promiscuous mode [ 1341.626663][T17722] team_slave_1: left promiscuous mode [ 1341.640287][T17722] batadv1: left promiscuous mode [ 1341.673428][T17722] batadv0: left promiscuous mode [ 1342.119454][T17740] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2509'. [ 1342.129842][T17740] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2509'. [ 1343.178725][T17746] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1343.188022][T17746] batadv1: entered promiscuous mode [ 1343.195488][T17746] team0: Port device batadv1 added [ 1343.280298][T17746] hub 9-0:1.0: USB hub found [ 1343.286858][T17746] hub 9-0:1.0: 1 port detected [ 1344.421074][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2514'. [ 1346.832669][T17774] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1353.579895][T17840] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2530'. [ 1356.311389][ T30] audit: type=1400 audit(1768573768.768:1313): avc: denied { map } for pid=17876 comm="syz.2.2538" path="socket:[55751]" dev="sockfs" ino=55751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1358.451418][T17900] pimreg3: entered allmulticast mode [ 1360.191462][T17922] PKCS8: Unsupported PKCS#8 version [ 1363.575189][ T30] audit: type=1400 audit(1768573775.512:1314): avc: denied { create } for pid=17948 comm="syz.8.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1363.596225][ T30] audit: type=1400 audit(1768573775.512:1315): avc: denied { connect } for pid=17948 comm="syz.8.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1363.617250][ T30] audit: type=1400 audit(1768573775.943:1316): avc: denied { write } for pid=17948 comm="syz.8.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1365.055753][T17971] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2559'. [ 1365.151744][T17978] overlayfs: failed to resolve './bus': -2 [ 1366.156662][T17992] netlink: 'syz.5.2563': attribute type 4 has an invalid length. [ 1366.164550][T17992] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2563'. [ 1366.205246][T17992] delete_channel: no stack [ 1366.239725][ T30] audit: type=1400 audit(1768573778.328:1317): avc: denied { getopt } for pid=17988 comm="syz.5.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1366.289343][T17990] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2562'. [ 1368.262064][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2575'. [ 1369.409706][T18026] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2569'. [ 1369.450755][T18026] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2569'. [ 1370.553756][T18040] overlayfs: failed to resolve './bus': -2 [ 1371.078110][T18043] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1372.877287][T18060] overlayfs: failed to get inode (-116) [ 1372.884541][T18060] overlayfs: failed to get inode (-116) [ 1372.893742][T18060] overlayfs: failed to get inode (-116) [ 1372.899939][T18060] overlayfs: failed to get inode (-116) [ 1374.002819][T18074] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2581'. [ 1375.350908][T18079] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1376.501165][T18095] overlayfs: failed to resolve './bus': -2 [ 1377.777598][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2589'. [ 1378.495573][T18119] bridge2: entered promiscuous mode [ 1378.500911][T18119] bridge2: entered allmulticast mode [ 1380.170074][ T30] audit: type=1400 audit(1768573791.442:1318): avc: denied { read write } for pid=18129 comm="syz.2.2595" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1380.194566][T18128] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1380.524606][ T30] audit: type=1400 audit(1768573791.676:1319): avc: denied { associate } for pid=18142 comm="syz.8.2594" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1381.082559][T18145] netlink: 'syz.7.2598': attribute type 11 has an invalid length. [ 1381.090529][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2598'. [ 1383.803662][T18166] netlink: 182 bytes leftover after parsing attributes in process `syz.7.2604'. [ 1384.685137][T18178] netlink: 'syz.8.2603': attribute type 1 has an invalid length. [ 1385.421703][T18178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1385.506551][T18185] bond2: (slave ip6erspan0): making interface the new active one [ 1385.668877][T18185] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1385.998977][T18197] overlayfs: failed to clone upperpath [ 1386.934366][T18202] overlayfs: failed to resolve './bus': -2 [ 1388.675600][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1389.291342][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2623'. [ 1391.404959][ T5925] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1391.620862][ T5925] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1391.657788][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.696823][ T5925] usb 3-1: config 0 descriptor?? [ 1391.766404][T18242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2620'. [ 1391.896633][ T5882] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1392.174719][T18237] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1392.566468][ T5882] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1392.585922][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.612472][ T5882] usb 8-1: Product: syz [ 1392.627990][ T5882] usb 8-1: Manufacturer: syz [ 1392.639027][ T5882] usb 8-1: SerialNumber: syz [ 1392.662963][ T5882] usb 8-1: config 0 descriptor?? [ 1392.962740][ T5882] usb 8-1: USB disconnect, device number 24 [ 1393.103903][T18260] overlayfs: failed to resolve './bus': -2 [ 1393.533385][T18241] udevd[18241]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.550697][ T30] audit: type=1400 audit(1768573803.948:1320): avc: denied { read write } for pid=18243 comm="syz.7.2621" dev="sockfs" ino=58728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1393.559614][T18245] netlink: 'syz.7.2621': attribute type 1 has an invalid length. [ 1393.657620][T18245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1393.762400][T18264] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1393.795198][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2621'. [ 1394.095884][ T5925] ath6kl: Failed to read usb control message: -71 [ 1394.102667][ T5925] ath6kl: Unable to read the bmi data from the device: -71 [ 1394.110727][ T5925] ath6kl: Unable to recv target info: -71 [ 1394.146658][ T5925] ath6kl: Failed to init ath6kl core: -71 [ 1394.265530][ T5925] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1394.278641][ T5925] usb 3-1: USB disconnect, device number 25 [ 1394.609095][T18275] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1394.987250][T18277] 9pnet_virtio: no channels available for device syz [ 1401.367554][T18245] bond1 (unregistering): (slave veth5): Releasing active interface [ 1401.399103][T18245] bond1 (unregistering): Released all slaves [ 1401.464855][ T5925] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1401.903996][ T5925] usb 7-1: device descriptor read/64, error -71 [ 1402.287613][T18330] overlayfs: failed to resolve './bus': -2 [ 1402.294001][ T5925] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1402.758605][ T30] audit: type=1400 audit(1768573812.236:1321): avc: denied { write } for pid=18325 comm="syz.7.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1403.072539][T18310] xt_TCPMSS: Only works on TCP SYN packets [ 1403.141683][ T5925] usb 7-1: device descriptor read/64, error -71 [ 1403.264492][T18338] overlayfs: failed to resolve './bus': -2 [ 1403.283750][ T5925] usb usb7-port1: attempt power cycle [ 1403.780251][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2642'. [ 1403.792107][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2642'. [ 1403.801456][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2642'. [ 1403.810811][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2642'. [ 1403.820597][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2642'. [ 1403.830512][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2642'. [ 1407.469158][T18378] macvlan2: entered promiscuous mode [ 1407.474794][T18378] bridge0: entered promiscuous mode [ 1410.464402][T18410] trusted_key: encrypted_key: insufficient parameters specified [ 1410.524760][T18412] netlink: 'syz.5.2657': attribute type 21 has an invalid length. [ 1411.052886][T18417] netlink: 'syz.8.2659': attribute type 4 has an invalid length. [ 1411.060847][T18417] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2659'. [ 1415.716819][T18465] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1415.759521][T18465] vxfs: WRONG superblock magic 00000000 at 1 [ 1415.768305][T18465] vxfs: WRONG superblock magic 00000000 at 8 [ 1415.774600][T18465] vxfs: can't find superblock. [ 1416.844732][T18473] 9p: Bad value for 'rfdno' [ 1417.829979][T18477] hub 9-0:1.0: USB hub found [ 1417.838509][T18477] hub 9-0:1.0: 1 port detected [ 1417.884714][T18484] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1421.386274][T18504] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1423.947737][ T30] audit: type=1400 audit(1768573832.263:1322): avc: denied { ioctl } for pid=18530 comm="syz.5.2686" path="socket:[59823]" dev="sockfs" ino=59823 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1428.024414][ T30] audit: type=1400 audit(1768573835.696:1323): avc: denied { read write } for pid=18562 comm="syz.2.2692" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1428.061836][ T30] audit: type=1400 audit(1768573835.724:1324): avc: denied { open } for pid=18562 comm="syz.2.2692" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1428.087416][ T30] audit: type=1400 audit(1768573835.733:1325): avc: denied { ioctl } for pid=18562 comm="syz.2.2692" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1430.471722][T18595] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2699'. [ 1431.180654][T18601] netlink: 'syz.8.2701': attribute type 10 has an invalid length. [ 1431.189234][T18601] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2701'. [ 1431.201976][T18601] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1431.319727][T18603] FAT-fs (loop11): unable to read boot sector [ 1435.450256][T18640] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1436.798098][T18660] lo speed is unknown, defaulting to 1000 [ 1436.804655][T18660] lo speed is unknown, defaulting to 1000 [ 1442.835213][T18712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2725'. [ 1447.712624][T18750] siw: device registration error -23 [ 1450.773604][T18778] netlink: 'syz.2.2739': attribute type 4 has an invalid length. [ 1450.928436][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2736'. [ 1450.937518][T18762] netlink: 'syz.8.2736': attribute type 1 has an invalid length. [ 1450.963427][T18762] netlink: 'syz.8.2736': attribute type 2 has an invalid length. [ 1451.819023][T18786] lo speed is unknown, defaulting to 1000 [ 1451.825535][T18786] lo speed is unknown, defaulting to 1000 [ 1452.604446][T18790] overlayfs: failed to get inode (-116) [ 1452.610264][T18790] overlayfs: failed to get inode (-116) [ 1452.623940][T18790] overlayfs: failed to get inode (-116) [ 1452.629799][T18790] overlayfs: failed to get inode (-116) [ 1453.940012][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1455.061119][ T5924] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1455.214513][T18825] IPVS: Unknown mcast interface: vcan0 [ 1455.603866][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 1455.611051][ T5924] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.656370][ T5924] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1455.678682][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.696884][ T5924] usb 7-1: config 0 descriptor?? [ 1455.727471][ T5924] hub 7-1:0.0: bad descriptor, ignoring hub [ 1455.751208][ T5924] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1455.983615][ T30] audit: type=1400 audit(1768573862.355:1326): avc: denied { shutdown } for pid=18808 comm="syz.6.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1457.970655][T18846] loop9: detected capacity change from 0 to 8 [ 1458.006110][T18846] Dev loop9: unable to read RDB block 8 [ 1458.012004][T18846] loop9: unable to read partition table [ 1458.025290][T18846] loop9: partition table beyond EOD, truncated [ 1458.031644][T18846] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿ„É) failed (rc=-5) [ 1458.428808][T18279] usb 7-1: USB disconnect, device number 15 [ 1458.890905][ T30] audit: type=1400 audit(1768573865.077:1327): avc: denied { bind } for pid=18855 comm="syz.8.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1459.465295][T18859] bridge0: entered allmulticast mode [ 1459.491423][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2757'. [ 1459.551764][T18859] bridge_slave_1: left allmulticast mode [ 1459.609218][T18859] bridge_slave_1: left promiscuous mode [ 1459.637284][T18859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.681952][T18859] bridge_slave_0: left allmulticast mode [ 1459.716517][T18859] bridge_slave_0: left promiscuous mode [ 1459.726432][T18866] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2760'. [ 1459.732170][T18859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.735880][T18866] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2760'. [ 1460.532748][T18859] bridge0 (unregistering): left promiscuous mode [ 1460.631695][T18859] bridge0 (unregistering): left allmulticast mode [ 1461.771391][T18885] lo speed is unknown, defaulting to 1000 [ 1461.777956][T18885] lo speed is unknown, defaulting to 1000 [ 1461.901247][T18882] vxcan1: entered promiscuous mode [ 1461.940122][T18882] team0: Device vxcan1 is of different type [ 1463.467238][T18904] netlink: 'syz.2.2765': attribute type 12 has an invalid length. [ 1464.495561][T18913] ªªªªªª: renamed from vlan0 [ 1466.248062][T18923] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2779'. [ 1466.285687][T18923] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2779'. [ 1466.335370][ T5925] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1466.551945][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 1466.566380][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1466.797077][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1467.370366][ T5925] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 1467.383126][ T5925] usb 7-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 1467.391593][ T5925] usb 7-1: Product: syz [ 1467.396153][ T5925] usb 7-1: Manufacturer: syz [ 1467.400866][ T5925] usb 7-1: SerialNumber: syz [ 1467.454938][ T5925] usb 7-1: config 0 descriptor?? [ 1467.486814][ T5925] usb 7-1: no audio or video endpoints found [ 1469.321534][ T5925] usb 7-1: USB disconnect, device number 16 [ 1470.132418][T18970] o2cb: This node has not been configured. [ 1470.138452][T18970] o2cb: Cluster check failed. Fix errors before retrying. [ 1470.145648][T18970] (syz.2.2778,18970,0):user_dlm_register:674 ERROR: status = -22 [ 1470.153452][T18970] (syz.2.2778,18970,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1470.966889][ T30] audit: type=1400 audit(1768573874.588:1328): avc: denied { add_name } for pid=18960 comm="syz.2.2778" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1471.709128][ T30] audit: type=1400 audit(1768573874.598:1329): avc: denied { create } for pid=18960 comm="syz.2.2778" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1471.730082][ T30] audit: type=1400 audit(1768573874.598:1330): avc: denied { associate } for pid=18960 comm="syz.2.2778" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1476.182042][T19003] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1476.387468][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1476.415353][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1476.427839][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1476.441468][T19019] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1476.498790][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1478.824312][T19047] overlayfs: failed to resolve './bus': -2 [ 1479.581333][T19058] netlink: 'syz.5.2800': attribute type 10 has an invalid length. [ 1479.589863][T19058] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2800'. [ 1479.781569][ T30] audit: type=1400 audit(1768573883.409:1331): avc: denied { relabelfrom } for pid=19049 comm="syz.5.2800" name="" dev="pipefs" ino=61895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1480.138790][T19058] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1480.147823][ T30] audit: type=1800 audit(1768573883.690:1332): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2801" name="bus" dev="overlay" ino=3240 res=0 errno=0 [ 1480.933775][ T30] audit: type=1400 audit(1768573884.700:1333): avc: denied { ioctl } for pid=19052 comm="syz.7.2798" path="socket:[62863]" dev="sockfs" ino=62863 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1482.434226][T19090] netlink: 'syz.8.2809': attribute type 2 has an invalid length. [ 1482.450656][T19090] netlink: 'syz.8.2809': attribute type 29 has an invalid length. [ 1483.675807][ T90] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1483.788699][ T5925] libceph: connect (1)[c::]:6789 error -13 [ 1483.796119][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 1483.835885][ T90] usb 7-1: Using ep0 maxpacket: 32 [ 1483.894355][T19109] ceph: No mds server is up or the cluster is laggy [ 1483.951459][ T90] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1485.024816][ T90] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1485.229073][ T90] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.262040][T19119] vxcan1: entered promiscuous mode [ 1485.281657][T19119] team0: Device vxcan1 is of different type [ 1485.298884][ T90] usb 7-1: Product: syz [ 1485.309660][ T90] usb 7-1: Manufacturer: syz [ 1485.336514][ T90] usb 7-1: SerialNumber: syz [ 1485.376487][ T90] usb 7-1: config 0 descriptor?? [ 1485.852048][ T90] gs_usb 7-1:0.0: Configuring for 256 interfaces [ 1485.869327][ T90] gs_usb 7-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 1485.877332][ T90] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 1486.079280][T19133] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1486.085826][T19133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1486.586726][T19133] vhci_hcd vhci_hcd.0: Device attached [ 1486.650258][T19138] gretap0: left allmulticast mode [ 1486.662997][T19138] gretap0: left promiscuous mode [ 1486.668406][T19138] bridge0: port 3(gretap0) entered disabled state [ 1486.786074][T19138] .`: (slave syz_tun): Releasing backup interface [ 1486.822080][T19138] batman_adv: batadv0: Interface deactivated: dummy0 [ 1486.837797][T19138] batman_adv: batadv0: Removing interface: dummy0 [ 1486.912891][T19138] bridge_slave_0: left allmulticast mode [ 1486.918946][T19138] bridge_slave_0: left promiscuous mode [ 1486.924741][T19138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.104501][ T977] usb 48-1: SetAddress Request (2) to port 0 [ 1487.110953][ T977] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1487.121297][T19134] vhci_hcd: connection closed [ 1487.121463][ T7994] vhci_hcd vhci_hcd.7: stop threads [ 1487.148606][T19138] bridge_slave_1: left allmulticast mode [ 1487.156573][ T7994] vhci_hcd vhci_hcd.7: release socket [ 1487.157286][T19138] bridge_slave_1: left promiscuous mode [ 1487.175421][T19138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.187880][T19138] .`: (slave bond_slave_0): Releasing backup interface [ 1487.200708][T19138] .`: (slave bond_slave_1): Releasing backup interface [ 1487.238528][T19122] usb 7-1: USB disconnect, device number 17 [ 1487.252652][ T7994] vhci_hcd vhci_hcd.7: disconnect device [ 1487.308639][T19138] team_slave_0: left promiscuous mode [ 1487.318873][T19152] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2821'. [ 1487.330878][T19152] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2821'. [ 1487.394702][T19138] team0: Port device team_slave_0 removed [ 1487.452616][T19138] team_slave_1: left promiscuous mode [ 1487.635072][T19138] team0: Port device team_slave_1 removed [ 1487.665282][T19138] .`: (slave batadv_slave_0): Releasing backup interface [ 1487.734831][T19138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.748723][T19138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.852862][T19138] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1487.870755][T19141] team0: Mode changed to "broadcast" [ 1487.941023][ T5924] syz2: Port: 1 Link DOWN [ 1488.782992][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2826'. [ 1489.213569][T19176] openvswitch: netlink: IP tunnel dst address not specified [ 1489.235103][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2827'. [ 1491.305610][T19199] syz_tun: entered allmulticast mode [ 1491.751506][T19202] netlink: 'syz.8.2832': attribute type 1 has an invalid length. [ 1491.804788][T19202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1491.875734][T19211] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1492.116567][T19211] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2832'. [ 1492.259854][T19211] bond3: (slave dummy0): making interface the new active one [ 1492.300680][T19211] dummy0: entered promiscuous mode [ 1492.347398][T19211] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1492.506063][ T977] usb 48-1: device descriptor read/8, error -110 [ 1492.775499][T19202] bond3 (unregistering): (slave veth3): Releasing active interface [ 1492.814782][T19202] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1492.924063][ T977] usb usb48-port1: attempt power cycle [ 1492.991204][T19202] bond3 (unregistering): Released all slaves [ 1495.177136][T19228] Invalid source name [ 1495.181178][T19228] UBIFS error (pid: 19228): cannot open "/dev/sg0", error -22 [ 1495.293953][ T977] usb usb48-port1: unable to enumerate USB device [ 1495.355729][ T30] audit: type=1400 audit(1768573898.189:1334): avc: denied { append } for pid=19231 comm="syz.6.2838" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1495.524121][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2839'. [ 1497.709903][T19268] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2848'. [ 1497.753736][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2849'. [ 1497.781841][T19270] tipc: Enabling of bearer rejected, failed to enable media [ 1497.868766][T19269] hub 9-0:1.0: USB hub found [ 1497.882683][T19269] hub 9-0:1.0: 1 port detected [ 1498.114482][T19276] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2841'. [ 1501.194723][T19292] netlink: 'syz.5.2853': attribute type 1 has an invalid length. [ 1503.447412][T19326] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1504.381295][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1504.390418][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1504.399587][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1505.582767][ T30] audit: type=1400 audit(1768573907.430:1335): avc: denied { lock } for pid=19330 comm="syz.8.2863" path="socket:[64712]" dev="sockfs" ino=64712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1505.928615][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1505.937742][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1505.947179][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1506.124400][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1506.133900][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1506.147164][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'. [ 1506.485781][T19352] ip6gretap0: entered promiscuous mode [ 1506.491943][T19352] vlan2: entered promiscuous mode [ 1507.636555][T19359] ceph: No mds server is up or the cluster is laggy [ 1510.183846][T19385] xt_hashlimit: max too large, truncated to 1048576 [ 1512.846589][T19411] hub 9-0:1.0: USB hub found [ 1512.852128][T19411] hub 9-0:1.0: 1 port detected [ 1514.362301][T19422] JFS: discard option not supported on device [ 1514.371424][T19422] Mount JFS Failure: -22 [ 1514.375744][T19422] jfs_mount failed w/return code = -22 [ 1514.669369][ T30] audit: type=1400 audit(1768573915.400:1336): avc: denied { map } for pid=19415 comm="syz.2.2880" path="socket:[63950]" dev="sockfs" ino=63950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1514.774512][ T30] audit: type=1400 audit(1768573915.400:1337): avc: denied { accept } for pid=19415 comm="syz.2.2880" path="socket:[63950]" dev="sockfs" ino=63950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1515.316653][T19429] overlayfs: failed to resolve './bus': -2 [ 1516.482994][T19446] IPVS: Unknown mcast interface: vcan0 [ 1516.529893][T19447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2885'. [ 1516.539122][T19447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2885'. [ 1516.564262][T19447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2885'. [ 1516.574165][T19447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2885'. [ 1517.191746][T19447] lo speed is unknown, defaulting to 1000 [ 1517.198838][T19447] lo speed is unknown, defaulting to 1000 [ 1517.222567][T19449] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1517.257803][ T30] audit: type=1326 audit(1768573918.225:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.7.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9558f749 code=0x7ffc0000 [ 1517.433337][ T30] audit: type=1326 audit(1768573918.225:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.7.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9558f749 code=0x7ffc0000 [ 1517.458300][ T30] audit: type=1326 audit(1768573918.225:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.7.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffa9558f749 code=0x7ffc0000 [ 1517.961186][T19463] CIFS mount error: No usable UNC path provided in device string! [ 1517.961186][T19463] [ 1517.971311][T19463] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1518.819317][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 1518.829906][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 1518.839283][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 1518.848664][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 1519.622906][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1520.103696][T19489] overlayfs: failed to resolve './bus': -2 [ 1521.309447][T19501] netlink: 'syz.2.2896': attribute type 1 has an invalid length. [ 1523.586999][T19521] netlink: 'syz.5.2902': attribute type 4 has an invalid length. [ 1523.594896][T19521] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2902'. [ 1524.814217][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2901'. [ 1525.794774][T19528] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2903'. [ 1525.804755][T19528] 0·: renamed from hsr0 (while UP) [ 1525.935788][T19528] 0·: entered allmulticast mode [ 1525.948391][T19528] hsr_slave_0: entered allmulticast mode [ 1525.954121][T19528] hsr_slave_1: entered allmulticast mode [ 1525.985163][T19528] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1526.869601][T19545] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1528.070786][T19557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2909'. [ 1528.313105][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2908'. [ 1530.576084][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2915'. [ 1531.216662][T19603] overlayfs: failed to resolve './bus': -2 [ 1531.719265][T19481] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1531.891626][T19481] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.919124][T19481] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1531.979790][T19481] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.991706][T19481] usb 7-1: Product: syz [ 1531.996008][T19481] usb 7-1: Manufacturer: syz [ 1532.001743][T19481] usb 7-1: SerialNumber: syz [ 1532.099019][T19481] usb 7-1: config 0 descriptor?? [ 1532.245844][T19610] netlink: 'syz.2.2921': attribute type 10 has an invalid length. [ 1532.253879][T19610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2921'. [ 1532.263658][T19610] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1533.372351][T19611] 0x000000002f70-0x000000020000 : "" [ 1533.697350][T19611] ftl_cs: FTL header corrupt! [ 1533.727879][ T90] usb 7-1: USB disconnect, device number 18 [ 1535.043651][T19632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2924'. [ 1535.327226][ T30] audit: type=1804 audit(1768573935.567:1341): pid=19637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2926" name="file0" dev="hugetlbfs" ino=65733 res=1 errno=0 [ 1535.434913][ T30] audit: type=1804 audit(1768573935.577:1342): pid=19637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.2926" name="file0" dev="hugetlbfs" ino=65733 res=1 errno=0 [ 1535.882721][ T30] audit: type=1400 audit(1768573935.782:1343): avc: denied { create } for pid=19638 comm="syz.5.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1536.002987][ T30] audit: type=1400 audit(1768573935.801:1344): avc: denied { ioctl } for pid=19638 comm="syz.5.2927" path="socket:[65736]" dev="sockfs" ino=65736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1536.203856][ T30] audit: type=1400 audit(1768573935.801:1345): avc: denied { write } for pid=19638 comm="syz.5.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1536.947362][T19647] lo speed is unknown, defaulting to 1000 [ 1536.954273][T19647] lo speed is unknown, defaulting to 1000 [ 1537.424911][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2930'. [ 1538.775847][T19663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.783141][T19663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.807728][T19663] team_slave_0: left promiscuous mode [ 1538.813567][T19663] team_slave_1: left promiscuous mode [ 1538.822334][T19663] batadv1: left promiscuous mode [ 1538.842812][T19663] vxcan1: left promiscuous mode [ 1539.727479][T19672] overlayfs: failed to resolve './bus': -2 [ 1539.906132][T19663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.943949][T19663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.069170][T19663] 0·: left allmulticast mode [ 1540.073900][T19663] hsr_slave_0: left allmulticast mode [ 1540.079401][T19663] hsr_slave_1: left allmulticast mode [ 1540.106671][T19663] vlan0: left promiscuous mode [ 1540.319074][T19663] batman_adv: batadv0: Interface deactivated: gretap1 [ 1540.335086][T19663] hsr1: left allmulticast mode [ 1540.339909][T19663] dummy0: left allmulticast mode [ 1540.344892][T19663] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 1540.543744][T11547] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.699812][T11547] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.713032][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2936'. [ 1540.945233][T11547] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.212414][T19697] netlink: 'syz.7.2939': attribute type 10 has an invalid length. [ 1542.220452][T19697] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2939'. [ 1542.230824][T19697] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1542.945919][ T30] audit: type=1400 audit(1768573942.704:1346): avc: denied { read } for pid=19699 comm="syz.8.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1545.542101][T17395] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1546.254757][T17395] usb 7-1: config 0 has no interfaces? [ 1546.405503][T17395] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1546.414876][T17395] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.423124][T17395] usb 7-1: Product: syz [ 1546.427298][T17395] usb 7-1: Manufacturer: syz [ 1546.433675][T17395] usb 7-1: SerialNumber: syz [ 1546.451375][T17395] usb 7-1: config 0 descriptor?? [ 1546.557832][T19730] kAFS: unable to lookup cell '(' [ 1546.685107][T19730] kAFS: unable to lookup cell '(,c¾ûL' [ 1547.002160][T17395] usb 7-1: USB disconnect, device number 19 [ 1548.566266][T19752] overlayfs: failed to resolve './bus': -2 [ 1549.526356][ T30] audit: type=1400 audit(1768573948.859:1347): avc: denied { append } for pid=19763 comm="syz.2.2954" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1549.719296][T19761] netlink: 'syz.8.2953': attribute type 12 has an invalid length. [ 1549.727487][T19766] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1551.297689][T19779] openvswitch: netlink: IP tunnel dst address not specified [ 1551.383955][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2956'. [ 1555.162441][ T30] audit: type=1400 audit(1768573954.097:1348): avc: denied { getopt } for pid=19816 comm="syz.5.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1556.544277][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2965'. [ 1556.888244][T19817] xt_ecn: cannot match TCP bits for non-tcp packets [ 1557.543540][T19841] netlink: 'syz.7.2967': attribute type 4 has an invalid length. [ 1557.551514][T19841] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2967'. [ 1558.844211][T19853] affs: No valid root block on device nullb0 [ 1559.811179][T19866] sch_fq: defrate 0 ignored. [ 1559.931854][T18279] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1559.938529][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1560.063785][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1560.093579][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1560.119701][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1560.172124][T18279] usb 7-1: Using ep0 maxpacket: 32 [ 1560.179696][T18279] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.189910][T18279] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1560.202401][T18279] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 1560.215112][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1560.224220][T18279] usb 7-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 1560.239171][T18279] usb 7-1: Product: syz [ 1560.262953][T18279] usb 7-1: Manufacturer: syz [ 1560.273221][T18279] usb 7-1: SerialNumber: syz [ 1560.291530][T18279] usb 7-1: config 0 descriptor?? [ 1560.550781][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1560.565458][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1560.576286][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1560.587986][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1561.222846][T19884] ip6gretap0: entered promiscuous mode [ 1561.228474][T19884] vlan0: entered promiscuous mode [ 1561.855426][ T5889] usb 7-1: USB disconnect, device number 20 [ 1563.367421][T19904] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1564.407629][T19911] 9p: Bad value for 'wfdno' [ 1565.054054][T19918] __nla_validate_parse: 1 callbacks suppressed [ 1565.054094][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1565.069384][T19918] netlink: 'syz.2.2986': attribute type 5 has an invalid length. [ 1565.077234][T19918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1565.123954][T19918] geneve2: entered promiscuous mode [ 1565.129359][T19918] geneve2: entered allmulticast mode [ 1565.309843][T11547] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1565.321823][T11547] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1565.368836][T11547] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1565.383312][T11547] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1566.261113][T19930] veth0_to_team: left promiscuous mode [ 1566.697073][T19930] batman_adv: batadv0: Interface deactivated: gretap1 [ 1566.715789][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2985'. [ 1566.748428][ T33] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.226706][T19944] ceph: No mds server is up or the cluster is laggy [ 1567.254648][ T5889] libceph: connect (1)[c::]:6789 error -13 [ 1567.434505][ T33] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.443121][ T33] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.451613][ T33] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.466513][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 1567.891114][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1567.910146][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1567.922029][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1567.983209][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1568.804610][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1570.554257][T19979] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2998'. [ 1571.108519][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1571.119287][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1571.131815][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1571.292433][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1571.317324][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1571.326713][ T30] audit: type=1400 audit(1768573969.251:1349): avc: denied { mounton } for pid=19988 comm="syz.6.3001" path="/409/file0" dev="tmpfs" ino=2228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1573.763185][T20005] lo speed is unknown, defaulting to 1000 [ 1573.769724][T20005] lo speed is unknown, defaulting to 1000 [ 1575.383645][T20021] overlayfs: failed to resolve './bus': -2 [ 1577.036262][T20049] overlayfs: failed to resolve './bus': -2 [ 1579.464515][T20081] netlink: 'syz.6.3018': attribute type 4 has an invalid length. [ 1579.472413][T20081] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3018'. [ 1580.755554][T20054] vxcan1: left promiscuous mode [ 1581.659944][T20096] netlink: 'syz.7.3020': attribute type 10 has an invalid length. [ 1581.667963][T20096] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3020'. [ 1582.318884][T20054] wireguard0: left promiscuous mode [ 1582.324102][T20054] wireguard0: left allmulticast mode [ 1582.350445][T20054] batman_adv: batadv0: Interface deactivated: gretap2 [ 1582.463976][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'. [ 1582.502415][T20096] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1582.621065][ T33] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.678212][ T33] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.704033][ T33] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.007808][ T33] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.700813][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3028'. [ 1584.955226][T20126] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3028'. [ 1584.983905][T20126] veth0_to_batadv: entered allmulticast mode [ 1585.360470][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1588.115146][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 1588.125076][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 1588.134441][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 1588.143811][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 1588.152955][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 1588.207498][T20176] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1588.510694][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 1588.520902][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 1588.531002][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 1588.540510][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 1589.314185][T20196] dlm: no local IP address has been set [ 1589.320298][T20196] dlm: cannot start dlm midcomms -107 [ 1589.988552][T20204] batman_adv: batadv0: Removing interface: gretap2 [ 1590.266700][T20207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1591.681937][T20229] netlink: 'syz.6.3049': attribute type 10 has an invalid length. [ 1591.689899][T20229] __nla_validate_parse: 6 callbacks suppressed [ 1591.696144][T20229] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3049'. [ 1591.705855][T20229] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1591.822804][T20062] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1592.382914][T20062] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1592.475029][T20062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.652925][T20062] usb 3-1: config 0 descriptor?? [ 1592.680472][T20062] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1593.226086][T20062] gspca_sn9c2028: read1 error -110 [ 1593.257516][T20062] gspca_sn9c2028: read1 error -32 [ 1593.269381][T20062] gspca_sn9c2028: read1 error -32 [ 1593.281239][T20062] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1593.378302][T20239] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1593.876032][T20252] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1593.997060][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1594.006174][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1594.015559][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1594.383842][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1594.393317][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1594.402833][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1594.424606][T20259] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3057'. [ 1594.461495][T20259] 0·: renamed from hsr0 [ 1594.612284][T20259] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1594.632189][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1594.641443][T20253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1594.650689][T20259] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1594.668188][T20259] 0·: entered allmulticast mode [ 1594.675254][T20259] hsr_slave_0: entered allmulticast mode [ 1594.685945][T20259] hsr_slave_1: entered allmulticast mode [ 1594.701753][T20259] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1595.962353][T20062] usb 3-1: USB disconnect, device number 26 [ 1597.664776][T20297] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1600.183148][T20326] netlink: 'syz.5.3074': attribute type 21 has an invalid length. [ 1600.191237][T20326] __nla_validate_parse: 7 callbacks suppressed [ 1600.197724][T20326] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3074'. [ 1600.207587][T20326] netlink: 'syz.5.3074': attribute type 4 has an invalid length. [ 1600.215511][T20326] netlink: 'syz.5.3074': attribute type 5 has an invalid length. [ 1600.223343][T20326] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3074'. [ 1600.682721][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 1600.693176][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 1600.702591][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 1600.711951][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 1600.721292][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 1601.801276][T20351] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3081'. [ 1601.811358][T20351] 1·: renamed from 70· [ 1601.936420][T20351] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1602.128261][T20351] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1602.159779][T20351] 1·: entered allmulticast mode [ 1602.620504][T20351] hsr_slave_0: entered allmulticast mode [ 1602.635533][T20351] hsr_slave_1: entered allmulticast mode [ 1602.662541][T20351] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1603.131864][T20360] netlink: 'syz.5.3078': attribute type 1 has an invalid length. [ 1604.042220][T20366] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 1604.061164][T20366] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3093'. [ 1604.148905][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3083'. [ 1604.158052][T20373] netlink: 'syz.6.3083': attribute type 5 has an invalid length. [ 1604.194204][T20373] geneve2: entered promiscuous mode [ 1604.199507][T20373] geneve2: entered allmulticast mode [ 1604.237944][ T8915] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1604.439032][ T8915] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1604.466975][ T8915] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1604.591039][ T1082] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1605.640909][T20386] misc userio: The device must be registered before sending interrupts [ 1605.679842][T20386] binder: 20381:20386 ioctl c0306201 0 returned -14 [ 1607.273934][T20418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1607.701179][T20423] __nla_validate_parse: 1 callbacks suppressed [ 1607.701195][T20423] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3092'. [ 1607.727888][T20423] 1·: renamed from 70· (while UP) [ 1607.887634][T20423] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1608.306010][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1608.316058][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1608.325563][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1608.754335][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1608.769424][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1610.595030][T20458] bridge0: port 1(gretap0) entered blocking state [ 1610.601844][T20458] bridge0: port 1(gretap0) entered disabled state [ 1610.609402][T20458] gretap0: entered allmulticast mode [ 1610.620822][T20458] gretap0: entered promiscuous mode [ 1610.699594][T20458] tipc: New replicast peer: 255.255.255.255 [ 1610.707105][T20458] tipc: Enabled bearer , priority 10 [ 1610.727023][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3098'. [ 1610.736107][T20458] tipc: Disabling bearer [ 1612.521018][T20466] lo speed is unknown, defaulting to 1000 [ 1612.527483][T20466] lo speed is unknown, defaulting to 1000 [ 1612.927401][T20469] bridge1: entered promiscuous mode [ 1612.932702][T20469] bridge1: entered allmulticast mode [ 1614.362051][T20085] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1615.467487][T20490] overlayfs: failed to clone upperpath [ 1616.442188][T20085] usb 7-1: device descriptor read/all, error -71 [ 1616.892260][T20499] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3109'. [ 1616.901433][T20499] 0·: renamed from 71· (while UP) [ 1616.913717][T20499] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1617.134576][T20508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3111'. [ 1617.827260][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3112'. [ 1617.994027][T20511] netlink: 'syz.7.3112': attribute type 10 has an invalid length. [ 1618.057137][T20511] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3112'. [ 1618.106177][T20511] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3112'. [ 1618.162639][T20511] veth0_to_batadv: entered allmulticast mode [ 1618.553983][T20522] netlink: 'syz.8.3115': attribute type 21 has an invalid length. [ 1618.562110][T20522] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3115'. [ 1618.571932][T20522] netlink: 'syz.8.3115': attribute type 4 has an invalid length. [ 1618.579705][T20522] netlink: 'syz.8.3115': attribute type 5 has an invalid length. [ 1618.587549][T20522] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3115'. [ 1619.363786][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3114'. [ 1619.373785][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3114'. [ 1619.407255][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3114'. [ 1619.579777][T20526] 0·: renamed from hsr0 (while UP) [ 1619.588825][T20526] 0·: entered allmulticast mode [ 1619.593666][T20526] hsr_slave_0: entered allmulticast mode [ 1619.599395][T20526] hsr_slave_1: entered allmulticast mode [ 1619.605394][T20526] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1619.719040][T20538] overlayfs: failed to clone upperpath [ 1621.164786][T20548] 1·: renamed from 70· (while UP) [ 1621.171763][T20548] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1622.728021][T20567] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1623.076106][T20576] vxcan1: entered promiscuous mode [ 1625.161271][T20599] __nla_validate_parse: 4 callbacks suppressed [ 1625.161296][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3132'. [ 1625.488863][T20606] netlink: 'syz.8.3134': attribute type 1 has an invalid length. [ 1628.365090][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1628.376440][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1628.394502][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1628.415061][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1628.430555][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1628.798874][T20640] netlink: 'syz.5.3141': attribute type 8 has an invalid length. [ 1629.800333][T20615] kexec: Could not allocate control_code_buffer [ 1629.861285][T20651] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1631.191810][T20665] overlayfs: failed to resolve './bus': -2 [ 1634.804040][T20702] binder: 20701:20702 ioctl 4018620d 0 returned -22 [ 1634.966751][T20706] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3156'. [ 1634.976310][T20706] 0·: renamed from hsr0 [ 1635.608656][T20706] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1635.632596][T20706] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1635.646256][T20706] 0·: entered allmulticast mode [ 1635.671013][T20706] hsr_slave_0: entered allmulticast mode [ 1635.728115][T20706] hsr_slave_1: entered allmulticast mode [ 1635.855228][T20706] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1636.583378][T20719] xt_addrtype: ipv6 does not support BROADCAST matching [ 1636.616657][T20718] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3154'. [ 1636.625671][T20718] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3154'. [ 1636.641263][ T30] audit: type=1326 audit(1768574030.351:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1636.666441][ T30] audit: type=1326 audit(1768574030.351:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1636.691855][ T30] audit: type=1326 audit(1768574030.351:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1636.728697][ T30] audit: type=1326 audit(1768574030.351:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1636.809039][T20715] lo speed is unknown, defaulting to 1000 [ 1636.815463][T20715] lo speed is unknown, defaulting to 1000 [ 1637.068363][ T30] audit: type=1326 audit(1768574030.351:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1637.096436][ T30] audit: type=1326 audit(1768574030.370:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1637.127006][ T30] audit: type=1326 audit(1768574030.370:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1637.172738][ T30] audit: type=1326 audit(1768574030.370:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1637.251861][ T30] audit: type=1326 audit(1768574030.370:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1637.362708][ T30] audit: type=1326 audit(1768574030.370:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20695 comm="syz.5.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff543d8f749 code=0x7ffc0000 [ 1639.970194][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3166'. [ 1640.731227][T20761] overlayfs: failed to resolve './bus': -2 [ 1642.631441][T20781] overlayfs: failed to resolve './bus': -2 [ 1644.881206][T20805] gre1: entered promiscuous mode [ 1647.816874][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3184'. [ 1647.826222][T20832] netlink: 'syz.7.3184': attribute type 5 has an invalid length. [ 1647.834029][T20832] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3184'. [ 1647.875347][T20832] geneve2: entered promiscuous mode [ 1647.880677][T20832] geneve2: entered allmulticast mode [ 1647.989886][T11561] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1648.204314][T11561] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1648.271430][T11561] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1649.218802][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1649.520555][T20850] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3188'. [ 1649.562619][ T30] audit: type=1400 audit(1768574042.109:1375): avc: denied { write } for pid=20846 comm="syz.6.3188" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1649.786426][ T30] audit: type=1400 audit(1768574042.109:1376): avc: denied { open } for pid=20846 comm="syz.6.3188" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1650.382402][T20862] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1650.986077][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1653.017246][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3197'. [ 1653.027164][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3197'. [ 1653.036563][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3197'. [ 1653.312355][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3197'. [ 1653.323939][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3197'. [ 1654.732998][T20906] lo speed is unknown, defaulting to 1000 [ 1654.746893][T20906] lo speed is unknown, defaulting to 1000 [ 1655.078721][T20916] xt_hashlimit: max too large, truncated to 1048576 [ 1655.218588][T20918] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1656.190582][ T30] audit: type=1400 audit(1768574048.311:1377): avc: denied { ioctl } for pid=20920 comm="syz.5.3206" path="socket:[71142]" dev="sockfs" ino=71142 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1657.670844][ T30] audit: type=1326 audit(1768574050.023:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20932 comm="syz.5.3208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff543d8f749 code=0x0 [ 1658.269046][T20950] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3213'. [ 1658.379352][T20953] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3213'. [ 1658.400427][T20954] netlink: 'syz.5.3211': attribute type 12 has an invalid length. [ 1659.377712][T20963] overlayfs: failed to resolve './bus': -2 [ 1659.793454][T20961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 1659.839098][T20961] netlink: 'syz.2.3216': attribute type 10 has an invalid length. [ 1659.856810][T20961] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3216'. [ 1659.902852][T20961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3216'. [ 1659.929027][T20961] veth0_to_batadv: entered allmulticast mode [ 1660.815514][T20977] overlayfs: failed to resolve './bus': -2 [ 1661.860778][T20998] overlayfs: failed to clone upperpath [ 1662.873060][T20972] lo speed is unknown, defaulting to 1000 [ 1662.903116][T20972] lo speed is unknown, defaulting to 1000 [ 1662.913027][T21007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3225'. [ 1662.941118][T21007] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3225'. [ 1662.974066][T21007] veth0_to_batadv: entered allmulticast mode [ 1664.561828][T21032] batadv_slave_0: entered promiscuous mode [ 1664.806849][T21035] tipc: Started in network mode [ 1664.811768][T21035] tipc: Node identity ac14140f, cluster identity 4711 [ 1664.818958][T21035] tipc: New replicast peer: 255.255.255.255 [ 1664.825523][T21035] tipc: Enabled bearer , priority 10 [ 1664.834756][T21035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3230'. [ 1664.843780][T21035] tipc: Disabling bearer [ 1666.487329][T21044] netlink: 203340 bytes leftover after parsing attributes in process `syz.8.3232'. [ 1667.881497][ T30] audit: type=1400 audit(1768574059.508:1379): avc: denied { write } for pid=21053 comm="syz.2.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1668.232489][T21064] overlayfs: failed to resolve './bus': -2 [ 1668.667822][T21069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1668.722057][T21069] netlink: 'syz.2.3238': attribute type 10 has an invalid length. [ 1668.732519][T21069] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1668.794969][T21073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1670.171650][T21084] tmpfs: Bad value for 'huge' [ 1670.316901][T21084] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1670.341193][ T30] audit: type=1400 audit(1768574061.631:1380): avc: denied { getopt } for pid=21082 comm="syz.7.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1670.717403][ T30] audit: type=1400 audit(1768574061.771:1381): avc: denied { mounton } for pid=21082 comm="syz.7.3243" path="/374/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1670.984858][T21093] netlink: 'syz.7.3245': attribute type 10 has an invalid length. [ 1671.008084][T21093] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1671.475521][ T30] audit: type=1400 audit(1768574061.781:1382): avc: denied { read } for pid=21082 comm="syz.7.3243" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1671.755422][ T30] audit: type=1400 audit(1768574061.986:1383): avc: denied { open } for pid=21082 comm="syz.7.3243" path="/374/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1672.205789][ T30] audit: type=1400 audit(1768574061.986:1384): avc: denied { read } for pid=21082 comm="syz.7.3243" name="saved_tgids" dev="tracefs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1672.643615][ T30] audit: type=1400 audit(1768574061.986:1385): avc: denied { getattr } for pid=21082 comm="syz.7.3243" name="saved_tgids" dev="tracefs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1672.859021][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3248'. [ 1673.051311][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3248'. [ 1673.087505][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3249'. [ 1673.097196][T21112] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3249'. [ 1674.801497][T21134] overlayfs: failed to resolve './bus': -2 [ 1675.558095][T21136] atomic_op ffff888029eb7998 conn xmit_atomic 0000000000000000 [ 1676.018386][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3254'. [ 1676.029241][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3254'. [ 1676.039353][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3254'. [ 1676.446554][T20078] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1677.517385][T21157] netlink: 'syz.6.3258': attribute type 1 has an invalid length. [ 1677.526583][T21157] netlink: 'syz.6.3258': attribute type 2 has an invalid length. [ 1677.539089][T21157] netlink: 'syz.6.3258': attribute type 2 has an invalid length. [ 1677.560536][T21157] netlink: 'syz.6.3258': attribute type 1 has an invalid length. [ 1677.571760][T21157] netlink: 'syz.6.3258': attribute type 1 has an invalid length. [ 1677.572570][T21154] tipc: New replicast peer: 255.255.255.255 [ 1677.585899][T21154] tipc: Enabled bearer , priority 10 [ 1677.592157][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'. [ 1677.601568][T21155] tipc: Disabling bearer [ 1678.282150][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3254'. [ 1678.295270][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3254'. [ 1678.552580][T20078] usb 8-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1678.666703][T20078] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.708324][T20078] usb 8-1: config 0 descriptor?? [ 1678.823004][T21165] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3259'. [ 1679.262501][T20078] usb 8-1: can't set config #0, error -71 [ 1679.270034][T20078] usb 8-1: USB disconnect, device number 25 [ 1679.401729][T21170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1679.550446][T21174] atomic_op ffff888074cb2998 conn xmit_atomic 0000000000000000 [ 1680.032616][T21176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.312786][T21170] netlink: 'syz.6.3261': attribute type 10 has an invalid length. [ 1680.343413][T21170] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1680.383468][T21175] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1680.426887][T21175] veth0_to_batadv: entered allmulticast mode [ 1680.720922][T20078] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1680.721482][T21187] overlayfs: failed to resolve './bus': -2 [ 1680.746245][T21188] overlayfs: failed to clone lowerpath [ 1682.659778][T20078] usb 3-1: Using ep0 maxpacket: 32 [ 1682.678235][T20078] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1682.708397][T20078] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1682.730291][T20078] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1682.757010][T20078] usb 3-1: config 1 has no interface number 0 [ 1682.984875][T20078] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1682.996756][T20078] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1683.341902][T21203] netlink: 'syz.8.3268': attribute type 10 has an invalid length. [ 1683.349949][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3268'. [ 1683.359384][T21203] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1683.824525][T20078] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1683.839268][T20078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.944689][T20078] usb 3-1: can't set config #1, error -71 [ 1684.984605][T20078] usb 3-1: USB disconnect, device number 27 [ 1686.194923][T21226] xt_ecn: cannot match TCP bits for non-tcp packets [ 1686.267545][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3267'. [ 1686.299962][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3274'. [ 1687.058328][T21232] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3276'. [ 1687.193679][T21232] 0·: renamed from hsr0 [ 1687.227275][T21232] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1687.652485][T21232] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1687.662806][T21232] 0·: entered allmulticast mode [ 1687.667728][T21232] hsr_slave_0: entered allmulticast mode [ 1687.673342][T21232] hsr_slave_1: entered allmulticast mode [ 1687.680056][T21232] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1688.866148][T21246] lo speed is unknown, defaulting to 1000 [ 1688.873706][T21246] lo speed is unknown, defaulting to 1000 [ 1689.576815][T21243] syz.8.3279 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=3, oom_score_adj=0 [ 1689.587782][T21243] CPU: 1 UID: 0 PID: 21243 Comm: syz.8.3279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1689.587816][T21243] Tainted: [L]=SOFTLOCKUP [ 1689.587823][T21243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1689.587834][T21243] Call Trace: [ 1689.587841][T21243] [ 1689.587849][T21243] dump_stack_lvl+0x16c/0x1f0 [ 1689.587893][T21243] dump_header+0x101/0x960 [ 1689.587933][T21243] oom_kill_process+0x176/0x910 [ 1689.587964][T21243] out_of_memory+0x350/0x1700 [ 1689.587992][T21243] ? __lock_acquire+0x436/0x2890 [ 1689.588023][T21243] ? __pfx_out_of_memory+0x10/0x10 [ 1689.588059][T21243] mem_cgroup_out_of_memory+0x118/0x130 [ 1689.588089][T21243] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1689.588114][T21243] ? do_raw_spin_unlock+0x172/0x230 [ 1689.588144][T21243] try_charge_memcg+0x695/0xd30 [ 1689.588174][T21243] ? __pfx_try_charge_memcg+0x10/0x10 [ 1689.588199][T21243] ? memory_min_write+0xd1/0xe0 [ 1689.588231][T21243] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1689.588254][T21243] obj_cgroup_charge_account+0x336/0x670 [ 1689.588284][T21243] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1689.588318][T21243] __kmalloc_node_track_caller_noprof+0x6e3/0x930 [ 1689.588343][T21243] ? copy_array.constprop.0+0x93/0x120 [ 1689.588372][T21243] ? krealloc_node_align_noprof+0x2ea/0x3d0 [ 1689.588392][T21243] krealloc_node_align_noprof+0x2ea/0x3d0 [ 1689.588417][T21243] copy_array.constprop.0+0x93/0x120 [ 1689.588441][T21243] copy_verifier_state+0xaf6/0x1030 [ 1689.588466][T21243] ? kasan_save_track+0x14/0x30 [ 1689.588491][T21243] push_stack+0x1ca/0x380 [ 1689.588514][T21243] check_cond_jmp_op+0x322/0x7890 [ 1689.588547][T21243] ? lockdep_hardirqs_on+0xf0/0x110 [ 1689.588576][T21243] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1689.588597][T21243] ? __asan_memset+0x23/0x50 [ 1689.588615][T21243] ? do_check_common+0x5aa8/0xc640 [ 1689.588642][T21243] do_check_common+0xa4d3/0xc640 [ 1689.588682][T21243] ? compute_live_registers+0x75d/0xfb0 [ 1689.588717][T21243] ? __pfx_do_check_common+0x10/0x10 [ 1689.588745][T21243] ? get_call_summary+0x750/0x780 [ 1689.588790][T21243] bpf_check+0x8b63/0xcb70 [ 1689.588826][T21243] ? __pfx_bpf_check+0x10/0x10 [ 1689.588849][T21243] ? rcu_is_watching+0x12/0xc0 [ 1689.588868][T21243] ? trace_kmalloc+0x2b/0xb0 [ 1689.588889][T21243] ? __kmalloc_noprof+0x35d/0x910 [ 1689.588916][T21243] ? lsm_blob_alloc+0x68/0x90 [ 1689.588945][T21243] ? lsm_blob_alloc+0x68/0x90 [ 1689.588960][T21243] ? __asan_memset+0x23/0x50 [ 1689.588975][T21243] ? selinux_bpf_prog_load+0x67/0x170 [ 1689.589004][T21243] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 1689.589031][T21243] bpf_prog_load+0x114e/0x2cc0 [ 1689.589063][T21243] ? __pfx_bpf_prog_load+0x10/0x10 [ 1689.589095][T21243] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1689.589117][T21243] ? avc_has_perm+0x144/0x1f0 [ 1689.589149][T21243] ? selinux_bpf+0xdd/0x130 [ 1689.589166][T21243] ? bpf_lsm_bpf+0x9/0x10 [ 1689.589187][T21243] __sys_bpf+0x3e72/0x4980 [ 1689.589212][T21243] ? futex_private_hash_put+0x160/0x1b0 [ 1689.589242][T21243] ? __pfx___sys_bpf+0x10/0x10 [ 1689.589267][T21243] ? __pfx_futex_wait+0x10/0x10 [ 1689.589301][T21243] ? do_futex+0x122/0x350 [ 1689.589351][T21243] ? xfd_validate_state+0x61/0x180 [ 1689.589373][T21243] ? __task_pid_nr_ns+0x1f5/0x500 [ 1689.589402][T21243] __x64_sys_bpf+0x78/0xc0 [ 1689.589426][T21243] ? lockdep_hardirqs_on+0x7c/0x110 [ 1689.589450][T21243] do_syscall_64+0xcd/0xf80 [ 1689.589477][T21243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.589498][T21243] RIP: 0033:0x7fdff658f749 [ 1689.589515][T21243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1689.589532][T21243] RSP: 002b:00007fdff74c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1689.589552][T21243] RAX: ffffffffffffffda RBX: 00007fdff67e5fa0 RCX: 00007fdff658f749 [ 1689.589564][T21243] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1689.589574][T21243] RBP: 00007fdff6613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1689.589584][T21243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1689.589594][T21243] R13: 00007fdff67e6038 R14: 00007fdff67e5fa0 R15: 00007ffd867c1c88 [ 1689.589622][T21243] [ 1689.589629][T21243] memory: usage 307200kB, limit 307200kB, failcnt 2054 [ 1690.001969][T21243] memory+swap: usage 328312kB, limit 9007199254740988kB, failcnt 0 [ 1690.009863][T21243] kmem: usage 239152kB, limit 9007199254740988kB, failcnt 0 [ 1690.017136][T21243] Memory cgroup stats for /syz8: [ 1690.017601][T21243] cache 69672960 [ 1690.026059][T21243] rss 0 [ 1690.028800][T21243] rss_huge 0 [ 1690.031971][T21243] shmem 0 [ 1690.034885][T21243] mapped_file 0 [ 1690.038369][T21243] dirty 0 [ 1690.041282][T21243] writeback 0 [ 1690.044545][T21243] workingset_refault_anon 14 [ 1690.062410][T21243] workingset_refault_file 0 [ 1690.066943][T21243] swap 21618688 [ 1690.074636][T21243] swapcached 8192 [ 1690.078280][T21243] pgpgin 921278 [ 1690.082491][T21243] pgpgout 904266 [ 1690.086044][T21243] pgfault 902886 [ 1690.089567][T21243] pgmajfault 44 [ 1690.093016][T21243] inactive_anon 8192 [ 1690.096878][T21243] active_anon 0 [ 1690.100310][T21243] inactive_file 0 [ 1690.143675][T21243] active_file 0 [ 1690.147170][T21243] unevictable 69672960 [ 1690.151208][T21243] hierarchical_memory_limit 314572800 [ 1690.157154][T21243] hierarchical_memsw_limit 9223372036854771712 [ 1690.163286][T21243] total_cache 69672960 [ 1690.167417][T21243] total_rss 0 [ 1690.170669][T21243] total_rss_huge 0 [ 1690.174356][T21243] total_shmem 0 [ 1690.178055][T21243] total_mapped_file 0 [ 1690.182027][T21243] total_dirty 0 [ 1690.185474][T21243] total_writeback 0 [ 1690.189270][T21243] total_workingset_refault_anon 14 [ 1690.194379][T21243] total_workingset_refault_file 0 [ 1690.199408][T21243] total_swap 21618688 [ 1690.203356][T21243] total_swapcached 8192 [ 1690.207485][T21243] total_pgpgin 921278 [ 1690.211434][T21243] total_pgpgout 904266 [ 1690.215464][T21243] total_pgfault 902886 [ 1690.219519][T21243] total_pgmajfault 44 [ 1690.223469][T21243] total_inactive_anon 8192 [ 1690.227847][T21243] total_active_anon 0 [ 1690.232052][T21243] total_inactive_file 0 [ 1690.236191][T21243] total_active_file 0 [ 1690.240160][T21243] total_unevictable 69672960 [ 1690.244723][T21243] anon_cost 0 [ 1690.247983][T21243] file_cost 0 [ 1690.251267][T21243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2021,pid=15427,uid=0 [ 1690.269250][T21243] Memory cgroup out of memory: Killed process 15427 (syz.8.2021) total-vm:102296kB, anon-rss:1172kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 1802.405231][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1802.412249][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21242/1:b..l [ 1802.421429][ C1] rcu: (detected by 1, t=10503 jiffies, g=82101, q=261 ncpus=2) [ 1802.429139][ C1] task:syz.7.3278 state:R running task stack:26008 pid:21242 tgid:21240 ppid:11714 task_flags:0x400140 flags:0x00080000 [ 1802.444548][ C1] Call Trace: [ 1802.447842][ C1] [ 1802.450782][ C1] ? __schedule+0x10b9/0x6150 [ 1802.455472][ C1] __schedule+0x1139/0x6150 [ 1802.460002][ C1] ? __pfx___schedule+0x10/0x10 [ 1802.464860][ C1] ? mark_held_locks+0x49/0x80 [ 1802.469636][ C1] preempt_schedule_irq+0x51/0x90 [ 1802.474659][ C1] irqentry_exit+0x1d8/0x8c0 [ 1802.479253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1802.485241][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 1802.490451][ C1] Code: d3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 c1 ee 0e 0f 82 74 02 00 00 8b 35 ea f1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 d3 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1802.510075][ C1] RSP: 0018:ffffc9000446ec30 EFLAGS: 00000206 [ 1802.516127][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000013d622c6 [ 1802.524075][ C1] RDX: 0000000000000000 RSI: ffffffff8daa961b RDI: ffffffff8bf2b580 [ 1802.532045][ C1] RBP: 0000000000000002 R08: 00000000accd7842 R09: 000000002accd784 [ 1802.539998][ C1] R10: 0000000000000002 R11: ffff888056a154b0 R12: 0000000000000000 [ 1802.547950][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1802.555948][ C1] unwind_next_frame+0xd1/0x20b0 [ 1802.560896][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 1802.565995][ C1] ? __unwind_start+0x574/0x7f0 [ 1802.570838][ C1] ? get_stack_info_noinstr+0x18/0x120 [ 1802.576286][ C1] __unwind_start+0x45f/0x7f0 [ 1802.580950][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1802.587094][ C1] arch_stack_walk+0x73/0x100 [ 1802.591768][ C1] ? __unwind_start+0x574/0x7f0 [ 1802.596599][ C1] stack_trace_save+0x8e/0xc0 [ 1802.601251][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1802.606596][ C1] ? __lock_acquire+0x436/0x2890 [ 1802.611510][ C1] save_stack+0x160/0x1f0 [ 1802.615837][ C1] ? __pfx_save_stack+0x10/0x10 [ 1802.620683][ C1] ? __lock_acquire+0x436/0x2890 [ 1802.625614][ C1] __set_page_owner+0x91/0x560 [ 1802.630371][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1802.635726][ C1] ? bad_range+0x261/0x4c0 [ 1802.640130][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1802.645305][ C1] post_alloc_hook+0x1af/0x220 [ 1802.650059][ C1] get_page_from_freelist+0xd0b/0x31a0 [ 1802.655750][ C1] ? __pfx___might_resched+0x10/0x10 [ 1802.661006][ C1] ? should_fail_alloc_page+0xee/0x130 [ 1802.666448][ C1] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1802.672309][ C1] ? __lock_acquire+0x436/0x2890 [ 1802.677221][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1802.683516][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1802.688507][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1802.693847][ C1] ? find_held_lock+0x2b/0x80 [ 1802.698500][ C1] ? __lock_acquire+0x436/0x2890 [ 1802.703404][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1802.709267][ C1] ? policy_nodemask+0xea/0x4e0 [ 1802.714104][ C1] alloc_pages_mpol+0x1fb/0x550 [ 1802.718927][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1802.724318][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1802.729722][ C1] shmem_alloc_folio+0x135/0x160 [ 1802.734692][ C1] shmem_alloc_and_add_folio+0x494/0xc20 [ 1802.740333][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1802.746510][ C1] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1802.752438][ C1] shmem_get_folio_gfp+0x67f/0x1610 [ 1802.757647][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1802.763260][ C1] ? filemap_map_pages+0x12dd/0x1e00 [ 1802.768514][ C1] shmem_fault+0x1fe/0xa00 [ 1802.772899][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1802.777815][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1802.783243][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1802.788666][ C1] __do_fault+0x10d/0x490 [ 1802.792969][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1802.798390][ C1] do_fault+0xae4/0x1ad0 [ 1802.802610][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1802.808043][ C1] __handle_mm_fault+0x1919/0x2bb0 [ 1802.813129][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1802.818557][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1802.823985][ C1] ? find_held_lock+0x2b/0x80 [ 1802.828653][ C1] ? follow_page_pte+0x5cf/0x1390 [ 1802.833655][ C1] handle_mm_fault+0x3fe/0xad0 [ 1802.838394][ C1] __get_user_pages+0x54e/0x3590 [ 1802.843316][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1802.848659][ C1] populate_vma_page_range+0x267/0x3f0 [ 1802.854090][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1802.860036][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1802.865811][ C1] ? do_mmap+0x69c/0x1210 [ 1802.870112][ C1] __mm_populate+0x1d8/0x380 [ 1802.874670][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1802.879752][ C1] ? up_write+0x282/0x4e0 [ 1802.884062][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1802.888622][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1802.893703][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 1802.898611][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1802.903519][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 1802.908172][ C1] ? xfd_validate_state+0x61/0x180 [ 1802.913251][ C1] ? __task_pid_nr_ns+0x1f5/0x500 [ 1802.918246][ C1] __x64_sys_mmap+0x125/0x190 [ 1802.922894][ C1] do_syscall_64+0xcd/0xf80 [ 1802.927376][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.933237][ C1] RIP: 0033:0x7ffa9558f749 [ 1802.937618][ C1] RSP: 002b:00007ffa9636f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1802.945996][ C1] RAX: ffffffffffffffda RBX: 00007ffa957e5fa0 RCX: 00007ffa9558f749 [ 1802.953941][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1802.961882][ C1] RBP: 00007ffa95613f91 R08: ffffffffffffffff R09: 0000000000000000 [ 1802.969830][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1802.977766][ C1] R13: 00007ffa957e6038 R14: 00007ffa957e5fa0 R15: 00007fff8e53a838 [ 1802.985717][ C1] [ 1802.988716][ C1] rcu: rcu_preempt kthread starved for 10398 jiffies! g82101 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1802.999915][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1803.009886][ C1] rcu: RCU grace-period kthread stack dump: [ 1803.015764][ C1] task:rcu_preempt state:R running task stack:28192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1803.029274][ C1] Call Trace: [ 1803.032555][ C1] [ 1803.035482][ C1] ? __schedule+0x10b9/0x6150 [ 1803.040172][ C1] __schedule+0x1139/0x6150 [ 1803.044686][ C1] ? __lock_acquire+0x436/0x2890 [ 1803.049632][ C1] ? __mod_timer+0x8f2/0xd30 [ 1803.054233][ C1] ? __pfx___schedule+0x10/0x10 [ 1803.059078][ C1] ? find_held_lock+0x2b/0x80 [ 1803.063764][ C1] ? schedule+0x2d7/0x3a0 [ 1803.068093][ C1] schedule+0xe7/0x3a0 [ 1803.072162][ C1] schedule_timeout+0x123/0x290 [ 1803.077009][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1803.082371][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1803.087654][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1803.093456][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1803.098918][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1803.103686][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1803.109437][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1803.114670][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1803.119612][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1803.124470][ C1] rcu_gp_kthread+0x26d/0x380 [ 1803.129146][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1803.134345][ C1] ? rcu_is_watching+0x12/0xc0 [ 1803.139103][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1803.144301][ C1] ? __kthread_parkme+0x19e/0x250 [ 1803.149354][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1803.154561][ C1] kthread+0x3c5/0x780 [ 1803.158649][ C1] ? __pfx_kthread+0x10/0x10 [ 1803.163252][ C1] ? rcu_is_watching+0x12/0xc0 [ 1803.168029][ C1] ? __pfx_kthread+0x10/0x10 [ 1803.172627][ C1] ret_from_fork+0x983/0xb10 [ 1803.177219][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1803.182333][ C1] ? __switch_to+0x7af/0x10d0 [ 1803.187009][ C1] ? __pfx_kthread+0x10/0x10 [ 1803.191597][ C1] ret_from_fork_asm+0x1a/0x30 [ 1803.196373][ C1] [ 1803.199379][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1803.205726][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1803.210957][ C0] NMI backtrace for cpu 0 [ 1803.210980][ C0] CPU: 0 UID: 0 PID: 21249 Comm: syz.8.3279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.210999][ C0] Tainted: [L]=SOFTLOCKUP [ 1803.211004][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1803.211013][ C0] RIP: 0010:match_held_lock+0xf/0xb0 [ 1803.211039][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 53 48 89 fb 48 39 77 10 74 55 66 83 7f 22 1f <76> 65 48 8b 46 08 48 89 f7 48 85 c0 74 4d 8b 15 1d cd 49 0f 85 d2 [ 1803.211052][ C0] RSP: 0000:ffffc9000c6ee2f8 EFLAGS: 00000093 [ 1803.211064][ C0] RAX: 0000000000000005 RBX: ffff8880323db018 RCX: 0000000000000001 [ 1803.211072][ C0] RDX: 0000000000000000 RSI: ffffffff8e3c9640 RDI: ffff8880323db018 [ 1803.211080][ C0] RBP: ffffffff8e3c9640 R08: 0000000009678e5e R09: 00000000e09678e5 [ 1803.211088][ C0] R10: 0000000000000002 R11: ffff8880323daff0 R12: ffff8880323da4c0 [ 1803.211096][ C0] R13: ffff8880323daff0 R14: 00000000ffffffff R15: 0000000000000001 [ 1803.211104][ C0] FS: 00007fdff743e6c0(0000) GS:ffff8881248f2000(0000) knlGS:0000000000000000 [ 1803.211117][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1803.211125][ C0] CR2: 00007fdff67e0000 CR3: 0000000051a04000 CR4: 00000000003526f0 [ 1803.211133][ C0] Call Trace: [ 1803.211138][ C0] [ 1803.211143][ C0] lock_is_held_type+0xb0/0x150 [ 1803.211161][ C0] __might_resched+0x473/0x5e0 [ 1803.211177][ C0] ? __pfx___might_resched+0x10/0x10 [ 1803.211188][ C0] ? mem_cgroup_iter+0x38a/0x710 [ 1803.211208][ C0] shrink_node+0x57b/0x3bb0 [ 1803.211228][ C0] ? __lock_acquire+0x436/0x2890 [ 1803.211247][ C0] ? __pfx_shrink_node+0x10/0x10 [ 1803.211265][ C0] ? queue_work_on+0x12a/0x1f0 [ 1803.211282][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1803.211297][ C0] ? queue_work_on+0x8b/0x1f0 [ 1803.211312][ C0] ? vmpressure+0x2b9/0x340 [ 1803.211325][ C0] ? do_try_to_free_pages+0x362/0x1920 [ 1803.211336][ C0] do_try_to_free_pages+0x362/0x1920 [ 1803.211352][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1803.211366][ C0] try_to_free_mem_cgroup_pages+0x31b/0x740 [ 1803.211379][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 1803.211395][ C0] ? psi_memstall_enter+0x225/0x310 [ 1803.211408][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1803.211424][ C0] try_charge_memcg+0x42a/0xd30 [ 1803.211442][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 1803.211457][ C0] ? memory_min_write+0xd1/0xe0 [ 1803.211476][ C0] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1803.211490][ C0] obj_cgroup_charge_account+0x336/0x670 [ 1803.211507][ C0] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1803.211526][ C0] ? kasan_save_track+0x14/0x30 [ 1803.211542][ C0] kmem_cache_alloc_lru_noprof+0x58f/0x770 [ 1803.211557][ C0] ? xas_nomem+0x101/0x2c0 [ 1803.211575][ C0] ? xas_nomem+0x101/0x2c0 [ 1803.211589][ C0] xas_nomem+0x101/0x2c0 [ 1803.211602][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1803.211628][ C0] shmem_add_to_page_cache+0x6de/0xa70 [ 1803.211647][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 1803.211670][ C0] shmem_alloc_and_add_folio+0x662/0xc20 [ 1803.211690][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1803.211708][ C0] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1803.211728][ C0] shmem_get_folio_gfp+0x67f/0x1610 [ 1803.211748][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1803.211768][ C0] shmem_write_begin+0x1a4/0x3b0 [ 1803.211780][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 1803.211792][ C0] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1803.211808][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1803.211824][ C0] generic_perform_write+0x3c4/0x900 [ 1803.211845][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 1803.211863][ C0] ? file_update_time_flags+0x35c/0x520 [ 1803.211882][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1803.211895][ C0] shmem_file_write_iter+0x10e/0x140 [ 1803.211909][ C0] __kernel_write_iter+0x31a/0xb10 [ 1803.211926][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 1803.211941][ C0] ? cgroup1_freezing+0x12c/0x3b0 [ 1803.211955][ C0] ? cgroup1_freezing+0x136/0x3b0 [ 1803.211968][ C0] dump_user_range+0x413/0xb70 [ 1803.211992][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 1803.212011][ C0] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1803.212028][ C0] ? __pfx_writenote+0x10/0x10 [ 1803.212043][ C0] elf_core_dump+0x29c3/0x3c10 [ 1803.212060][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 1803.212071][ C0] ? kasan_save_stack+0x33/0x60 [ 1803.212084][ C0] ? kasan_save_track+0x14/0x30 [ 1803.212097][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1803.212110][ C0] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 1803.212124][ C0] ? vfs_coredump+0x1dd9/0x55e0 [ 1803.212140][ C0] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 1803.212157][ C0] ? irqentry_exit+0x38a/0x8c0 [ 1803.212171][ C0] ? asm_exc_page_fault+0x26/0x30 [ 1803.212186][ C0] ? 0xffffffffff600000 [ 1803.212210][ C0] ? vfs_coredump+0x2b85/0x55e0 [ 1803.212226][ C0] vfs_coredump+0x2b85/0x55e0 [ 1803.212246][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 1803.212262][ C0] ? __lock_acquire+0x436/0x2890 [ 1803.212277][ C0] ? __lock_acquire+0x436/0x2890 [ 1803.212291][ C0] ? lock_acquire+0x179/0x330 [ 1803.212306][ C0] ? lock_acquire+0x179/0x330 [ 1803.212325][ C0] ? arch_stack_walk+0xa6/0x100 [ 1803.212343][ C0] ? stack_trace_save+0x8e/0xc0 [ 1803.212358][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1803.212370][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 1803.212397][ C0] ? __lock_acquire+0x436/0x2890 [ 1803.212412][ C0] ? kasan_save_stack+0x42/0x60 [ 1803.212440][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 1803.212462][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1803.212480][ C0] ? rcu_is_watching+0x12/0xc0 [ 1803.212493][ C0] get_signal+0x22e1/0x26d0 [ 1803.212515][ C0] ? __pfx_get_signal+0x10/0x10 [ 1803.212533][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 1803.212550][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1803.212569][ C0] ? do_user_addr_fault+0x926/0x1370 [ 1803.212587][ C0] irqentry_exit+0x38a/0x8c0 [ 1803.212603][ C0] asm_exc_page_fault+0x26/0x30 [ 1803.212614][ C0] RIP: 0033:0x7fdff644f6b0 [ 1803.212641][ C0] Code: Unable to access opcode bytes at 0x7fdff644f686. [ 1803.212647][ C0] RSP: 002b:00007fdff741f1f8 EFLAGS: 00010206 [ 1803.212657][ C0] RAX: 0000000000000000 RBX: 00007fdff67e6360 RCX: 00007fdff658f749 [ 1803.212665][ C0] RDX: 00007fdff741f200 RSI: 00007fdff741f330 RDI: 000000000000000b [ 1803.212677][ C0] RBP: 00007fdff6613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1803.212684][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1803.212692][ C0] R13: 00007fdff67e63f8 R14: 00007fdff67e6360 R15: 00007ffd867c1c88 [ 1803.212705][ C0]