last executing test programs: 6m17.287636266s ago: executing program 1 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) epoll_create(0xa3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r3, 0x0, 0x10000000) dup2(r2, r2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000440)={'\x00', 0x0, 0x7fff, 0xffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000280)=0xc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0xe, 0x5, 0x3, 0x4, 0xd9, r7}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newchain={0x2ce0, 0x64, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7ff2}, {0x9, 0xd}, {0xe, 0x7}}, [@f_tcindex={{0xc}, {0xb0, 0x2, [@TCA_TCINDEX_POLICE={0x90, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xbd000000, 0x1, 0xa, 0x7ff, 0x1, {0x9, 0x2, 0x5, 0xfff9, 0x1, 0xcb}, {0x40, 0x1, 0xff80, 0x3ff, 0xfffd, 0x1}, 0x1, 0xca65, 0xfffffff0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0xfc5f, 0x8, 0x100, {0x0, 0x1, 0x6ec, 0x9, 0x5, 0x6}, {0x7, 0x1, 0x5, 0x8, 0x101, 0x2}, 0x80000000, 0x1036b9c5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x9}, @TCA_TCINDEX_ACT={0x4}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf768}]}}, @f_tcindex={{0xc}, {0x4}}, @f_rsvp6={{0xa}, {0x2794, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x31d7e686edcc3c87, 0xc}}, @TCA_RSVP_ACT={0x26f0, 0x6, [@m_csum={0x110, 0xb, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x1ff, 0x1, 0x80000001, 0x9}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x120000, 0x400, 0x7, 0xfe36, 0x80000000}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0x3, 0x2, 0x5}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xff, 0xffffffffffffffff, 0x4, 0x9}, 0x12}}]}, {0x72, 0x6, "1c0bd41880ebb994e56d20c8a03016c47145c1beb1d5a7179f0d1f88fe1a1147dbdd14a9ecebbace66f66f4321ee203722432417c516ef0348985a9741c4fac704834cae19c61650a7022722f478025177ae6c4e152ccf77ec2ab2574e20542ae834082e070020c0eb22c22dad5b"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xd4, 0x1a, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x3, 0x1, 0x0, 0x40}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x81, 0x5, 0x2, 0x5}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7a5e, 0x5, 0x7, 0xdf}, 0x4, r4}}]}, {0x48, 0x6, "42ace6da4d68300d4abd36faaadd814f4507d37af7381ebfeb7162005144271223e41acea811f55e859c536c19884aea7eca101b3808caa409c02aef81dce21e5f8a9115"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1110, 0x1f, 0x0, 0x0, {{0xb}, {0x1050, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x6f43, 0x3, 0x8, 0xfffffff7, 0x7f, 0x9, 0x4, 0x1ff, 0x7, 0x80000000, 0x1ff, 0x3, 0x400, 0x2, 0xd, 0x80000001, 0x200, 0x3, 0x101, 0x8, 0x7f, 0x10000, 0x8, 0x3, 0x222b, 0xaea1, 0x8, 0x7, 0x0, 0x7f, 0x1, 0xdc5a, 0x8, 0x7fad2919, 0x8b, 0x5, 0x70b, 0x5, 0x6, 0x80000001, 0x7, 0xfffffffd, 0x1, 0x9, 0x5bc, 0x8, 0x8, 0x1, 0x3, 0x7, 0x3ff, 0x80000001, 0x6, 0x402c, 0x7f, 0x3, 0xd, 0x5, 0x6, 0xb9b, 0x5, 0x6e5, 0x5, 0xb, 0x8, 0x9, 0xfffffffe, 0x80, 0x40, 0x7, 0x6, 0x81, 0x40, 0x0, 0xc, 0x2, 0xe, 0x49, 0x4, 0x7fff, 0x0, 0xe12, 0x5, 0xfff, 0x81, 0x5, 0x8, 0x5, 0x1, 0x4, 0x7, 0x4, 0x1, 0x3, 0x8, 0xdab1, 0x6, 0x4, 0x101, 0xd, 0x4, 0x1, 0x4, 0x7, 0x3, 0x9, 0x6, 0x7fffffff, 0x0, 0x8, 0x40, 0x2, 0x7, 0x2, 0x5, 0x2, 0x6, 0x7f, 0x2, 0x76, 0x2, 0x401, 0x3, 0x7, 0xe50, 0xfff, 0x1, 0x840, 0x89, 0x5, 0x5ee, 0x7fffffff, 0x3, 0x81, 0xffffff01, 0x6, 0x101, 0xa, 0x2, 0x2, 0x3, 0x20000006, 0x7, 0x10001, 0x84e, 0x7, 0xa02, 0xa, 0x5, 0xfffffff9, 0xc2a2, 0x4, 0xfffffffe, 0x877, 0x400, 0x3, 0x101, 0x7f, 0xffffffff, 0x6b8, 0x5, 0x200, 0x7, 0x2, 0x7, 0x400, 0xcb2, 0x4, 0x27, 0x200000, 0x8, 0xb0, 0x3, 0x0, 0x0, 0x2, 0x2, 0x4, 0x10000000, 0x200, 0x7, 0x1, 0xffffffff, 0xfffff000, 0x4b, 0xfffffffe, 0xe, 0x6, 0x4, 0x1, 0x3, 0x400, 0x800, 0xc, 0x3, 0xa, 0x0, 0x5, 0xffffffff, 0x1, 0x10, 0x1, 0x2, 0x5, 0x6, 0xfffffffc, 0xfff, 0x7f0, 0x1, 0x5, 0x2, 0xc, 0x9, 0x7, 0x9, 0x2fd, 0x4, 0x7, 0xa, 0x8, 0x2, 0x0, 0x81, 0xfffff801, 0x4, 0x81, 0x2, 0x10001, 0x4, 0xc77c0fd0, 0x3, 0x5, 0x3, 0xbbdd, 0x143, 0x97, 0x0, 0xffffffff, 0x4, 0x1, 0x8674, 0x5, 0x3, 0xfffffff9, 0x9, 0x2, 0x6, 0x2000000, 0x8, 0x0, 0x9, 0x84000000, 0x7, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x1, 0x2, 0xb823, 0xc, 0xffffffc0, 0xfffffc7f, 0x9, 0x0, 0xfffff800, 0x10, 0x7, 0x0, 0x8, 0x51, 0x3, 0x4, 0x3, 0xfffffffc, 0x4, 0x4, 0xa, 0x9, 0x50d, 0xe, 0xfffffffe, 0x3, 0xff, 0x8, 0xe17, 0xffff4a00, 0xfffff8c5, 0xe, 0x5, 0x6, 0x6, 0x4, 0x0, 0x9, 0x16a, 0x145, 0x6, 0x10001, 0x8, 0xf, 0x3, 0xddde, 0x6c4, 0xa0a, 0xa1, 0x35ca, 0xfffffff9, 0xfffffffe, 0x7, 0x76c3, 0x6, 0x3, 0xee7, 0x6, 0x59709e07, 0x3ac6d1a7, 0x200, 0x0, 0x1, 0x7, 0x400, 0x0, 0x8, 0x80000000, 0x5, 0xc, 0x8001, 0x80200, 0xa68, 0x8, 0xffffffff, 0x47, 0x6, 0x0, 0x40, 0x1, 0x4b59, 0x79, 0xe, 0x7, 0x2, 0x8, 0x5, 0x101, 0x7fff, 0x3, 0xfffffff8, 0xfff, 0x0, 0x3, 0x6, 0xfffffffd, 0x2, 0x7, 0x8, 0xfffffffa, 0x5, 0x401, 0x8, 0x10000, 0xfffffffe, 0x916e, 0x5, 0x70, 0x1, 0xaed, 0x6, 0xff, 0xa, 0x8e, 0x6, 0x8, 0x7ff, 0x52dd6b49, 0x2, 0xfffffff7, 0x9, 0xd43, 0xd, 0x1, 0x80000000, 0x16, 0x2, 0x9c, 0x1000, 0x4, 0x4, 0x6, 0x10, 0x7, 0x3, 0x258, 0x8, 0x83, 0xc, 0xf5, 0x4, 0x2, 0x0, 0x8, 0x982, 0x8001, 0x9, 0xff, 0x54322db3, 0x7, 0xff, 0x4, 0x8001, 0x8, 0x401, 0xffff, 0x2, 0x4, 0x8, 0x1ff, 0x7, 0x9, 0x75862a08, 0x7ef2, 0xc26, 0x5, 0x5, 0x5, 0x6, 0xd5f, 0x5, 0xffff, 0x180, 0x8, 0x0, 0x3, 0x15f9445e, 0x0, 0x3, 0x0, 0x6, 0x9, 0x1, 0x0, 0x4, 0x7, 0x1, 0x2, 0x3, 0xcf9, 0x80, 0x1, 0x6, 0x3, 0x4, 0x183, 0x8, 0xb4d, 0x8, 0xfd12, 0x1, 0xda, 0x8000, 0x8, 0x6, 0x157c, 0xffff, 0x0, 0x80000000, 0x8, 0xffff1ce5, 0x6, 0x30, 0x1, 0x7, 0xffff1ee7, 0x2, 0x5, 0x7ff, 0x3ff, 0x9, 0x80000000, 0x0, 0xfffffffd, 0x1, 0x2, 0xe, 0x7, 0x1, 0xa, 0x83c3, 0x6, 0x560, 0x9, 0x27b4b8f6, 0xac31, 0xb72, 0xb, 0x2, 0x85a, 0x633, 0x6, 0x3, 0x2, 0x9, 0xfffffffe, 0x986, 0x5, 0x6c, 0xffffffff, 0x5, 0x9, 0xb99, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x67b, 0x0, 0x60, 0x4, 0x8, 0x5, 0x5, 0x5, 0x7, 0x6, 0xfffffffe, 0x9, 0xb, 0xfffffffa, 0x6, 0x5, 0x3138, 0x9, 0x5, 0x101, 0x3, 0x3, 0x8, 0x0, 0x7, 0xeff, 0xde, 0x10, 0x10001, 0x29bc, 0xe, 0x8, 0x7, 0xe, 0x1, 0x5, 0x79e, 0x40, 0xd, 0x7fffffff, 0x3, 0x80000000, 0x7cf72138, 0x3000, 0x3, 0x10001, 0x8000, 0xfffffffb, 0x5, 0x0, 0x2, 0x92, 0x9, 0xfd2, 0x2, 0x4, 0xff80000, 0x6, 0xa1fa, 0x3ff, 0x4, 0x215e82c6, 0xe, 0x10001, 0xc0, 0x7ff, 0x6, 0x56, 0x8001, 0x200, 0xc94d, 0xfffffff9, 0x78000000, 0xc, 0x7, 0x2, 0x4, 0xc, 0x1, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0x22f, 0x1, 0x8, 0x9, 0xbcb, 0x6, 0x401, 0x8, 0x7, 0x8, 0xfffff18d, 0x7fffffff, 0x38, 0x2, 0x0, 0x2, 0x1ff, 0xea, 0x7, 0xcc, 0x3, 0x7, 0x9, 0x0, 0x0, 0x68, 0x5, 0x4, 0x5, 0x9, 0x5, 0x6, 0xfffffffa, 0x2, 0x3, 0x0, 0x3, 0x40000000, 0x7ff, 0x1, 0x0, 0x6, 0x3, 0x6, 0xa39, 0xffffffa3, 0x8, 0x8, 0xcc17, 0x3, 0x0, 0x2, 0x54c8, 0x1, 0x7, 0x6, 0x80000001, 0x5, 0x4, 0x0, 0xd, 0x6, 0x81, 0x8, 0x3, 0x6, 0xc, 0x80000001, 0x200, 0x401, 0xffffffff, 0x80000000, 0x40, 0x8d8, 0x4, 0x3, 0x7f, 0xc238, 0x5, 0x445b, 0xffffff81, 0x2, 0xa, 0x3, 0x2, 0x0, 0x8, 0x9, 0x5, 0x7ff, 0x3, 0x0, 0x3, 0x6, 0x101, 0xb, 0x4, 0x0, 0x182c387f, 0x6, 0x6, 0x1, 0x44, 0x3, 0x2, 0x4, 0x2, 0x8, 0x0, 0xffc00000, 0x3, 0x4, 0x4, 0x5, 0x8, 0xfffffffe, 0x8, 0x4, 0x10, 0x200, 0x4, 0x6, 0x5, 0x9, 0xe99, 0x8, 0x26, 0x2, 0x4, 0xb, 0x8, 0x40c, 0x94d9875a, 0x2, 0x7, 0x8, 0x2db, 0x7, 0x3, 0x200, 0xbae, 0x2, 0x4161, 0x5, 0x8000, 0xfe76, 0x67, 0xffffff40, 0x1, 0x81, 0x2, 0x100, 0x5, 0x4, 0x7ff, 0x3, 0x6, 0x4, 0x8, 0x3, 0x6, 0x1, 0x0, 0x100, 0xb7d4, 0x0, 0x7, 0x2, 0x1, 0x80, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffeb, 0x3, 0x1000, 0x0, 0x1, 0x101, 0xa, 0x10000, 0x1ff, 0x4, 0x7fff, 0x10, 0x100, 0x9, 0xbfc6, 0x2, 0x5, 0x7984, 0x8000, 0x2, 0x7ff, 0x0, 0xc, 0x3, 0x6, 0xffff8000, 0x4, 0xfffffffb, 0x8, 0x14, 0x9, 0x8, 0x1000, 0x0, 0x0, 0x5, 0x40, 0xba54, 0x3, 0x2, 0x6, 0x0, 0x6, 0x8, 0x1, 0x8, 0xf6cf, 0x80000000, 0xfffffffc, 0x2, 0x29, 0x6, 0x0, 0x1, 0x1, 0xff, 0x0, 0x14, 0x2, 0x3384, 0xc8, 0x900, 0x1, 0x2, 0x0, 0xfffffff7, 0x1, 0x4, 0x6, 0xffffff00, 0xffffffff, 0x2, 0x0, 0xfffffffe, 0x1, 0x0, 0x9, 0x3, 0x401, 0x5, 0x7fffffff, 0x9, 0x9, 0x80000000, 0x80, 0x3d27a75e, 0xffffffff, 0x1, 0x6, 0x5, 0x6, 0x9, 0xfffffff9, 0xfffffff8, 0x1, 0x8, 0xfffffc00, 0x7fffffff, 0x7, 0x2, 0x9, 0xff, 0x7f, 0x0, 0x7, 0x2, 0x1, 0x7, 0x2, 0x1000, 0x4, 0xb6, 0x6, 0x93, 0x4, 0x8000, 0x2, 0x101, 0x1, 0x2, 0x40, 0x9, 0xd, 0x5, 0xd0, 0x3, 0x80, 0x0, 0xe, 0x401, 0xdfe, 0x0, 0x7f, 0xffffffff, 0x6, 0x7, 0x9, 0x6, 0x5, 0x6, 0x9, 0x0, 0x1, 0x1, 0xb, 0x8, 0x1, 0xfffffff9, 0x3, 0x7, 0x200, 0xa, 0x87, 0x2, 0x1, 0x0, 0x9, 0x822, 0x4, 0x560, 0x2, 0x2, 0xf, 0xffffffff, 0xa2, 0x324, 0x8001, 0x80000001, 0x2, 0x3, 0x7, 0x8, 0x401, 0xa, 0x6, 0x6, 0x7, 0x18a, 0xd, 0x1000, 0x5, 0xffffffff, 0x2, 0x7, 0x5, 0x5, 0x4, 0x8, 0x3, 0x8, 0x8000, 0xfff, 0xfff, 0x57bb, 0x5, 0x800, 0x3, 0x5, 0x3, 0x0, 0x21, 0x8, 0x4, 0xb7d, 0x3ff, 0x4, 0x1, 0x50e, 0x9, 0x0, 0x9, 0x3, 0x2, 0x3, 0x10, 0x27c, 0x4, 0x8, 0x6, 0x7, 0x0, 0x1, 0xffffffff, 0x2, 0x6, 0x1ff, 0xf90, 0x5, 0x1, 0x4, 0x0, 0x3, 0x1, 0x6, 0x8, 0x7, 0x0, 0x8, 0x7, 0x200, 0x800, 0x9, 0x40, 0xfa, 0x5, 0x5, 0x5, 0x401, 0x9a4, 0x9, 0x1, 0x100, 0x1, 0x28000, 0x2, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}]]}, {0x97, 0x6, "43de866950df344e9c9df43895c8ff100538d12e8758961a8377ae3cd420060d77d3665ebe8562dfed470b9c3e6f3d36a92d2659af874c9353da4a028e1521743df7dce02c83b00fa50fb02f5fdfa9f02a86b1c016f93f7a394e2763808d5bd7c4991070d88b124cf949542087a881e9f29f43bb34d1e7d665ce21a1f81578578382efcbbe9428b5f87fb8d6e47f274aff723f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x108, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3e, 0x8, 0x4, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x4a4, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc14, 0x3, 0x8, 0x4fd, 0x7ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2270, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23f9, 0x2}}]}, {0x85, 0x6, "b67391b6e51ec47b66e91b178ab20faa34a4c65a7cd14d44369457d4691d72a37aff48b0331664f751c402a45a8df0d8d49abfdd69d37c4eff12d01f3ca20626da4214423bf31d8a3937bc9a1acee5d6a01b2d51d6a948650a9bdd6da337a570ef692b735eb2adb24cb886c118e085240357014c86e12af0cbb8cf66514c8a4aaf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x128, 0x1d, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x543c, 0x4, 0xffffffffffffffff, 0x400000, 0x81}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7ff, 0x6, 0x3, 0x1, 0xffffffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0xb2, 0x6, "1d21070b241901332d317d9ff412d95aa84da725a15fbb63f74a2c0f04326faf6515cc769f09ec848cf40ec2ff7e1c4cf75160f3d459343397c3885f201aa829bd9b3a2c9e2962bb945e53effdf44bb98e638eace6a7309a84171ada28ba2d58dca88647cc0a1b09dfe84b70a64bd074d44a21666d01f6c4d5c80d6a6a7b463651e5b682721fc69cbf87b2159565f8af7bf412e7b12cf029ecbf07a8e1de862e4c50e31f8bd62e71ca9bb00484d1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x1038, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x80, 0x9, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xa1ef, 0x1, 0x4, 0x4}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xfff1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x110, 0x9, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7ac29}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8100}]}, {0xb9, 0x6, "0c3ad646087bc9bf4b4f1ce7db4d184df0aee3dd01d24bb7e82f1eca2e7a6c1dada37f566b7836ed716d8e10597252c3751e34d3aa27049187866f3cd6b940a3311d1d2e33cbeee253774695a8f0ea61504e86c241e37de18264a769380e02e2ca68801e046edd3753da8a56443e07156f239e2a7c998df69d7e544b4f40cfe3e53e5a66bb6684500e2e4da188d37b83db7c6f6f354f06ed5ce6dd236164c363be5dae4a75dfad0989bf6192e576f799cdd4026940"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_POLICE={0x7c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x20000000, 0x1, 0x400, 0x200, {0x5, 0x0, 0x9, 0xc, 0x7, 0x5}, {0xd, 0x0, 0x0, 0xff62, 0x8001, 0x3}, 0x800, 0x1ff, 0x200}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x6, 0xfff, 0x3, {0xb5, 0x1, 0x8, 0x9, 0xff00, 0x2}, {0xd, 0x1, 0x100, 0x1000, 0x1000, 0x2}, 0x5, 0x2, 0x3}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x9}}, @TCA_RSVP_SRC={0x14, 0x3, @private2}]}}, @f_tcindex={{0xc}, {0x444, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xd95b}, @TCA_TCINDEX_POLICE={0x430, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x1652, 0x1, 0x6e, 0x101, 0x1, 0x3, 0xffffffff, 0x8, 0xfff, 0x4, 0x5, 0x7fff, 0x8, 0xf9f6, 0x4, 0x7, 0x1000, 0xf, 0x6, 0x7, 0x80, 0x296a, 0x6e, 0x2ef, 0xdb, 0x9, 0xfffffff7, 0x3a77, 0x34, 0x8, 0x4, 0x1, 0x4, 0x800, 0xbb8, 0x5, 0x66a, 0xb, 0xffffff18, 0x7, 0x7, 0x3ff, 0x0, 0x4, 0xf, 0x0, 0x6, 0x7, 0x1, 0x73ce, 0xabb, 0xa, 0x8, 0x2, 0x5, 0x0, 0x5, 0x6, 0x5, 0x3, 0x10001, 0xa, 0x4, 0x760, 0x2, 0x2, 0xfffffff9, 0x0, 0x2, 0x7fffffff, 0x7, 0x5, 0x7227ecf1, 0x1, 0x8001, 0xe, 0x7ff, 0x81, 0x4, 0x5, 0x7, 0x8e, 0xfffffff9, 0x7fffffff, 0xf7, 0x4, 0x9, 0x3, 0x3, 0x75, 0x2, 0x9, 0x9, 0x7ff, 0x2, 0x2c5, 0x407, 0x200, 0x47, 0x0, 0xfffffc00, 0x5, 0x1, 0x7fffffff, 0x7ff, 0xfff, 0xd02, 0x5, 0x46c, 0x8, 0x2, 0x401, 0x0, 0x4, 0x9, 0xb, 0x8, 0x40, 0xc, 0x2, 0x3, 0x1ff, 0x7, 0x9, 0x1, 0x200, 0x1, 0x5, 0x7, 0x4, 0xb, 0x8001, 0x3, 0x4, 0x423, 0x6, 0x9, 0x2, 0xef, 0x384f, 0x2, 0x10000, 0x10001, 0xa3, 0xe14, 0x7, 0xfff, 0x8be0, 0x60, 0x6, 0x7, 0xfffffffc, 0x5, 0x7, 0x7fff, 0x8001, 0x4, 0x8, 0x224868ef, 0xf660, 0x4, 0x5, 0xf6d6, 0xd7e, 0x0, 0x7, 0xf632, 0x82f, 0x9, 0xfc70, 0x7f, 0x0, 0x3, 0x6, 0x80000001, 0x1, 0x2, 0x3, 0x5, 0x4, 0x9, 0x7, 0x4, 0x0, 0x9, 0x0, 0xc5cb, 0x6, 0x4, 0x7, 0x100, 0x0, 0x1, 0x81, 0x5, 0x1, 0xc, 0x800, 0x6a0687f, 0x80000001, 0x0, 0x81, 0xff, 0x4683, 0x0, 0x7, 0x9, 0x0, 0x7, 0x3, 0x7ff, 0x6434, 0x39c4, 0x100, 0x4c, 0x7f, 0x9829, 0xd, 0x1000, 0x83b5, 0x8, 0x3, 0x2, 0x4f28, 0x7, 0x1, 0xb3f00000, 0x4, 0x0, 0x7, 0x8000, 0x3, 0x80000001, 0x8, 0x1, 0x0, 0x1, 0xeb, 0x5, 0x9, 0x3, 0x8, 0x7, 0x3, 0x80, 0xb, 0x0, 0x40, 0x12, 0x5, 0x8, 0x7, 0x6, 0x9a]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}]}}]}, 0x2ce0}, 0x1, 0x0, 0x0, 0x20044451}, 0x801) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 6m16.781477633s ago: executing program 1 (id=1990): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x796, 0x0, 0x0, 0x7fff}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000005c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x3, 0x0, 0x100]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 6m16.684281719s ago: executing program 1 (id=1993): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r1, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800010010000000100009"], 0x54}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m16.510124564s ago: executing program 1 (id=1996): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') 6m16.2459189s ago: executing program 1 (id=1998): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x41414270, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 6m14.595276581s ago: executing program 1 (id=2002): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6m14.046895728s ago: executing program 32 (id=2002): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 5m44.222419121s ago: executing program 5 (id=2194): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) write$cgroup_int(r3, &(0x7f0000000200)=0x7, 0x12) 5m44.151438711s ago: executing program 5 (id=2195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) socket(0x1d, 0x2, 0x6) r2 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, &(0x7f0000000500)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x1b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 5m42.469966335s ago: executing program 5 (id=2207): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 5m41.91269454s ago: executing program 5 (id=2212): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x31364d4e, [], [0x8200], 0x1}}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2000, 0xa3) 5m40.857552714s ago: executing program 5 (id=2217): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 5m38.525058733s ago: executing program 5 (id=2227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 5m22.397390562s ago: executing program 33 (id=2227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 4m21.443474617s ago: executing program 3 (id=2402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) socket(0x1d, 0x2, 0x6) r2 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, &(0x7f0000000500)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x1b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 4m17.390700914s ago: executing program 3 (id=2408): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x41414270, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 4m15.731860662s ago: executing program 3 (id=2413): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x6, 0x20202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x2, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x39be}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8001, 0x0, r3, 0x4, '\x00', 0x0, r4, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4m14.015828406s ago: executing program 3 (id=2417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) socket(0x1d, 0x2, 0x6) r2 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, &(0x7f0000000500)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x1b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 4m9.756663137s ago: executing program 3 (id=2423): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() socket$inet_udplite(0x2, 0x2, 0x88) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xc0020000, 0xe7ffffff, 0x2, 0x54ed}}) 4m8.305366148s ago: executing program 3 (id=2426): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x41414270, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 3m52.130697283s ago: executing program 34 (id=2426): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x41414270, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 3m31.878367234s ago: executing program 2 (id=2463): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) syz_open_dev$sndctrl(0x0, 0x9, 0x101040) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x400, 0x7fffffff}, {}, {0xff}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time={0x4b57854}, {}, {}, @control}], 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="e9cf", 0x2) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) 3m28.736827688s ago: executing program 2 (id=2468): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x2, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) 3m26.666808122s ago: executing program 2 (id=2471): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f", 0x2) sendto$inet6(r4, &(0x7f0000000800)="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", 0x5ab, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x4e23, @broadcast}}) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f00000c1000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x4010, r8, 0xab824000) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3m25.51560165s ago: executing program 2 (id=2475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') 3m20.933967743s ago: executing program 2 (id=2476): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000100000053"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x607a9e0a432a4785) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4a9a8af7, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m15.400553982s ago: executing program 2 (id=2482): openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xfff, 0x5, 0x3ff, 0xf5e}, 0x8) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sigaltstack(&(0x7f0000000040)={0x0}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 2m58.167184809s ago: executing program 35 (id=2482): openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xfff, 0x5, 0x3ff, 0xf5e}, 0x8) sendto$inet(r1, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sigaltstack(&(0x7f0000000040)={0x0}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 31.291378277s ago: executing program 7 (id=2686): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(r0, 0x0, 0x0) getgroups(0x0, 0x0) keyctl$chown(0x4, r4, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r5, 0x5453, 0x0) 25.615944592s ago: executing program 7 (id=2690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) socket(0x1d, 0x2, 0x6) r2 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, &(0x7f0000000500)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x1b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 21.808091433s ago: executing program 7 (id=2696): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 20.489751424s ago: executing program 6 (id=2698): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09000000040000000400", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r7, &(0x7f0000000580), 0x0}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 19.088499958s ago: executing program 6 (id=2701): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/163, 0xa3}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f0000000340)='/\x00\x01\x00H\x98', 0x0) tkill(r1, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x1, &(0x7f0000000100)=[0xee01]) getgid() 19.031985167s ago: executing program 8 (id=2702): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r5 = openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) r6 = socket$caif_stream(0x25, 0x1, 0x5) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) syz_open_dev$vim2m(0x0, 0x4, 0x2) 17.777758265s ago: executing program 4 (id=2704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0x6}}}}, 0x7) madvise(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x11) syz_open_procfs$namespace(0x0, &(0x7f0000002d80)='ns/mnt\x00') r3 = syz_open_dev$mouse(0x0, 0x2, 0x608042) timerfd_settime(r3, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, r5, 0x3}, 0xc) 16.423826567s ago: executing program 8 (id=2705): syz_open_dev$usbfs(0x0, 0x201, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x1f0, 0xffffff80, 0x178, 0x1f0, 0x178, 0x368, 0x230, 0x258, 0x368, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x190, 0x1f0, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0x0, 0xffffffff, 0xff000000], @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, [0xffffffff, 0xff, 0xff, 0xff000000], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xff000000], @ipv6=@empty, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 0x0, 0xe1d7, 0xff, 0x4e20, 0x4e24, 0x4e22, 0x4e23, 0x271d, 0x1080}, 0xc0, 0x20}}, @common=@unspec=@cluster={{0x30}, {0x0, 0x0, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x13e, 0x4, 0x5, 0x5, 0x8}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000], [], 'veth1_to_bridge\x00', 'veth1\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0x118, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x2, 0x1, [0x6, 0x6, 0x6, 0x4, 0x53f1, 0xab4, 0x0, 0x2, 0x0, 0x9, 0x5, 0x3, 0x0, 0xb1, 0x1, 0x6], 0x10}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [0x0, 0xff000000], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0x6, 0x7fffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 16.099937542s ago: executing program 0 (id=2706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) socket(0x1d, 0x2, 0x6) r2 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, &(0x7f0000000500)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x1b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 13.743150962s ago: executing program 4 (id=2707): syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 13.739978013s ago: executing program 6 (id=2708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000000070000000100010009000000010000005700e000ade34e0aae71cdafcb8c5b0d10bba179b623b750cccd75a5581162cbd38e6f66f31e18f0927835be2c9de90af58c206c3ca321f83b08a87e0ad7cca8f6b244e072b3975fa75fcf852a7c0e2c6db69d09a997a0cabc686f238d8a5fffc6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x48) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x5000}}, "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", "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"}) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 13.68794615s ago: executing program 8 (id=2709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000300)=""/146) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) openat$cgroup_pressure(r4, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r6 = openat$cgroup_pressure(r4, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f00000001c0)={'some', 0x20, 0x6, 0x20, 0x10000100ffffd}, 0x2f) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) capset(0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 11.862089967s ago: executing program 4 (id=2710): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x1c, 0x1}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xff], 'geneve0\x00', 'geneve1\x00', {0x80}}, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x1, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0xffffff00, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'nr0\x00', 'caif0\x00', {0xff}, {}, 0x1, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) vmsplice(r1, &(0x7f0000001300)=[{&(0x7f0000000140)="84", 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0x2, [{}, {}, {}, {0x6}, {0x0, 0x4000}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 11.585251411s ago: executing program 6 (id=2711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}]}, 0x38}}, 0x44080) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000540)=""/188) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x10000) recvmmsg(r8, &(0x7f00000005c0), 0x0, 0x0, 0x0) sendfile(r8, r7, 0x0, 0xffefffff) 11.315406196s ago: executing program 0 (id=2712): syz_usb_connect$hid(0x3, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020666604880000000000010902240001000000000904f3ff0003000100092100800001224406090581030004030000"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x70bd2d, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x19, 0x0, @fd=r7, 0x0, 0x0, 0x9, 0x18, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) 7.527458738s ago: executing program 7 (id=2713): r0 = socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0xc, 0x110, 0xc}], 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x69}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xc5c}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x54}}, 0x24008040) 7.298090919s ago: executing program 0 (id=2714): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB='a@']) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 7.180105618s ago: executing program 8 (id=2715): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x47524247, 0x2, @discrete={0x7, 0x6}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2) ftruncate(r2, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r2, 0x0) socket(0x40000000015, 0x5, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) 6.95954263s ago: executing program 4 (id=2716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x88, &(0x7f0000000340)=""/4096, &(0x7f00000000c0)=0x1000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) read$msr(r2, &(0x7f0000001340)=""/243, 0xf3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20000080) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000180)={{@host}, 0x0, 0x800000000000002, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700"], 0x58}, 0x1, 0x2}, 0x0) 5.719163101s ago: executing program 0 (id=2717): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x225162, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000100), 0x4000000000000b1, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getrandom(0x0, 0x0, 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000680)={'fscrypt:', @auto=[0x66, 0x34, 0x30, 0x62, 0x37, 0x38, 0x61, 0x39, 0x36, 0x30, 0x62, 0x30, 0x37, 0x66, 0x65, 0x35]}, &(0x7f00000006c0)={0x0, "8b3f9afdce3f7097b15a80f02f4dd8fb7049b5c0e585c7a6c5867274028bae0afc105b456dd7527e0e94686e2e5d5cfd1e0bb56e0e1984a039a88e87be470842", 0x12}, 0x48, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 5.488104426s ago: executing program 8 (id=2718): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000001, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/202) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fb00) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg2\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x6, [{0x10, 0x3}, {0x1, 0xa}, {0x0, 0x216d}, {0x81, 0x7ec}, {0x0, 0xfff}, {0x7fffffff, 0x7}]}}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x21}, 0x10) r6 = socket(0x25, 0x1, 0x5) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r7, 0x541b, 0xffffffffffffffff) 5.387492173s ago: executing program 4 (id=2719): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @loopback}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) dup3(r6, r5, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r4, 0x0, r4) 4.95111906s ago: executing program 6 (id=2720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r3, r4, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 3.700847464s ago: executing program 0 (id=2721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000001010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500"], 0x38}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 3.69996365s ago: executing program 7 (id=2722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x1080) socket$inet6_sctp(0xa, 0x801, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40810}, 0x24000004) socket$igmp6(0xa, 0x3, 0x2) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) read$watch_queue(r7, &(0x7f00000002c0)=""/48, 0x71) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x100000000000f7) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08", 0x2f}], 0x1) keyctl$revoke(0x3, r6) 3.695221483s ago: executing program 8 (id=2723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{}, [@remote, @rose, @null, @bcast, @bcast, @netrom, @default, @default]}, &(0x7f0000000200)=0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) gettid() open(&(0x7f0000000000)='./file0\x00', 0x41, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x200000100000011, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000640)={0x1, @vbi={0x2, 0xffffffff, 0x360, 0x4745504d, [0x3, 0x100], [0x6, 0x3], 0x108}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x400, 0x3d8, 0x3d8, 0x400, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xb3c738a26429eda, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0xc1, 0x3ff, 0x1000, 0x9, 0x9, 0x6, 0x7ff, 0x8, 0x945, 0x1, 0x6, 0x9, 0x632, 0x8, 0x3], 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x72d, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8890) 1.065921099s ago: executing program 7 (id=2724): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 275.412534ms ago: executing program 6 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x3, 0x0, @void}, 0x62) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r7, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) 1.979465ms ago: executing program 0 (id=2726): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000001680)=0xffffffffffffff40, 0x4) close(0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) 0s ago: executing program 4 (id=2727): openat$iommufd(0xffffffffffffff9c, 0x0, 0x400000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(r0, 0x6, &(0x7f0000000140)={0x9, 0x87}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): de 0x0c1a failed: -4 [ 610.736422][T12288] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.742703][T12288] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 611.149332][ T5871] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 611.330481][T12306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 611.336727][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 611.343127][ T5871] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 611.354381][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.364695][T12306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 611.375193][ T5871] usb 2-1: config 0 descriptor?? [ 611.383523][T12306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 611.390210][T12306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 611.615644][ T5871] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 612.047370][ T5869] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 612.207937][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 612.288431][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.437430][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.484137][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 612.515459][ T5869] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 612.532552][T12328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.532739][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.550563][T12328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.565251][ T5869] usb 4-1: config 0 descriptor?? [ 612.586657][T12329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.015941][ T5869] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0008/input/input16 [ 613.136431][T12334] block device autoloading is deprecated and will be removed. [ 613.175517][ T5869] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0008/input/input17 [ 613.204491][ T5869] kye 0003:0458:5011.0008: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 613.217436][ T5832] Bluetooth: hci3: unknown advertising packet type: 0x31 [ 613.217504][ T5832] Bluetooth: hci3: Dropping invalid advertising data [ 613.231865][ T5832] Bluetooth: hci3: Malformed LE Event: 0x02 [ 613.280539][ T29] audit: type=1400 audit(1740157596.601:909): avc: denied { read } for pid=12337 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 613.334551][ T5871] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 613.389023][ T5871] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 613.427127][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 613.443933][ T5871] asix 2-1:0.0: probe with driver asix failed with error -71 [ 613.484561][ T5871] usb 2-1: USB disconnect, device number 42 [ 613.512036][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 613.597541][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 613.603628][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 613.614801][ T29] audit: type=1400 audit(1740157596.901:910): avc: denied { mount } for pid=12344 comm="syz.2.1883" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 613.663721][ T29] audit: type=1400 audit(1740157596.966:911): avc: denied { read write } for pid=12344 comm="syz.2.1883" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 613.686742][ T29] audit: type=1400 audit(1740157596.966:912): avc: denied { open } for pid=12344 comm="syz.2.1883" path="/344/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 613.728900][ T29] audit: type=1400 audit(1740157596.966:913): avc: denied { ioctl } for pid=12344 comm="syz.2.1883" path="/344/file0/file0" dev="fuse" ino=4 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 613.753343][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.774294][ T29] audit: type=1400 audit(1740157597.004:914): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 613.869980][ T29] audit: type=1400 audit(1740157597.144:915): avc: denied { write } for pid=12348 comm="syz.2.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 614.114468][ C1] kye 0003:0458:5011.0008: usb_submit_urb(ctrl) failed: -1 [ 614.775239][ T973] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 614.931742][ T29] audit: type=1400 audit(1740157598.145:916): avc: denied { connect } for pid=12373 comm="syz.0.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 614.966752][ T29] audit: type=1400 audit(1740157598.145:917): avc: denied { name_connect } for pid=12373 comm="syz.0.1896" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 614.992287][ T29] audit: type=1400 audit(1740157598.145:918): avc: denied { bind } for pid=12372 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 615.329318][ T5869] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 615.388559][T12400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1907'. [ 615.584525][T12403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.596571][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 615.611788][ T5869] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 615.620195][ T5869] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.633892][ T5869] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.643713][ T5869] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.661882][ T5869] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.685649][ T5869] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.715943][ T5871] usb 4-1: USB disconnect, device number 36 [ 615.718032][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.137190][ T5869] usb 2-1: usb_control_msg returned -32 [ 616.152475][ T5869] usbtmc 2-1:16.0: can't read capabilities [ 616.250295][T12413] ufs: Invalid option: "'&" or missing value [ 616.256353][T12413] ufs: wrong mount options [ 616.627001][T12427] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 616.650633][ T5871] usb 2-1: USB disconnect, device number 43 [ 616.940621][T12434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'. [ 617.012766][T12434] netlink: 'syz.0.1919': attribute type 47 has an invalid length. [ 617.152213][T12436] overlayfs: failed to clone upperpath [ 617.672527][ T5821] Bluetooth: hci4: unexpected event for opcode 0x080d [ 617.946992][T12452] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 618.010185][T12456] netlink: 'syz.1.1929': attribute type 4 has an invalid length. [ 618.026703][T12456] netlink: 'syz.1.1929': attribute type 4 has an invalid length. [ 618.227759][T12466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1934'. [ 618.990799][T12476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 619.002244][T12476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 619.018076][T12476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 619.028547][T12476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 619.059781][T12497] input: syz0 as /devices/virtual/input/input18 [ 619.284591][T12511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.358049][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 619.358064][ T29] audit: type=1400 audit(1740157602.279:928): avc: denied { write } for pid=12514 comm="syz.3.1955" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 619.543064][ T29] audit: type=1400 audit(1740157602.307:929): avc: denied { open } for pid=12514 comm="syz.3.1955" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 619.582857][ T29] audit: type=1400 audit(1740157602.307:930): avc: denied { read append } for pid=12514 comm="syz.3.1955" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 619.615018][ T29] audit: type=1800 audit(1740157602.364:931): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1955" name="/" dev="9p" ino=2 res=0 errno=0 [ 619.700616][ T29] audit: type=1400 audit(1740157602.588:932): avc: denied { map } for pid=12518 comm="syz.3.1956" path="socket:[29478]" dev="sockfs" ino=29478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 619.784126][ T29] audit: type=1400 audit(1740157602.644:933): avc: denied { name_bind } for pid=12520 comm="syz.4.1957" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 619.792659][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 619.810573][ T29] audit: type=1400 audit(1740157602.644:934): avc: denied { name_connect } for pid=12520 comm="syz.4.1957" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 619.910145][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1962'. [ 620.006535][ T29] audit: type=1400 audit(1740157602.887:935): avc: denied { append } for pid=12534 comm="syz.3.1964" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 620.070233][ T29] audit: type=1400 audit(1740157602.953:936): avc: denied { execute_no_trans } for pid=12504 comm="syz.0.1950" path="/488/file0" dev="tmpfs" ino=2650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 620.147188][T12535] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 620.196140][ T29] audit: type=1400 audit(1740157603.074:937): avc: denied { create } for pid=12542 comm="syz.0.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 620.321910][ T51] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 620.482273][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 620.499014][ T51] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 620.542890][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.607955][ T51] usb 3-1: Product: syz [ 620.655849][ T51] usb 3-1: Manufacturer: syz [ 620.660579][ T51] usb 3-1: SerialNumber: syz [ 620.675649][T12553] overlayfs: failed to clone upperpath [ 620.685883][ T51] usb 3-1: config 0 descriptor?? [ 620.696094][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 620.712947][ T51] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 621.225985][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 621.230460][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 621.232154][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 622.576187][T12591] blktrace: Concurrent blktraces are not allowed on loop2 [ 622.603395][T12591] blktrace: Concurrent blktraces are not allowed on loop2 [ 622.923964][ T51] gspca_ov534_9: reg_w failed -71 [ 623.105275][T12605] netlink: 'syz.1.1993': attribute type 9 has an invalid length. [ 623.113799][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 623.315188][ T51] gspca_ov534_9: Unknown sensor 0000 [ 623.315249][ T51] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 623.321730][T12612] Process accounting resumed [ 623.334157][ T51] usb 3-1: USB disconnect, device number 34 [ 625.072334][T12621] blktrace: Concurrent blktraces are not allowed on loop4 [ 625.207111][T12624] blktrace: Concurrent blktraces are not allowed on loop4 [ 625.257953][ T6056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.292244][T12626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.315701][T12622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.322238][T12622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.328842][T12622] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 625.335331][T12622] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 625.412833][T12626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.593995][T12626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.802455][ T6056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.999053][ T6056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.028893][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.040375][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.051487][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.064375][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.078702][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 626.087130][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.110345][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 626.110358][ T29] audit: type=1400 audit(1740157608.603:947): avc: denied { mounton } for pid=12646 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 626.121124][T12649] overlayfs: failed to clone upperpath [ 626.144088][T12646] lo speed is unknown, defaulting to 1000 [ 626.198308][ T6056] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.209211][ T29] audit: type=1400 audit(1740157608.696:948): avc: denied { watch } for pid=12648 comm="syz.4.2011" path="/448/bus" dev="tmpfs" ino=2428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 626.260998][T12646] lo speed is unknown, defaulting to 1000 [ 626.342519][T12653] blktrace: Concurrent blktraces are not allowed on loop8 [ 626.350101][T12653] blktrace: Concurrent blktraces are not allowed on loop8 [ 626.376317][ T29] audit: type=1400 audit(1740157608.836:949): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 626.435510][ T29] audit: type=1400 audit(1740157608.902:950): avc: denied { search } for pid=5487 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.497083][ T6056] bridge_slave_1: left allmulticast mode [ 626.503300][ T6056] bridge_slave_1: left promiscuous mode [ 626.510912][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.519962][ T29] audit: type=1400 audit(1740157608.902:951): avc: denied { read } for pid=5487 comm="dhcpcd" name="n105" dev="tmpfs" ino=4154 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 626.552770][ T29] audit: type=1400 audit(1740157608.902:952): avc: denied { open } for pid=5487 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=4154 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 626.638450][ T6056] bridge_slave_0: left allmulticast mode [ 626.641039][ T29] audit: type=1400 audit(1740157608.921:953): avc: denied { getattr } for pid=5487 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=4154 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 626.644600][ T6056] bridge_slave_0: left promiscuous mode [ 627.257535][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.516621][ T973] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 627.542366][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 627.548451][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 627.565510][T11287] Bluetooth: hci2: command 0x0406 tx timeout [ 627.567574][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 628.172149][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 628.179167][ T973] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 628.188224][ T973] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 628.197963][ T973] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 628.208657][ T973] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 628.219020][ T973] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 628.234562][ T973] usb 4-1: config 1 interface 0 has no altsetting 0 [ 628.241929][ T973] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 628.253593][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.271708][ T973] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 628.280025][ T6056] dvmrp0 (unregistering): left allmulticast mode [ 628.308008][ T5821] Bluetooth: hci0: command tx timeout [ 628.466754][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.479072][ T6056] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 628.492232][ T6056] bond0 (unregistering): Released all slaves [ 628.505092][ T6056] bond1 (unregistering): Released all slaves [ 628.561295][ T973] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 628.571074][T12674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.575274][ T973] usb 4-1: USB disconnect, device number 37 [ 628.577541][T12674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 628.588926][T12674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 628.594926][T12674] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.601039][T12674] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 628.607057][T12674] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 628.716980][ T29] audit: type=1400 audit(1740157611.044:954): avc: denied { read } for pid=12685 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.797364][ T29] audit: type=1400 audit(1740157611.063:955): avc: denied { open } for pid=12685 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.832076][ T29] audit: type=1400 audit(1740157611.063:956): avc: denied { getattr } for pid=12685 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.750738][T12674] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 630.809260][ T5826] Bluetooth: hci0: command 0x040f tx timeout [ 630.815357][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 630.821478][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 630.827534][T11287] Bluetooth: hci1: command 0x0406 tx timeout [ 630.830912][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 630.919973][T12704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.041386][T12646] chnl_net:caif_netlink_parms(): no params data found [ 632.218919][T12740] overlayfs: failed to clone upperpath [ 632.307727][T12737] blktrace: Concurrent blktraces are not allowed on loop4 [ 632.360538][T12737] blktrace: Concurrent blktraces are not allowed on loop4 [ 632.516377][T12646] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.534521][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 632.543603][T12646] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.562861][T12646] bridge_slave_0: entered allmulticast mode [ 632.596459][T12646] bridge_slave_0: entered promiscuous mode [ 632.604353][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 632.604367][ T29] audit: type=1400 audit(1740157614.673:965): avc: denied { read write } for pid=12756 comm="syz.3.2036" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 632.636883][T12646] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.652616][T12646] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.671730][T12646] bridge_slave_1: entered allmulticast mode [ 632.692653][T12646] bridge_slave_1: entered promiscuous mode [ 632.818070][ T29] audit: type=1400 audit(1740157614.673:966): avc: denied { open } for pid=12756 comm="syz.3.2036" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 633.029076][T12715] Bluetooth: hci0: command 0x040f tx timeout [ 633.525993][T12646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.665232][T12646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.695153][ T29] audit: type=1400 audit(1740157615.693:967): avc: denied { write } for pid=12789 comm="syz.2.2046" lport=48058 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 633.799807][ T29] audit: type=1400 audit(1740157615.693:968): avc: denied { setopt } for pid=12789 comm="syz.2.2046" lport=48058 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 634.250966][ T29] audit: type=1400 audit(1740157615.889:969): avc: denied { ioctl } for pid=12801 comm="syz.2.2051" path="socket:[31803]" dev="sockfs" ino=31803 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 634.293090][T12646] team0: Port device team_slave_0 added [ 634.309021][T12646] team0: Port device team_slave_1 added [ 634.324586][T12807] block device autoloading is deprecated and will be removed. [ 634.394986][ T6056] hsr_slave_0: left promiscuous mode [ 634.412845][ T6056] hsr_slave_1: left promiscuous mode [ 634.427064][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.439230][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.470136][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.813852][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.841165][ T6056] veth1_macvtap: left promiscuous mode [ 634.851454][ T6056] veth0_macvtap: left promiscuous mode [ 634.857083][ T6056] veth1_vlan: left promiscuous mode [ 634.863009][ T6056] veth0_vlan: left promiscuous mode [ 635.238577][T12715] Bluetooth: hci0: command 0x040f tx timeout [ 635.285571][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 635.323555][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 635.798757][T12839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.848209][T12646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.869217][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2058'. [ 635.876625][T12646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.916438][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2058'. [ 636.242528][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 636.420125][T12646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.432430][T12646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.439492][T12646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.527470][T12646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.591931][T12843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 636.598757][T12843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 636.604882][T12843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 636.610876][T12843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 636.616972][T12843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 636.729705][ T29] audit: type=1804 audit(1740157618.527:970): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2064" name="/newroot/372/file0" dev="tmpfs" ino=2003 res=1 errno=0 [ 636.764364][ T29] audit: type=1804 audit(1740157618.565:971): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2064" name="/newroot/372/file0" dev="tmpfs" ino=2003 res=1 errno=0 [ 636.822620][T12860] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -11226, delta: 1 [ 636.867857][T12860] ref_ctr increment failed for inode: 0x7d3 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a4aee00 [ 636.884907][T12646] hsr_slave_0: entered promiscuous mode [ 636.904353][T12646] hsr_slave_1: entered promiscuous mode [ 637.545047][T12646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 637.566603][T12646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 637.700083][T12646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 637.725793][T12646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 637.734041][T12898] overlayfs: failed to clone upperpath [ 638.624420][T12904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.630449][T12904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 638.636600][T12904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.642621][T12904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 638.648700][T12904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 638.715681][T12646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.748194][T12646] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.787695][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.794764][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.955340][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.962487][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.015317][T12909] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 639.149257][ T29] audit: type=1400 audit(1740157620.791:972): avc: denied { egress } for pid=5869 comm="kworker/1:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 639.229200][ T29] audit: type=1400 audit(1740157620.800:973): avc: denied { sendto } for pid=5869 comm="kworker/1:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 639.491424][ T29] audit: type=1800 audit(1740157621.109:974): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2084" name="bus" dev="overlay" ino=2016 res=0 errno=0 [ 640.258854][ T29] audit: type=1400 audit(1740157621.820:975): avc: denied { sys_chroot } for pid=12947 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 640.378902][T12646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.398051][ T29] audit: type=1400 audit(1740157621.820:976): avc: denied { setgid } for pid=12947 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 640.458568][ T29] audit: type=1400 audit(1740157621.820:977): avc: denied { setrlimit } for pid=12947 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 640.549546][ T29] audit: type=1400 audit(1740157622.007:978): avc: denied { getopt } for pid=12956 comm="syz.0.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 641.317357][ T5144] Bluetooth: hci0: command 0x040f tx timeout [ 641.317622][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 641.323449][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 641.323477][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 641.323505][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 641.745474][T12646] veth0_vlan: entered promiscuous mode [ 641.780301][T12646] veth1_vlan: entered promiscuous mode [ 641.843044][T12646] veth0_macvtap: entered promiscuous mode [ 641.860943][T12646] veth1_macvtap: entered promiscuous mode [ 642.004463][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.051469][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.606583][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.653775][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.724631][T12646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.869195][T13006] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 642.888147][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.917436][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.918474][T13011] blktrace: Concurrent blktraces are not allowed on loop4 [ 642.934620][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.934639][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.935579][T12646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.973218][T13011] blktrace: Concurrent blktraces are not allowed on loop4 [ 643.223395][T12646] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.263905][T12646] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.272618][T12646] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.304149][T12646] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.462628][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.503906][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.531323][ T5832] Bluetooth: hci0: command 0x040f tx timeout [ 643.570689][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.608185][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.699119][T13032] sd 0:0:1:0: device reset [ 643.722589][ T29] audit: type=1400 audit(1740157625.047:979): avc: denied { ioctl } for pid=13026 comm="syz.2.2107" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 643.851874][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 643.933040][ T29] audit: type=1400 audit(1740157625.066:980): avc: denied { mounton } for pid=12646 comm="syz-executor" path="/root/syzkaller.iZXTOJ/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 644.097781][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 644.103486][ T29] audit: type=1400 audit(1740157625.066:981): avc: denied { mounton } for pid=12646 comm="syz-executor" path="/root/syzkaller.iZXTOJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 644.157265][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 644.196461][ T8] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 644.235506][ T8] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 644.260898][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 644.297997][ T8] usb 4-1: string descriptor 0 read error: -22 [ 644.308090][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 644.335224][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.380556][T13029] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 644.533211][T13056] xt_hashlimit: max too large, truncated to 1048576 [ 644.540853][T13056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.816994][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 644.817011][ T29] audit: type=1400 audit(1740157626.104:986): avc: denied { bind } for pid=13070 comm="syz.4.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 644.843797][ T8] appletouch 4-1:1.0: Failed to request geyser raw mode [ 644.860735][T13073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.880652][ T29] audit: type=1400 audit(1740157626.141:987): avc: denied { listen } for pid=13070 comm="syz.4.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 644.899613][ T8] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 644.928601][ T8] usb 4-1: USB disconnect, device number 38 [ 644.943944][ T29] audit: type=1400 audit(1740157626.216:988): avc: denied { accept } for pid=13070 comm="syz.4.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 645.129032][T13090] netlink: 'syz.0.2120': attribute type 1 has an invalid length. [ 645.170802][T13090] 8021q: adding VLAN 0 to HW filter on device bond10 [ 645.209273][T13090] ip6erspan0: entered promiscuous mode [ 645.218613][T13090] bond10: (slave ip6erspan0): making interface the new active one [ 645.228852][T13090] bond10: (slave ip6erspan0): Enslaving as an active interface with an up link [ 645.403230][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 645.544947][ T29] audit: type=1400 audit(1740157626.777:989): avc: denied { mounton } for pid=13107 comm="syz.3.2124" path="/377/file1/bus" dev="autofs" ino=32922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 645.576765][ T29] audit: type=1400 audit(1740157626.777:990): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 645.608306][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 645.625018][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 645.640556][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 645.658743][ T8] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 645.673135][ T8] usb 6-1: Product: syz [ 645.677761][ T8] usb 6-1: Manufacturer: syz [ 645.683143][ T8] usb 6-1: SerialNumber: syz [ 645.689081][ T8] usb 6-1: config 0 descriptor?? [ 645.697182][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 645.923339][ T8] gspca_zc3xx: reg_w_i err -71 [ 646.124232][ T29] audit: type=1400 audit(1740157627.320:991): avc: denied { watch watch_reads } for pid=13128 comm="syz.4.2132" path="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 646.285434][ T29] audit: type=1400 audit(1740157627.470:992): avc: denied { bind } for pid=13133 comm="syz.3.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 646.567230][ T8] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 646.580963][ T8] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 646.636730][ T8] usb 6-1: USB disconnect, device number 2 [ 646.961635][T13150] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 647.238946][T13157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.263391][T13157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.312205][T13157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.393469][T13157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.454914][T13157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 648.627242][T13175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 648.633298][T13175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 648.639229][T13175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.645254][T13175] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 648.651179][T13175] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 649.510094][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2153'. [ 649.590289][ T29] audit: type=1400 audit(1740157630.556:993): avc: denied { bind } for pid=13198 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 650.405235][T12715] Bluetooth: hci2: command 0x0406 tx timeout [ 650.768279][ T29] audit: type=1400 audit(1740157631.548:994): avc: denied { recv } for pid=13203 comm="syz.4.2155" saddr=10.128.0.169 src=35912 daddr=10.128.1.178 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 650.887522][T12715] Bluetooth: hci3: command 0x0406 tx timeout [ 650.894566][ T5144] Bluetooth: hci4: command 0x0405 tx timeout [ 650.903433][ T5144] Bluetooth: hci0: command 0x040f tx timeout [ 650.903927][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 651.171671][T13220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 651.181835][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2165'. [ 651.341876][ T29] audit: type=1400 audit(1740157632.203:995): avc: denied { execute } for pid=13238 comm="syz.3.2166" path="/dev/loop7" dev="devtmpfs" ino=3003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 651.991921][ T29] audit: type=1400 audit(1740157632.811:996): avc: denied { write } for pid=13263 comm="syz.2.2170" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 652.694188][ T29] audit: type=1400 audit(1740157632.839:997): avc: denied { listen } for pid=13263 comm="syz.2.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 652.714227][ T29] audit: type=1400 audit(1740157632.942:998): avc: denied { wake_alarm } for pid=13267 comm="syz.0.2173" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 654.917834][T13316] overlayfs: upper fs does not support tmpfile. [ 655.563211][ T29] audit: type=1400 audit(1740157636.150:999): avc: denied { setattr } for pid=13335 comm="syz.5.2194" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 656.136926][T13348] ip6erspan0: entered promiscuous mode [ 658.300793][T13394] netlink: 'syz.0.2214': attribute type 1 has an invalid length. [ 658.308836][T13394] netlink: 'syz.0.2214': attribute type 2 has an invalid length. [ 658.632271][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 659.164329][ T5832] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 659.353335][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 659.354313][ T29] audit: type=1400 audit(1740157639.686:1000): avc: denied { watch watch_reads } for pid=13421 comm="syz.5.2217" path="pipe:[34058]" dev="pipefs" ino=34058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 659.939525][T13443] netlink: 'syz.3.2221': attribute type 21 has an invalid length. [ 659.947578][T13443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2221'. [ 661.459474][ T5872] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 661.643948][ T5872] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 661.666169][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.691860][ T5872] usb 4-1: config 0 descriptor?? [ 661.701787][ T5872] cp210x 4-1:0.0: cp210x converter detected [ 662.131211][ T5872] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 662.147536][ T5872] usb 4-1: cp210x converter now attached to ttyUSB0 [ 662.177428][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 663.458725][T11287] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 663.467913][T11287] Bluetooth: hci4: Injecting HCI hardware error event [ 663.477413][T11287] Bluetooth: hci4: hardware error 0x00 [ 663.563202][T13547] overlayfs: failed to clone upperpath [ 664.300585][ T5872] usb 4-1: USB disconnect, device number 39 [ 664.318097][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 664.992374][ T5872] cp210x 4-1:0.0: device disconnected [ 665.683110][T11287] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 666.332688][ T29] audit: type=1800 audit(1740157646.206:1001): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2251" name="nullb0" dev="tmpfs" ino=898 res=0 errno=0 [ 666.590824][ T5871] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 667.279753][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.303481][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.325019][ T5871] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 667.368004][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.383383][ T5871] usb 3-1: config 0 descriptor?? [ 667.595339][T13635] tmpfs: Bad value for 'mpol' [ 667.847659][ T5871] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 667.858763][ T5871] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 667.870979][ T5871] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 667.882175][ T5871] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 667.901173][ T5871] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 667.917165][ T5871] cm6533_jd 0003:0D8C:0022.0009: No inputs registered, leaving [ 667.939975][ T5871] cm6533_jd 0003:0D8C:0022.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 668.107780][ T5871] usb 3-1: USB disconnect, device number 35 [ 669.011370][T13673] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2278'. [ 670.638917][ T29] audit: type=1400 audit(1740157650.247:1002): avc: denied { read } for pid=13689 comm="syz.3.2283" laddr=127.0.0.1 lport=38538 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 671.366464][T13708] sit0: left promiscuous mode [ 671.379525][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'. [ 674.398606][ T5871] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 675.191273][ T29] audit: type=1400 audit(1740157654.250:1003): avc: denied { shutdown } for pid=13739 comm="syz.4.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 675.575240][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 675.789884][ T5871] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 675.819424][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.960768][ T5871] usb 3-1: Product: syz [ 675.979418][ T5871] usb 3-1: Manufacturer: syz [ 676.003081][ T5871] usb 3-1: SerialNumber: syz [ 676.025210][ T5871] usb 3-1: config 0 descriptor?? [ 676.052547][ T5871] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 676.572667][ T5871] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 676.587645][T13754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.615279][ T5871] visor 3-1:0.0: probe with driver visor failed with error -71 [ 676.634406][T13754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 676.658080][ T5871] usb 3-1: USB disconnect, device number 36 [ 676.701727][T13754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.752341][T13754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 676.792400][ T29] audit: type=1400 audit(1740157655.550:1004): avc: denied { getopt } for pid=13738 comm="syz.2.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 676.852429][T13761] tipc: Failed to remove unknown binding: 66,1,1/0:2770325312/2770325314 [ 676.861620][T13761] tipc: Failed to remove unknown binding: 66,1,1/0:2770325312/2770325314 [ 679.227734][T11287] Bluetooth: hci2: command 0x0406 tx timeout [ 679.232177][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 679.233829][T11287] Bluetooth: hci1: command 0x0406 tx timeout [ 679.245904][ T5832] Bluetooth: hci0: command 0x040f tx timeout [ 682.145842][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 682.158742][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.167924][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.177151][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.184887][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 682.194438][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 682.831484][T13793] lo speed is unknown, defaulting to 1000 [ 682.893495][ T29] audit: type=1400 audit(1740157661.696:1005): avc: denied { map } for pid=13799 comm="syz.2.2319" path="/414/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 682.893597][T13801] netfs: Couldn't get user pages (rc=-14) [ 683.766726][ T187] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.804168][T13793] lo speed is unknown, defaulting to 1000 [ 684.342266][ T187] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.414718][ T5832] Bluetooth: hci0: command tx timeout [ 684.614282][ T187] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.686451][T13822] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 684.696015][ T29] audit: type=1804 audit(1740157663.389:1006): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2324" name="/newroot/415/file0" dev="tmpfs" ino=2251 res=1 errno=0 [ 684.769426][T13822] ref_ctr increment failed for inode: 0x8cb offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888035ceb200 [ 685.207442][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 685.254483][ T187] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.816428][T13829] ipvlan0: entered promiscuous mode [ 685.867432][T13829] bridge0: port 4(ipvlan0) entered blocking state [ 685.894382][T13829] bridge0: port 4(ipvlan0) entered disabled state [ 685.951569][T13829] ipvlan0: entered allmulticast mode [ 685.956891][T13829] bridge0: entered allmulticast mode [ 685.992372][T13829] ipvlan0: left allmulticast mode [ 686.004337][T13829] bridge0: left allmulticast mode [ 686.657011][ T5832] Bluetooth: hci0: command tx timeout [ 688.859437][ T5832] Bluetooth: hci0: command tx timeout [ 691.082958][ T5832] Bluetooth: hci0: command tx timeout [ 699.072139][ C1] sched: DL replenish lagged too much [ 700.154211][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2334'. [ 701.124672][ T187] bridge_slave_1: left allmulticast mode [ 701.178659][ T187] bridge_slave_1: left promiscuous mode [ 701.241849][ T187] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.019903][ T187] bridge_slave_0: left allmulticast mode [ 702.034878][ T187] bridge_slave_0: left promiscuous mode [ 702.094051][ T187] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.433464][ T5871] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 703.505643][T13873] netlink: 'syz.0.2342': attribute type 59 has an invalid length. [ 703.587933][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2343'. [ 703.734555][ T29] audit: type=1400 audit(1740157681.199:1007): avc: denied { read } for pid=13876 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 703.734657][ T5871] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 703.871374][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.904900][ T5871] usb 3-1: Product: syz [ 703.909322][ T5871] usb 3-1: Manufacturer: syz [ 703.928735][ T5871] usb 3-1: SerialNumber: syz [ 704.115411][ T5871] r8152-cfgselector 3-1: Unknown version 0x0000 [ 704.121722][ T5871] r8152-cfgselector 3-1: config 0 descriptor?? [ 705.107966][ T5871] r8152-cfgselector 3-1: USB disconnect, device number 37 [ 705.443957][ T29] audit: type=1326 audit(1740157682.808:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13890 comm="syz.3.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cc58d0a9 code=0x7fc00000 [ 705.513886][ T29] audit: type=1326 audit(1740157682.864:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13890 comm="syz.3.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25cc58d0a9 code=0x7fc00000 [ 705.583374][ T29] audit: type=1326 audit(1740157682.873:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13890 comm="syz.3.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cc58d0a9 code=0x7fc00000 [ 707.264194][T13911] sg_write: data in/out 1184723571/36 bytes for SCSI command 0x4d-- guessing data in; [ 707.264194][T13911] program syz.2.2352 not setting count and/or reply_len properly [ 707.479514][ T187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.922655][ T187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.975376][ T187] bond0 (unregistering): Released all slaves [ 709.004845][ T187] bond1 (unregistering): Released all slaves [ 709.041792][ T187] bond2 (unregistering): Released all slaves [ 709.066677][ T187] bond3 (unregistering): Released all slaves [ 709.194064][T13793] chnl_net:caif_netlink_parms(): no params data found [ 709.308063][ T5832] Bluetooth: hci1: Unknown advertising packet type: 0x18 [ 709.308145][ T5832] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 709.316668][ T5832] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 709.324168][ T5832] Bluetooth: hci1: Malformed LE Event: 0x0d [ 709.363442][T13923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13923 comm=syz.4.2357 [ 710.725904][ T29] audit: type=1400 audit(1740157687.438:1011): avc: denied { create } for pid=13927 comm="syz.4.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 710.951619][ T29] audit: type=1400 audit(1740157687.569:1012): avc: denied { bind } for pid=13927 comm="syz.4.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 712.121311][T13948] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 712.370148][ T29] audit: type=1400 audit(1740157689.272:1013): avc: denied { ioctl } for pid=13939 comm="syz.4.2362" path="socket:[35932]" dev="sockfs" ino=35932 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 712.823381][T13793] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.831166][T13793] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.840841][T13793] bridge_slave_0: entered allmulticast mode [ 712.860961][T13793] bridge_slave_0: entered promiscuous mode [ 712.895494][T13953] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 712.975746][T13957] veth3: entered promiscuous mode [ 713.013088][T13957] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 713.094605][T13793] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.162882][T13793] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.229843][T13793] bridge_slave_1: entered allmulticast mode [ 713.280952][T13793] bridge_slave_1: entered promiscuous mode [ 714.914437][ T187] hsr_slave_0: left promiscuous mode [ 715.014128][ T187] hsr_slave_1: left promiscuous mode [ 715.068581][ T187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.076434][ T187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.093728][ T187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.103475][ T187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.150061][ T187] veth1_macvtap: left promiscuous mode [ 715.167880][ T187] veth0_macvtap: left promiscuous mode [ 715.184709][ T187] veth1_vlan: left promiscuous mode [ 715.196742][ T187] veth0_vlan: left promiscuous mode [ 715.202693][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 715.395184][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.424424][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 715.461337][ T8] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 715.498417][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.512362][ T8] usb 4-1: config 0 descriptor?? [ 715.569792][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 716.123285][ T8] Bluetooth: Can't get state to change to load configuration err [ 716.193693][ T8] Bluetooth: Loading sysconfig file failed [ 716.241799][ T8] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 716.401550][ T8] usb 4-1: USB disconnect, device number 40 [ 716.871742][ T29] audit: type=1400 audit(1740157693.191:1014): avc: denied { write } for pid=13993 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 716.979369][T13996] 9pnet_fd: Insufficient options for proto=fd [ 717.033920][T13996] overlayfs: failed to resolve './file1': -2 [ 718.624866][T14005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2375'. [ 718.633920][T14005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2375'. [ 719.483761][ T29] audit: type=1400 audit(1740157695.941:1015): avc: denied { connect } for pid=14010 comm="syz.3.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 719.616250][ T29] audit: type=1400 audit(1740157696.063:1016): avc: denied { write } for pid=14010 comm="syz.3.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 719.690106][ T29] audit: type=1326 audit(1740157696.119:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 720.708907][ T29] audit: type=1326 audit(1740157696.876:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 720.801274][ T29] audit: type=1326 audit(1740157696.876:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 720.843670][ T29] audit: type=1326 audit(1740157696.876:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 721.030836][ T29] audit: type=1326 audit(1740157696.876:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 721.077401][ T29] audit: type=1326 audit(1740157696.876:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 721.167954][ T29] audit: type=1326 audit(1740157696.876:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 722.224631][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 722.224655][ T29] audit: type=1326 audit(1740157696.876:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 722.254427][ T29] audit: type=1326 audit(1740157696.876:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 725.902750][ T29] audit: type=1326 audit(1740157696.876:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 725.989868][ T29] audit: type=1326 audit(1740157696.876:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 726.068788][ T29] audit: type=1326 audit(1740157696.876:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 726.562924][ T29] audit: type=1326 audit(1740157696.876:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 726.591441][ T29] audit: type=1326 audit(1740157696.876:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 726.622696][ T29] audit: type=1326 audit(1740157696.876:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 726.646422][ T29] audit: type=1326 audit(1740157696.876:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 726.681677][ T29] audit: type=1326 audit(1740157696.876:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 729.099080][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.139619][ T29] audit: type=1326 audit(1740157696.876:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 729.167422][ T29] audit: type=1326 audit(1740157696.876:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 729.300582][ T29] audit: type=1326 audit(1740157696.876:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 729.351735][ T29] audit: type=1326 audit(1740157696.876:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 729.380563][ T29] audit: type=1326 audit(1740157696.876:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 729.411762][ T29] audit: type=1326 audit(1740157696.876:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 729.440492][ T29] audit: type=1326 audit(1740157696.886:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x7fc00000 [ 731.792204][ T187] team0 (unregistering): Port device team_slave_1 removed [ 731.925763][ T187] team0 (unregistering): Port device team_slave_0 removed [ 733.106430][T13793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.204665][T13793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.725379][T14062] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 733.870743][T14069] netlink: 'syz.2.2389': attribute type 10 has an invalid length. [ 734.068174][T14069] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 734.160318][T13793] team0: Port device team_slave_0 added [ 734.197255][T13793] team0: Port device team_slave_1 added [ 736.625268][ T29] audit: type=1400 audit(1740157711.020:1055): avc: denied { ioctl } for pid=14088 comm="syz.3.2396" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 736.672603][ T29] audit: type=1400 audit(1740157712.020:1056): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 736.804641][ T29] audit: type=1400 audit(1740157712.077:1057): avc: denied { append } for pid=14088 comm="syz.3.2396" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 737.020613][ T973] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 737.092993][T13793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.125669][T13793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.223766][ T973] usb 4-1: Using ep0 maxpacket: 8 [ 737.250143][ T973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 737.292258][ T973] usb 4-1: config 7 has an invalid interface number: 60 but max is 0 [ 737.320570][T13793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.337815][ T973] usb 4-1: config 7 has no interface number 0 [ 737.357322][ T973] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=f2.45 [ 737.386491][T13793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.404265][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.417070][T13793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.446077][ T973] usb 4-1: Product: 䈩镰㜝承ㆪ瘝䧕ퟃ䇏㤅䜸똁罝䷏鹜껠ୀ퍄岻ꥤ㌄ᠳ쟼ﵬㆵ蠱쥊굻놇䢛䝻Ⓠ⫒Ἁ뫹ុﷁ繊룩䓊誼냛벗壍㏫嫗♂͚蓺鎖鬤ቾ㱘뇀폫澰Ⱀ霶ᾔ⚯㖗ེ壝䅊ꭀ褆Ꞔ諥扪퇩ഃ [ 737.480663][T13793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.493264][ T973] usb 4-1: Manufacturer: 苉ቝ䪿鷈包፰ꝓ陨좽 [ 737.500460][ T973] usb 4-1: SerialNumber: ᆲᥙફ⿻⑇昝筠௿硎ൟ뤼匀홤௏Ս悲஍쩨ﾈ⼨ⶢ腝ﮑ坻Έ⦚Ṽ矌봫蓮惊ᇦ箇㇢І떓葏丞㙈굾팒瘦슣腧䨼盞腟沿 [ 738.408193][ T973] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 738.492248][ T973] dvb-usb: bulk message failed: -22 (2/0) [ 738.553694][ T973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 738.603996][T13793] hsr_slave_0: entered promiscuous mode [ 738.617111][ T973] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 738.638020][T13793] hsr_slave_1: entered promiscuous mode [ 739.051013][ T973] usb 4-1: media controller created [ 739.500212][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.452300][ T973] cxusb: set interface failed [ 740.457019][ T973] dvb-usb: bulk message failed: -22 (1/0) [ 742.431651][ T973] DVB: Unable to find symbol lgdt330x_attach() [ 742.437847][ T973] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 742.720881][ T973] rc_core: IR keymap rc-dvico-portable not found [ 742.787697][ T973] Registered IR keymap rc-empty [ 742.842704][ T973] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 742.951208][ T973] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20 [ 743.109339][ T973] dvb-usb: schedule remote query interval to 100 msecs. [ 743.179316][ T973] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 743.254633][ T973] usb 4-1: USB disconnect, device number 41 [ 744.491748][ T973] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 745.262983][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 745.278410][T14177] netlink: 'syz.3.2413': attribute type 9 has an invalid length. [ 745.288616][T14177] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2413'. [ 745.851017][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 746.370200][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 746.394835][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 746.405066][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.419221][ T8] usb 3-1: config 0 descriptor?? [ 746.483969][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 746.752728][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 746.766659][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 746.783046][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 746.808609][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 746.844563][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 746.858409][ T6046] bridge_slave_1: left allmulticast mode [ 746.867049][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 746.897458][ T6046] bridge_slave_1: left promiscuous mode [ 746.960130][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.121998][ T29] audit: type=1400 audit(1740157721.711:1058): avc: denied { append } for pid=14174 comm="syz.2.2414" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 747.425613][ T5178] bcm5974 3-1:0.0: could not read from device [ 747.442928][ T8] bcm5974 3-1:0.0: could not read from device [ 747.450090][ T6046] bridge_slave_0: left allmulticast mode [ 747.461347][ T6046] bridge_slave_0: left promiscuous mode [ 747.478621][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.504096][ T5178] bcm5974 3-1:0.0: could not read from device [ 747.542433][ T8] input: failed to attach handler mousedev to device input21, error: -5 [ 747.585274][ T5178] bcm5974 3-1:0.0: could not read from device [ 747.587804][ T8] usb 3-1: USB disconnect, device number 38 [ 747.601954][ T5178] bcm5974 3-1:0.0: could not read from device [ 748.334327][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.362494][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.435648][ T6046] bond0 (unregistering): Released all slaves [ 748.562708][T14191] lo speed is unknown, defaulting to 1000 [ 749.882180][ T5144] Bluetooth: hci0: command tx timeout [ 749.966243][T14191] lo speed is unknown, defaulting to 1000 [ 750.561462][ T29] audit: type=1400 audit(1740157724.658:1059): avc: denied { map } for pid=14203 comm="syz.2.2420" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 750.899648][ T29] audit: type=1400 audit(1740157724.658:1060): avc: denied { execute } for pid=14203 comm="syz.2.2420" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 751.854072][ T6046] hsr_slave_0: left promiscuous mode [ 752.298298][ T5144] Bluetooth: hci0: command tx timeout [ 752.317591][ T6046] hsr_slave_1: left promiscuous mode [ 752.355868][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.877107][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.343428][T14238] trusted_key: encrypted_key: insufficient parameters specified [ 753.496091][T14245] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 754.457237][ T5144] Bluetooth: hci0: command tx timeout [ 756.065519][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 756.639727][T14259] ufs: Invalid option: "'&" or missing value [ 756.645741][T14259] ufs: wrong mount options [ 756.683526][ T5144] Bluetooth: hci0: command tx timeout [ 756.749496][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 756.905016][ T973] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 760.374533][ T973] usb 3-1: Using ep0 maxpacket: 8 [ 760.389073][ T973] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 760.603850][ T973] usb 3-1: can't read configurations, error -61 [ 760.849885][ T973] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 768.520483][T14191] chnl_net:caif_netlink_parms(): no params data found [ 768.957264][ T5144] Bluetooth: hci3: unexpected cc 0x0c1b length: 55 > 5 [ 768.966026][ T5144] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 768.993531][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 769.004020][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 769.022434][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 769.035433][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 769.045845][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 769.054451][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 769.095245][ T29] audit: type=1400 audit(1740157742.346:1061): avc: denied { read } for pid=14283 comm="syz.4.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 769.148127][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 769.395130][T14294] team1: entered promiscuous mode [ 769.400659][T14294] 8021q: adding VLAN 0 to HW filter on device team1 [ 769.463064][T14292] lo speed is unknown, defaulting to 1000 [ 769.472628][T14191] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.486140][T14191] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.506290][T14191] bridge_slave_0: entered allmulticast mode [ 769.533809][T14191] bridge_slave_0: entered promiscuous mode [ 769.567343][T14191] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.588899][T14191] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.614479][T14191] bridge_slave_1: entered allmulticast mode [ 769.634686][T14191] bridge_slave_1: entered promiscuous mode [ 769.803982][T14292] lo speed is unknown, defaulting to 1000 [ 769.972134][T14191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.131437][T14191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.154244][T14191] team0: Port device team_slave_0 added [ 771.305298][ T5832] Bluetooth: hci2: command tx timeout [ 771.370374][ T8] libceph: connect (1)[c::]:6789 error -101 [ 771.376415][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 771.839253][ T973] libceph: connect (1)[c::]:6789 error -101 [ 771.845393][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 771.926903][T14191] team0: Port device team_slave_1 added [ 771.999494][T14191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.010470][T14191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.040434][T14191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.070400][T14191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.085468][T14191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.113561][T14321] ceph: No mds server is up or the cluster is laggy [ 772.130350][T14191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.148343][T14292] chnl_net:caif_netlink_parms(): no params data found [ 773.173089][T14191] hsr_slave_0: entered promiscuous mode [ 773.194540][T14191] hsr_slave_1: entered promiscuous mode [ 773.398197][T14292] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.405803][T14292] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.419670][T14292] bridge_slave_0: entered allmulticast mode [ 773.426819][T14292] bridge_slave_0: entered promiscuous mode [ 773.485082][T14292] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.493542][T14292] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.541606][ T5832] Bluetooth: hci2: command tx timeout [ 773.582727][T14292] bridge_slave_1: entered allmulticast mode [ 773.595775][T14292] bridge_slave_1: entered promiscuous mode [ 773.630622][T14349] netlink: 'syz.4.2444': attribute type 2 has an invalid length. [ 773.710902][T14292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.991394][T14292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.528944][T14292] team0: Port device team_slave_0 added [ 774.551256][T14292] team0: Port device team_slave_1 added [ 775.753402][ T5832] Bluetooth: hci2: command tx timeout [ 777.976307][ T5832] Bluetooth: hci2: command tx timeout [ 779.086068][T14387] netlink: 'syz.4.2449': attribute type 1 has an invalid length. [ 779.391473][T14191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 779.474814][T14191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 779.572309][T14387] bond9: entered promiscuous mode [ 779.597727][T14387] 8021q: adding VLAN 0 to HW filter on device bond9 [ 779.697106][T14388] 8021q: adding VLAN 0 to HW filter on device bond10 [ 779.709705][T14388] bond9: (slave bond10): making interface the new active one [ 779.717109][T14388] bond10: entered promiscuous mode [ 779.761549][T14388] bond9: (slave bond10): Enslaving as an active interface with an up link [ 779.791716][T14292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.844513][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.994557][T14292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.006265][T14191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 780.078654][T14191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 780.168504][T14403] xt_socket: unknown flags 0x50 [ 781.101007][T14292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.176392][T14405] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2453'. [ 781.192876][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.363434][T14292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.222957][T14417] xt_hashlimit: max too large, truncated to 1048576 [ 782.229957][T14417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 784.110627][T14292] hsr_slave_0: entered promiscuous mode [ 784.858903][T14292] hsr_slave_1: entered promiscuous mode [ 784.876118][T14292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.888160][T14292] Cannot create hsr debugfs directory [ 787.061501][T14191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.061863][T14191] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.165331][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.172493][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.345465][T14464] sg_write: data in/out 988/14 bytes for SCSI command 0x0-- guessing data in; [ 788.345465][T14464] program syz.2.2463 not setting count and/or reply_len properly [ 789.409185][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.416348][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.627373][T14191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 789.648161][T14191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 789.697763][T14292] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 789.787804][ T29] audit: type=1400 audit(1740157761.700:1062): avc: denied { listen } for pid=14467 comm="syz.0.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 790.995551][T14292] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 791.213588][ T29] audit: type=1400 audit(1740157762.869:1063): avc: denied { connect } for pid=14473 comm="syz.4.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 791.479328][T14292] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 792.343475][T14292] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 793.649699][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 793.797980][T14292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.984782][T14191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.382124][T14292] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.686218][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.693348][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.031510][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.038638][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.177846][T14521] virtio-fs: tag <(null)> not found [ 798.971460][ T29] audit: type=1326 audit(1740157770.287:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.4.2474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc789d8d0a9 code=0x0 [ 800.044998][ T970] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 800.298358][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 800.376570][ T970] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 800.408318][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.463797][ T970] usb 3-1: config 0 descriptor?? [ 801.573226][ T970] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 801.853689][T14191] veth0_vlan: entered promiscuous mode [ 801.889505][T14191] veth1_vlan: entered promiscuous mode [ 802.957274][T14292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.019110][T14191] veth0_macvtap: entered promiscuous mode [ 803.668562][T14557] ptrace attach of "./syz-executor exec"[5827] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 804.190402][T14191] veth1_macvtap: entered promiscuous mode [ 804.472039][ T970] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 804.511678][ T970] asix 3-1:0.0: probe with driver asix failed with error -71 [ 804.566581][ T970] usb 3-1: USB disconnect, device number 41 [ 804.617738][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.630431][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.646818][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.657549][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.882163][T14191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.175350][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.387743][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.953367][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.988305][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.550100][T14191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.676247][T14587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2486'. [ 807.693884][T14292] veth0_vlan: entered promiscuous mode [ 807.764095][T14292] veth1_vlan: entered promiscuous mode [ 807.783572][T12168] IPVS: starting estimator thread 0... [ 807.878349][T14591] IPVS: using max 32 ests per chain, 76800 per kthread [ 807.925575][T14292] veth0_macvtap: entered promiscuous mode [ 808.005758][T14292] veth1_macvtap: entered promiscuous mode [ 808.054783][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.457453][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.612905][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.041974][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.054644][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.065144][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.144506][T14292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.166347][T14596] team0: No ports can be present during mode change [ 809.858193][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 809.871027][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 809.879495][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 809.887118][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 809.895101][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 809.902922][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 810.034198][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.066075][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.375596][ T29] audit: type=1400 audit(1740157780.763:1065): avc: denied { bind } for pid=14608 comm="syz.0.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 810.390558][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.408397][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.424944][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.435690][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.451116][T14292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.664856][T14292] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.695410][T14292] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.935314][T14292] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.951465][T14292] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.390576][ T5144] Bluetooth: hci0: command tx timeout [ 813.096632][T14615] lo speed is unknown, defaulting to 1000 [ 813.103107][T14615] lo speed is unknown, defaulting to 1000 [ 813.720006][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.757710][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.859299][ T29] audit: type=1400 audit(1740157784.224:1066): avc: denied { nlmsg_write } for pid=14635 comm="syz.4.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 814.010176][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.052260][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.602432][ T5144] Bluetooth: hci0: command tx timeout [ 814.770068][ T57] bridge_slave_1: left allmulticast mode [ 814.795061][ T57] bridge_slave_1: left promiscuous mode [ 814.814762][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.862058][ T57] bridge_slave_0: left allmulticast mode [ 814.885803][ T57] bridge_slave_0: left promiscuous mode [ 814.911989][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.660239][ T5873] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 816.789839][ T5873] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 816.826716][ T5144] Bluetooth: hci0: command tx timeout [ 817.086776][ T5873] hid-generic 0000:0003:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 817.563976][T14673] netlink: 'syz.4.2498': attribute type 10 has an invalid length. [ 817.573381][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.597730][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.637391][ T57] bond0 (unregistering): Released all slaves [ 817.674493][T14615] chnl_net:caif_netlink_parms(): no params data found [ 817.683507][T14677] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2501'. [ 817.755274][T14663] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 817.820985][T14671] bridge_slave_0: left allmulticast mode [ 817.833694][T14670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.855797][T14671] bridge_slave_0: left promiscuous mode [ 817.890652][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.951945][T14671] bridge_slave_1: left allmulticast mode [ 817.963834][T14671] bridge_slave_1: left promiscuous mode [ 817.973945][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.144172][T14671] team0: Port device team_slave_0 removed [ 818.186182][T14671] team0: Port device team_slave_1 removed [ 818.196888][T14671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.204416][T14671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.228557][T14671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.329737][T14671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.359592][T14671] bond9: (slave bond10): Releasing backup interface [ 818.369431][T14671] bond10: left promiscuous mode [ 818.407131][T14673] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 819.039493][ T5832] Bluetooth: hci0: command tx timeout [ 819.136488][ T29] audit: type=1326 audit(1740157789.163:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14691 comm="syz.0.2503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f851518d0a9 code=0x0 [ 820.273548][ T57] hsr_slave_0: left promiscuous mode [ 820.331971][ T57] hsr_slave_1: left promiscuous mode [ 820.386459][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.512821][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.590992][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.847122][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.769635][ T57] veth1_macvtap: left promiscuous mode [ 821.951489][ T57] veth0_macvtap: left promiscuous mode [ 821.957098][ T57] veth1_vlan: left promiscuous mode [ 821.994190][ T57] veth0_vlan: left promiscuous mode [ 824.072273][T14724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.482370][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 824.494709][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 824.503765][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 824.511558][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 824.519742][ T5144] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 825.535100][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 826.096808][T14744] overlayfs: failed to clone upperpath [ 827.752891][ T5144] Bluetooth: hci5: command tx timeout [ 827.772801][ T57] team0 (unregistering): Port device team_slave_1 removed [ 827.900218][ T57] team0 (unregistering): Port device team_slave_0 removed [ 829.247334][T14714] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 830.125912][ T5144] Bluetooth: hci5: command tx timeout [ 832.289344][ T5144] Bluetooth: hci5: command tx timeout [ 832.885657][T14615] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.915434][T14615] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.945040][T14615] bridge_slave_0: entered allmulticast mode [ 832.959384][T14615] bridge_slave_0: entered promiscuous mode [ 833.003937][T14615] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.011031][T14615] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.018581][T14615] bridge_slave_1: entered allmulticast mode [ 833.083048][T14615] bridge_slave_1: entered promiscuous mode [ 833.135005][T14732] lo speed is unknown, defaulting to 1000 [ 833.691727][T14732] lo speed is unknown, defaulting to 1000 [ 833.837614][T14615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.868639][T14615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.550953][ T5144] Bluetooth: hci5: command tx timeout [ 834.985950][T14615] team0: Port device team_slave_0 added [ 835.109578][T14615] team0: Port device team_slave_1 added [ 835.243685][T14615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.427546][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.502638][T14615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.558997][T14615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.565973][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.679074][T14615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.266299][T14615] hsr_slave_0: entered promiscuous mode [ 839.302776][T14615] hsr_slave_1: entered promiscuous mode [ 842.179482][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.474881][T14842] Invalid ELF header magic: != ELF [ 842.547314][ T29] audit: type=1400 audit(1740157810.976:1068): avc: denied { module_load } for pid=14835 comm="syz.0.2531" path="/649/bus" dev="tmpfs" ino=3515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 844.053009][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.105157][T14732] chnl_net:caif_netlink_parms(): no params data found [ 845.384119][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.202736][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.388031][T14732] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.415039][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.432602][T14732] bridge_slave_0: entered allmulticast mode [ 846.447672][T14732] bridge_slave_0: entered promiscuous mode [ 846.473595][T14732] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.496263][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.523480][T14732] bridge_slave_1: entered allmulticast mode [ 846.541391][T14732] bridge_slave_1: entered promiscuous mode [ 846.687152][T14732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.024682][T14732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.504642][T14732] team0: Port device team_slave_0 added [ 849.354557][ T57] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 849.364409][ T57] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 22:70:6e:62:d6:9f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 853.604968][ T57] dvmrp0 (unregistering): left allmulticast mode [ 854.933836][ T57] bond0 (unregistering): Released all slaves [ 854.956990][ T57] bond1 (unregistering): Released all slaves [ 854.976530][ T57] bond2 (unregistering): Released all slaves [ 855.078381][ T57] bond3 (unregistering): Released all slaves [ 855.110778][ T57] bond4 (unregistering): Released all slaves [ 855.144818][ T57] bond5 (unregistering): Released all slaves [ 855.181660][ T57] bond6 (unregistering): Released all slaves [ 855.246961][ T57] bond7 (unregistering): (slave veth3): Releasing backup interface [ 855.285665][ T57] bond7 (unregistering): Released all slaves [ 855.342043][T14732] team0: Port device team_slave_1 added [ 855.957195][T14732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.980478][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.346519][T14732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.106960][T14732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.163316][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.354299][T14732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.172171][T14732] hsr_slave_0: entered promiscuous mode [ 858.464481][T14732] hsr_slave_1: entered promiscuous mode [ 858.492704][T14732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.529236][T14732] Cannot create hsr debugfs directory [ 859.227320][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 859.343135][ T57] hsr_slave_0: left promiscuous mode [ 859.400112][ T57] hsr_slave_1: left promiscuous mode [ 859.535419][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.592551][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.944033][ T29] audit: type=1400 audit(1740157829.198:1069): avc: denied { map } for pid=15009 comm="syz.7.2561" path="/proc/69/net/vlan/vlan0" dev="proc" ino=4026533707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 862.174988][ T29] audit: type=1400 audit(1740157829.198:1070): avc: denied { execute } for pid=15009 comm="syz.7.2561" path="/proc/69/net/vlan/vlan0" dev="proc" ino=4026533707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 865.070117][ T57] team0 (unregistering): Port device team_slave_1 removed [ 865.310270][ T57] team0 (unregistering): Port device team_slave_0 removed [ 866.594518][T15030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2565'. [ 867.569735][T15015] @: renamed from vlan0 (while UP) [ 867.754584][T14615] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 871.064206][T14615] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 871.451067][T14615] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 871.524491][T14615] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 872.251273][T14732] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 872.358666][T14732] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 872.600147][T15065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.622754][T14732] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 872.747090][T14732] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 874.422116][T14732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.446424][T14732] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.757099][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.764247][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.937493][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.944653][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.696404][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.709754][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 876.718955][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 876.727253][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 876.734874][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 876.745370][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.890465][T15088] lo speed is unknown, defaulting to 1000 [ 876.914619][T15088] lo speed is unknown, defaulting to 1000 [ 877.136930][T14732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.668322][T15128] fuse: Bad value for 'fd' [ 879.505318][ T5832] Bluetooth: hci0: command tx timeout [ 880.953543][ T29] audit: type=1400 audit(1740157846.980:1071): avc: denied { getopt } for pid=15135 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 881.981847][ T5144] Bluetooth: hci0: command tx timeout [ 882.225958][T15088] chnl_net:caif_netlink_parms(): no params data found [ 882.789013][T15088] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.910899][T15088] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.199040][T15088] bridge_slave_0: entered allmulticast mode [ 883.332131][T15088] bridge_slave_0: entered promiscuous mode [ 883.361968][T15088] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.524962][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 883.552118][T15088] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.578759][T15088] bridge_slave_1: entered allmulticast mode [ 883.596509][T15088] bridge_slave_1: entered promiscuous mode [ 884.244720][ T5144] Bluetooth: hci0: command tx timeout [ 884.576739][T14732] veth0_vlan: entered promiscuous mode [ 885.254204][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.272249][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.913975][ T5144] Bluetooth: hci0: command tx timeout [ 892.548974][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 892.561635][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 892.569855][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 892.578542][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 892.589638][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 892.596982][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 894.946982][ T5832] Bluetooth: hci1: command tx timeout [ 896.198056][T15088] team0: Port device team_slave_0 added [ 896.311855][T15088] team0: Port device team_slave_1 added [ 896.702293][T15209] lo speed is unknown, defaulting to 1000 [ 897.504912][ T5832] Bluetooth: hci1: command tx timeout [ 897.855213][T15209] lo speed is unknown, defaulting to 1000 [ 898.199102][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.237005][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.376156][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.512056][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.542257][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.650067][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.678261][ T5144] Bluetooth: hci1: command tx timeout [ 899.741692][T15088] hsr_slave_0: entered promiscuous mode [ 899.761854][T15088] hsr_slave_1: entered promiscuous mode [ 899.775085][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 899.785284][T15088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 899.950942][T15088] Cannot create hsr debugfs directory [ 899.966805][T15274] netlink: 'syz.0.2601': attribute type 8 has an invalid length. [ 900.424056][ T29] audit: type=1400 audit(1740157865.192:1072): avc: denied { bind } for pid=15267 comm="syz.7.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 900.496680][ T29] audit: type=1400 audit(1740157865.192:1073): avc: denied { node_bind } for pid=15267 comm="syz.7.2599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 902.470952][ T5832] Bluetooth: hci1: command tx timeout [ 903.081182][T15209] chnl_net:caif_netlink_parms(): no params data found [ 903.874634][T15209] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.908930][T15209] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.948740][T15209] bridge_slave_0: entered allmulticast mode [ 903.980680][T15209] bridge_slave_0: entered promiscuous mode [ 904.032076][T15209] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.071566][T15209] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.148770][T15209] bridge_slave_1: entered allmulticast mode [ 904.155549][T15209] bridge_slave_1: entered promiscuous mode [ 904.624416][T15209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.633653][T15209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.366282][T15088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 907.401079][T15088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 907.444037][T15209] team0: Port device team_slave_0 added [ 907.461209][T15088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 907.487915][T15209] team0: Port device team_slave_1 added [ 907.588252][T15088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 907.665556][T15209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.672523][T15209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.749513][T15209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.786360][T15209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.806011][T15209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.893055][T15209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.046479][T15209] hsr_slave_0: entered promiscuous mode [ 908.167211][T15209] hsr_slave_1: entered promiscuous mode [ 908.199894][T15209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.207477][T15209] Cannot create hsr debugfs directory [ 909.189607][T15088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.295069][T15088] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.364983][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.372161][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.587831][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.594977][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.659762][T15413] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 914.667925][T15413] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 914.677285][T15413] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 914.685130][T15413] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 914.880540][T15088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.304091][T15209] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 915.398947][T15209] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 915.486863][T15209] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 915.545670][T15209] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 916.732300][T15209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.803682][T15209] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.892867][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.899966][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.011431][T15442] block device autoloading is deprecated and will be removed. [ 918.019080][T15442] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 918.026876][T15442] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 918.035124][T15442] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 918.043095][T15442] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 918.089391][T15088] veth0_vlan: entered promiscuous mode [ 918.141350][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.148467][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.259314][T15088] veth1_vlan: entered promiscuous mode [ 918.407163][T15209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 918.504597][T15209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.559619][ T29] audit: type=1400 audit(1740157882.226:1074): avc: denied { getopt } for pid=15446 comm="syz.7.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 920.228362][T15088] veth0_macvtap: entered promiscuous mode [ 920.387574][T15088] veth1_macvtap: entered promiscuous mode [ 920.646136][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.674181][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.684744][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.689293][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.419179][T15468] Bluetooth: MGMT ver 1.23 [ 922.701405][T15088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.764978][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.798109][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.823380][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.871923][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.923478][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 922.952725][T15088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.088721][T15209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.249378][T15476] overlayfs: failed to clone upperpath [ 923.494608][T15088] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.511608][T15088] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.522705][T15088] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.535172][T15088] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.326705][ T29] audit: type=1400 audit(1740157887.389:1075): avc: denied { listen } for pid=15479 comm="syz.7.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 924.631554][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.694163][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.800267][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.862799][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.913059][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.975583][ T29] audit: type=1400 audit(1740157887.473:1076): avc: denied { accept } for pid=15479 comm="syz.7.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 924.991336][T15496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 925.002928][T15496] IPv6: NLM_F_CREATE should be set when creating new route [ 925.215096][T15496] lo: entered allmulticast mode [ 925.243472][T15496] tunl0: entered allmulticast mode [ 925.276307][T15496] gre0: entered allmulticast mode [ 925.307424][ T29] audit: type=1400 audit(1740157887.670:1077): avc: denied { ioctl } for pid=15487 comm="syz.0.2630" path="socket:[42791]" dev="sockfs" ino=42791 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 925.338806][T15496] gretap0: entered allmulticast mode [ 925.369404][T15496] erspan0: entered allmulticast mode [ 925.402520][T15496] ip_vti0: entered allmulticast mode [ 925.925579][T15496] ip6_vti0: entered allmulticast mode [ 925.958927][T15496] sit0: entered allmulticast mode [ 925.982214][T15496] ip6tnl0: entered allmulticast mode [ 926.026070][T15496] ip6gre0: entered allmulticast mode [ 926.362615][T15496] syz_tun: entered allmulticast mode [ 926.381950][T15496] ip6gretap0: entered allmulticast mode [ 926.752627][T15496] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.762729][T15496] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.806187][T15496] bridge0: entered allmulticast mode [ 926.828896][T15496] vcan0: entered allmulticast mode [ 926.851856][T15496] bond0: entered allmulticast mode [ 926.868129][T15496] bond_slave_0: entered allmulticast mode [ 926.884734][T15496] bond_slave_1: entered allmulticast mode [ 926.910783][T15496] team0: entered allmulticast mode [ 926.915945][T15496] team_slave_0: entered allmulticast mode [ 926.946578][T15496] team_slave_1: entered allmulticast mode [ 926.979855][T15496] dummy0: entered allmulticast mode [ 927.008045][T15496] nlmon0: entered allmulticast mode [ 927.032418][T15496] caif0: entered allmulticast mode [ 927.039078][T15496] batadv0: entered allmulticast mode [ 927.066684][T15496] vxcan0: entered allmulticast mode [ 927.079237][T15496] vxcan1: entered allmulticast mode [ 927.085875][T15496] veth0: entered allmulticast mode [ 927.102059][T15496] veth1: entered allmulticast mode [ 927.135503][T15496] wg0: entered allmulticast mode [ 927.164809][T15496] wg1: entered allmulticast mode [ 927.229014][T15496] wg2: entered allmulticast mode [ 927.241367][T15496] veth0_to_bridge: entered allmulticast mode [ 927.277494][T15496] veth1_to_bridge: entered allmulticast mode [ 927.324865][T15496] veth0_to_bond: entered allmulticast mode [ 927.352817][T15496] veth1_to_bond: entered allmulticast mode [ 927.372310][T15496] veth0_to_team: entered allmulticast mode [ 927.393194][T15496] veth1_to_team: entered allmulticast mode [ 927.427069][T15496] veth0_to_batadv: entered allmulticast mode [ 927.447971][T15496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.465803][T15496] batadv_slave_0: entered allmulticast mode [ 927.480356][T15496] veth1_to_batadv: entered allmulticast mode [ 927.499478][T15496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.519506][T15496] batadv_slave_1: entered allmulticast mode [ 927.547718][T15496] xfrm0: entered allmulticast mode [ 927.560583][T15496] veth0_to_hsr: entered allmulticast mode [ 927.577310][T15496] hsr_slave_0: entered allmulticast mode [ 927.595769][T15496] veth1_to_hsr: entered allmulticast mode [ 927.610440][T15496] hsr_slave_1: entered allmulticast mode [ 927.640509][T15496] hsr0: entered allmulticast mode [ 927.667275][T15496] veth1_virt_wifi: entered allmulticast mode [ 927.686424][T15496] veth0_virt_wifi: entered allmulticast mode [ 927.707387][T15496] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 927.729126][T15496] veth1_vlan: entered allmulticast mode [ 927.743595][T15496] veth0_vlan: entered allmulticast mode [ 927.780247][T15496] @: entered allmulticast mode [ 927.796989][T15496] vlan1: entered allmulticast mode [ 927.812048][T15496] macvlan0: entered allmulticast mode [ 927.841967][T15496] macvlan1: entered allmulticast mode [ 927.851859][T15496] ipvlan0: entered allmulticast mode [ 927.858294][T15496] ipvlan1: entered allmulticast mode [ 927.880879][T15496] veth1_macvtap: entered allmulticast mode [ 927.913490][T15496] veth0_macvtap: entered allmulticast mode [ 927.948240][T15496] macvtap0: entered allmulticast mode [ 927.971040][T15496] macsec0: entered allmulticast mode [ 928.010111][T15496] geneve0: entered allmulticast mode [ 928.034235][T15496] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.059371][T15496] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.085534][T15496] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.110949][T15496] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.141394][T15496] geneve1: entered allmulticast mode [ 928.204185][T15496] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 928.226457][T15496] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 928.266987][T15496] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 928.296393][T15496] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 928.360899][T15496] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 928.478321][T15496] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 928.496092][T15496] gre1: entered allmulticast mode [ 928.991427][T15209] veth0_vlan: entered promiscuous mode [ 931.293181][T15209] veth1_vlan: entered promiscuous mode [ 931.326105][T15209] veth0_macvtap: entered promiscuous mode [ 931.572729][T15209] veth1_macvtap: entered promiscuous mode [ 932.895326][T15209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.924509][T15209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.935003][T15209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.952527][T15209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.263551][T15209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.295549][T15209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.358496][T15209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.405794][T15209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.443250][T15209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.831299][T15209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.214892][T15209] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.277570][T15209] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.343317][T15209] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.403198][T15209] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.931584][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.978350][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.191199][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.244063][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.850549][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2644'. [ 936.929848][T15588] overlayfs: failed to resolve './file1': -2 [ 940.884247][T15614] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 943.154881][ T29] audit: type=1400 audit(1740157905.162:1078): avc: denied { mount } for pid=15631 comm="syz.7.2651" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 944.600150][ T29] audit: type=1326 audit(1740157906.359:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 945.224352][ T29] audit: type=1326 audit(1740157906.359:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 945.769406][ T29] audit: type=1326 audit(1740157906.359:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 945.800956][T15647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2654'. [ 946.548702][ T29] audit: type=1326 audit(1740157906.359:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 946.573099][T15651] blktrace: Concurrent blktraces are not allowed on loop0 [ 946.706216][ T29] audit: type=1326 audit(1740157906.359:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 946.937845][ T29] audit: type=1326 audit(1740157906.359:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 947.176175][ T29] audit: type=1326 audit(1740157906.359:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 947.205809][ T29] audit: type=1326 audit(1740157906.359:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 947.273004][ T29] audit: type=1326 audit(1740157906.359:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.0.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851518d0a9 code=0x7ffc0000 [ 952.074559][T12168] IPVS: starting estimator thread 0... [ 952.639664][T15688] IPVS: using max 30 ests per chain, 72000 per kthread [ 959.354755][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 959.354774][ T29] audit: type=1400 audit(1740157920.222:1108): avc: denied { accept } for pid=15735 comm="syz.4.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 959.673436][T15745] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2671'. [ 960.529055][ T29] audit: type=1400 audit(1740157921.410:1109): avc: denied { name_bind } for pid=15746 comm="syz.8.2673" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 961.920063][T15736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.948981][T15766] gtp0: entered promiscuous mode [ 961.954074][T15766] gtp0: entered allmulticast mode [ 962.100220][T15736] relay: one or more items not logged [item size (56) > sub-buffer size (5)] [ 962.624866][T15783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2678'. [ 965.281922][T15798] input: syz1 as /devices/virtual/input/input22 [ 968.482407][T15835] overlayfs: failed to clone upperpath [ 973.932018][T15853] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 975.579699][ T29] audit: type=1400 audit(1740157935.488:1110): avc: denied { lock } for pid=15863 comm="syz.6.2692" path="socket:[41105]" dev="sockfs" ino=41105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 978.065058][T15880] /dev/nullb0: Can't lookup blockdev [ 981.307807][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 981.333120][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 981.808130][ T51] libceph: connect (1)[c::]:6789 error -101 [ 982.032747][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 982.081007][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 982.085050][T15920] ceph: No mds server is up or the cluster is laggy [ 982.706519][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 982.981306][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 983.018700][T15909] ceph: No mds server is up or the cluster is laggy [ 983.048408][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 983.311419][T12168] libceph: connect (1)[c::]:6789 error -101 [ 983.360534][T12168] libceph: mon0 (1)[c::]:6789 connect error [ 985.115931][T15949] xt_HMARK: spi-set and port-set can't be combined [ 988.346516][T15974] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 988.568584][T15981] netlink: 'syz.0.2712': attribute type 4 has an invalid length. [ 991.013761][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.345372][T16034] overlayfs: failed to resolve './file1': -2 [ 993.415543][T16035] bpf: Bad value for 'gid' [ 993.703947][T16047] evm: overlay not supported [ 995.343617][ T29] audit: type=1400 audit(1740157953.803:1111): avc: denied { ioctl } for pid=16060 comm="syz.8.2718" path="socket:[41143]" dev="sockfs" ino=41143 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 998.732916][T16093] xt_recent: Unsupported userspace flags (000000da) [ 1115.970461][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1115.977431][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5155/1:b..l [ 1115.985855][ C1] rcu: (detected by 1, t=10502 jiffies, g=49189, q=219 ncpus=2) [ 1115.993543][ C1] task:jbd2/sda1-8 state:R running task stack:25760 pid:5155 tgid:5155 ppid:2 task_flags:0x240040 flags:0x00004000 [ 1116.008047][ C1] Call Trace: [ 1116.011311][ C1] [ 1116.014225][ C1] __schedule+0xf43/0x5890 [ 1116.018619][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1116.024754][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1116.029514][ C1] ? __pfx___schedule+0x10/0x10 [ 1116.034340][ C1] ? stack_trace_save+0x95/0xd0 [ 1116.039166][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1116.044518][ C1] ? mark_held_locks+0x9f/0xe0 [ 1116.049260][ C1] preempt_schedule_irq+0x51/0x90 [ 1116.054260][ C1] irqentry_exit+0x36/0x90 [ 1116.058651][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1116.064610][ C1] RIP: 0010:__reset_page_owner+0x100/0x400 [ 1116.070391][ C1] Code: 31 ff 44 89 e6 e8 c0 5e 93 ff 49 01 ef 45 85 e4 74 4a e8 b3 63 93 ff be 08 00 00 00 48 89 ef e8 a6 80 f6 ff 48 0f ba 75 00 01 <49> 8d 7f 0c 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f [ 1116.089973][ C1] RSP: 0018:ffffc9000d8f76e0 EFLAGS: 00000247 [ 1116.096013][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff82267b3a [ 1116.103958][ C1] RDX: ffffed1003907513 RSI: 0000000000000008 RDI: ffff88801c83a890 [ 1116.111916][ C1] RBP: ffff88801c83a890 R08: 0000000000000001 R09: ffffed1003907512 [ 1116.119860][ C1] R10: ffff88801c83a897 R11: 0000000000002ba2 R12: 0000000001280566 [ 1116.127810][ C1] R13: 0000000000000004 R14: 0000000000000002 R15: ffff88801c83a898 [ 1116.135758][ C1] ? __reset_page_owner+0xfa/0x400 [ 1116.140854][ C1] free_frozen_pages+0x6db/0xfb0 [ 1116.145769][ C1] __put_partials+0x14c/0x170 [ 1116.150441][ C1] qlist_free_all+0x4e/0x120 [ 1116.155013][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 1116.160449][ C1] __kasan_slab_alloc+0x69/0x90 [ 1116.165275][ C1] kmem_cache_alloc_noprof+0x226/0x3d0 [ 1116.170707][ C1] ? alloc_buffer_head+0x21/0x160 [ 1116.175711][ C1] alloc_buffer_head+0x21/0x160 [ 1116.180541][ C1] jbd2_journal_write_metadata_buffer+0xc1/0x1160 [ 1116.186937][ C1] ? __pfx_jbd2_journal_bmap+0x10/0x10 [ 1116.192371][ C1] ? _raw_write_unlock+0x28/0x50 [ 1116.197284][ C1] ? jbd2_journal_next_log_block+0xf2/0x170 [ 1116.203155][ C1] jbd2_journal_commit_transaction+0x135f/0x67e0 [ 1116.209482][ C1] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1116.216134][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1116.221913][ C1] ? debug_object_deactivate+0x1ef/0x370 [ 1116.227522][ C1] ? find_held_lock+0x2d/0x110 [ 1116.232260][ C1] ? __pfx_lock_release+0x10/0x10 [ 1116.237262][ C1] ? rcu_is_watching+0x12/0xc0 [ 1116.242004][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1116.247791][ C1] kjournald2+0x1f8/0x760 [ 1116.252099][ C1] ? __kthread_parkme+0xb7/0x220 [ 1116.257008][ C1] ? __pfx_kjournald2+0x10/0x10 [ 1116.261849][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1116.267909][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1116.273083][ C1] ? __kthread_parkme+0x148/0x220 [ 1116.278079][ C1] ? __pfx_kjournald2+0x10/0x10 [ 1116.282906][ C1] kthread+0x3af/0x750 [ 1116.286949][ C1] ? __pfx_kthread+0x10/0x10 [ 1116.291524][ C1] ? __pfx_kthread+0x10/0x10 [ 1116.295726][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.296105][ C1] ret_from_fork+0x45/0x80 [ 1116.306754][ C1] ? __pfx_kthread+0x10/0x10 [ 1116.311351][ C1] ret_from_fork_asm+0x1a/0x30 [ 1116.316120][ C1] [ 1116.319119][ C1] rcu: rcu_preempt kthread starved for 10512 jiffies! g49189 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1116.330310][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1116.340282][ C1] rcu: RCU grace-period kthread stack dump: [ 1116.346173][ C1] task:rcu_preempt state:I stack:28344 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1116.358112][ C1] Call Trace: [ 1116.361388][ C1] [ 1116.364317][ C1] __schedule+0xf43/0x5890 [ 1116.368741][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1116.373962][ C1] ? __pfx___schedule+0x10/0x10 [ 1116.378821][ C1] ? schedule+0x298/0x350 [ 1116.383149][ C1] ? __pfx_lock_release+0x10/0x10 [ 1116.388182][ C1] ? lock_acquire+0x2f/0xb0 [ 1116.392696][ C1] ? schedule+0x1fd/0x350 [ 1116.397026][ C1] schedule+0xe7/0x350 [ 1116.401103][ C1] schedule_timeout+0x124/0x280 [ 1116.405974][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1116.411371][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1116.416670][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1116.422494][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1116.427968][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1116.432740][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1116.438015][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1116.442705][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1116.447930][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1116.453745][ C1] rcu_gp_kthread+0x271/0x380 [ 1116.458429][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1116.463664][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1116.468869][ C1] ? __kthread_parkme+0x148/0x220 [ 1116.473913][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1116.479119][ C1] kthread+0x3af/0x750 [ 1116.483176][ C1] ? __pfx_kthread+0x10/0x10 [ 1116.487771][ C1] ? __pfx_kthread+0x10/0x10 [ 1116.492351][ C1] ret_from_fork+0x45/0x80 [ 1116.496756][ C1] ? __pfx_kthread+0x10/0x10 [ 1116.501333][ C1] ret_from_fork_asm+0x1a/0x30 [ 1116.506091][ C1] [ 1116.509094][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1116.515395][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1116.520583][ C0] NMI backtrace for cpu 0 [ 1116.520593][ C0] CPU: 0 UID: 0 PID: 5810 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 1116.520607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1116.520614][ C0] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 1116.520632][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7c 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 1116.520644][ C0] RSP: 0018:ffffc9000409f820 EFLAGS: 00000293 [ 1116.520655][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81add08a [ 1116.520663][ C0] RDX: ffff8880771c4880 RSI: ffffffff81add064 RDI: 0000000000000005 [ 1116.520671][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1116.520678][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: ffffed10170e8951 [ 1116.520686][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 1116.520694][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1116.520708][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.520716][ C0] CR2: 000040000002e000 CR3: 00000000289f2000 CR4: 00000000003526f0 [ 1116.520725][ C0] Call Trace: [ 1116.520729][ C0] [ 1116.520733][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1116.520753][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1116.520769][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1116.520787][ C0] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 1116.520800][ C0] ? default_do_nmi+0x6a/0x160 [ 1116.520818][ C0] ? exc_nmi+0x170/0x1e0 [ 1116.520834][ C0] ? end_repeat_nmi+0xf/0x53 [ 1116.520853][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 1116.520866][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 1116.520878][ C0] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 1116.520891][ C0] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 1116.520904][ C0] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 1116.520917][ C0] [ 1116.520921][ C0] [ 1116.520929][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1116.520943][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1116.520956][ C0] flush_tlb_mm_range+0x271/0x4a0 [ 1116.520970][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1116.520986][ C0] tlb_finish_mmu+0x3c9/0x7b0 [ 1116.521000][ C0] exit_mmap+0x40e/0xba0 [ 1116.521019][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1116.521039][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1116.521063][ C0] __mmput+0x12a/0x410 [ 1116.521082][ C0] mmput+0x62/0x70 [ 1116.521098][ C0] do_exit+0x9ba/0x2d70 [ 1116.521112][ C0] ? get_signal+0x8f7/0x26c0 [ 1116.521130][ C0] ? __pfx_do_exit+0x10/0x10 [ 1116.521141][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1116.521153][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.521166][ C0] do_group_exit+0xd3/0x2a0 [ 1116.521179][ C0] get_signal+0x24ed/0x26c0 [ 1116.521197][ C0] ? __pfx_child_wait_callback+0x10/0x10 [ 1116.521210][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 1116.521226][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 1116.521242][ C0] ? __pfx_get_signal+0x10/0x10 [ 1116.521260][ C0] ? __do_sys_wait4+0xd2/0x170 [ 1116.521273][ C0] ? find_held_lock+0x2d/0x110 [ 1116.521286][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 1116.521301][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1116.521320][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 1116.521335][ C0] do_syscall_64+0xda/0x250 [ 1116.521349][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.521365][ C0] RIP: 0033:0x7f85151832d3 [ 1116.521374][ C0] Code: Unable to access opcode bytes at 0x7f85151832a9. [ 1116.521379][ C0] RSP: 002b:00007ffdedd59d88 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1116.521391][ C0] RAX: fffffffffffffe00 RBX: 00000000000016c0 RCX: 00007f85151832d3 [ 1116.521399][ C0] RDX: 0000000040000000 RSI: 00007ffdedd59d9c RDI: 00000000ffffffff [ 1116.521407][ C0] RBP: 00007ffdedd59d9c R08: 0000000000000000 R09: 0000000000000000 [ 1116.521414][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1116.521422][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1116.521434][ C0] [ 1118.660575][T16129] Bluetooth: hci0: command tx timeout [ 1119.144287][ T57] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 SYZFAIL: failed to send rpc fd=3 want=57984 sent=0 n=-1 (errno 32: Broken pipe) [ 1120.664171][ T29] audit: type=1400 audit(1740158071.205:1112): avc: denied { write } for pid=5805 comm="syz-executor" path="pipe:[5178]" dev="pipefs" ino=5178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1120.888581][ T5144] Bluetooth: hci1: command tx timeout [ 1121.960587][ T1290] ieee802154 phy1 wpan1: encryption failed: -22