last executing test programs: 14m15.966827987s ago: executing program 32 (id=138): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000693000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) 11m54.53226918s ago: executing program 1 (id=598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r4 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) fadvise64(r4, 0x0, 0x8, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661751b2aa98e7235737465643a73797a20303030303030303030303030303030303430393200"], 0x2d, 0xfffffffffffffffa) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x840c2, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) 11m51.151094774s ago: executing program 1 (id=608): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0042, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa82, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x5c}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xbc4, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0xff1f, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m49.201496684s ago: executing program 1 (id=613): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() 11m47.411061249s ago: executing program 1 (id=618): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chdir(&(0x7f0000000140)='./file0\x00') read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000c80)={r4, 0xa1, "df86816cf383d252a97216f3b7453239bc3a4a74d2f9c5299da854e21a5832db6f818483ba5c762b28c0e1d672ea80b6994074284ad56dcaec4a94b2f2b9d1966c8494c2ea222b969f7ac862d7c49fd3268cb1abbecb8caa83386865f660b8afa1a07b96b882f5415b13209db5d274b2e1389ae31eb795ae5ac7c62fc042e658540353a55ca01ed11d93c48f410a3658a47ef921b84d5d921efb0d68cce7f38ffa"}, &(0x7f0000000000)=0xa9) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r2}, 0x10) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r7, 0x350, 0x10000) ptrace$pokeuser(0x6, r7, 0x388, 0xffff7fffffffff7f) 11m44.795915222s ago: executing program 1 (id=627): syz_emit_ethernet(0xfe2, &(0x7f0000002900)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd674396200fac11fffe80000000000000000000000000000bff0200000000000000000000000000016c060403"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 11m43.846783522s ago: executing program 1 (id=630): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r1, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) dup2(r1, r0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000004c0)) sendto(r1, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044b87384da68b919000073797a3000000000000000000000000000000000005900000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0003003412000078560000010000000000000005200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"], 0x154) write$UHID_DESTROY(r0, &(0x7f0000000040), 0xfffffffffffffd97) 11m43.217044855s ago: executing program 33 (id=630): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r1, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) dup2(r1, r0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000004c0)) sendto(r1, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044b87384da68b919000073797a3000000000000000000000000000000000005900000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0003003412000078560000010000000000000005200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"], 0x154) write$UHID_DESTROY(r0, &(0x7f0000000040), 0xfffffffffffffd97) 10m50.270535347s ago: executing program 4 (id=824): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$setperm(0x5, r4, 0x30925) 10m49.175544389s ago: executing program 4 (id=829): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1501, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0xca, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000}, 0x0) r5 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={r6, 0x8, 0xd1}, 0x8) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000400)=""/249) shmat(r5, &(0x7f0000ffb000/0x3000)=nil, 0x7000) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'virt_wifi0\x00', {}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0x2) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x7d, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) 10m47.49626071s ago: executing program 4 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x0, 0x8, 0x2b}, 0x10) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) listen(r0, 0x7) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$setstatus(r2, 0x4, 0x800) connect$phonet_pipe(r2, &(0x7f0000000200)={0x23, 0x0, 0x8, 0x2b}, 0x10) socket(0xa, 0x3, 0x3a) r3 = accept$phonet_pipe(r1, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000300)=0x1, 0x4) close(r2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x4000, 0x0) open(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x202, 0x40) 10m47.162827877s ago: executing program 4 (id=841): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000540), &(0x7f0000000740)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 10m45.231016168s ago: executing program 4 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x6, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f0302e9dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x1e, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0001000203030000000000000000f6ff0000f80800010001000000"], 0x1c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9000f400021201030000000000000000020000051800038006000340000400000c00028005000100210000000a000b00512e3933310000000b000600616d616e64610000340028800c000280050001008400000006000340007655000a010100080002007f0000010800054000000008080009405d1e0a0506000740000400008e719eea84c13aa75093b7187b8f0932091abeeaba80ffac1f9250276f9d10d898a8ec487ec4d35ba3326b2ffebca9e6efb1bc230d1d21c3f8713a09957759f5b1f2d6f70242316a8236280ab8ce12548a8ae11cf39af79222d7e978256aa2597964c645df1209ad09b165d49e7c9a3a8ebdee2ea8f1c5ce75f0675c92bf3301055b1a94a296363f31e09b60f4d75701e6539c7e6901ac9ca5afa74adf"], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x200, 0x0, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0xc, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x5}}}, &(0x7f0000000340)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r0, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x1}}, 0x10) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x110, 0xffffffffffffffff, 0xedd67000) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r9 = mq_open(&(0x7f0000000740)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r9, 0x0, 0x2000, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) inotify_init1(0x80000) ioperm(0x4, 0xe, 0x15) 10m44.99172464s ago: executing program 4 (id=845): userfaultfd(0x801) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x13, 0x92, &(0x7f0000000400)=""/146, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x81c6, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000780)=[{0x5, 0x5, 0x9, 0x5}, {0x2, 0x5, 0xe}, {0x0, 0x1, 0x5, 0x2}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x4, 0xf, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x10001, 0x2}, {0x2, 0x5, 0x6, 0x4}, {0x0, 0x3}], 0x10, 0xc}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c"], 0x50}}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002dc0)={{r4}, &(0x7f0000002d40), &(0x7f0000002d80)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0xac}], 0x1, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000940)=[@out_dx={0x6a, 0x28, {0xf4cf, 0x2, 0x5}}, @nested_load_syzos={0x136, 0x38, {0x0, 0x3, [@nested_amd_vmload={0x182, 0x18, 0x2}]}}, @wr_drn={0x68, 0x20, {0x3, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0xf}}, @nested_vmresume={0x130, 0x18, 0x2}, @code={0xa, 0x5c, {"66ba2000b0dceee514440f06b8010000000f01c1c744240000800000c7442402db000000c7442406000000000f011424b9370b00000f320f01c80fc7b1e4000000c4e3792048a8c246ffe7"}}, @code={0xa, 0x74, {"66b801000f00d0440f20c0350a000000440f22c026430f00170f0766b8a2008ed848b800800000000000000f23c80f21f8350c0050000f23f8c4c1b414987aca0000670f017ee60f00514548b8b9690000000000000f23d80f21f835400000800f23f8"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x4000000000, 0x5}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x5b0c, 0x6}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x3f7}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0x4891}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x44, 0x5, 0x1}}, @nested_load_code={0x12e, 0x50, {0x1, "430f300f01c50f0966ba420066b8d3ab66efc48178ae530e660f3838a1180000008fa8788f9951000000190f1b58520f01db66b82f008ed0"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x64, 0x18, {0x8001, 0x7f}}, @enable_nested={0x12c, 0x18}], 0x338}) 10m29.702356203s ago: executing program 34 (id=845): userfaultfd(0x801) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x13, 0x92, &(0x7f0000000400)=""/146, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x81c6, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000780)=[{0x5, 0x5, 0x9, 0x5}, {0x2, 0x5, 0xe}, {0x0, 0x1, 0x5, 0x2}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x4, 0xf, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x10001, 0x2}, {0x2, 0x5, 0x6, 0x4}, {0x0, 0x3}], 0x10, 0xc}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c"], 0x50}}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002dc0)={{r4}, &(0x7f0000002d40), &(0x7f0000002d80)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0xac}], 0x1, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000940)=[@out_dx={0x6a, 0x28, {0xf4cf, 0x2, 0x5}}, @nested_load_syzos={0x136, 0x38, {0x0, 0x3, [@nested_amd_vmload={0x182, 0x18, 0x2}]}}, @wr_drn={0x68, 0x20, {0x3, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0xf}}, @nested_vmresume={0x130, 0x18, 0x2}, @code={0xa, 0x5c, {"66ba2000b0dceee514440f06b8010000000f01c1c744240000800000c7442402db000000c7442406000000000f011424b9370b00000f320f01c80fc7b1e4000000c4e3792048a8c246ffe7"}}, @code={0xa, 0x74, {"66b801000f00d0440f20c0350a000000440f22c026430f00170f0766b8a2008ed848b800800000000000000f23c80f21f8350c0050000f23f8c4c1b414987aca0000670f017ee60f00514548b8b9690000000000000f23d80f21f835400000800f23f8"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x4000000000, 0x5}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x5b0c, 0x6}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x3f7}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0x4891}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x44, 0x5, 0x1}}, @nested_load_code={0x12e, 0x50, {0x1, "430f300f01c50f0966ba420066b8d3ab66efc48178ae530e660f3838a1180000008fa8788f9951000000190f1b58520f01db66b82f008ed0"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x64, 0x18, {0x8001, 0x7f}}, @enable_nested={0x12c, 0x18}], 0x338}) 7m59.454993176s ago: executing program 7 (id=1460): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) bind$tipc(r5, 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000040000103020000000000000003"], 0x18}}, 0x0) 7m58.749706259s ago: executing program 7 (id=1462): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a1933", 0x14) socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) socket(0x1f, 0x5, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r4, &(0x7f0000000b00)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r4, 0x5) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd688c4ea3d9d335a00b25f85e66f59e002806ff00000000000000000000ffff0a010102fe8000000000000000000000000000aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a18000049078000413120681440e908315ac0cb825524e64a5020000"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x8054) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x23, 0x5, 0x0) 7m55.937925026s ago: executing program 7 (id=1477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) setresuid(0x0, 0xee01, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0}) prlimit64(r0, 0x3, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3}, 0x20) 7m54.962784459s ago: executing program 7 (id=1482): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000a1ff00000007000000", @ANYRES32=r7, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000480)=[{0x3c, '\x00', @data=0x8, 0xc}, {0x46, '\x00', @st={0x4, [{0x0, @uvalue=0x35c0000000000}, {0x2, @svalue=0x100000000}, {0x0, @svalue=0x2}, {0x0, @svalue=0x7ff}]}, 0x6447}, {0x19, '\x00', @st={0x4, [{0x3, @uvalue=0x6}, {0x2, @svalue=0x1}, {0x2, @svalue=0xc}, {0x2, @svalue}]}, 0x9b10}, {0x1b, '\x00', @buffer={"9410768ce7c10c74c84d2f87556782d4f746b1965d0ec19e8ff88d0f29a848a3", 0x20}, 0x204}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x20, 0xc6cdb91b1c448aed, 0xb, "2c33bb55b5878989fe6d97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m51.005946751s ago: executing program 7 (id=1498): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x88) ioprio_set$pid(0x2, 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/134, 0x86) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="13000000010203", 0x7}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x149042, 0x1e9) setxattr$security_ima(&(0x7f0000000200)='./file1\x00', &(0x7f0000000100), &(0x7f00000002c0)=ANY=[@ANYBLOB="0607"], 0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) 7m49.289500314s ago: executing program 7 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0635010001000000010902"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e1f, @private=0xa010102}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00') pread64(r4, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m34.234636414s ago: executing program 35 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0635010001000000010902"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e1f, @private=0xa010102}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00') pread64(r4, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m15.032559884s ago: executing program 8 (id=2555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setpgid(r2, r2) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040)=0x28b1286d, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000001c0)={0x990000, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa2092a, 0x4, '\x00', @value=0x1}}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c00020008000a00e8"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 3m14.095202381s ago: executing program 8 (id=2559): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x300, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3m12.892511247s ago: executing program 8 (id=2562): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000540)="1100f8", 0x3}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5e8}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f00006f7000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff36, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0x6}, {0x0, 0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0xd1ad045825a3ada6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 3m11.128597742s ago: executing program 8 (id=2569): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000280)={0x0, 0xfffffffe, 0x0, 0x4, 0x5e}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x20, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x686b, 0x2, 0x40040005, 0x75}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff, 0x0, r7}}], 0x1, 0x0, 0x0) 3m9.918272939s ago: executing program 8 (id=2571): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, &(0x7f0000000300)) 3m8.921391685s ago: executing program 8 (id=2575): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$fault_inject(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/fail_make_request/interval\x00', 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x2400000) r3 = socket(0xa, 0x3, 0xff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x135000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) syz_usb_connect(0x3, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b0001000000000904"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000100)) 2m53.611478739s ago: executing program 36 (id=2575): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$fault_inject(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/fail_make_request/interval\x00', 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x2400000) r3 = socket(0xa, 0x3, 0xff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x135000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) syz_usb_connect(0x3, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b0001000000000904"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000100)) 2m44.181040907s ago: executing program 9 (id=2636): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df93", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="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", 0x67c}], 0x1}}], 0x2, 0x0) 2m44.130167637s ago: executing program 9 (id=2667): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r0 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) close_range(r1, 0xffffffffffffffff, 0x20) 2m28.951526916s ago: executing program 37 (id=2667): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r0 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) close_range(r1, 0xffffffffffffffff, 0x20) 29.473818157s ago: executing program 3 (id=3073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x3, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f00000014c0)=[{&(0x7f00000002c0)="13", 0x1}, {&(0x7f00000004c0)="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", 0x1000}], 0x2}, 0x48043) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000140)=""/68, 0x44}, &(0x7f0000000300), 0x32}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 29.209853614s ago: executing program 3 (id=3074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r5, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 26.683143436s ago: executing program 3 (id=3079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x7, &(0x7f0000000040)=0x28b1286d, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f00000001c0)={0x990000, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa2092a, 0x4, '\x00', @value=0x1}}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r2], 0x3c}}, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 25.334639173s ago: executing program 3 (id=3083): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x35e, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000003c0)=""/198, 0xc6, 0x0, &(0x7f00000004c0)=""/131, 0x83}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0xc0a85320, &(0x7f0000000900)={{0x80}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 23.812314443s ago: executing program 3 (id=3087): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) socket$netlink(0x10, 0x3, 0x6) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 17.142801123s ago: executing program 3 (id=3103): pipe(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) socket$inet(0x2, 0xa, 0xffffffff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) setns(0xc9, 0x0) socket(0x1f, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x14) 10.629950361s ago: executing program 0 (id=3117): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0x48, 0xcf, 0xb, 0x10, 0x19d2, 0x1297, 0x8215, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x8, 0x5, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x0, 0xff, 0xff, 0xff}}, {{0x9, 0x4, 0x79, 0x8, 0x0, 0xc7, 0x49, 0x55, 0x7d}}]}}]}}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000100)=0x3) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x44004) sendmsg$NL80211_CMD_STOP_NAN(r2, 0x0, 0x20008011) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 7.687341397s ago: executing program 5 (id=3123): pipe(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) socket$inet(0x2, 0xa, 0xffffffff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x14) 6.607668586s ago: executing program 6 (id=3125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1200800, &(0x7f00000003c0)={[{@redirect_dir_nofollow}, {@userxattr}, {@verity_on}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000002600)=""/4113, 0x1011) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000280)=0x4) 6.584487508s ago: executing program 2 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r3, r3) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040)=0x28b1286d, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x990000, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa2092a, 0x4, '\x00', @value=0x1}}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r2], 0x3c}}, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 6.415228899s ago: executing program 5 (id=3127): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x1000, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@window={0x3, 0x3, 0xf}]}}}}}}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x6020400) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="030000000000695896330e34803baeaed3d3f53b40abcca7f3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x60, &(0x7f0000001100)}, 0x10) syz_usb_connect(0x4, 0x2da, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x110, 0x9, 0xfa, 0x7a, 0x8, 0xb}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x7, 0xfff7}]}, 0x1, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x42b}}]}) r2 = socket(0x11, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffef, 0x5, 0x1, 0x48, 0x1, 0xfb}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) write(r3, &(0x7f0000000180)='p:s/p .', 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) sendmmsg(r2, &(0x7f0000000bc0), 0x0, 0x24044015) syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') write(r0, &(0x7f0000000000)='3', 0x4e) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={'wp512-generic\x00'}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000000c0), &(0x7f0000000180)=r0}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) 6.036315986s ago: executing program 2 (id=3128): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x86100) close(0x3) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) syz_usbip_server_init(0x4) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="20070001000084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) 5.990131293s ago: executing program 0 (id=3129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x12, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='cert_serial\x00', &(0x7f0000000180)='1234\x00', 0x0) 5.676466145s ago: executing program 5 (id=3130): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x0, 0x10}}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000280)='net/ip_tables_names\x00') ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020e00000e0000000000000000000000010015004e2200000800120000000400000000000000000006001f00000000000000000008000000fe8000000000000000000000000000aafff1ff0000000000230000000078a627eee99ffff013e18ec511a60000010300020000000000020000000000000093184fb36d6f22d70000000000000000"], 0x70}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x800003f, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000040), &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r10}, 0x8) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe29, 0x0, 0x0, 0x1000, 0xfffffff8, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) open(&(0x7f0000000040)='./file0\x00', 0x5e984480958c00f5, 0x91) 5.656257977s ago: executing program 6 (id=3131): mknod$loop(0x0, 0x2000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) socket$inet(0x2, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 5.368052276s ago: executing program 5 (id=3132): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000004fc0)=ANY=[@ANYBLOB="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"], 0x6bf) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x4008, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x4, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) bind$can_j1939(r1, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x1}, 0x1}, 0x18) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) syz_usb_connect$uac2(0x3, 0x136, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000900)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x6, 0x99, 0x3, 0x8, 0x2e}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x240a}}, {0xc1, &(0x7f0000000440)=ANY=[@ANYBLOB="c103ddb43e16799aac67119b5bf3dc3732b49bdbfbfa5a04000000f1905649c9c514696539d288cff214292ceaf3261f665d305e19e675c143be635ada96627c4c40cae540a41c9fa6e0db35bbecabb43d7eeee5619cd3e33e719cb1c8ff8709fa9b5ea7b46e9b09c45500d46477f50d76bfabd38f5204bd377dea5b68790d7b78f3c9c68d492f07a0adafbd36bc3b429cc53a99724206c7a6cbfaa53d0a42d2e11e2b8a5d9cce5272b0783b24a79ee305d4596a7ae3dc26200cdf07f183564b451bf77a585bf6e73cfb21c71573f869e8a5d5b4b63eed9a5a102605102fc7c9aacf39dfc52542b335e9fe616bc7cc3b4c8a7b84a3b1b7a138827d43c1006d08eabc6365fd878448ff58b064e38b3b169b47639160bdb60b3d77057306c3d0320b3a032e80d452b5b5804516dd45dbb1572790d7d856773c8ab3e7dc1aee4ad8d7468ccb0856eaa8ca76903ef280243f5f4a679d081be4ec4962514759803365fffc3c565c00ddecb9300f2e2e6387fbd6dfc2a5aab027ef5b9653e918927a2cb7b9682edb1b800d3e20c2b113263467371d1e7e433e6aac65a4fc58d4aaa60185b987d1b522db24"]}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x41e}}]}) 5.316326928s ago: executing program 2 (id=3133): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)="62603751255053ac7e81e3ae273473cc2db9f9ea5035d129608cb6ad759683a3762350bf61835a5f3c49ac0d9961aac0395398f644d8dda76415ad8c3d5eae90b8c1dc2d19ca81b1383d9a0dc840df7f96c2cc486ff6d78475f0bb4166e5f6468f03811d8bdffb470d2bb7f373f771c1398111041d8957590f36940ad63a710f9b6ced4c4a2c4b2f341b541ab9c8fb2f2504725e5d97afceca243bc0b4da1422abc9685bff324561", 0xa8}, {0x0}, {&(0x7f0000000700)="38e06615d1064f0bdd99567dd66df8b2a4187fbb592be4390c9a3c497e10a6c3418db11e6ddaa902d139f231e4153063d10f3bf7e5c61b34f6e0f651817ac31fc65fd831c3aed1ce444a2bf7cdb59c0a8cc37d8ddd53b1fddf87128822a3db77f778f4c7ce3b48ec5fe101350f082207eca307f46ceb", 0x76}, {&(0x7f0000000880)="06c9393e16e2c53bbc1547cb0fbc57655fc0619e5a0961ddc99bc5c3ef2bd96dfb4c294495ae9700b55818c35c76fe3a19a1c6a61156d6e3a7402002088023dc7fcbdf1942fc49952a5491f5ededd6bf", 0x50}], 0x5, 0x0, 0x0, 0x810}, 0x4040010) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) pselect6(0x40, &(0x7f0000000180)={0x8, 0x3, 0x5, 0x9, 0x4, 0x1e1a0000000, 0x8, 0x3}, &(0x7f00000001c0)={0x1, 0x100, 0x3, 0x10, 0x7, 0xffffffffffffff81, 0x5, 0x9}, &(0x7f0000000200)={0x1, 0xc2c7, 0x6, 0x10, 0x800, 0xb, 0x1, 0x4}, &(0x7f0000000440), &(0x7f0000000340)={&(0x7f0000000300)={[0xcf]}, 0x8}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x8000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x8010, 0xfffffffc, 0x4, 0xce024d, 0xffffffff}, 0x9c) r7 = socket(0x400000000010, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'pimreg0\x00'}) gettid() 4.108988972s ago: executing program 0 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040050}, 0x24008004) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@mmap={0x1, 0x2, 0x4, 0x100, 0x81, {}, {0x5, 0x8, 0x8, 0x5, 0x5, 0x8, "0adb3fb8"}, 0x2, 0x1, {}, 0x3ff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]}) sched_setattr(0x0, &(0x7f0000000280)={0x5c, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) unshare(0xde060b00) ptrace(0x10, 0x1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2048}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {}], 0x4, 0x1) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r7, 0x20}, 0x38) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) 4.049165435s ago: executing program 2 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040050}, 0x24008004) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@mmap={0x1, 0x2, 0x4, 0x100, 0x81, {}, {0x5, 0x8, 0x8, 0x5, 0x5, 0x8, "0adb3fb8"}, 0x2, 0x1, {}, 0x3ff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]}) sched_setattr(0x0, &(0x7f0000000280)={0x5c, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) unshare(0xde060b00) ptrace(0x10, 0x1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2048}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {}], 0x4, 0x1) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r7, 0x20}, 0x38) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) 3.972483948s ago: executing program 6 (id=3136): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xfeff, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021"], 0x84}}, 0x200088c2) 3.581137489s ago: executing program 6 (id=3137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040050}, 0x24008004) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@mmap={0x1, 0x2, 0x4, 0x100, 0x81, {}, {0x5, 0x8, 0x8, 0x5, 0x5, 0x8, "0adb3fb8"}, 0x2, 0x1, {}, 0x3ff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]}) sched_setattr(0x0, &(0x7f0000000280)={0x5c, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) unshare(0xde060b00) ptrace(0x10, 0x1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2048}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {}], 0x4, 0x1) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r7, 0x20}, 0x38) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) 1.980404961s ago: executing program 5 (id=3138): syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e000000000000000100000000e01f00000000000000ff0200000000000000000000000000010100c2"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7, 0x4, 0x6, 0x9e, 0x7]}, &(0x7f00000001c0)=0x54) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0xa5dfdbfc, {{@in=@private=0xa010102, @in=@remote, 0xffff, 0x0, 0x4e21, 0x22, 0xa, 0x0, 0x0, 0x1d}, {@in6=@mcast2, 0xfe, 0x32}, @in6=@empty, {0xffff, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002, 0x0, 0x1}, {0x2}, 0x70bd2b, 0x3500, 0x2, 0x4, 0x0, 0x10}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="380100001000070000639e4d7c390000000000000058667300000000000000000000000000000000ac1414aa0000000000000000000000004e2000000000000000000000020000004ef741cfdc927af541181aecca3a2e01b6d691f53d1c1c1eade607ff", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000003000000000000000100000000000000020000000000000009000000000000000000001000000000010000000000000000000000000000000000000000000000000000000000000002000000000000000700000000000000000000000000000000000400ffffffffe80a000000000000083500000a0002fe340000000000000014000e00fe8000000000000000000000000000bb240009008f6b0000000000000200000000000000b4000000000000000500000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b40000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a000000000000008f6b000000000000020000000000000004000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a000200700000000000000014000e00ac1414bb00000000000000000000000008001d0005000000"], 0x10c}}, 0x8000) r6 = syz_ublk_setup_io_uring(0x5a42, &(0x7f0000000040)={0x0, 0xdaa8, 0x10, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0xc, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r13, 0x0) connect$inet6(r13, &(0x7f0000000540)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r14 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r14, &(0x7f0000000000)={0x2c, &(0x7f0000000500)={0x0, 0x21, 0x28, {0x28, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r15, 0xff, 0x7, &(0x7f0000000000)="fa794bfa", 0x4) r16 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) syz_ublk_setup_queues(r16, r12, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ce, 0x0, r13}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x0, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18a7, 0x1, 0x0, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x40000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x8000, 0x1, 0x20a, 0x0, r1}}], 0x4, &(0x7f0000000400)={0x2e, 0x10, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r11, '\x00', {0x4, 0xe50, 0x0, 0x0}}, &(0x7f0000000480)) 1.902245619s ago: executing program 0 (id=3139): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r1, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) dup2(r1, r0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000004c0)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) socket$inet(0x2, 0x6, 0xfffffffb) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa1111111111111111111111111111A111'], 0x48, 0xfffffffffffffff8) write(r6, &(0x7f00000001c0)='jiffies', 0x7) sendto(r1, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044b87384da68b919000073797a3000000000000000000000000000000000005900000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0003003412000078560000010000000000000005200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"], 0x154) write$UHID_DESTROY(r0, &(0x7f0000000040), 0xfffffffffffffd97) 1.901284299s ago: executing program 2 (id=3140): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) fchdir(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x1) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r3, 0x0) r5 = io_uring_setup(0x63d6, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f00003e2000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, 0x0}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x0) 1.562755127s ago: executing program 6 (id=3141): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000005c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000b40)={0x0, 0x2}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00'}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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"/1369, 0x559, r5) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e", 0x82}, {&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692", 0x1d9}], 0x2}}], 0x2, 0x0) 1.337442165s ago: executing program 0 (id=3142): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="68000000020905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c6963793000080002eb000069cc629ae30000000000", 0x68}], 0x1}, 0x0) 780.035948ms ago: executing program 2 (id=3143): pipe(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) socket$inet(0x2, 0xa, 0xffffffff) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x14) 766.143263ms ago: executing program 5 (id=3144): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) close(0x3) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r0, 0x0, 0x0) sendto(r0, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r8, r8, r8}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) close(r1) r9 = getpid() syz_pidfd_open(r9, 0x0) 739.194271ms ago: executing program 0 (id=3145): mknod$loop(0x0, 0x2000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) socket$inet(0x2, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 0s ago: executing program 6 (id=3146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xb, 0x3, 0x2, @mcast1, @empty, 0x8, 0x8000, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0xa9, 0xfd, 0x10000, 0x12, @private2, @mcast2, 0x20, 0x80, 0x3, 0x9}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@local}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x7, 0x7, 0xffff, 0x1fc, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x65, 0x0, 0x35, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x81, [@rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0x2d, [@local, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xc6, 0x1, 0xc, [{@remote, 0xb}, {@local, 0x7fffffff}]}]}}}}}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r6, 0x230d}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): 047] snd_dummy snd_dummy.0: control 0:254:0:syz0:0 is already present [ 582.351648][T13047] snd_dummy snd_dummy.0: control 0:254:0:syz0:0 is already present [ 582.351753][T13047] snd_dummy snd_dummy.0: control 0:254:0:syz0:0 is already present [ 582.351855][T13047] snd_dummy snd_dummy.0: control 0:254:0:syz0:0 is already present [ 582.351958][T13047] snd_dummy snd_dummy.0: control 0:254:0:syz0:0 is already present [ 582.368206][T13052] batadv_slave_1: left promiscuous mode [ 583.437269][T13067] netlink: 'syz.8.1837': attribute type 39 has an invalid length. [ 584.132901][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1836'. [ 584.404128][T13079] netlink: 'syz.3.1840': attribute type 13 has an invalid length. [ 584.404150][T13079] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1840'. [ 586.896052][T13108] bond1: entered allmulticast mode [ 587.799486][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 587.799503][ T30] audit: type=1400 audit(1790382411.704:1929): avc: denied { bind } for pid=13135 comm="syz.5.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 588.010234][T13142] 9p: Bad value for 'rfdno' [ 588.877805][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1863'. [ 588.877838][T13155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1863'. [ 588.885853][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1863'. [ 588.885878][T13155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1863'. [ 588.892144][T12226] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.892336][T12226] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.892382][T12226] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.892411][T12226] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.171306][T13219] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13219 comm=syz.0.1879 [ 593.884016][T13235] bridge0: port 3(syz_tun) entered blocking state [ 593.884364][T13235] bridge0: port 3(syz_tun) entered disabled state [ 593.884945][T13235] syz_tun: entered allmulticast mode [ 593.893062][T13235] syz_tun: entered promiscuous mode [ 593.894582][T13235] bridge0: port 3(syz_tun) entered blocking state [ 593.894660][T13235] bridge0: port 3(syz_tun) entered forwarding state [ 596.178862][T13259] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1891'. [ 596.899752][T13269] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13269 comm=syz.5.1893 [ 598.827329][T13299] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1903'. [ 598.827349][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1903'. [ 600.588283][ T9752] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 600.759455][ T9752] usb 9-1: device descriptor read/64, error -71 [ 601.383112][ T9752] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 601.522727][ T9752] usb 9-1: device descriptor read/64, error -71 [ 601.633711][ T9752] usb usb9-port1: attempt power cycle [ 601.993318][ T9752] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 602.014210][ T9752] usb 9-1: device descriptor read/8, error -71 [ 602.273032][ T9752] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 602.304058][ T9752] usb 9-1: device descriptor read/8, error -71 [ 602.413359][ T9752] usb usb9-port1: unable to enumerate USB device [ 603.962409][T13377] syz_tun: left allmulticast mode [ 603.962436][T13377] syz_tun: left promiscuous mode [ 603.967926][T13377] bridge0: port 1(syz_tun) entered disabled state [ 604.006718][T13377] bond0: (slave batadv0): Releasing backup interface [ 604.020782][T13377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 604.045014][T13377] team0: Refused to change device type [ 604.067824][T13377] tipc: Started in network mode [ 604.067851][T13377] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 604.067969][T13377] tipc: Enabled bearer , priority 0 [ 604.467670][T13385] fuse: fd is not a fuse device [ 605.478996][T10621] tipc: Node number set to 11578026 [ 606.098168][T13402] sd 0:0:1:0: device reset [ 606.433135][T13165] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.433177][T13165] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.433206][T13165] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.433241][T13165] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.358348][T13422] can: request_module (can-proto-0) failed. [ 608.696422][T13449] fuse: fd is not a fuse device [ 609.808431][T13468] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1953'. [ 610.450000][T13472] trusted_key: encrypted_key: insufficient parameters specified [ 611.556547][T13491] bridge0: port 1(syz_tun) entered blocking state [ 611.556890][T13491] bridge0: port 1(syz_tun) entered disabled state [ 611.557469][T13491] syz_tun: entered allmulticast mode [ 611.564231][T13491] syz_tun: entered promiscuous mode [ 612.541253][T13512] trusted_key: encrypted_key: insufficient parameters specified [ 612.566545][T13512] bridge0: port 4(wlan1) entered blocking state [ 612.566629][T13512] bridge0: port 4(wlan1) entered disabled state [ 612.566760][T13512] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 612.568165][T13512] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 612.618831][T13512] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 612.618860][T13512] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 612.621720][T13512] bridge0: port 4(wlan1) entered disabled state [ 614.253595][T13550] ovs-dp0: left promiscuous mode [ 614.616902][T13551] ovs-dp0: entered promiscuous mode [ 615.501033][T13570] vivid-000: disconnect [ 615.501825][T13570] vivid-000: reconnect [ 615.574612][T13571] 9p: Bad value for 'wfdno' [ 618.635271][T13604] binder: BINDER_SET_CONTEXT_MGR already set [ 618.635286][T13604] binder: 13603:13604 ioctl 4018620d 200000001000 returned -16 [ 618.870287][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 618.913301][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.913368][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.003201][T13623] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12154] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13623] [ 621.407484][T13642] fuse: fd is not a fuse device [ 622.176197][T13656] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1999'. [ 622.732843][T13660] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 622.732843][T13660] The task syz.0.2000 (13660) triggered the difference, watch for misbehavior. [ 623.081959][T13664] trusted_key: encrypted_key: master key parameter 'defau*©Žr5sted:syz' is invalid [ 623.709224][T13680] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2007'. [ 624.248124][T13686] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13686 comm=syz.6.2008 [ 625.835599][ T982] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 626.062731][ T982] usb 9-1: Using ep0 maxpacket: 16 [ 626.064340][ T982] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 626.065242][ T982] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 626.070737][ T982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.070760][ T982] usb 9-1: Product: syz [ 626.070773][ T982] usb 9-1: Manufacturer: syz [ 626.070786][ T982] usb 9-1: SerialNumber: syz [ 626.076223][ T982] usb 9-1: config 0 descriptor?? [ 626.084820][ T982] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 626.084845][ T982] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 626.099050][T13716] trusted_key: encrypted_key: master key parameter 'defau*©Žr5sted:syz' is invalid [ 626.825356][ T982] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 627.676974][ T982] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 627.677003][ T982] em28xx 9-1:0.0: board has no eeprom [ 627.904007][ T982] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 627.905314][ T982] em28xx 9-1:0.0: dvb set to bulk mode. [ 627.924910][T10621] em28xx 9-1:0.0: Binding DVB extension [ 628.028090][ T982] usb 9-1: USB disconnect, device number 9 [ 628.032268][ T982] em28xx 9-1:0.0: Disconnecting em28xx [ 628.092386][T10621] em28xx 9-1:0.0: Registering input extension [ 628.096052][ T982] em28xx 9-1:0.0: Closing input extension [ 628.109018][T13731] jffs2: notice: (13731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 628.158310][T13734] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13734 comm=syz.5.2022 [ 628.209850][ T982] em28xx: Freeing device [ 628.915112][T13756] xt_connbytes: Forcing CT accounting to be enabled [ 629.808036][T13766] trusted_key: encrypted_key: master key parameter 'defau*©Žr5sted:syz' is invalid [ 630.278281][T13772] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 630.570160][T13778] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13778 comm=syz.0.2034 [ 633.982062][T13817] trusted_key: encrypted_key: master key parameter 'defau*©Žr5sted:syz' is invalid [ 635.257051][ T30] audit: type=1326 audit(1790382459.164:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 635.257101][ T30] audit: type=1326 audit(1790382459.164:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 635.257259][ T30] audit: type=1326 audit(1790382459.164:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 635.259931][ T30] audit: type=1326 audit(1790382459.164:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 635.259976][ T30] audit: type=1326 audit(1790382459.164:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 635.322886][ T30] audit: type=1326 audit(1790382459.224:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbedbb5e98e code=0x7ffc0000 [ 635.343518][ T30] audit: type=1326 audit(1790382459.254:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbedbb5e98e code=0x7ffc0000 [ 635.370205][ T30] audit: type=1326 audit(1790382459.274:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbedbb5e98e code=0x7ffc0000 [ 635.371801][ T30] audit: type=1326 audit(1790382459.274:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 635.371840][ T30] audit: type=1326 audit(1790382459.274:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="syz.6.2048" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 635.647164][T13815] key id 000004d2 not found [ 636.880235][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 637.168173][T13852] syz_tun: left allmulticast mode [ 637.168222][T13852] syz_tun: left promiscuous mode [ 637.192006][T13852] bridge0: port 1(syz_tun) entered disabled state [ 637.547879][T13842] vivid-000: disconnect [ 637.548811][T13842] vivid-000: reconnect [ 639.244093][T13896] netlink: 'syz.8.2061': attribute type 39 has an invalid length. [ 640.190995][T13906] key id 000004d2 not found [ 640.451979][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 642.055409][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 646.271926][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 646.271939][ T30] audit: type=1400 audit(1790382470.174:2044): avc: denied { ioctl } for pid=13973 comm="syz.8.2076" path="/83/tracing/events/sched/filter" dev="tracefs" ino=19680823 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 646.315298][T13975] xt_hashlimit: max too large, truncated to 1048576 [ 646.341990][ T30] audit: type=1400 audit(1790382470.244:2045): avc: denied { execute } for pid=13973 comm="syz.8.2076" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 647.029673][T13987] trusted_key: encrypted_key: master key parameter 'defau*©Žr5sted:syz' is invalid [ 647.482995][ T982] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 647.622842][ T982] usb 9-1: device descriptor read/64, error -71 [ 647.850718][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 647.863042][ T982] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 648.003108][ T982] usb 9-1: device descriptor read/64, error -71 [ 648.113481][ T982] usb usb9-port1: attempt power cycle [ 648.212335][T14009] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2090'. [ 648.654007][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'. [ 648.654774][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'. [ 648.932920][ T982] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 648.954148][ T982] usb 9-1: device descriptor read/8, error -71 [ 649.185627][T14030] trusted_key: encrypted_key: master key parameter 'defau*©Žr5sted:syz' is invalid [ 649.595761][ T982] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 649.802736][ T982] usb 9-1: device not accepting address 13, error -71 [ 650.678927][ T982] usb usb9-port1: unable to enumerate USB device [ 650.776393][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 651.043548][T14052] ovs-dp0: left promiscuous mode [ 651.071124][ T30] audit: type=1400 audit(1790382474.974:2046): avc: denied { name_connect } for pid=14053 comm="syz.5.2107" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 651.271071][T14059] ovs-dp0: entered promiscuous mode [ 651.370029][T14064] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2106'. [ 652.251475][T14084] trusted_key: encrypted_key: master key parameter 'defau*©' is invalid [ 652.638227][ T30] audit: type=1400 audit(1790382476.544:2047): avc: denied { connect } for pid=14081 comm="syz.3.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 652.680474][T14083] trusted_key: encrypted_key: insufficient parameters specified [ 652.832470][T14087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2112'. [ 652.869792][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2113'. [ 653.024821][ T30] audit: type=1400 audit(1790382476.934:2048): avc: denied { name_bind } for pid=14093 comm="syz.0.2115" src=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 653.031437][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2116'. [ 653.085753][T14099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2115'. [ 653.902808][T14095] syz.6.2116 (14095) used greatest stack depth: 19896 bytes left [ 654.267674][T14120] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2121'. [ 654.755122][T14123] trusted_key: encrypted_key: master key parameter 'defau*©' is invalid [ 655.152392][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2127'. [ 655.367293][T14135] overlayfs: failed to clone upperpath [ 655.374097][T14135] mmap: syz.6.2129 (14135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 656.142597][T14143] vivid-000: disconnect [ 656.145621][T14143] vivid-000: reconnect [ 657.065857][ T9672] Bluetooth: hci6: command 0x0406 tx timeout [ 657.798693][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2136'. [ 657.884381][T14173] ovs-dp0: left promiscuous mode [ 657.978083][T14176] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 657.999348][ T30] audit: type=1400 audit(1790382481.814:2049): avc: denied { map } for pid=14174 comm="syz.6.2141" path="socket:[41153]" dev="sockfs" ino=41153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 658.189296][T14183] trusted_key: encrypted_key: master key parameter 'defau*©' is invalid [ 658.292431][T14185] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2140'. [ 658.799165][T14176] ovs-dp0: entered promiscuous mode [ 659.062974][T14197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.146384][T14201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.205369][T14197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.408820][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2145'. [ 659.411323][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2145'. [ 661.094212][T14227] vivid-000: disconnect [ 661.229345][T14216] vivid-000: reconnect [ 662.481137][T14246] trusted_key: encrypted_key: insufficient parameters specified [ 663.417725][T14257] netlink: 122 bytes leftover after parsing attributes in process `syz.5.2156'. [ 663.426590][T14257] netlink: 122 bytes leftover after parsing attributes in process `syz.5.2156'. [ 664.589567][T14266] key id 000004d2 not found [ 665.437207][T14273] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2163'. [ 665.437267][T14273] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2163'. [ 665.563146][T14280] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8433] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14280] [ 666.299270][T14294] jffs2: notice: (14294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 666.311728][T14294] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 666.802319][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 666.802342][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 666.821689][ T30] audit: type=1400 audit(1790382490.714:2050): avc: denied { shutdown } for pid=14301 comm="syz.0.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 667.029708][T14306] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 667.456115][T14313] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.2174'. [ 667.498034][ T30] audit: type=1400 audit(1790382491.404:2051): avc: denied { write } for pid=14312 comm="syz.6.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 667.922546][T14320] ovs-dp0: left promiscuous mode [ 668.125674][T14320] ovs-dp0: entered promiscuous mode [ 670.345910][T14371] jffs2: notice: (14371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 670.599524][T14387] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8433] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14387] [ 670.820490][T14394] vivid-000: disconnect [ 670.951029][T14366] vivid-000: reconnect [ 671.575266][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2196'. [ 674.134745][T14436] vivid-000: disconnect [ 674.137530][T14436] vivid-000: reconnect [ 674.737369][ T30] audit: type=1400 audit(1790382498.644:2052): avc: denied { ioctl } for pid=14442 comm="syz.8.2206" path="/109/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 674.737512][T14444] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1979711492.1836477231.0), cmd(18) [ 674.932423][T14452] ovs-dp0: left promiscuous mode [ 674.983632][ T982] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 675.157000][ T982] usb 9-1: unable to get BOS descriptor or descriptor too short [ 675.157451][ T982] usb 9-1: not running at top speed; connect to a high speed hub [ 675.157476][ T982] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 675.167662][ T982] usb 9-1: New USB device strings: Mfr=2, Product=30, SerialNumber=3 [ 675.167683][ T982] usb 9-1: Product: syz [ 675.167696][ T982] usb 9-1: Manufacturer: syz [ 675.167715][ T982] usb 9-1: SerialNumber: syz [ 675.308126][T14452] ovs-dp0: entered promiscuous mode [ 675.620156][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'. [ 676.163434][T14477] overlayfs: failed to clone upperpath [ 676.163442][T14478] overlayfs: failed to clone upperpath [ 676.170843][T14477] overlayfs: failed to resolve './bus': -2 [ 676.763356][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2219'. [ 677.425060][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2220'. [ 678.099293][ T982] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 678.206176][ T982] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 678.238499][ T982] usb 9-1: USB disconnect, device number 14 [ 678.402483][T14520] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14520 comm=syz.8.2223 [ 679.627997][T14553] vivid-000: disconnect [ 679.628779][T14553] vivid-000: reconnect [ 680.268382][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.268412][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.833197][T14578] ovs-dp0: left promiscuous mode [ 681.517534][T14578] ovs-dp0: entered promiscuous mode [ 681.754625][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2239'. [ 682.102088][ T30] audit: type=1400 audit(1790382506.004:2053): avc: denied { create } for pid=14594 comm="syz.6.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 682.161038][ T30] audit: type=1400 audit(1790382506.064:2054): avc: denied { sys_admin } for pid=14594 comm="syz.6.2240" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 682.184230][ T30] audit: type=1400 audit(1790382506.074:2055): avc: denied { mounton } for pid=14594 comm="syz.6.2240" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 682.926755][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 683.116176][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 683.499096][T14625] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14625 comm=syz.6.2247 [ 683.631788][T14633] vivid-000: disconnect [ 683.632572][T14633] vivid-000: reconnect [ 683.756834][T14635] jffs2: notice: (14635) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 683.967844][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2253'. [ 684.422939][ T5709] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 684.583110][ T5709] usb 9-1: Using ep0 maxpacket: 8 [ 684.583678][ T5709] usb 9-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 684.584749][ T5709] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.584768][ T5709] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.588025][ T5709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.588046][ T5709] usb 9-1: Product: syz [ 684.588060][ T5709] usb 9-1: Manufacturer: syz [ 684.588074][ T5709] usb 9-1: SerialNumber: syz [ 684.623367][ T9752] libceph: connect (1)[c::]:6789 error -101 [ 684.630092][ T9752] libceph: mon0 (1)[c::]:6789 connect error [ 684.766457][T14659] ceph: No mds server is up or the cluster is laggy [ 684.820055][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2251'. [ 685.723844][T14676] netlink: 'syz.3.2259': attribute type 21 has an invalid length. [ 685.723888][T14676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2259'. [ 687.459748][ T5709] usb 9-1: unit 6 not found! [ 687.459772][ T5709] usb 9-1: unit 0 not found! [ 687.541763][ T5709] usb 9-1: USB disconnect, device number 15 [ 687.726179][T14449] udevd[14449]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.446549][ T5709] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 688.593220][ T5709] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 688.594961][ T5709] usb 9-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config [ 688.595000][ T5709] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 688.595016][ T5709] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25212, setting to 64 [ 688.622950][ T5709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.622965][ T5709] usb 9-1: Product: syz [ 688.622974][ T5709] usb 9-1: Manufacturer: syz [ 688.622982][ T5709] usb 9-1: SerialNumber: syz [ 688.678162][T14693] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 688.899688][T14693] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2264'. [ 688.900098][T14693] xt_socket: unknown flags 0x58 [ 688.925300][ T5709] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 688.925325][ T5709] usb 9-1: MIDIStreaming interface descriptor not found [ 689.093108][ T5709] usb 9-1: USB disconnect, device number 16 [ 689.892001][T14737] ovs-dp0: left promiscuous mode [ 689.957506][T14738] udevd[14738]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.128251][T14739] ovs-dp0: entered promiscuous mode [ 690.609737][ T30] audit: type=1326 audit(1790382514.504:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.609925][ T30] audit: type=1326 audit(1790382514.504:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.610068][ T30] audit: type=1326 audit(1790382514.504:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.610207][ T30] audit: type=1326 audit(1790382514.504:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.610346][ T30] audit: type=1326 audit(1790382514.504:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.610469][ T30] audit: type=1326 audit(1790382514.504:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.610596][ T30] audit: type=1326 audit(1790382514.504:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.610754][ T30] audit: type=1326 audit(1790382514.504:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.610893][ T30] audit: type=1326 audit(1790382514.504:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 690.611032][ T30] audit: type=1326 audit(1790382514.514:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.6.2277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedbb9e159 code=0x7ffc0000 [ 691.787609][T14777] trusted_key: encrypted_key: master key parameter 'defau*©Žr5sted:syz' is invalid [ 692.149725][T14778] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2279'. [ 692.149747][T14778] nbd: must specify at least one socket [ 692.612387][T14782] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14782 comm=syz.6.2283 [ 693.410601][T14796] futex_wake_op: syz.3.2288 tries to shift op by -1; fix this program [ 693.410732][T14796] futex_wake_op: syz.3.2288 tries to shift op by -1; fix this program [ 693.964424][T14803] netlink: 'syz.0.2290': attribute type 7 has an invalid length. [ 694.198812][T14809] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2291'. [ 694.777163][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2293'. [ 695.448385][T14827] 9p: Unknown Cache mode or invalid value 7777777777777 [ 695.596141][T14843] jffs2: notice: (14843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 695.915251][T14855] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2306'. [ 696.101903][T14861] jffs2: notice: (14861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 696.183213][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 696.183231][ T30] audit: type=1400 audit(1790382520.084:2102): avc: denied { accept } for pid=14863 comm="syz.0.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 697.571849][T14892] netlink: 'syz.0.2318': attribute type 9 has an invalid length. [ 697.607168][T14889] overlayfs: failed to resolve './cgroup': -2 [ 698.785143][ T30] audit: type=1400 audit(1790382522.694:2103): avc: denied { mount } for pid=14915 comm="syz.8.2321" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 698.979134][T14921] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2323'. [ 700.651704][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2328'. [ 702.069975][T14958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14958 comm=syz.0.2326 [ 702.522830][T14975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14975 comm=syz.0.2336 [ 703.061583][T14992] ovs-dp0: left promiscuous mode [ 703.134769][T14992] ovs-dp0: entered promiscuous mode [ 703.201134][T14999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14999 comm=syz.5.2343 [ 704.496145][T15034] ovs-dp0: left promiscuous mode [ 704.588668][T15035] ovs-dp0: entered promiscuous mode [ 704.634662][T15037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15037 comm=syz.5.2354 [ 705.465410][T15048] jffs2: notice: (15048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 707.182735][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2360'. [ 712.856049][T15094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15094 comm=syz.6.2365 [ 712.917560][T15096] netlink: ct_mark mask cannot be 0 [ 712.917585][T15096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.186688][T15113] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2368'. [ 713.549114][T15123] ovs-dp0: left promiscuous mode [ 713.730711][T15126] sctp: [Deprecated]: syz.8.2376 (pid 15126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 713.730711][T15126] Use struct sctp_sack_info instead [ 713.731192][T15126] sctp: [Deprecated]: syz.8.2376 (pid 15126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 713.731192][T15126] Use struct sctp_sack_info instead [ 713.731780][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2376'. [ 714.034110][T15123] ovs-dp0: entered promiscuous mode [ 714.195521][T15129] jffs2: notice: (15129) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 714.659323][T15145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15145 comm=syz.3.2382 [ 716.520610][T15179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2396'. [ 716.745737][T15182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15182 comm=syz.5.2397 [ 717.051171][T15189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2398'. [ 718.545810][T15225] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2407'. [ 718.785760][T15230] ovs-dp0: left promiscuous mode [ 718.817372][ T30] audit: type=1400 audit(1790382542.724:2104): avc: denied { getopt } for pid=15231 comm="syz.6.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 718.990404][T15230] ovs-dp0: entered promiscuous mode [ 719.591442][T15266] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15266 comm=syz.5.2417 [ 721.304064][T15280] 9p: Could not find request transport: \d [ 721.524658][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 725.076027][ T30] audit: type=1400 audit(1790382548.984:2105): avc: denied { lock } for pid=15319 comm="syz.5.2433" path="socket:[43790]" dev="sockfs" ino=43790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 725.123185][ T30] audit: type=1400 audit(1790382549.034:2106): avc: denied { getopt } for pid=15322 comm="syz.6.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 725.128542][T15325] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15325 comm=syz.8.2435 [ 725.377114][T15331] tipc: Resetting bearer [ 725.479359][T15332] key id 000004d2 not found [ 725.923148][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 726.394707][T15348] C: renamed from veth1_to_team [ 726.416171][T15348] netlink: 'syz.5.2444': attribute type 2 has an invalid length. [ 726.416184][T15348] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2444'. [ 726.416193][T15348] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 726.910926][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 726.942354][ T30] audit: type=1326 audit(1790382550.844:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.8.2450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf18d9e159 code=0x0 [ 728.572060][T15396] key id 000004d2 not found [ 729.341482][T15399] ovs-dp0: left promiscuous mode [ 729.581890][T15407] key id 000004d2 not found [ 729.979725][T15399] ovs-dp0: entered promiscuous mode [ 730.494013][T15419] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2459'. [ 731.398374][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2462'. [ 741.623710][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.623758][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 770.650169][T15450] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2464'. [ 770.686924][T15454] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2465'. [ 772.106434][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2473'. [ 772.122435][T15473] xt_hashlimit: size too large, truncated to 1048576 [ 772.520279][T15462] key id 000004d2 not found [ 773.855998][T15509] tls_set_device_offload: netdev not found [ 773.932108][ T30] audit: type=1400 audit(1790382597.764:2108): avc: denied { connect } for pid=15508 comm="syz.5.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 774.230453][T15515] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2487'. [ 774.965829][T15527] ovs-dp0: left promiscuous mode [ 775.109550][T15530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2488'. [ 776.178254][T15527] ovs-dp0: entered promiscuous mode [ 776.349383][T15532] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2492'. [ 777.337410][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2499'. [ 777.673419][T15562] key id 000004d2 not found [ 778.440071][T15575] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2506'. [ 778.923353][ T30] audit: type=1804 audit(1790382602.824:2109): pid=15576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2505" name="file1" dev="tmpfs" ino=2571 res=1 errno=0 [ 780.876858][T15616] key id 000004d2 not found [ 781.549760][T15624] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2519'. [ 782.292298][T15640] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8433] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15640] [ 782.316747][T15639] team0: entered allmulticast mode [ 782.316761][T15639] team_slave_0: entered allmulticast mode [ 782.316772][T15639] team_slave_1: entered allmulticast mode [ 782.714361][T15648] overlayfs: failed to clone upperpath [ 782.735686][T15650] pim6reg: entered allmulticast mode [ 782.750725][T15650] tipc: Enabling of bearer rejected, already enabled [ 783.700939][T15669] key id 000004d2 not found [ 784.434625][ T5602] Bluetooth: hci6: command 0x0406 tx timeout [ 785.751940][T15684] fuse: fd is not a fuse device [ 785.762069][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2535'. [ 786.331588][T15705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2539'. [ 786.868534][T15713] CIFS: iocharset name too long [ 786.869098][T15716] trusted_key: syz.6.2543 sent an empty control message without MSG_MORE. [ 787.136732][T15722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2544'. [ 789.180504][T15745] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15745 comm=syz.0.2551 [ 789.520263][T15750] key id 000004d2 not found [ 790.269688][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2555'. [ 792.133648][ T30] audit: type=1400 audit(1790382616.034:2110): avc: denied { mounton } for pid=15787 comm="syz.6.2561" path="/402/mnt" dev="tmpfs" ino=2208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 792.206069][T15789] libceph: secret too big 258 [ 792.303380][T15794] IPVS: length: 250 != 24 [ 793.101956][T15804] ovs-dp0: left promiscuous mode [ 793.387129][T15804] ovs-dp0: entered promiscuous mode [ 793.492792][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2567'. [ 794.683397][ T5602] Bluetooth: hci6: command 0x0406 tx timeout [ 795.543630][T15838] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2572'. [ 796.274802][T15846] key id 000004d2 not found [ 796.454756][T15850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2574'. [ 797.419303][T15862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2578'. [ 797.917954][T15868] jffs2: notice: (15868) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 798.182982][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2580'. [ 798.233173][T15868] overlayfs: failed to clone upperpath [ 799.661112][T15904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2587'. [ 801.689723][T15940] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2595'. [ 803.067401][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.067451][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.432953][T15963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2602'. [ 803.882004][ T30] audit: type=1400 audit(1790382627.784:2111): avc: denied { write } for pid=15966 comm="syz.0.2603" path="socket:[44793]" dev="sockfs" ino=44793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 804.106655][T15981] tipc: Enabling of bearer rejected, failed to enable media [ 804.777850][T15990] fuse: Bad value for 'fd' [ 806.059690][T16006] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16006] [ 806.820065][T16022] overlayfs: failed to clone upperpath [ 808.538776][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2625'. [ 808.819651][T16058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2626'. [ 810.567954][T16074] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2631'. [ 810.988072][T16091] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16091 comm=syz.6.2635 [ 811.590963][T16096] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16096 comm=syz.0.2637 [ 811.614359][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 811.621868][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 811.624527][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 811.625117][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 811.628794][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 812.962202][T16094] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.962347][T16094] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.962446][T16094] bridge_slave_0: entered allmulticast mode [ 812.984075][T16094] bridge_slave_0: entered promiscuous mode [ 812.992240][T16094] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.992368][T16094] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.992476][T16094] bridge_slave_1: entered allmulticast mode [ 813.143932][T16094] bridge_slave_1: entered promiscuous mode [ 813.360811][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 813.534394][T16094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.553271][T16094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.703574][ T5602] Bluetooth: hci3: command tx timeout [ 813.731007][T16094] team0: Port device team_slave_0 added [ 813.760825][T16094] team0: Port device team_slave_1 added [ 813.851936][T16094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.851952][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.851973][T16094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.857343][T16094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.857355][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.857372][T16094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.028852][T16094] hsr_slave_0: entered promiscuous mode [ 814.035971][T16094] hsr_slave_1: entered promiscuous mode [ 814.036484][T16094] debugfs: 'hsr0' already exists in 'hsr' [ 814.036499][T16094] Cannot create hsr debugfs directory [ 814.038342][T16157] team0: entered allmulticast mode [ 814.293812][T16094] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 814.365740][T16094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 814.451174][T16094] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 814.466302][T16094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.467020][T16094] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 814.487436][T16094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.488566][T16094] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 814.508703][T16094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.584288][T16094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.602102][T16094] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.687251][T13164] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.687368][T13164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.691974][T13164] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.692053][T13164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.861681][ T5602] Bluetooth: hci3: command tx timeout [ 816.270113][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2650'. [ 816.608721][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2651'. [ 817.571472][T16197] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2653'. [ 817.944447][ T9672] Bluetooth: hci3: command tx timeout [ 818.201314][T16094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.180925][T16233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2659'. [ 819.851003][T16244] fuse: fd is not a fuse device [ 819.877534][T16094] veth0_vlan: entered promiscuous mode [ 819.894781][T16094] veth1_vlan: entered promiscuous mode [ 819.920548][T16094] veth0_macvtap: entered promiscuous mode [ 819.930459][T16094] veth1_macvtap: entered promiscuous mode [ 819.947663][T16094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.951773][T16094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.032709][ T9672] Bluetooth: hci3: command tx timeout [ 820.235918][T13163] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.298849][T13163] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.298991][T13163] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.299082][T13163] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.514863][T13165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.514929][T13165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.589774][T12227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.589795][T12227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.967354][T16259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2665'. [ 821.739851][T16273] ovs-dp0: left promiscuous mode [ 821.812262][T16273] ovs-dp0: entered promiscuous mode [ 822.094671][ T5602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 822.102557][ T5602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 822.110821][ T5602] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 822.129986][ T5602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 822.144762][ T5602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 822.390400][T16300] ip6_vti0: entered allmulticast mode [ 822.521411][ T5614] bridge0: port 3(syz_tun) entered disabled state [ 822.550101][ T5614] syz_tun (unregistering): left allmulticast mode [ 822.550117][ T5614] syz_tun (unregistering): left promiscuous mode [ 822.550203][ T5614] bridge0: port 3(syz_tun) entered disabled state [ 822.722017][ T7240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.163987][ T7240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.810550][T16314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2679'. [ 824.209578][ T9672] Bluetooth: hci7: command tx timeout [ 824.251667][ T7240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.922129][T16325] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2681'. [ 824.954164][T16323] ovs-dp0: left promiscuous mode [ 825.144156][ T7240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.178728][ T30] audit: type=1400 audit(1790382649.084:2112): avc: denied { create } for pid=16332 comm="syz.6.2684" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 825.296116][T16341] ip_tables: iptables: counters copy to user failed while replacing table [ 825.300435][T16340] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2686'. [ 825.460798][ T7240] bridge_slave_1: left allmulticast mode [ 825.460824][ T7240] bridge_slave_1: left promiscuous mode [ 825.461000][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.474000][ T7240] bridge_slave_0: left allmulticast mode [ 825.474021][ T7240] bridge_slave_0: left promiscuous mode [ 825.474167][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.498589][ T7240] team0: left allmulticast mode [ 825.498607][ T7240] team_slave_0: left allmulticast mode [ 825.498622][ T7240] team_slave_1: left allmulticast mode [ 825.661832][ T7240] bond0 (unregistering): (slave geneve2): Releasing active interface [ 825.690278][ T7240] bond1 (unregistering): Released all slaves [ 825.708555][ T7240] bond0 (unregistering): Released all slaves [ 825.807935][ T7240] ovs-dp0: left promiscuous mode [ 825.847140][ T30] audit: type=1400 audit(1790382649.754:2113): avc: denied { unlink } for pid=8433 comm="syz-executor" name="loop0" dev="tmpfs" ino=2390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 826.263024][ T9672] Bluetooth: hci7: command tx timeout [ 827.330708][T16369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2691'. [ 827.586899][ T30] audit: type=1400 audit(1790382651.494:2114): avc: denied { write } for pid=16354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.746758][T16385] fuse: fd is not a fuse device [ 827.871606][ T30] audit: type=1400 audit(1790382651.774:2115): avc: denied { write } for pid=16383 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.255254][ T30] audit: type=1400 audit(1790382652.164:2116): avc: denied { mount } for pid=16378 comm="syz.6.2693" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 828.343368][ T9672] Bluetooth: hci7: command tx timeout [ 828.360263][T16284] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.360340][T16284] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.360414][T16284] bridge_slave_0: entered allmulticast mode [ 828.361314][T16284] bridge_slave_0: entered promiscuous mode [ 828.370017][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 828.373068][T16284] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.376396][T16284] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.376482][T16284] bridge_slave_1: entered allmulticast mode [ 828.379816][T16284] bridge_slave_1: entered promiscuous mode [ 828.457463][T16284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.480234][T16284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.669458][T16284] team0: Port device team_slave_0 added [ 828.691241][T16284] team0: Port device team_slave_1 added [ 828.875056][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2695'. [ 828.877012][T16284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.877026][T16284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.877047][T16284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.877417][T16408] ovs-dp0: left promiscuous mode [ 828.893884][T16284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.893896][T16284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.893918][T16284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.089556][ T7240] hsr_slave_0: left promiscuous mode [ 829.090134][ T7240] hsr_slave_1: left promiscuous mode [ 829.090772][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.090788][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.139810][ T7240] veth1_macvtap: left promiscuous mode [ 829.139838][ T7240] veth0_macvtap: left promiscuous mode [ 829.139960][ T7240] veth1_vlan: left promiscuous mode [ 829.169424][ T30] audit: type=1400 audit(1790382653.074:2117): avc: denied { write } for pid=16409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.281865][ T30] audit: type=1400 audit(1790382653.184:2118): avc: denied { write } for pid=16423 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.674220][ T7240] team0 (unregistering): Port device team_slave_1 removed [ 829.698618][ T7240] team0 (unregistering): Port device team_slave_0 removed [ 829.967655][T16408] ovs-dp0: entered promiscuous mode [ 829.981859][T16284] hsr_slave_0: entered promiscuous mode [ 829.989211][T16284] hsr_slave_1: entered promiscuous mode [ 829.989794][T16284] debugfs: 'hsr0' already exists in 'hsr' [ 829.989811][T16284] Cannot create hsr debugfs directory [ 829.990904][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10 [ 830.075138][T16442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2701'. [ 830.467265][ T9672] Bluetooth: hci7: command tx timeout [ 830.851074][ T7240] IPVS: stop unused estimator thread 0... [ 831.150323][T16457] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2703'. [ 831.846136][ T30] audit: type=1400 audit(1790382655.754:2119): avc: denied { write } for pid=16448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.044813][ T30] audit: type=1400 audit(1790382655.954:2120): avc: denied { write } for pid=16474 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.059278][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 832.059426][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 832.106561][T10621] libceph: connect (1)[c::]:6789 error -101 [ 832.106721][T10621] libceph: mon0 (1)[c::]:6789 connect error [ 832.232383][T16483] netlink: 'syz.6.2705': attribute type 10 has an invalid length. [ 832.253405][T16483] netlink: 'syz.6.2705': attribute type 10 has an invalid length. [ 832.323874][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 832.324031][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 832.332315][T16284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 832.354565][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 832.355282][T16284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 832.358958][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 832.359645][T16284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 832.376845][T10621] libceph: connect (1)[c::]:6789 error -101 [ 832.377007][T10621] libceph: mon0 (1)[c::]:6789 connect error [ 832.405402][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 832.406150][T16284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 832.412384][T16284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.449903][ T30] audit: type=1326 audit(1790382656.354:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.5.2707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd851d9e159 code=0x7ffc0000 [ 832.450016][ T30] audit: type=1326 audit(1790382656.354:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.5.2707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd851d9e159 code=0x7ffc0000 [ 832.450432][ T30] audit: type=1326 audit(1790382656.354:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.5.2707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd851d9e159 code=0x7ffc0000 [ 832.450665][ T30] audit: type=1326 audit(1790382656.354:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.5.2707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd851d9f9c7 code=0x7ffc0000 [ 832.450978][ T30] audit: type=1326 audit(1790382656.354:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.5.2707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd851d5e98e code=0x7ffc0000 [ 832.451277][ T30] audit: type=1326 audit(1790382656.354:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.5.2707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd851d5e98e code=0x7ffc0000 [ 832.451412][ T30] audit: type=1326 audit(1790382656.354:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.5.2707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd851d5e98e code=0x7ffc0000 [ 832.451577][ T30] audit: type=1326 audit(1790382656.354:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.5.2707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd851d5e98e code=0x7ffc0000 [ 832.660103][T16284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.692205][T16466] ceph: No mds server is up or the cluster is laggy [ 832.696335][T16469] ceph: No mds server is up or the cluster is laggy [ 832.700479][T16284] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.719686][T12227] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.719763][T12227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.769508][T12227] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.769634][T12227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.834777][T16284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 832.834797][T16284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 833.239882][T16517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'. [ 833.837307][T16284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.889687][T16284] veth0_vlan: entered promiscuous mode [ 833.908170][T16284] veth1_vlan: entered promiscuous mode [ 833.986027][T16284] veth0_macvtap: entered promiscuous mode [ 834.000985][T16284] veth1_macvtap: entered promiscuous mode [ 834.036143][T16284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.039318][T16284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.138996][T13163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.142436][T13163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.142821][T13163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.143286][T13163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.274408][T16539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2711'. [ 834.735520][T13164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.735540][T13164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.876077][T12226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.876096][T12226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.898536][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2713'. [ 834.986630][T16547] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2712'. [ 836.161218][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2716'. [ 836.318525][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 836.323703][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 836.341836][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 836.404382][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 836.406537][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 836.930568][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2720'. [ 838.223374][T16601] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2722'. [ 838.526314][ T5602] Bluetooth: hci4: command tx timeout [ 838.659999][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 838.660016][ T30] audit: type=1400 audit(1790382662.564:2214): avc: denied { write } for pid=16553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.810734][ T30] audit: type=1400 audit(1790382662.714:2215): avc: denied { write } for pid=16606 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.235817][T16616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2725'. [ 840.481852][T16636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=16636 comm=syz.0.2729 [ 840.481965][T16633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=16633 comm=syz.0.2729 [ 840.516007][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.516331][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.528239][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.528529][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.592918][ T5602] Bluetooth: hci4: command tx timeout [ 840.754063][T10626] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 840.882985][T10626] usb 1-1: device descriptor read/64, error -71 [ 840.965412][ T30] audit: type=1400 audit(1790382664.874:2216): avc: denied { write } for pid=16619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.021659][T16650] ip_tables: iptables: counters copy to user failed while replacing table [ 841.143375][T10626] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 841.264433][ T30] audit: type=1400 audit(1790382665.174:2217): avc: denied { write } for pid=16654 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.296225][T10626] usb 1-1: device descriptor read/64, error -71 [ 841.389074][T16564] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.389211][T16564] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.389307][T16564] bridge_slave_0: entered allmulticast mode [ 841.390889][T16564] bridge_slave_0: entered promiscuous mode [ 841.414542][T10626] usb usb1-port1: attempt power cycle [ 841.429317][T16564] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.436961][T16564] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.437089][T16564] bridge_slave_1: entered allmulticast mode [ 841.452263][T16564] bridge_slave_1: entered promiscuous mode [ 842.059592][T13163] IPVS: starting estimator thread 0... [ 842.081922][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2731'. [ 842.093288][T10626] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 842.113986][T16564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.114907][T10626] usb 1-1: device descriptor read/8, error -71 [ 842.143509][T16665] IPVS: using max 46 ests per chain, 110400 per kthread [ 842.147645][T16564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.270419][T16564] team0: Port device team_slave_0 added [ 842.282598][T16564] team0: Port device team_slave_1 added [ 842.352940][T10626] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 842.410839][T10626] usb 1-1: device descriptor read/8, error -71 [ 842.437962][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 842.480103][ T30] audit: type=1400 audit(1790382666.384:2218): avc: denied { write } for pid=16666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.482020][T16564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.482033][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.482053][T16564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.498377][T16564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.498389][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.498407][T16564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.512947][T10626] usb usb1-port1: unable to enumerate USB device [ 843.178633][ T5602] Bluetooth: hci4: command tx timeout [ 843.248618][T16564] hsr_slave_0: entered promiscuous mode [ 843.252164][T16564] hsr_slave_1: entered promiscuous mode [ 843.253689][T16564] debugfs: 'hsr0' already exists in 'hsr' [ 843.253704][T16564] Cannot create hsr debugfs directory [ 844.010732][ T30] audit: type=1400 audit(1790382667.914:2219): avc: denied { write } for pid=16684 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.453843][T16695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2737'. [ 845.192552][T16699] key id 000004d2 not found [ 845.287567][ T5602] Bluetooth: hci4: command tx timeout [ 845.617963][T16701] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16701 comm=syz.0.2739 [ 846.801017][T16730] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2735'. [ 847.190452][ T30] audit: type=1400 audit(1790382671.094:2220): avc: denied { write } for pid=16703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.398964][ T30] audit: type=1400 audit(1790382671.304:2221): avc: denied { write } for pid=16734 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.468470][T16736] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16736] [ 848.354490][T16743] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 848.984177][T16743] ªªªªªª0‘ŠP}IÆ: renamed from vlan0 [ 849.508175][T16564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 849.526428][T16564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.526842][T16564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 849.548398][T16564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.549397][T16564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 849.575571][T16564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.576227][T16564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 849.600801][T16564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 849.704418][ T30] audit: type=1400 audit(1790382673.614:2222): avc: denied { write } for pid=16749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.421342][T16564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.451790][ T30] audit: type=1400 audit(1790382674.354:2223): avc: denied { write } for pid=16770 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.480576][T16564] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.491352][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.491424][ T7240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.508956][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.509042][T12226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.643459][T16775] ovs-dp0: left promiscuous mode [ 850.758318][T16775] ovs-dp0: entered promiscuous mode [ 850.914736][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2750'. [ 850.918018][T16790] team0: entered allmulticast mode [ 850.918038][T16790] team_slave_1: entered allmulticast mode [ 851.238967][ T30] audit: type=1400 audit(1790382675.114:2224): avc: denied { write } for pid=16776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.013346][ T30] audit: type=1400 audit(1790382675.924:2225): avc: denied { write } for pid=16808 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.956185][T16832] netlink: 'syz.5.2745': attribute type 10 has an invalid length. [ 853.959490][T16832] team0: Port device dummy0 added [ 853.962337][T16832] netlink: 'syz.5.2745': attribute type 10 has an invalid length. [ 854.228641][T16832] team0: Port device dummy0 removed [ 854.662348][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2761'. [ 854.722362][T16564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.282387][T16564] veth0_vlan: entered promiscuous mode [ 855.300986][T16564] veth1_vlan: entered promiscuous mode [ 855.333986][T16564] veth0_macvtap: entered promiscuous mode [ 855.337601][T16564] veth1_macvtap: entered promiscuous mode [ 855.361379][T16564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.372278][T16564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.451826][T13164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.468586][T16870] netlink: 316 bytes leftover after parsing attributes in process `syz.5.2764'. [ 856.468606][T16870] netlink: 316 bytes leftover after parsing attributes in process `syz.5.2764'. [ 856.534833][ T30] audit: type=1400 audit(1790382680.444:2226): avc: denied { write } for pid=16826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.553230][T12227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.553267][T12227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.553293][T12227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.712525][T12227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.712545][T12227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.807956][T12227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.807976][T12227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.861645][ T30] audit: type=1400 audit(1790382680.764:2227): avc: denied { write } for pid=16879 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.391777][ T30] audit: type=1400 audit(1790382681.294:2228): avc: denied { write } for pid=16881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.465262][T16898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2756'. [ 857.952972][ T30] audit: type=1400 audit(1790382681.854:2229): avc: denied { read write } for pid=16903 comm="syz.2.2771" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 857.953020][ T30] audit: type=1400 audit(1790382681.854:2230): avc: denied { open } for pid=16903 comm="syz.2.2771" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 858.684519][ T30] audit: type=1400 audit(1790382682.594:2231): avc: denied { write } for pid=16904 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.915866][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2772'. [ 858.953386][T16905] ovs-dp0: entered promiscuous mode [ 860.557602][ T30] audit: type=1400 audit(1790382684.464:2232): avc: denied { remount } for pid=16929 comm="syz.0.2768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 861.435976][T16937] ip6_vti0: left allmulticast mode [ 861.624488][ T30] audit: type=1400 audit(1790382685.534:2233): avc: denied { write } for pid=16916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.978602][ T30] audit: type=1400 audit(1790382685.884:2234): avc: denied { write } for pid=16954 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.082681][T10621] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 862.262761][T10621] usb 3-1: Using ep0 maxpacket: 16 [ 862.264451][T10621] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 863.004000][T10621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.004028][T10621] usb 3-1: Product: syz [ 863.004041][T10621] usb 3-1: Manufacturer: syz [ 863.004069][T10621] usb 3-1: SerialNumber: syz [ 863.159889][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2786'. [ 863.258926][T16970] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8433] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16970] [ 864.130786][T10621] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 864.146035][T10621] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 864.146306][T10621] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 864.146343][T10621] usb 3-1: media controller created [ 864.244434][T10621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.310545][T10621] zl10353_read_register: readreg error (reg=127, ret==-71) [ 864.382685][T10621] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 864.386402][T10621] usb 3-1: USB disconnect, device number 2 [ 864.513068][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.513118][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.545392][ T30] audit: type=1400 audit(1790382688.454:2235): avc: denied { write } for pid=16965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.960327][T16997] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6419] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16997] [ 866.019683][ T30] audit: type=1400 audit(1790382689.924:2236): avc: denied { write } for pid=16998 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.323940][T17026] syzkaller0: entered promiscuous mode [ 868.323963][T17026] syzkaller0: entered allmulticast mode [ 868.737915][T17040] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 869.008724][ T30] audit: type=1400 audit(1790382692.914:2237): avc: denied { write } for pid=17000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.117080][ T30] audit: type=1400 audit(1790382693.024:2238): avc: denied { write } for pid=17046 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.605095][T17054] vivid-000: disconnect [ 869.607351][T17054] vivid-000: reconnect [ 870.474249][ T30] audit: type=1400 audit(1790382694.374:2239): avc: denied { watch watch_reads } for pid=17068 comm="syz.0.2802" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 870.567008][T17061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2799'. [ 870.782722][ T982] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 871.137762][ T30] audit: type=1400 audit(1790382695.044:2240): avc: denied { write } for pid=17052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.192839][ T982] usb 1-1: Using ep0 maxpacket: 8 [ 871.607051][ T982] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 871.625233][ T982] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 871.625260][ T982] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 871.625275][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 871.630826][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.630842][ T982] usb 1-1: Product: syz [ 871.630851][ T982] usb 1-1: Manufacturer: syz [ 871.630859][ T982] usb 1-1: SerialNumber: syz [ 871.693434][ T982] usb 1-1: config 0 descriptor?? [ 871.702543][ T982] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 872.547436][ T5710] usb 1-1: USB disconnect, device number 18 [ 872.563348][ T30] audit: type=1400 audit(1790382696.464:2241): avc: denied { write } for pid=17090 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.793532][T17099] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17099 comm=syz.2.2808 [ 873.626098][T17111] vivid-000: disconnect [ 873.628446][T17111] vivid-000: reconnect [ 874.032383][ T30] audit: type=1400 audit(1790382697.934:2242): avc: denied { watch watch_reads } for pid=17106 comm="syz.3.2809" path="/530" dev="tmpfs" ino=2899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 875.890656][ T30] audit: type=1400 audit(1790382699.794:2243): avc: denied { write } for pid=17095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 875.925563][T17135] ovs-dp0: left promiscuous mode [ 876.004367][T17126] ovs-dp0: entered promiscuous mode [ 876.091260][ T30] audit: type=1400 audit(1790382699.994:2244): avc: denied { write } for pid=17138 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.119860][T17153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2815'. [ 878.781832][T17174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2820'. [ 879.445693][ T30] audit: type=1400 audit(1790382703.354:2245): avc: denied { write } for pid=17148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.187662][ T30] audit: type=1400 audit(1790382704.094:2246): avc: denied { write } for pid=17191 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.053676][T17206] ovs-dp0: left promiscuous mode [ 881.121369][T17209] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2826'. [ 881.927198][T17206] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 882.057729][ T30] audit: type=1400 audit(1790382705.964:2247): avc: denied { write } for pid=17197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 882.232879][ T30] audit: type=1400 audit(1790382706.114:2248): avc: denied { write } for pid=17230 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 882.393157][T17234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2830'. [ 883.327662][T17258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2833'. [ 884.202698][T17265] bridge0: port 1(syz_tun) entered blocking state [ 884.202971][T17265] bridge0: port 1(syz_tun) entered disabled state [ 884.203561][T17265] syz_tun: entered allmulticast mode [ 884.210430][T17265] syz_tun: entered promiscuous mode [ 884.944428][T17271] vivid-000: disconnect [ 884.946747][T17271] vivid-000: reconnect [ 885.422020][ T30] audit: type=1400 audit(1790382709.314:2249): avc: denied { write } for pid=17238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.703834][ T30] audit: type=1400 audit(1790382710.614:2250): avc: denied { write } for pid=17286 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.004340][T17295] x_tables: duplicate underflow at hook 2 [ 887.006696][T17295] 9p: Bad value for 'rfdno' [ 887.062811][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2839'. [ 888.027946][T17316] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2845'. [ 888.775323][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'. [ 889.322895][T17337] vivid-000: disconnect [ 889.323785][T17337] vivid-000: reconnect [ 890.012117][T17345] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17345 comm=syz.0.2851 [ 890.289299][T17355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2853'. [ 890.988386][T17360] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2854'. [ 891.811645][ T30] audit: type=1400 audit(1790382715.714:2251): avc: denied { lock } for pid=17368 comm="syz.2.2857" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 892.071385][ T30] audit: type=1400 audit(1790382715.974:2252): avc: denied { watch_mount } for pid=17370 comm="syz.3.2858" path="/537/file0" dev="tmpfs" ino=2941 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 892.097115][ T30] audit: type=1400 audit(1790382716.004:2253): avc: denied { bind } for pid=17370 comm="syz.3.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 893.616526][T17384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2861'. [ 893.740994][T17389] vivid-000: disconnect [ 893.742807][T17389] vivid-000: reconnect [ 894.150786][T17391] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2864'. [ 894.168710][T17391] nvme_fcloop: unknown parameter or missing value 'ww' [ 895.060173][T17402] IPv6: NLM_F_CREATE should be specified when creating new route [ 895.070765][ T30] audit: type=1326 audit(1790382718.974:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.2.2866" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d1d9e159 code=0x7fc00000 [ 896.758721][T17419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2873'. [ 897.276672][T16982] udevd[16982]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 897.292091][T16982] udevd[16982]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 897.437426][T17428] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17428 comm=syz.5.2875 [ 897.868390][ T30] audit: type=1400 audit(1790382721.364:2255): avc: denied { map } for pid=17429 comm="syz.3.2876" path="pipe:[52030]" dev="pipefs" ino=52030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 898.355864][T17442] overlay: Unknown parameter 'smackfsdef' [ 898.913013][ T5709] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 898.932334][T17458] xt_hashlimit: max too large, truncated to 1048576 [ 898.932346][T17458] xt_hashlimit: overflow, rate too high: 0 [ 899.041900][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 899.042704][ T5709] usb 1-1: device descriptor read/64, error -71 [ 899.042848][T17464] xt_hashlimit: max too large, truncated to 1048576 [ 899.042860][T17464] xt_hashlimit: overflow, rate too high: 0 [ 899.282666][ T5709] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 899.488164][ T5709] usb 1-1: device descriptor read/64, error -71 [ 900.230009][ T5709] usb usb1-port1: attempt power cycle [ 900.395699][T17477] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[17477] [ 900.450107][T17479] netlink: 2269 bytes leftover after parsing attributes in process `syz.2.2888'. [ 900.622818][ T5709] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 900.645456][ T5709] usb 1-1: device descriptor read/8, error -71 [ 900.945876][T17483] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2883'. [ 901.348058][ T5709] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 901.380203][ T5709] usb 1-1: device descriptor read/8, error -71 [ 901.486637][ T5709] usb usb1-port1: unable to enumerate USB device [ 901.538213][T17487] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17487 comm=syz.0.2889 [ 902.384285][ T30] audit: type=1400 audit(1790382726.284:2256): avc: denied { watch watch_reads } for pid=17493 comm="syz.6.2886" path="/490/file0" dev="tmpfs" ino=2689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 902.820017][T17505] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[17505] [ 903.753963][T17511] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2894'. [ 904.159729][ T30] audit: type=1400 audit(1790382728.064:2257): avc: denied { create } for pid=17513 comm="syz.5.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 904.656796][ T30] audit: type=1400 audit(1790382728.564:2258): avc: denied { ioctl } for pid=17521 comm="syz.6.2899" path="socket:[52197]" dev="sockfs" ino=52197 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 905.112030][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 905.112446][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 905.112807][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 905.124816][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 905.125052][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 905.125256][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 905.257920][T17527] netlink: 'syz.6.2900': attribute type 1 has an invalid length. [ 905.257934][T17527] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.2900'. [ 905.257943][T17527] netlink: 'syz.6.2900': attribute type 1 has an invalid length. [ 905.370277][T17529] ovs-dp0: left promiscuous mode [ 905.798977][T17542] __nla_validate_parse: 1 callbacks suppressed [ 905.799012][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2903'. [ 906.266577][ T30] audit: type=1400 audit(1790382730.174:2259): avc: denied { read } for pid=17549 comm="syz.0.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 906.635972][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2909'. [ 908.861839][T17553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2907'. [ 909.066714][T17562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2910'. [ 909.522463][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 909.582571][T17581] netlink: 'syz.3.2917': attribute type 4 has an invalid length. [ 911.665206][T17626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25525 sclass=netlink_route_socket pid=17626 comm=syz.5.2926 [ 912.798867][T17640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2929'. [ 913.204504][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2934'. [ 913.383588][T17660] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2931'. [ 916.145054][T17690] vivid-000: disconnect [ 916.145882][T17690] vivid-000: reconnect [ 916.151422][T17695] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2941'. [ 917.208774][T17702] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2943'. [ 917.446418][T17717] nfs: Unknown parameter '3' [ 917.447987][T17717] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2948'. [ 917.448003][T17717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2948'. [ 918.513499][ T5602] Bluetooth: to_multiplier 0 < 10 [ 918.767255][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2955'. [ 919.548129][T17747] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2959'. [ 919.603443][T17748] key id 000004d2 not found [ 920.684291][ T5602] Bluetooth: hci7: command tx timeout [ 921.183573][T17768] FAULT_INJECTION: forcing a failure. [ 921.183573][T17768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.183597][T17768] CPU: 0 UID: 0 PID: 17768 Comm: syz.0.2963 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.183613][T17768] Tainted: [L]=SOFTLOCKUP [ 921.183617][T17768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 921.183623][T17768] Call Trace: [ 921.183627][T17768] [ 921.183632][T17768] dump_stack_lvl+0x100/0x190 [ 921.183653][T17768] should_fail_ex.cold+0x5/0xa [ 921.183670][T17768] _copy_from_user+0x2e/0xd0 [ 921.183684][T17768] keyctl_dh_compute+0xb0/0x140 [ 921.183701][T17768] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 921.183716][T17768] ? __x64_sys_futex+0x34f/0x4d0 [ 921.183733][T17768] ? xfd_validate_state+0x129/0x190 [ 921.183749][T17768] __do_sys_keyctl+0x464/0x5a0 [ 921.183762][T17768] do_syscall_64+0x123/0x790 [ 921.183775][T17768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.183786][T17768] RIP: 0033:0x7fba69d9e159 [ 921.183796][T17768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.183806][T17768] RSP: 002b:00007fba6abb0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 921.183818][T17768] RAX: ffffffffffffffda RBX: 00007fba6a025fa0 RCX: 00007fba69d9e159 [ 921.183826][T17768] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000017 [ 921.183834][T17768] RBP: 00007fba69e3506b R08: 00002000000001c0 R09: 0000000000000000 [ 921.183841][T17768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.183848][T17768] R13: 00007fba6a026038 R14: 00007fba6a025fa0 R15: 00007ffc6b285008 [ 921.183863][T17768] [ 923.944829][T17790] vivid-000: disconnect [ 923.946433][T17790] vivid-000: reconnect [ 926.427035][T17832] overlayfs: failed to clone lowerpath [ 926.427805][ T30] audit: type=1400 audit(1790382749.455:2260): avc: denied { mount } for pid=17828 comm="syz.3.2983" name="/" dev="hugetlbfs" ino=53724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 926.827571][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.827619][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.366508][T17837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2984'. [ 928.082254][T17846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2985'. [ 929.980117][T17870] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2993'. [ 930.724136][T17881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2995'. [ 931.409390][T17887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2996'. [ 933.051901][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 935.189804][ T30] audit: type=1400 audit(1790382757.566:2261): avc: denied { listen } for pid=17943 comm="syz.0.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 935.948064][T17958] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3014'. [ 936.908579][T17970] overlay: Unknown parameter '/' [ 937.568882][T17977] netlink: 'syz.3.3019': attribute type 2 has an invalid length. [ 937.568903][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 938.067911][T17999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3011'. [ 938.498021][T17993] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 939.495553][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3025'. [ 940.266730][ T9672] Bluetooth: hci3: command 0x0406 tx timeout [ 940.630211][T18024] vivid-000: disconnect [ 940.632527][T18024] vivid-000: reconnect [ 941.352381][T18027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3030'. [ 941.848416][T18039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3034'. [ 944.621025][T18058] netlink: 'syz.5.3040': attribute type 12 has an invalid length. [ 945.176375][ T9672] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 945.189528][ T9672] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 945.196674][ T9672] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 945.198182][ T9672] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 945.201614][ T9672] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 945.612702][T10877] syz_tun (unregistering): left allmulticast mode [ 945.612729][T10877] syz_tun (unregistering): left promiscuous mode [ 945.612796][T10877] bridge0: port 3(syz_tun) entered disabled state [ 946.204992][T18073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3042'. [ 947.227515][T18081] key id 000004d2 not found [ 947.358564][T18086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3043'. [ 947.470041][ T5602] Bluetooth: hci8: command tx timeout [ 947.738675][T18088] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8433] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18088] [ 948.990661][T18107] xfrm0: entered promiscuous mode [ 948.990676][T18107] xfrm0: entered allmulticast mode [ 949.164233][T13164] ip6gretap0: left allmulticast mode [ 949.164250][T13164] ip6gretap0: left promiscuous mode [ 949.164350][T13164] bridge0: port 4(ip6gretap0) entered disabled state [ 949.184637][T13164] bridge_slave_1: left allmulticast mode [ 949.184652][T13164] bridge_slave_1: left promiscuous mode [ 949.184749][T13164] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.719568][ T9672] Bluetooth: hci8: command tx timeout [ 949.737578][T13164] bridge_slave_0: left allmulticast mode [ 949.737594][T13164] bridge_slave_0: left promiscuous mode [ 949.737689][T13164] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.781861][T13164] pim6reg: left allmulticast mode [ 950.134196][T18120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3053'. [ 950.807946][T13164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.810134][T13164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.811491][T13164] bond0 (unregistering): Released all slaves [ 951.046888][T13164] tipc: Disabling bearer [ 951.047058][T13164] tipc: Disabling bearer [ 951.047135][T13164] tipc: Left network mode [ 951.073160][T18132] netlink: 'syz.0.3057': attribute type 1 has an invalid length. [ 951.073178][T18132] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3057'. [ 951.073192][T18132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3057'. [ 951.415195][ T9672] Bluetooth: hci7: command 0x0406 tx timeout [ 951.558862][T18148] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3059'. [ 951.957817][T18150] vivid-000: disconnect [ 951.974548][ T9672] Bluetooth: hci8: command tx timeout [ 952.215328][T18142] vivid-000: reconnect [ 952.374933][T18060] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.375051][T18060] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.375191][T18060] bridge_slave_0: entered allmulticast mode [ 952.387584][T18060] bridge_slave_0: entered promiscuous mode [ 952.395183][T18060] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.395297][T18060] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.395397][T18060] bridge_slave_1: entered allmulticast mode [ 952.400395][T18060] bridge_slave_1: entered promiscuous mode [ 952.416617][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 952.513386][T18060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.006453][T18060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.006515][T18166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3065'. [ 953.052033][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3066'. [ 953.178196][T18060] team0: Port device team_slave_0 added [ 953.180737][T18060] team0: Port device team_slave_1 added [ 953.198218][ T30] audit: type=1400 audit(1790382774.178:2262): avc: denied { write } for pid=18133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.807834][ T30] audit: type=1400 audit(1790382774.732:2263): avc: denied { write } for pid=18179 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.840153][T10625] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 953.857655][T18060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.857670][T18060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.857691][T18060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.859163][T18060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.859175][T18060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.859194][T18060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.973894][T18187] overlay: Unknown parameter '/' [ 954.103588][T10625] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 954.138700][T10625] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.139510][T10625] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 954.139724][T10625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.294654][ T5602] Bluetooth: hci8: command tx timeout [ 954.348177][T10625] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 954.348191][T10625] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 954.348203][T10625] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 954.378432][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 954.437127][T18060] hsr_slave_0: entered promiscuous mode [ 954.438296][T18060] hsr_slave_1: entered promiscuous mode [ 954.438889][T18060] debugfs: 'hsr0' already exists in 'hsr' [ 954.438906][T18060] Cannot create hsr debugfs directory [ 954.548012][T13164] hsr_slave_0: left promiscuous mode [ 954.550204][T13164] hsr_slave_1: left promiscuous mode [ 954.550863][T13164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.553623][T13164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.330545][T18199] overlay: Unknown parameter '/' [ 957.262718][T13164] team0 (unregistering): Port device team_slave_1 removed [ 957.291983][T13164] team0 (unregistering): Port device team_slave_0 removed [ 957.776743][T18216] ovs-dp0: left promiscuous mode [ 957.916912][T18217] ovs-dp0: entered promiscuous mode [ 958.142496][T13164] IPVS: stop unused estimator thread 0... [ 958.326678][T18234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3078'. [ 958.795528][T10625] usb 1-1: USB disconnect, device number 23 [ 959.397294][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3079'. [ 959.481203][T18257] overlay: Unknown parameter '/' [ 960.013463][ T30] audit: type=1400 audit(1790382780.469:2264): avc: denied { write } for pid=18225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.235341][ T30] audit: type=1400 audit(1790382780.663:2265): avc: denied { write } for pid=18265 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.410767][T18264] kvm: pic: single mode not supported [ 960.580247][T18060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 960.613662][T18060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.625187][T18060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 960.642083][T18060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.642469][T18060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 960.716919][T18278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3086'. [ 961.097375][T18060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 961.098352][T18060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 961.120910][T18060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.327345][T18060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.449195][T18060] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.499248][T17930] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.499299][T17930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.528393][T13164] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.528438][T13164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.849619][ T30] audit: type=1400 audit(1790382782.157:2266): avc: denied { write } for pid=18285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.026914][ T30] audit: type=1400 audit(1790382782.323:2267): avc: denied { write } for pid=18312 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.069390][ T9752] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 962.346909][ T9752] usb 1-1: unable to get BOS descriptor or descriptor too short [ 962.346952][ T9752] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 962.349108][ T9752] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 962.349132][ T9752] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 962.349151][ T9752] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 962.349171][ T9752] usb 1-1: config 129 has no interface number 0 [ 962.349186][ T9752] usb 1-1: config 129 has no interface number 1 [ 962.349254][ T9752] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 962.349279][ T9752] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 962.349311][ T9752] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 962.349335][ T9752] usb 1-1: config 129 interface 135 has no altsetting 0 [ 962.349352][ T9752] usb 1-1: config 129 interface 5 has no altsetting 0 [ 962.358832][ T9752] usb 1-1: string descriptor 0 read error: -22 [ 962.358922][ T9752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.465063][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3091'. [ 962.962394][ T9752] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 962.963978][ T9752] usb 1-1: MIDIStreaming interface descriptor not found [ 963.088290][ T9752] usb 1-1: USB disconnect, device number 24 [ 963.377227][T18337] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3093'. [ 963.394138][T18335] udevd[18335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.400366][T18060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.473995][T18341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3092'. [ 965.277288][ T30] audit: type=1400 audit(1790382785.321:2268): avc: denied { write } for pid=18327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.418766][ T30] audit: type=1400 audit(1790382785.459:2269): avc: denied { write } for pid=18368 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.794784][T18060] veth0_vlan: entered promiscuous mode [ 965.843950][T18060] veth1_vlan: entered promiscuous mode [ 965.976844][T18060] veth0_macvtap: entered promiscuous mode [ 966.003882][T18060] veth1_macvtap: entered promiscuous mode [ 966.052938][T18060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.119659][T18060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.342141][T12227] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.353490][ T7240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.353526][ T7240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.353552][ T7240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.510709][T18391] overlay: Unknown parameter '/' [ 966.608912][ T30] audit: type=1400 audit(1790382786.548:2270): avc: denied { write } for pid=18373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 966.620070][ T7236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.620088][ T7236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.769865][T17935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.769885][T17935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.023025][ T30] audit: type=1400 audit(1790382786.935:2271): avc: denied { write } for pid=18394 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.470317][T18398] key id 000004d2 not found [ 967.901672][T18406] loop8: detected capacity change from 0 to 8 [ 967.913415][T18406] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 967.913438][T18406] loop8: partition table partially beyond EOD, truncated [ 967.913595][T18406] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 968.269682][T18412] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3103'. [ 969.467158][T18413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3104'. [ 970.241653][ T30] audit: type=1400 audit(1790382789.896:2272): avc: denied { accept } for pid=18424 comm="syz.0.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 970.307902][ T9672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 970.385486][T18436] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3110'. [ 970.427140][ T9672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 970.521765][ T9672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 970.553395][ T9672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 970.577250][ T9672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 971.348187][T15711] syz_tun (unregistering): left promiscuous mode [ 972.264252][T18443] overlay: Unknown parameter '/' [ 972.964837][ T9672] Bluetooth: hci5: command tx timeout [ 973.818783][ T7240] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 973.901270][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3113'. [ 973.901291][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3113'. [ 973.901301][T18451] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 974.150548][ T30] audit: type=1400 audit(1790382793.503:2273): avc: denied { search } for pid=5266 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.150745][ T30] audit: type=1400 audit(1790382793.503:2274): avc: denied { search } for pid=5266 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.150924][ T30] audit: type=1400 audit(1790382793.503:2275): avc: denied { search } for pid=5266 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.391379][T18467] key id 000004d2 not found [ 974.741578][ T7240] ip6gretap0: left allmulticast mode [ 974.741601][ T7240] ip6gretap0: left promiscuous mode [ 974.741765][ T7240] bridge0: port 3(ip6gretap0) entered disabled state [ 974.776219][ T7240] bridge_slave_1: left allmulticast mode [ 974.776241][ T7240] bridge_slave_1: left promiscuous mode [ 974.776398][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.792020][ T30] audit: type=1400 audit(1790382794.093:2276): avc: denied { read } for pid=18477 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.792059][ T30] audit: type=1400 audit(1790382794.093:2277): avc: denied { read open } for pid=18477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.793321][ T30] audit: type=1400 audit(1790382794.093:2278): avc: denied { getattr } for pid=18477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.854165][ T7240] bridge_slave_0: left allmulticast mode [ 974.854189][ T7240] bridge_slave_0: left promiscuous mode [ 974.854344][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.905549][ T7240] team0: left allmulticast mode [ 974.905563][ T7240] team_slave_1: left allmulticast mode [ 975.218460][ T9672] Bluetooth: hci5: command tx timeout [ 975.269116][ T7240] batman_adv: batadv0: Removing interface: gretap1 [ 975.396986][T18486] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3119'. [ 975.451300][ T7240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.454598][ T7240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.031567][ T7240] bond0 (unregistering): Released all slaves [ 976.066001][ T7240] bond1 (unregistering): Released all slaves [ 976.297739][ T30] audit: type=1400 audit(1790382795.486:2279): avc: denied { write } for pid=18474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.297787][ T30] audit: type=1400 audit(1790382795.486:2280): avc: denied { add_name } for pid=18474 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.785519][ T30] audit: type=1400 audit(1790382795.938:2281): avc: denied { write } for pid=18512 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.785681][ T30] audit: type=1400 audit(1790382795.938:2282): avc: denied { remove_name } for pid=18512 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=7168 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.937696][T18432] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.937815][T18432] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.937930][T18432] bridge_slave_0: entered allmulticast mode [ 976.947361][T18432] bridge_slave_0: entered promiscuous mode [ 976.954085][T18432] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.958698][T18432] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.958806][T18432] bridge_slave_1: entered allmulticast mode [ 976.971472][T18432] bridge_slave_1: entered promiscuous mode [ 976.975279][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 977.109928][T18432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.302539][T18432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.473787][ T9672] Bluetooth: hci5: command tx timeout [ 977.542216][T18432] team0: Port device team_slave_0 added [ 977.713258][T18432] team0: Port device team_slave_1 added [ 977.754331][T18432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.754600][T18432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.754765][T18432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.817253][T18523] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3123'. [ 978.011883][T18432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.011951][T18432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.011990][T18432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.123251][ T7240] hsr_slave_0: left promiscuous mode [ 978.129288][ T7240] hsr_slave_1: left promiscuous mode [ 978.130022][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.131356][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.131900][ T7240] batman_adv: batadv0: Removing interface: veth0 [ 978.596958][T18536] overlay: Unknown parameter '/' [ 978.707695][ T7240] team0 (unregistering): Port device team_slave_1 removed [ 978.911678][T18534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3126'. [ 978.923982][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 978.958670][T18432] hsr_slave_0: entered promiscuous mode [ 978.959447][T18432] hsr_slave_1: entered promiscuous mode [ 978.959925][T18432] debugfs: 'hsr0' already exists in 'hsr' [ 978.959940][T18432] Cannot create hsr debugfs directory [ 979.244935][T18552] key id 000004d2 not found [ 979.456010][ T7240] IPVS: stop unused estimator thread 0... [ 979.613265][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 979.613282][ T30] audit: type=1400 audit(1790382798.548:2286): avc: denied { write } for pid=18569 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.729965][ T9672] Bluetooth: hci5: command tx timeout [ 980.465866][T18577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3132'. [ 980.598053][ T30] audit: type=1400 audit(1790382798.788:2287): avc: denied { create } for pid=18574 comm="syz.2.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 981.156750][T18228] udevd[18228]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 981.180034][T18228] udevd[18228]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 981.221909][T18591] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16284] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18591] [ 981.251343][T18598] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16564] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18598] [ 981.632496][T18609] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8433] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18609] [ 981.734786][ T30] audit: type=1400 audit(1790382800.494:2288): avc: denied { write } for pid=18586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.975073][ T30] audit: type=1400 audit(1790382800.725:2289): avc: denied { write } for pid=18612 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.199705][T18432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 982.229915][T18432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.230720][T18432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 982.259621][T18432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.261192][T18432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 982.288280][T18432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.295469][T18432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 982.315795][T18432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 982.678673][T18432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.723430][T18432] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.745505][T17933] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.745550][T17933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.779212][T17934] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.779295][T17934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.048105][ T30] audit: type=1400 audit(1790382801.666:2290): avc: denied { write } for pid=18621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.178442][ T30] audit: type=1400 audit(1790382801.832:2291): avc: denied { write } for pid=18632 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.426072][T18640] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 983.453793][T18640] ovs-dp0: entered promiscuous mode [ 984.929775][T18672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3143'. [ 985.031683][T18432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.049279][ T30] audit: type=1400 audit(1790382803.557:2292): avc: denied { write } for pid=18644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.117420][ T31] INFO: task syz.9.2667:16263 blocked for more than 143 seconds. [ 985.117476][ T31] Tainted: G L syzkaller #0 [ 985.117501][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.117524][ T31] task:syz.9.2667 state:D stack:25832 pid:16263 tgid:16262 ppid:16094 task_flags:0x400140 flags:0x00080002 [ 985.117801][ T31] Call Trace: [ 985.117824][ T31] [ 985.117862][ T31] __schedule+0x1259/0x6920 [ 985.117909][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 985.118019][ T31] ? __pfx___schedule+0x10/0x10 [ 985.118059][ T31] ? find_held_lock+0x2b/0x80 [ 985.118100][ T31] ? schedule+0x225/0x2c0 [ 985.118160][ T31] schedule+0xdd/0x2c0 [ 985.118215][ T31] cgroup_lock_and_drain_offline+0x383/0x800 [ 985.118270][ T31] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 985.118305][ T31] ? kernfs_root+0xee/0x2a0 [ 985.118348][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 985.118394][ T31] ? cgroup_kn_lock_live+0xf4/0x520 [ 985.118428][ T31] ? kernfs_root+0xf8/0x2a0 [ 985.118502][ T31] cgroup_kn_lock_live+0x188/0x520 [ 985.118553][ T31] cgroup_subtree_control_write+0x3dd/0xe90 [ 985.118623][ T31] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 985.118675][ T31] ? kernfs_root+0xf8/0x2a0 [ 985.118738][ T31] cgroup_file_write+0x1e6/0x8a0 [ 985.118777][ T31] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 985.118823][ T31] ? __pfx_cgroup_file_write+0x10/0x10 [ 985.118913][ T31] ? __kmalloc_noprof+0x350/0x840 [ 985.118987][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 985.119041][ T31] ? __pfx_cgroup_file_write+0x10/0x10 [ 985.119097][ T31] vfs_write+0x6af/0x1050 [ 985.119148][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 985.119201][ T31] ? __pfx_vfs_write+0x10/0x10 [ 985.119235][ T31] ? find_held_lock+0x2b/0x80 [ 985.119348][ T31] ksys_write+0x12a/0x250 [ 985.119384][ T31] ? __pfx_ksys_write+0x10/0x10 [ 985.119454][ T31] do_syscall_64+0x123/0x790 [ 985.119505][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.119539][ T31] RIP: 0033:0x7fbd1799e159 [ 985.119570][ T31] RSP: 002b:00007fbd187fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 985.119616][ T31] RAX: ffffffffffffffda RBX: 00007fbd17c25fa0 RCX: 00007fbd1799e159 [ 985.119644][ T31] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 000000000000000c [ 985.119671][ T31] RBP: 00007fbd17a3506b R08: 0000000000000000 R09: 0000000000000000 [ 985.119697][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.119724][ T31] R13: 00007fbd17c26038 R14: 00007fbd17c25fa0 R15: 00007ffe2458b578 [ 985.119807][ T31] [ 985.120052][ T31] [ 985.120052][ T31] Showing all locks held in the system: [ 985.120089][ T31] locks held by pr/ttyS0/16: 1, last CPU#1: [ 985.120117][ T31] #0: ffffffff8edd87f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 985.120261][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 985.120289][ T31] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 985.120520][ T31] locks held by getty/5365: 2, on CPU#0: [ 985.120549][ T31] #0: ffff8880340940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 985.120697][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 985.120847][ T31] locks held by kworker/1:5/5695: 3, last CPU#1: [ 985.120875][ T31] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 985.167454][ T31] #1: ffffc90004a7fd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 985.167603][ T31] #2: ffff888041a22250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 985.167788][ T31] locks held by kworker/0:6/6554: 3, on CPU#0: [ 985.167817][ T31] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 985.168069][ T31] #1: ffffc90004e4fd08 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 985.168232][ T31] #2: ffffffff8edf83e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 985.168381][ T31] locks held by kworker/u8:14/7222: 5, last CPU#1: [ 985.168413][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 985.168710][ T31] #1: ffffc900036cfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 985.168950][ T31] #2: ffff888045fd0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 985.169440][ T31] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: ieee80211_update_sta_info.isra.0+0x2a8/0x1230 [ 985.170122][ T31] #4: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: sta_info_get+0x55/0x3e0 [ 985.170709][ T31] locks held by kworker/u8:28/7236: 3, on CPU#0: [ 985.170836][ T31] #0: ffff888033ad8140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 985.171911][ T31] #1: ffffc9000399fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 985.172847][ T31] #2: ffffffff90cd49c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 985.173454][ T31] locks held by kworker/u8:35/7243: 3, last CPU#1: [ 985.173537][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 985.174200][ T31] #1: ffffc9000390fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 985.176342][ T31] #2: ffff8880479a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 985.176506][ T31] locks held by syz-executor/8433: 4, last CPU#1: [ 985.176539][ T31] #0: ffffffff8ef3deb0 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 985.176781][ T31] #1: ffff88807cf3a9f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 985.177621][ T31] #2: ffff888034764378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 985.177950][ T31] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 985.179119][ T31] locks held by syz.9.2667/16263: 3, on CPU#1: [ 985.179148][ T31] #0: ffff88807c9a0b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 985.179340][ T31] #1: ffff88802c3ec460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 985.179583][ T31] #2: ffff888056af0080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 985.179814][ T31] locks held by syz-executor/18432: 4, last CPU#0: [ 985.179930][ T31] #0: ffffffff90cd49c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 985.180789][ T31] #1: ffffffff90cc4228 (dev_addr_sem){++++}-{4:4}, at: do_setlink.isra.0+0x62f/0x3e60 [ 985.181853][ T31] #2: ffff888077538e70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: do_setlink.isra.0+0x68a/0x3e60 [ 985.182977][ T31] #3: ffffffff90cbbec8 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 [ 985.183926][ T31] locks held by syz.5.3144/18673: 4, last CPU#1: [ 985.184093][ T31] #0: ffff888027204170 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 985.184737][ T31] #1: ffff888027204298 (&u->peer_wait){+.+.}-{3:3}, at: __wake_up_sync_key+0x1c/0x50 [ 985.213330][ T31] #2: ffff88802a325598 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbd/0x1c90 [ 985.213569][ T31] #3: ffff8880b843bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 985.213768][ T31] locks held by syz-executor/18674: 2, last CPU#0: [ 985.213947][ T31] #0: ffff8880365fc460 (sb_writers#6){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 985.214111][ T31] #1: ffff888032f36308 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 985.214373][ T31] [ 985.214392][ T31] ============================================= [ 985.214392][ T31] [ 985.214414][ T31] NMI backtrace for cpu 0 [ 985.214429][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 985.214454][ T31] Tainted: [L]=SOFTLOCKUP [ 985.214460][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 985.214471][ T31] Call Trace: [ 985.214477][ T31] [ 985.214484][ T31] dump_stack_lvl+0x100/0x190 [ 985.214512][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 985.214541][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 985.214563][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 985.214590][ T31] sys_info+0x141/0x190 [ 985.214611][ T31] watchdog+0xcb1/0x1030 [ 985.214637][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 985.214664][ T31] ? __pfx_watchdog+0x10/0x10 [ 985.214686][ T31] ? __kthread_parkme+0x18f/0x230 [ 985.214711][ T31] ? kthread+0x13a/0x450 [ 985.214735][ T31] ? __pfx_watchdog+0x10/0x10 [ 985.214755][ T31] kthread+0x373/0x450 [ 985.214779][ T31] ? __pfx_kthread+0x10/0x10 [ 985.214806][ T31] ret_from_fork+0x730/0xd60 [ 985.214828][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 985.214851][ T31] ? __switch_to+0x800/0x10f0 [ 985.214877][ T31] ? __pfx_kthread+0x10/0x10 [ 985.214906][ T31] ret_from_fork_asm+0x1a/0x30 [ 985.214938][ T31] [ 985.214959][ T31] Sending NMI from CPU 0 to CPUs 1: [ 985.214981][ C1] NMI backtrace for cpu 1 [ 985.214993][ C1] CPU: 1 UID: 0 PID: 18673 Comm: syz.5.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.215014][ C1] Tainted: [L]=SOFTLOCKUP [ 985.215018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 985.215026][ C1] RIP: 0010:__lock_acquire+0x508/0x1f40 [ 985.215044][ C1] Code: 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 12 72 aa 14 72 ac 8b 05 2a 1e b3 19 85 c0 0f 84 05 03 00 00 31 c9 eb aa 48 89 eb 48 89 d5 <45> 38 fe 73 21 44 89 44 24 18 44 89 54 24 14 e8 a4 93 40 03 44 8b [ 985.215057][ C1] RSP: 0018:ffffc900047ff590 EFLAGS: 00000046 [ 985.215068][ C1] RAX: 00000000ffffffff RBX: ffff888097788bb0 RCX: 0000000000000000 [ 985.215078][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 985.215086][ C1] RBP: 0000000000000625 R08: 0000000000000001 R09: 0000000000000000 [ 985.215094][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888097788000 [ 985.215102][ C1] R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000004 [ 985.215110][ C1] FS: 00007f683943e6c0(0000) GS:ffff888123c52000(0000) knlGS:0000000000000000 [ 985.215125][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 985.215134][ C1] CR2: 000055f5d73ebc10 CR3: 000000007dbda000 CR4: 00000000003526f0 [ 985.215143][ C1] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 985.215151][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 985.215160][ C1] Call Trace: [ 985.215164][ C1] [ 985.215170][ C1] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 985.215192][ C1] lock_acquire+0x1d1/0x380 [ 985.215206][ C1] ? __unix_dgram_recvmsg+0x255/0xc30 [ 985.215225][ C1] ? __pfx___might_resched+0x10/0x10 [ 985.215240][ C1] __mutex_lock+0x1a4/0x1bd0 [ 985.215252][ C1] ? __unix_dgram_recvmsg+0x255/0xc30 [ 985.215269][ C1] ? __unix_dgram_recvmsg+0x255/0xc30 [ 985.215286][ C1] ? __scm_recv_common.isra.0+0xf4/0x4f0 [ 985.215304][ C1] ? find_held_lock+0x2b/0x80 [ 985.215323][ C1] ? __unix_dgram_recvmsg+0x75c/0xc30 [ 985.215340][ C1] ? __unix_dgram_recvmsg+0x75c/0xc30 [ 985.215357][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 985.215371][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 985.215388][ C1] ? __unix_dgram_recvmsg+0x255/0xc30 [ 985.215405][ C1] __unix_dgram_recvmsg+0x255/0xc30 [ 985.215425][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 985.215443][ C1] ? lock_acquire+0x1d1/0x380 [ 985.215457][ C1] ? clockevents_program_event+0x23e/0x820 [ 985.215479][ C1] ? iovec_from_user+0xda/0x140 [ 985.215496][ C1] unix_dgram_recvmsg+0xcd/0x100 [ 985.215513][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 985.215531][ C1] ____sys_recvmsg+0x5eb/0x670 [ 985.215556][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 985.215571][ C1] ? rcu_is_watching+0x13/0xc0 [ 985.215588][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 985.215601][ C1] ? kfree+0x1e5/0x6d0 [ 985.215619][ C1] ? irqentry_exit+0x24d/0xa10 [ 985.215632][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 985.215645][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 985.215664][ C1] ? __pfx___might_resched+0x10/0x10 [ 985.215679][ C1] do_recvmmsg+0x2f3/0x740 [ 985.215693][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 985.215707][ C1] ? do_futex+0x190/0x440 [ 985.215728][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 985.215748][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 985.215766][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 985.215786][ C1] do_syscall_64+0x123/0x790 [ 985.215800][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.215813][ C1] RIP: 0033:0x7f683859e159 [ 985.215824][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.215836][ C1] RSP: 002b:00007f683943e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 985.215849][ C1] RAX: ffffffffffffffda RBX: 00007f6838826090 RCX: 00007f683859e159 [ 985.215858][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000008 [ 985.215866][ C1] RBP: 00007f683863506b R08: 0000000000000000 R09: 0000000000000000 [ 985.215875][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 985.215883][ C1] R13: 00007f6838826128 R14: 00007f6838826090 R15: 00007ffd7e1ef8d8 [ 985.215896][ C1] [ 985.260472][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 986.540472][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 986.551134][ T31] Tainted: [L]=SOFTLOCKUP [ 986.555438][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 986.565470][ T31] Call Trace: [ 986.568728][ T31] [ 986.571638][ T31] dump_stack_lvl+0x100/0x190 [ 986.576306][ T31] vpanic+0x553/0x970 [ 986.580270][ T31] ? __pfx_vpanic+0x10/0x10 [ 986.584756][ T31] panic+0xd1/0xe0 [ 986.588457][ T31] ? __pfx_panic+0x10/0x10 [ 986.592853][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 986.599009][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 986.605154][ T31] ? watchdog.cold+0x1ec/0x234 [ 986.609900][ T31] watchdog.cold+0x1fd/0x234 [ 986.614475][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 986.620268][ T31] ? __pfx_watchdog+0x10/0x10 [ 986.624926][ T31] ? __kthread_parkme+0x18f/0x230 [ 986.629936][ T31] ? kthread+0x13a/0x450 [ 986.634162][ T31] ? __pfx_watchdog+0x10/0x10 [ 986.638819][ T31] kthread+0x373/0x450 [ 986.642882][ T31] ? __pfx_kthread+0x10/0x10 [ 986.647460][ T31] ret_from_fork+0x730/0xd60 [ 986.652034][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 986.657132][ T31] ? __switch_to+0x800/0x10f0 [ 986.661796][ T31] ? __pfx_kthread+0x10/0x10 [ 986.666372][ T31] ret_from_fork_asm+0x1a/0x30 [ 986.671125][ T31] [ 986.674307][ T31] Kernel Offset: disabled [ 986.678608][ T31] Rebooting in 86400 seconds..