last executing test programs: 10m20.481883668s ago: executing program 1 (id=254): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080), 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xa0, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x50}, 0x8040) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @dev}, 0xc) syz_emit_ethernet(0x2a, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000190001008000385f304a00001c140000fe000001df"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) 10m17.652642642s ago: executing program 1 (id=259): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x2, 0x3, 0xa, 0xfffffffe, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x9c) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x0, 0x8401, 0x1, 0x7, 0x64, 0x258}) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') prlimit64(0x0, 0xc, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080841}, 0x44) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x2, @pix={0x8, 0x0, 0x38414261, 0x5, 0xcc, 0x9, 0xa, 0xa, 0x1, 0x2, 0x1, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f080, 0x3}) 10m16.718519022s ago: executing program 3 (id=260): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8002, 0x80000000, 0x2004}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x90000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r8, 0x5501) pread64(r7, &(0x7f0000000280)=""/4096, 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @rand_addr, @empty, @dev}}}}, 0x0) ioctl$GIO_CMAP(r0, 0x4bfb, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 10m14.911399949s ago: executing program 3 (id=262): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() keyctl$KEYCTL_WATCH_KEY(0xc, 0x0, 0xffffffffffffffff, 0xc8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000007000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000410007010000000007000000057c00000400fc800c00018006000600800a00004800028042"], 0x6c}}, 0x4010) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r5) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) setrlimit(0x2, &(0x7f0000000180)={0x261a, 0x7}) bind$can_raw(0xffffffffffffffff, &(0x7f00000004c0), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x4, 0x4) 10m14.563545031s ago: executing program 1 (id=263): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000f5c300000000000000000a0000000007000000000000140003006d6163767463703000000000000000001400110076"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) removexattr(&(0x7f0000000300)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10m12.868112254s ago: executing program 3 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400e5ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000600000000001c0012800b00010067656e65766500000c00028005000800000000001400350067656e65766531000000000000000000"], 0x50}}, 0x2000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x10c, 0x5, 0xa, 0x801, 0x0, 0x0, {0xdbdc1550689a61bf, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x44}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4f5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x397e784f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48cacb1e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x16, 0x8, "5ca3b7d7db86064853b1a2a4d7d467bbb4b6"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x180}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)='%pI4 \x00'}, 0x20) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x108, 0x0, 0x148, 0x108, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@loopback}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) r8 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x4}}, 0x20) 10m11.141633189s ago: executing program 3 (id=269): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000280)='>', 0x1}], 0x1) 10m9.212775407s ago: executing program 1 (id=272): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffe43, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800700010063740000340002800800024000000013050003000100000008000140000000172500030001000000080004400000000f08000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000060000000a"], 0x98}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450c005800650000082f9078ffffffffffffffff0c21880b000000030c000800040086dd080088be00000003170c49400100000000000005080022eb0000000223fc38cd0200000000000a96035106000800655800000003db2bd6001d07a4c6dd5c32fcceeca50881878e6610408878c3cb3dba8a7e68f5681b35c1ee9b91eeea3153968904841dc4c99110"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10m5.773630716s ago: executing program 3 (id=276): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8e, 0x180000504) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_ima(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc010) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='numa_maps\x00') read$FUSE(r6, &(0x7f0000006280)={0x2020}, 0x2020) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000040)=""/155, 0x9b}], 0x1, 0x0, 0x0) read$FUSE(r6, &(0x7f000000a300)={0x2020}, 0x2020) 10m0.105182631s ago: executing program 3 (id=285): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r2, &(0x7f000000c3c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='pim6reg1\x00'}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10m0.096475491s ago: executing program 1 (id=286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6ccc, 0x2}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x38, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x38}}, 0x0) 9m58.246285141s ago: executing program 1 (id=289): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x204800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x9, 0x40400) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x83ffffe, 0x6) 9m42.948204585s ago: executing program 32 (id=285): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r2, &(0x7f000000c3c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='pim6reg1\x00'}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9m42.851488757s ago: executing program 33 (id=289): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x204800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x9, 0x40400) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x83ffffe, 0x6) 7m40.215201405s ago: executing program 0 (id=466): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000006094cb2d0000000000000000850000007d00000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m39.989653222s ago: executing program 0 (id=469): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = gettid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$setsig(r6, 0xa, 0x2) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) syz_pidfd_open(0x0, 0x0) unshare(0x2c020400) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20110400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x4001) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) 7m35.843765999s ago: executing program 0 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x6, 0x22000) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000005c0)={0x0, 0x3, 0x7, '\x00', &(0x7f0000000580)=0x80}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) tee(r2, 0xffffffffffffffff, 0x8000000000081, 0x0) setuid(0xee01) setresuid(0xee00, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setreuid(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x16, 0x9, 0x40, 0x4, 0xfffffffffffffffa, 0x0, 0x400, 0x1000000000000006}, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r4, 0x0, 0x0) 7m34.165055666s ago: executing program 0 (id=477): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x1, 0x2}) syz_usb_control_io$uac1(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) r5 = semget$private(0x0, 0x4, 0x411) semctl$IPC_STAT(r5, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x8000, 0x5, {0x80, 0x1}, {0x6c, 0x7}, @rumble={0xafe4, 0x30e7}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x318, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9d, 0x60, 0x46, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0xdcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x5e, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x4, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x340, 0x1, 0x6, 0x6, 0x10, 0x81}, 0x75, &(0x7f0000000140)={0x5, 0xf, 0x75, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "a93905c297805f5c85fcb2550f471016"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x8, 0xa0, 0x1, 0xe}, @generic={0x28, 0x10, 0xb, "674c799a80d0b3249bebd0c18d85e51f5746a2683fba60a92915fae131aa85e1f84c0e4792"}, @ss_container_id={0x14, 0x10, 0x4, 0xb6, "f12b5414f58307205c1d74788abcc81b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0xd1, 0x28, 0x4}]}, 0x9, [{0x88, &(0x7f00000001c0)=@string={0x88, 0x3, "b6cebeb52653ad06273b9b93b4657d844c08d4cf3331164b6df93cc9cd9fe958a1d0048c83201101d9afd9014871ef68d92e1b8632413fcd3d8fc7703fba6bd0ded3ea44469e13000e10ab3ffc529b0d555c5434b020e614c6a0af8355f3670cffd8cdd5d52a319d075762a0457cb6a8a948ca1326fb19f0f10267a6dc6e2b4f53c57c627152"}}, {0xe0, &(0x7f0000000280)=@string={0xe0, 0x3, "49c6bad9288a7f181590e75dcfac8ca43979223b0c5e23ffefe2cc04514bfb473113cd13c9ca7dfffd157d5c1de8339959d0e039a8efbc00183fd63a807d38eddc73c8a6d29509fd6c7b7207d1f1bc61c8ad8730ff5a2900343c07106e7bb132414ab5f5927fd7102c051118103d05fdf961fb7e67d62661d1500e06114314a9a4e57590f7ea77024117f055689e512bf72792da2723d3730d89015f459f2fa64023ee63c6a382fc138acb754d04a3b99f06cb62f72302563884119243b435fbbbe5a109c28ccd8e08100d6b94a9ea456341b08e74e7914d62192b2ad744"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x804}}, {0xd1, &(0x7f0000000400)=@string={0xd1, 0x3, "a6cc794f8785e597718577e6fe1042b3fd2b43d3325faec5361ebf8c6e855a326a87020b7479fe660ce735a9029d687dc52cd8521f7c83098382085d05b1794c64add1f8fa87221523e0958b92e2c80eb00e79112a81b75b0b7ed1a146dacefd81b845490cfc470ed5eff5542eca83b772393d36fb497d3a549a45fac1c1c2ec30c6c1549b8004169ebc95d1f25eb097fa098913448c3b66dea9e1be1b725e93e8034c68be9a687cb00e88afffccd3b970f84089c5d3000a5fe82004d6494a43101e7b67317b29c38d4190e6573633"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2409}}, {0x7d, &(0x7f0000000580)=@string={0x7d, 0x3, "a29195a63c3ae44ea70cc00f785b8b432e64bb72bbe585d918a62d12c1f0661c964b4275453e393857935907c2eb4e33195301d4807b5351d0f7d4004ab4926d305182803aba0a43721a199515f1aad0b5246e337898ad4b70cb9a7362448addb2be4f918bcc88d67570eb15835bd533dbdcaaea6b0534983f03d9"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3401}}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r7, r9}, 0x10) bpf$LINK_DETACH(0xf, &(0x7f0000000080)=r10, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7m28.991320107s ago: executing program 0 (id=488): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) tee(r1, r2, 0x6da, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2cdabeb5e562b3d9f09588000000020000000900010073797a3022cffc109d7b"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048010) socket$pppl2tp(0x18, 0x1, 0x1) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000700)=0x1c) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r8 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_clone(0x80008200, &(0x7f0000000240)="dd91248d39fc7036fe809aad368cd4efed36eec6baa6ea815eacfb2f39aa7ded08b58461dfce8ef41c363b2e040a35cde7265694cd38fdfbc9542c7416bae21cbfc69414556bb3e00387689850053bb98aea6208f5babe70f5395d59e0704cc90c3c8d548d7cc386f7d92e0e35ad797a4a3b68cdf8e6973e568a99681be59381e64efe4ebe03b1f0323704356c58a783221a6636bacb25f2cc7219b73a87aa57d037d1a4e12058e51eb8b234af1350cfb6", 0xb1, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 7m26.656968188s ago: executing program 0 (id=493): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000000002) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4005) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0xfffffffffffffd0a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x400000000000}, 0x18) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000001480)}, 0xff00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) 7m25.382884141s ago: executing program 34 (id=493): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000000002) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4005) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0xfffffffffffffd0a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x400000000000}, 0x18) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000001480)}, 0xff00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) 5.151687708s ago: executing program 2 (id=1872): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x10, "d24ec8bedb50a214ed375f000000005d"}, &(0x7f0000000480)=0x18) socket$packet(0x11, 0x3, 0x300) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x200, 0x0, 0x2f7}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x1}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) 4.993492697s ago: executing program 2 (id=1873): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x197dd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet(0x2, 0x1, 0x3) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x2000c000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r5}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 4.588825827s ago: executing program 5 (id=1876): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3b6, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000d40)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, &(0x7f0000001240)="73c5e3121465ccc3631c8ad1738c6e9e41bcc75f6470caa95f0dad99d34ee5a2d212cab34385b6c4f2655e3df6cd6486285fa20e2bbdf2f3e222437a56d34ead4fd7f83264210eae8b8ac494ebd5e03104b1c22d3afc50e44313e00077ca7b0915fc65b49014842b44258b7cb1e0bd8ca9df5d086067bdd0ad830f927f0ccf9272734d18bbd2c91cf49ae8d838126f5e25696a151c5ed765958bbf09a0073dcbcb9b735bc77116a116c987d38b6b8485156fa6baef39376fbc7b67de5d5cf78059da6c3a960efb3ee35bfdec96840c862b1e62945e85db7423caf62683aac6e954c9ec6636c5feeafc466a9ace88c56c3280fddde04969fd274c22f78bc4f2f32d25c36a0dc42b124f20cf04bcff82131f56fabcf38b203269e29ceae2d27eb28a39a5926b87bd22f246441707170b04084531e3d4152806bfe2dadc17f5167d42e51c220cf8278936865e6f7810136624082c0ce99e8db0a2f3be8a55ae8e4a9b1f80d695b9dbdf5cad7a2176384b0ae9258bed1215cb753715d5cacd87761d43e00d54e5c4631bf9d8b8f2102ef2ea1c4d5134daaf087c666535d72967818aec5f009ef2d56fa83bda48482493f6db67244e6ce068fb127db99793e6bc4f5f962c9174c72603a6631fbef5e67f94d5f00696e997982ba87628876da834d46101182fc1d33e1770e96d5e540bff76041f83ba7d1052df028fd4c02e42dbd80000ec36528b6dfa7f6ddef1199632c27d6d46e60129043eb62620946447c0f3addb3985d558ca99035004ec847ab40959819be7bbb6a25d318479fdd4ba88a1904dd294c1b236715ca88f210ed5677aef26ac85b0d1104a2a6f660ed3ff037b862c071a4071b561f0cc2cc43216c44dd007637fe44760633bed09464e6f5cda1e1cb4d9ce73c9d9bddb9652cc97310e9e7ce5ef3912d7b8453d3d530fc55fdb41c2157fb655e85e93062af920ac0998853baf8c3a9b42bab3bc1bdac0139f2d00d8cdd9de81", 0x2c5, 0x8040841, 0x0, 0x0) 4.587380282s ago: executing program 6 (id=1877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400e5ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000600000000001c0012800b00010067656e65766500000c00028005000800000000001400350067656e65766531000000000000000000"], 0x50}}, 0x2000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x118, 0x5, 0xa, 0x801, 0x0, 0x0, {0xdbdc1550689a61bf, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x44}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4f5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x397e784f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48cacb1e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x16, 0x8, "5ca3b7d7db86064853b1a2a4d7d467bbb4b6"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x18c}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)='%pI4 \x00'}, 0x20) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x108, 0x0, 0x148, 0x108, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@loopback}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) r8 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x4}}, 0x20) 4.574827116s ago: executing program 7 (id=1878): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xcb}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x30}}, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0x1}, {}, {0x3, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) sched_setscheduler(r3, 0x2, &(0x7f0000000400)=0x5) socket$kcm(0x2, 0x3, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 4.392286033s ago: executing program 4 (id=1879): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x3, @raw_data="4fc933030375a6b3215df975b2cac4a2f2d62386db7c1733fadaa0c925ed475099568b04f2872a51b1d96bbb022a83d6031b7348f7a470575dff5e20c8865b750fb5019bb4c4af9c8bd724f2b2e716a072b0371e5a1d53851ba6bcce9f91180398586881fd5269112ed1a6d2901a3ecb4f12a5a740efb2c407f900c78aaf69b9facaeaf45f97d9c37021565625ac6f82ab3dd28e7b196e24038346113533afc73c86b3249943cb3849e98af73131a13cf64778c368aab68c695ae04834a8c30e0f21394330041389"}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9b0000, 0x6, 0x1, r2, 0x0, &(0x7f0000000100)={0x9b0972, 0x7, '\x00', @p_u16=&(0x7f00000000c0)=0xab}}) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000002c0)) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r4, 0x1, 0xd, &(0x7f00000000c0)=0x8, 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x0, 0x1}, {0x1c, 0xfff1}}}, 0x24}}, 0x0) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(0xffffffffffffffff, 0x400072) 4.391408689s ago: executing program 6 (id=1880): socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0x4b}, 0x2c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r4, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000100)="26d1b3", 0x3, 0x40040, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000002000013020000000225b075"], &(0x7f0000000240)=""/220, 0x40, 0x106, 0xa, 0x2, 0x0, @void, @value}, 0x28) syz_open_dev$evdev(0x0, 0x2, 0x822b01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.300798566s ago: executing program 7 (id=1881): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) syz_io_uring_setup(0x27e, &(0x7f0000000200)={0x0, 0xf683, 0x20, 0x2, 0x20f}, &(0x7f0000000100), 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 4.125892838s ago: executing program 4 (id=1882): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x197dd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet(0x2, 0x1, 0x3) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{0x303}, "d05143ad517ddc66", "0f3d1f0af50928ece07cf51508088bfed660f77d3839dd3d2f1d386fba5f0bc0", "1ea01341", "8017051d92882a3d"}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0xfffffffe, {{0xa, 0x0, 0x0, @mcast2, 0x5}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) 3.565532389s ago: executing program 4 (id=1883): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) pwritev(r0, &(0x7f0000001000)=[{0x0}], 0x1, 0xac, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x121342, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0xb, 0x10001, 0x9, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="41a00d0504", 0x5}], 0x1}, 0x20000810) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 3.524489527s ago: executing program 7 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f00000003c0)='G', 0x0}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f0000000280)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') 3.481549023s ago: executing program 5 (id=1885): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x197dd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet(0x2, 0x1, 0x3) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{0x303}, "d05143ad517ddc66", "0f3d1f0af50928ece07cf51508088bfed660f77d3839dd3d2f1d386fba5f0bc0", "1ea01341", "8017051d92882a3d"}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0xfffffffe, {{0xa, 0x0, 0x0, @mcast2, 0x5}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) 3.295367204s ago: executing program 6 (id=1886): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x3c}}, 0x0) io_setup(0x1fc, &(0x7f0000000380)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 3.263561923s ago: executing program 2 (id=1887): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) syz_io_uring_setup(0x27e, &(0x7f0000000200)={0x0, 0xf683, 0x20, 0x2, 0x20f}, &(0x7f0000000100), 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 3.22935925s ago: executing program 5 (id=1888): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r4, &(0x7f0000000580)=ANY=[], 0x8) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf30, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff0000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) 3.017514323s ago: executing program 6 (id=1889): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x7dd, 0x40000000, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(0x0) link(0x0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 2.571859507s ago: executing program 2 (id=1890): ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xdf602000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001400)={[0x0, &(0x7f0000001380)='\x00', &(0x7f00000013c0)='\x00']}, 0x400) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x45, 0x4007, @fd, 0x7, 0x3, 0x1c000000, 0x3, 0x0, {0x1}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000009}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x34000}], 0x1000000000000197}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r4, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ad4000/0x1000)=nil) 2.467564292s ago: executing program 6 (id=1891): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) syz_io_uring_setup(0x27e, &(0x7f0000000200)={0x0, 0xf683, 0x20, 0x2, 0x20f}, &(0x7f0000000100), 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 2.357345656s ago: executing program 7 (id=1892): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) inotify_init() socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) memfd_create(0x0, 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000240), 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x25, 0x4, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 2.356718969s ago: executing program 4 (id=1893): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) unshare(0x26020280) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/75, 0x4b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x97}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x3, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000600)=[{0x0, 0x4, 0x2, 0xc}, {0x5, 0x1, 0x8, 0x8}, {0x5, 0x3, 0x2, 0xc}], 0x10, 0x7, @void, @value}, 0x94) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe) ioctl$TCFLSH(r4, 0x540b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="010000000000000000000100"/27, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r1], 0x50) 1.666499539s ago: executing program 5 (id=1894): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000900"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x197dd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet(0x2, 0x1, 0x3) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{0x303}, "d05143ad517ddc66", "0f3d1f0af50928ece07cf51508088bfed660f77d3839dd3d2f1d386fba5f0bc0", "1ea01341", "8017051d92882a3d"}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0xfffffffe, {{0xa, 0x0, 0x0, @mcast2, 0x5}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) 1.626016082s ago: executing program 2 (id=1895): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) syz_io_uring_setup(0x27e, &(0x7f0000000200)={0x0, 0xf683, 0x20, 0x2, 0x20f}, &(0x7f0000000100), 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1.551150082s ago: executing program 7 (id=1896): socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0x4b}, 0x2c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r4, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000100)="26d1b3", 0x3, 0x40040, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000002000013020000000225b075"], &(0x7f0000000240)=""/220, 0x40, 0x106, 0xa, 0x2, 0x0, @void, @value}, 0x28) syz_open_dev$evdev(0x0, 0x2, 0x822b01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.43572152s ago: executing program 5 (id=1897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0xf0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2a00a9, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1031, 0x0) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x12}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 1.402772219s ago: executing program 4 (id=1898): socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0x4b}, 0x2c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r4, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000100)="26d1b3", 0x3, 0x40040, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000002000013020000000225b075"], &(0x7f0000000240)=""/220, 0x40, 0x106, 0xa, 0x2, 0x0, @void, @value}, 0x28) syz_open_dev$evdev(0x0, 0x2, 0x822b01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.02530388s ago: executing program 6 (id=1899): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0xa4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1d000000040000000200000000000000010200", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getflags(r5, 0x40a) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x800100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="f1451394a86d56b46c594b8edde95827d106f3b44634180f367dfd567851f1eac1ab2adcc78550c79f2e8c7e200818802cd8e948542a24721449ef80d6fbf935dbd8410af1ff462d56d480f02e85d96062388a90e345ac86040caf4febd7f05beb6db33030e614a1a9aa2738d643d9e9da8cc5f2ded7b01be366970ea3aecc374dee18c094bba66b9728dcc2d384d6e5d9c6511cca40c0e82b9bd3528f1be8ef408c9e32cdc176fd5905e4448a3bee3612356b30dba039a99caafde1ab687a563aceb827ef902e4361bd18754895d8bb4f834c6fb0961448b916fda2d511757988406875a128af807e3b500ad26b57730ea4e73ab3033a185c8b3afe35872cd9ddf92d81272e800e75ae86db4d913e227ef7f140ce2c98006a30ef2e7482f6af3a82824adbe8a1325aeb3a757330afe94f484e788ed70411c00e0846b48d2fc611c21c1240e5d3dbf6e332d1c03329939ab041d0376de8fed2a7783dfff3821949495dc92e15eaca5df4b13960732f16b008ef3698f10585b2bd2d290b108f27e71d4aa5004e8de88518b8124a68585419d9275c83f5f0e969501cf4784af52355cfb4bd067ff73d2fa966db9ba5204541d31f12e418c2b723361fe16e51d1b2a1cb9785121c0caf1bef2d1c746f4adf3e217b4141c82d7d8fbabf1e1d3e967b5643ba6b22acb365991f7e9577c1f889959cadd38ed92bfd7aad31a1a1b13d71ebf78d2af48f9e7717ed49d66ff866465c739905d44ea2997299969cb84b906da266c774d04ba17060f09b0bedb38feb8ae6850428dd59ea1eb0c20697a762e085917a85ac1e15376ce05a504022807a4e6b6fd9c45f0c77276e64f5b492101bd8ad44e93e8e2154581d365627571a531f3cfda4fe472421485a4b298b525ef0c2dae4b6bbe8b8a5b33e3b4e322391bbffd0669fcf25c0a23175988f0e449d342d5be3195bc92246bdea414b7a52aa585bdf5f9803b306fb49def852b38c010bb2f50450f8f9b96b614b6ff525483bab3f66bd755cc337f015b3fdd1cb40a698cd57e20ffce734c5a56b7d92a3f4247042a75f85abe395df016c710db15fb1391634cf7b9505d685025ef2bbdc8fe84fa6562769ca2e383a2115cef43fea4fa114159b8896039203568b0fde329106e0f0eed6770be4935b875d92701d632d182cf25b262cd85dd8266ebb9471ef1a71846dcb2d88e73672c3a6de8fd86dfb5e747ced9707456d8126ae4ab187f3b48f13caee1215d78f8c84474babd91d0755d6a287d98c9f797f0c82cfbe5a3a3bad381152728ec0f979b4bb84f0db61eaa27e1be3a785a301b685644759c338d738e46e2c1b8643c8f4ee3627403efc6bf4a1b9a98eadee7d63f0fb1858c5e2a2b113a22b9c41fe7e6c298f747a06b47022c8890cbec3eaacbd09cec548392495c071f5b36505edd09e15c260f5dd98177a3ff6656604a320c48868470cb2d1a4f20c3646b39358bcf9bb2140600dae42891b3ddb3a86d7dd542a4f324364890f9449df3df8b3628121be15aa2c1dc90d5c23ab5af924bf4a2d7b05f30a3216edc3b4d9c6ea0058d5d885570f5d46ae6006681298c0bc275f4d600c7d4e883eb358d20d82c1e5a9dedf1bbc4b02fd176157f6da3fbf5eb747ef7d2053395f6809913b5ca6b0b6e68a972fce886765bc1ac13fb396ff90a4f865590e0cc5125cdc390eedf4a706911b2825ea5afcecd453afe529576aaaa8972012258d4f9859508b319f5ea8d5d20fc5bd3b25a3aa24d3658bf859e684faa331ab65dda79e977070f32f29dce4838ddd32a25dd48cd759c21c550e0e2f27348e88570eda4887f073599e8f69190a9e6aa380bafa98b4dd57e710863fad4dc41e442a1765a9495981f0d8b338fdbec8f3072721fd840b2198e5a5a053c58589278d3ba84d2042394f04833006ddb99e4b99ec13a46ae34f03f783555befd6ddd7367713ecec2efe075c8f7b62eef56180632e01bc38d7dfc86d6e9518c477ad346b2a9b7d9403f85246cd514aa4f113ce4d1090719c8d8135839783d38814bfb105eb63fa56802e9e2e0ae01fe6c716bc0c379ee4320ebb50b5fb84fced731341d76f9ce1efa063667ad43c6d413a351c675ed0666ca0ae272eb879ea474e511c488dfa7fdde6d20b76de6ae7a77e7357ed3055b908883aef8bd6d6ae80e53a13427afc200c630f3e3048719551f71c22c5b0984cd7b37b922d032d3c57976e8e66bcd880dd3b65f1fa13acc73d2cbaedadb9a51d1a196b220bfd977623a97bd1c1cd705b2219cc928d980ba64096239fe9ed3185e638bc784669e935a9fd7e26b4e1f8c5760fd55c393e37e9b4abd098f977d8219a2fb8194438ca013acc498bd0957266450365a259c44be6dc46996b4a1557b946a1601cfda0c67509ee1e8ed4401bc2878a50360f4981832b5dec44091548a9a9b78796b0c7cb9d46451477c889852623e6668e5d37bd6aa6cb532ffd227299f951f75a40b9939a24892ab23cbb9730cf7631ea84d46830d0d2e581ebd1f4603cf8a711bf0ddefb8b9fe4cd66faf56816e4c148dc807edc3f9b0e5ffd9c76e8f46013f56788b31b3de9172e4752ff30a5283fad328bab020f675c2bca8c5f83a4b0a0f1e953f931c2e15e65538b6043b58b895f5134d97bfab087ae741fa2fd327bdbe8e89ca63acd7424acf6f7c7790cd6ab1617d5d30240476821a66edc91795467bd6cc07ee53678c914c310dd826af4b1a9f2f771c7c002bf50b3f193f671669b4a48fa18106b656d26a6f26378fb7ff0649f2ea6a42ea73ab87ae7e585a5d78d47ba64a5715a083523bc1c0235d8a7bee3262c29b993a8c678a6ca46befd03afd4fcf25082e25300bf59999f069df1a33e279104378c375777c3cd2c34bd50abb48107a7f0448f83eb6d4ecb4be16a96d61ba02cc4c3a25bf00404df2876d1347744617d6b5053dce5cf9a7e668858c68ecaa3f5f45673067f8d18b96cd1544f6d65ab75f3506183a5b9c40c3d6976bc17d0543ba1b035384b95a84469cbef7a153527e2596034c4c928703fae6142ba0c305931f832e997e95d8e449e2c8869d91a44122a99aed6cedd7feebaccdf4561d01988bb11f16677ce682ef79bd516bca6896e94713bd4811e244cb50f3df929e354a058a68f045613d77749b0b8f836ce88634fa1accdee9a73ad5c947b33c786f14d5a1c2aa12f9b953d9d6490c1021cf02e6486dc33960d18308bc162a6089848d92cc87bbf4bd4b152e6a7fd0ea0deee070d26aac62cb7de8fb3be0d87bafe038bd34e31d48c01b6f874026801479de73e730ad719247a8a2a020edd5f92af01cb2337a482da08413377b780b307475d3d197e8026433a254888e2023ed341cedb46c636e36e76ad25493511877b24ae50c74194029e468b115a4e8d385696b40422f56f94c2669f58340f74372194e4756fe14918de3c5cbfe9c66c359c64c5462191f6daa15a3d03926a6dd02eb5ca4b4a9c6f56b9022eabe482253568f180056845f8ea48a0c0217f31eb26e2c5898f6dcdcb3cfa4eda5184205ccf0f0ba18ba4970ace745c760527b0fb39a08804d784d2e63f65407817a7921639b3fa8db8ee66462de788a10ea2f25dadee02b158459135a1663d37294e659862adcf849235b5606340139d63358a4c55411fa474e5dc835591a904ebd01cc04b2774c7a0d11bd150bfefc0492706beb15c85ff83ae773863dc74a847d0695abeda994c95c951d6f7e910675a05d98eb7c0dbe9be20d6492251bd42f906b3cce7a31c5173136a9c8507a325b3872c82047db814205576d154635ce405e18dd50201c589d8cbe2e8c9a6f7f5c9903d16d99b48dab99783159c9365677a6d097fd5bbec62479877d3fc3b6a90d3da669c09c213b9e06f82c1ebf7563bf782c15765b5998992797e0d8935e9531dcc25526dd8abf44b30d206f55d09b910c0e875395e0dcd6e6fb37da9d2df3c6821292a3bc74b0bd5561ddfec869042a30affd5968cb53eb581da075dcf313633d434e2834ffdb4c0f9f8b1be14dc336cfe910f7db3f027e7a15061ddc36818a22b27ad4f675ed71f4c0a8aacc64aa45e2b4c293683388dc68eefce77fb9dc9a059bc741702afc7a01b18136048b5c366bd0d52aad62407b6b6fb6eb514858a5ac47deb83c10092cd28c2658c15b47e843757f9f8ac5ca4905cbc6240dd4a5f03a3574b082b03cb3f7eab927cea1a6924207fce678312418ab0b07e90a3a94fd3b8ac908274017773a2e6050c53d11e94f6cfd530cc29b211157ef7f80d8b3bb066640b7044f2f6487c40ea432699ae9a3f5d1c2d0e33e9f7de9b3fd72413d4055a5c57cbf3603c7952f2d9b211c36042d166221483680c2d54880805ce4b1ad211d7cb1191da908f3aa137d66ddbd3c2d76b3eb0f8ac74b9e7aaf4ea5e9ce00af1d1784fe2f3693e8f33669a90bef5d090926dda37f0ffe6c13f68389bc9fcfda3bd81cb9cc170b715f4873025ca225bd50f1dd858154c2bd6a66569a26859384b9991a73c8028f286d3bcbadd884c2b2be04e3b43b0c0dcf52e8017e99ab30232af905cd42005ec61c617211b7696f5cdf42d43f23b6b25455839493cc6042844f6c9f0b841553a90647c6634bffac2e62249158a17262afbcf6909890ce53fea6ca12994280db7f3a254fafad215147c494cd4163be7bfd8ba57c3de6e746832c372b8c0749a6364e7c3c477a7044001da3213b755a8d4f126ef141da1973aa86e70e5273c487bb01573005c0a439c93683d80aa1a6d090d472b6cbfc1f89fe72ad9175cecf7a58bed9f51f418aca0f3660ad65cb062d9f20cdc397acd2716fabacd352643c55603a12ceec8de6d06fd78530d81da77f1921c5257615bfdf68fb8926cd60dd5462487647945d5d558ca5b1744986367ca43e8b07f22f52a7852d82fb6991bd00de67fda47628df8df4e5ce6149462e793db2f3e12bee416f0b1420c2ff2badc863e58b882ff002cc13597a1a014bff70b35ff1990ecbf19be40d2a60b161de54fec605b7ebe08901d96e3654d8638b96a7455e331455ad5b86bc75178d8e27a666a6b3641de489294e7002af6cb01ff4a13e378666dc77bbded915da6142fc94abbf63343e63c368e097d9f3c0eda4e5dfaa80e808b97bba9019ed98172a062e94af78a51066e5b38fd0457e84a45e3d641cbc4c465c81d07fd4a32fd37992ab5cbcbbfeefdda0ff87d1ccf509d32701ade0ca7fb39e3b07edec88ae5e8116ab192c9f3bf32351dd562ce698a194bc6bcf01871c21625e0c62942aafa3701a1f6fda983413e17c6bb0ac0b366a79901924d4fb876115e8b9c9dd02882d5051afc88636063dde03fec00ce1a65443fe5b22ca3c15bea5938785bc73fdd203db27edff1b9f61938ea449e8f0deabcd7f9da7d6d774418710ac2cc27403a6d8c241a308b76fea8dc4fa3ad980b44b34307bfbea4b57307e370d78bb0f1e238203b90af904aad25678962e036a7e8be3b59c5192400bc4fcc7b20fbaaa733651b9241ff4ea20953a1ab37f34d72f0bc5a5f3ba3a1bb69c07ad68dfb70bd185de5a948be048f3c6c6a081fe22f5dea53df6e1bdbbbdfdd909415b766ee01f78de5ae2130510c03057d8043e61b4934ff551b77f8bd36b2802bd405ff3be5c67711f152aa906a66dbc2c6d32d331807ab99db9403dae2fd0f652ec076d7f5d9aa6def0534793d80547e648815f1dea95d4df6ac19dabac2bfdbd7cfa4933bf1721a860a39901d0630c0b102d3720bd7418807f5669071dbec43b13d1dce46a7058de4e05a58b5d9d21151591fb23bd59c551f00496f9e35e2becc01e5bac7fdfe90c946187727b47334a5a66f2d5006a22f2c718fc821366c3e26ca348642bd05a38a462575a2bec4dfe9120460f82e6b1e860697e380e863295917ff45c64ad237c1caa7dae399b1520fbe8e256788195c30bd2c366afc03e827f5b03fd672191d2a29110ffec619c7231e35062b0fd1dc42a8c93ed2989bc02681e2c09cbcd5623f666f830f3c21dc63d2095723300c5ae7321d6f55cf2ef9cac31d60314fa0d54ea65fc2c9dfd81e5dacdd4528920c1b87cd12db74776304fc42519fd6c7bbc8fe88750c9aedf7ddb0399e0e1d543c39d67622ab53332c1086da457e6d43d9e37e059ee9d1aff2b3ffbbfed035ed40071f312f12cec6385eaeee2a473511dab651a763a9d27c1522aacdd0ff1f0c3de442f5e9dad2110eacac006dae0b704354ae0c6349bf3a6f5683c4594270fe94ff7e07b49dbabb2fcfa2b639449a66ba9039b6920ee128c4b3cc07af0a89798ddaf7806f5c4eeb7c222a9a6e7f089fa955eddf4d76e490648d4a072c582794ad73e2444d11cb4d9295e81ec9dc39902b631e42f66c47253947f819cf55b05917359ee3072beccfb6f86a5e42c66f8115b5a3a536adabc13a3718acf37b4a852f0ef02a613fa05974edd6c49adf3db678ba3cb71f1fdf79f4e448e35d9bd4d51cd640f646abbe1a18cbe2b07483d495652d8b81078d122ef6f3e3b40e5d8518ddb47782df81e7e01421747593f3aadf5b2f0c53ab6c9323459ce6c3df08f1935ed0636a821e6b9257edf24f600cf09226c3ee7c8507e103d2bfaf807379854cf84a49149cd424ac7e2094a0939fe9768b79dfd86069778dcd8129c269741a36bbda9082263143c3e791b5b1c17708870a57200ff79611c12021c999c7bf86aaced6c77da86fac50cf8a577f8e6f162d3738b908baf0cf902d7ca7ec7ec10ba5afb16ab6257754ab4e935ef75f959f8290d8ff45bdebc49e22c6b6f884a94f89dd4672cfdca1aaafa9612dc9ebc9ee64a3593802395f05b920970c0ccac5ef0e92bb6306f6f1b77a3a1a652ba3fa57a9385c3caf7a55e8e0f77b9dec0798b3e0ef4d5fa9f05c5d4027c0b6011440ad26ed2c5bd645a961c0ff72cd51bbbb86b7fae2fd1f2f1fe3f72841de3863b5d0ac5c5c59d8761c0b626f0826905e7e602dcbfd3a1128d93b0d14589af4fee0bd5f2f774fe8fe6d84175f7ddb9271c88d2a7dabab0feb2f2fafeb7b6f530a9f86f4ed0c82f42cf8ad59e6925e85b0e183456b4d4c0aeacaa81f6ecc223747d330caff7ce22ac667a91ca7524fb1c1ff6daa2cb53f6ea674abff60d032e1311827c535e868fcc4079f195f1a9a0d02e80f2d5c88586ea10bd741c14c6025788c48f9decb25c046c0310e3df4695a21135d9bd8869d851305ad974e08b6d5e804561a72b1fe5a723e17f1c23234358054536fded63f44da67249fd861dae0b37719c99693f296569c1e9778406caa7d5fc6dc34de56bd16e502d6aed6376731f872ff72379a1c3e0e99d7db71253cd3378bed839c53a0843537232e51b89b133213c65b577e419e3a073100f80da85284f99a14a7f92f6ae64e9938d4f26f861ba7e95a8aff567b7f52754cd23f4f5cfb33e4c550770413978a0446d8e2be91a173aa085ac9d211cbce7ade1d4c96b0cd1f291548917effea13283c3bf3e251ab75f9240c8ea0d71e01788189929c554b4fe29fc66b8e2d08cb87ab14cc5b850a7019857c985005b2cdf7638ae628e4fe3717cfa548ce30f21100999473f8c9374195d3918e5775e396da13f6f53496f4a906ccdd6724d1c7ea6685202a94cb20d6e448de1bfd309f0546658f595e890200f7100962cf38004cc8f8a50958736bc369366ce0901d1b9e236ebae2022d200705bad53d910df689d3f2419cc9362be1c449c04ccdf56c162e9fcc3dc034c7120313ba016f9efb7b2ff1b7f921e900aae7c6707e3ed9cba74d0c0526ae2a0dd2a2cc57a92e765f767ab72a0aa2052ca88f411f29ee211ffafa0c6d68403cf2cf3fa7426bf2ab4cd8e2d379124b776e2d4fa1643190ec840173a518ce64abded5f3a5cf1b7acf07cdedf4f0dd9c3cdc403cef22ba9787db62b119099a7d3d084fdb67d187821badd23cc386c12efb15c93694b2d00e35da0eb853e94634f737e26e4b130035cc21e3f6ab46d7264dbdb9dfef35da2b2b71e149811f2e2c7cda4e336ca14dbd0907e1c693c6b4d2ebd2fcdec236c9a890690f89bc62ff2b6bd1079befd3f2f496cab2ed2c2490cb07843a7ab6b82fb0cf25e74b0627761c1e899abf9a890526341a0cee8f79acf1374e91a9960651570bbd92f3705e627780afdcdfc51d2d9424dca25524436c57a69d0c44d96673e83d0f3752ebdc66deda901a2b2b94bfad245843284bc5087c7250b82a972684092db37ed9dae02265cf700842f69a949b763a1d39479887547f53c7307ea42597f9217c1abf33403a986fc0068d6726ce2f12dfa88afbc82c1fb0b2583630a4984de927b159101c72fc1b3ede7f2630d0f949024bf346cc97e06d31077ad9b4d753ce9a64803de32d729ca059a55bc30834f6f88c5d4d7bb337ecf4d3b004f25270d7fe45507aee99d123eacc840b04fa9ba16aa81e305ac963ac66db2d7e2b68d72ca5c6e3215826bfb08a07571ddd0078ba8b6c6b30bb413cf56ee39eb68635c63a61717ee9d836f33746a1b2f9d5895857858b9979b6d5e34419134ca5ae4aafc2ff101007469a77ada2c61a17f881dec6e32a9388a69d09bb5563ec7762b51a3a86e2f489853c448553cce598952205a8e36f91d4010b657957cfb274d96e671e88293e6d46b26152f5938727d39bf76f9c3344cad5456740ff0225b65547ed290cec15f33b051eeef05a9ba1234fe526ccfb2a6c5c93e02a6adf43b0b61c54fabca863c1aa7775b661d6d6965483de21bb8e555eda1f09b3d9907b60f24be396a81296f8cab8bb87c85ba437860d004213c1cb12a9eaae9a597f7e551939d4aa59bd9264655100461ab1ef2db3f88aba22500dba48a6e479907a3c3249087259030c8c995d381c8a28da84eb738f3ca801f53732bcc409f01608d87ca265f367e042ed99a522a7eadf09e73e99441462b02c34a0d24d1eb228587f49c8c8a6c611e9520aa4c426a47befecf19e97d02629165ca17abc8bd62ee9d236efa1df979c53cef44b82bb42581deddf09fd4a0973ac6dabc4ed4f6d97cffafa0f10ab2ec18810aba8b0d6816c2b97e4647aa0305258b11e6fae55d71887811fab50036300a7db4cd12b03e86c617ad84c2d5771340440eb162aca3de6df7afc2d4da55b3b7bc29598728fcab967f7a22f225dc23f320d5f24e9696edffe8c48d0d3f728f36cd2e784a505ed78d8a5af251283d7f64d045efb45bf314d958ba30507c6241ea38ef0e7ba4285d236d5003a7eff6ae6615a074c9524115ed9df763ee4663aed527026cc8de7f3bc9b14dc763d075d0fff72476208cf0dc60d8812a77170ba29934d8dc792fda9b97f765c4a408232337d1a0d4ce1b9958719a6722765d23297a70035d76ef4d178e0e3a7c047f9652335cd84ca2ec6d455a4c29c29b9c04a1984b3b3463c9bf134b2e6f27ceed78e595510b748b26b2be458a3f99a7fb4271347e1365bb433a9a3fe1f1742b1f8e6d3927bdd5836a55bb81ed55446b44bdf9b7371879d777dc0d16d074e9824bd418f804597daffb28eccde1e4de91c4c6aaf5425496542d759c97aa0af98b6f9c4231ed92e7b64cf70ccbb895bcb790d3f7f590faed571fb2008232bdf27e42882b374016910f16d1c154e97c84b1d14a87c7d5924c0081ced6c031166833e2779fcb86419107a2841723af02e164ae8601ba163d799634eeabfb63b3c0b312b930b364e9533ac0c8e24f5b1c065bc9a853ebf177846696ce2700b051a02630dd327cfdabcfae05e0ada505c850db3afdaa810cf72a67119a6dd3ce35ce03e1b70764e24860065eec34ab4fbafbb22b4e978ab5fb57b6f57e71bd14a41916aa5de3d70e85cf3e68a629275350fb82249953aa186c7601379fe78a6fddf5290bebe8b081f3674ece5158fcc68165f43537fc99f2bee48b1801fba63c382c78a4d9ec2607395f7ba19f0e04a9a4c009b19fa6bff6aaa5a7f4d3bd14793d68822eb4144c04425d9a0afe1ff8320592dcc3f63fe750999db9fbb26840df0c6eaa9e053da8adc7e0e2977fcebf94be1397b661ae6cfa0e8be1567a01a17e916409922deae1f005e1d58959b7f4b594043d2564a37992735507631dec4faf6ec3f652781e799c7640e6a7acabb4f8243fe699efa2598f5a64ae1d31ba5ee2cd3c31511bed91a58327a767fe0b4654f8acd51f94504c3dbec19fe0fa843c11045ef3d54e76693b9ac963505df01c14471a7639c3d863ea5bfcae7b70243751df557b1876ccb072650f626e8cea23b42279812dad7433fbb65730fde1ac776bfe40536d2acd4da5674a0b3dc65775d5d5d017cb160e6a496ce492b63bceeff61dcfdf882ec8ce6dcc2e1ffda0659a79bda8bd40286b5b547e29d5760804f06d1b87eea0ecee3430de4998e2e8805a25adae237138fa800d341c0e68241778ca9e497333f8938bffe1c4c8e85345ca473b58f4ed9a138bdced6cf18799dbfab2b81246b540abe38033727be93472c5bc24109530da4fe41bd876c2a57e7cdcdb5068125e39bb389b1052172234655961c421eab762d603cf2f295c9603e96efa15abbf9e5047b52590f98258c339ef48276028ac393a67e0cff15021875eb06db46d5b437c40d61fb9fa029f29153a0fa2ba9068b307d9a79cdc10fcdc60a86982265b483512667c6bbcb61d329cec2257a07b91f4b57348fd2e4f79bf836c29fefc7a75befd1ce008ab4d48df631230f1afe468ebc8e12ad3cd65afd53ac5786ee6a49938d8fd4ecbcce826cef4db81d30fcd16ad86e0f3155951aade8ebc824226430d6d6f01b95cbfcdad7628b11d8a980b12daa88a36a589b9aca577cf07afcd87b901d617de3a8767ffa7820e004584d64cf5280c8d2ded6e2e517541d21adeaeaa7e72edbbfccb1e42743e019afef81e840ca6a5471701b89133d5e3fac5ddb408a244c619b104b2b65df8af030e52c12441c9ea388a985ca04502d94e1c1db290baa2c6ee21a6a8fcdd3c46d4ad9b073af5c5c020845817444987f7f73be40bbc5654bd6cdf34241f0812c5a1065745ff988140154dfb9da0a16eade0814b75ca086df10e12508e9d69cb97a33465364e5e12d768ecb716bd7d06c4f1966cb86b259c3b462a463be29a08fee7e1e004520d6cd4a3a5fccad9c33660c9d2267cf7e3eb2c584d209727f25454925269f1591bc7a87e9dff66097c562edeed6a2029eb99165664c5876a023fe17ca05d0da0245d3a95f80ffd6ff4a7ff29883435c33b2968eac6c6d046aeab9aff704e4fe7a4fe7021c7fb233259ed089fe4623c172798a6870befea1be6fe1d1f53cabb4e1c3e21b376b28c4c8258bb5715550811c0355a1daaf68181131acf0d5eb15e8cd09ebeaf64f45c2779aa17a73ccff930f63e50d0729b7a5ba9a2e9cc1916ab6e826a13dc863bda3808671ceb5cc5f596375da6e10ec05450ea80b6d550a9f7af04704eb10f628205ec1a294c109fa8a29f24228162ef464fc2a70677ac36c57b630f43c8224b4308534272711e4d28497473e930505c19fd66bf68b86a5db871ad573419869caa46ab6e7e539edcdfb04628b7b119e00", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4}) 629.015351ms ago: executing program 2 (id=1900): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) syz_io_uring_setup(0x27e, &(0x7f0000000200)={0x0, 0xf683, 0x20, 0x2, 0x20f}, &(0x7f0000000100), 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 155.347874ms ago: executing program 5 (id=1901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigaction(0x2e, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, {[0x6]}}, 0x0, 0xd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x3ff, &(0x7f00000000c0)=0x0) io_submit(r5, 0x2000014a, &(0x7f0000001840)) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) 128.807857ms ago: executing program 7 (id=1902): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r2, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r3 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x34, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) read$dsp(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18cb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x32315241, 0x0, @discrete={0xfffffe01, 0x6}}) 0s ago: executing program 4 (id=1903): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0xd9) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): has no interface number 0 [ 537.439571][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.455486][ T5871] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 537.467395][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.480629][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.482908][ T5830] Bluetooth: hci3: sending frame failed (-49) [ 537.498152][ T5134] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 537.503668][ T5871] usb 6-1: Product: syz [ 537.509028][ T5871] usb 6-1: Manufacturer: syz [ 537.518821][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 537.528638][ T5871] usb 6-1: SerialNumber: syz [ 537.529640][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.547275][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 537.556356][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.564779][T10816] Bluetooth: Invalid byte 02 after esc byte [ 537.586840][ T5871] usb 6-1: config 0 descriptor?? [ 537.642419][ T5871] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 537.700620][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 537.817382][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 537.821704][ T5871] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 537.852385][ T9] usbtmc 5-1:16.0: can't read capabilities [ 538.065501][ T5871] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 538.791334][ T5903] usb 5-1: USB disconnect, device number 17 [ 538.829248][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 538.841455][ T5871] usb 6-1: USB disconnect, device number 9 [ 538.866560][ T5871] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 538.920932][ T5871] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 538.957939][ T5871] quatech2 6-1:0.51: device disconnected [ 539.170227][T10857] netlink: 'syz.6.1065': attribute type 2 has an invalid length. [ 539.870455][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 539.964881][T10868] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 539.980496][T10869] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 540.084548][T10870] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 540.094762][T10874] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 540.661764][T10879] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 540.670685][T10879] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 540.682354][T10879] overlayfs: missing 'lowerdir' [ 541.118063][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 541.136254][ T25] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 541.167950][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.129007][ T25] usb 3-1: config 0 descriptor?? [ 542.258641][ T25] usb 3-1: can't set config #0, error -71 [ 543.061853][ T25] usb 3-1: USB disconnect, device number 17 [ 543.567789][T10893] all: renamed from bridge_slave_0 (while UP) [ 544.078901][T10919] netlink: 'syz.5.1078': attribute type 2 has an invalid length. [ 544.671950][ T29] audit: type=1400 audit(1740663484.372:1855): avc: denied { read } for pid=10923 comm="syz.4.1082" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 544.771951][ T29] audit: type=1400 audit(1740663484.372:1856): avc: denied { open } for pid=10923 comm="syz.4.1082" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 544.837119][ T29] audit: type=1400 audit(1740663484.402:1857): avc: denied { ioctl } for pid=10923 comm="syz.4.1082" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 547.155428][T10984] netlink: 'syz.5.1094': attribute type 2 has an invalid length. [ 549.092231][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 550.061465][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.119153][ T25] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 550.124322][ T5903] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 550.162824][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.344630][ T5903] usb 8-1: Using ep0 maxpacket: 8 [ 550.386182][ T25] usb 6-1: config 0 descriptor?? [ 550.392637][ T5903] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.401535][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 550.946154][ T5903] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 550.956467][ T5903] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 550.966442][ T5903] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.979450][ T5903] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 550.988970][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.308729][ T25] pwc: send_video_command error -71 [ 551.314368][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 551.322092][ T25] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 551.333151][ T25] usb 6-1: USB disconnect, device number 10 [ 551.569825][ T5903] usb 8-1: can't set config #16, error -71 [ 551.622323][ T5903] usb 8-1: USB disconnect, device number 7 [ 552.415482][ T29] audit: type=1400 audit(1740663492.112:1858): avc: denied { block_suspend } for pid=11036 comm="syz.4.1106" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 552.480901][ T29] audit: type=1400 audit(1740663492.152:1859): avc: denied { remount } for pid=11036 comm="syz.4.1106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 553.209518][T11056] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 553.218415][T11056] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 553.230267][T11056] overlayfs: missing 'lowerdir' [ 554.658573][T11090] netlink: 'syz.5.1116': attribute type 2 has an invalid length. [ 556.713022][T11125] syzkaller1: entered promiscuous mode [ 556.718582][T11125] syzkaller1: entered allmulticast mode [ 556.820717][ T29] audit: type=1400 audit(1740663496.512:1860): avc: denied { map } for pid=11131 comm="syz.6.1125" path="socket:[31602]" dev="sockfs" ino=31602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 557.846580][T11148] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 558.416409][ T29] audit: type=1400 audit(1740663498.102:1861): avc: denied { create } for pid=11158 comm="syz.7.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 558.457683][T11162] lo speed is unknown, defaulting to 1000 [ 558.640448][ T5871] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 558.793513][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 558.813098][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.844613][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.870730][ T5871] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 558.897446][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.921377][ T5871] usb 7-1: config 0 descriptor?? [ 559.208663][T11129] syz.4.1127 (11129): drop_caches: 1 [ 559.348808][ T5871] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 559.465735][T11162] syzkaller1: entered promiscuous mode [ 559.468324][T11038] Set syz1 is full, maxelem 65536 reached [ 559.493992][T11162] syzkaller1: entered allmulticast mode [ 559.531204][T11185] lo speed is unknown, defaulting to 1000 [ 559.551315][ T5871] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 559.969126][T11194] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 560.542667][ T5871] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 560.598828][ T5871] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 560.949328][ T25] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 560.981200][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 562.250520][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 562.329684][ T29] audit: type=1400 audit(1740663502.012:1862): avc: denied { write } for pid=11225 comm="syz.6.1147" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=35214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 562.355326][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.463957][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 562.487951][ T45] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 562.496794][T11233] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 562.505761][T11233] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 562.511389][ T5871] usb 7-1: USB disconnect, device number 13 [ 562.517347][T11233] overlayfs: missing 'lowerdir' [ 562.552118][ T45] usb 3-1: config 0 has no interface number 0 [ 562.568617][ T45] usb 3-1: config 0 interface 89 has no altsetting 0 [ 562.612051][ T45] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 562.657325][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.909117][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.927072][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.619962][ T45] usb 3-1: Product: syz [ 563.630693][ T45] usb 3-1: Manufacturer: syz [ 563.635393][ T45] usb 3-1: SerialNumber: syz [ 563.646029][ T45] usb 3-1: config 0 descriptor?? [ 563.655440][ T45] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 563.674990][ T45] em28xx 3-1:0.89: Video interface 89 found: bulk [ 564.296626][ T45] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 564.538784][T11273] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 564.547771][T11273] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 564.559461][T11273] overlayfs: missing 'lowerdir' [ 565.193982][ T45] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 565.203929][ T45] em28xx 3-1:0.89: board has no eeprom [ 565.282280][ T45] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 565.312129][ T45] em28xx 3-1:0.89: analog set to bulk mode. [ 565.353138][ T25] em28xx 3-1:0.89: Registering V4L2 extension [ 565.381650][ T45] usb 3-1: USB disconnect, device number 18 [ 565.409707][ T45] em28xx 3-1:0.89: Disconnecting em28xx [ 565.580092][T11288] overlayfs: conflicting lowerdir path [ 565.628672][ T25] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 565.667360][ T25] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 565.748014][T11297] No control pipe specified [ 565.781150][ T25] em28xx 3-1:0.89: No AC97 audio processor [ 566.294599][ T25] usb 3-1: Decoder not found [ 566.306177][ T25] em28xx 3-1:0.89: failed to create media graph [ 566.312739][ T25] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 566.408060][ T25] em28xx 3-1:0.89: Registering snapshot button... [ 566.498628][T11314] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 566.507619][T11314] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 566.519969][T11314] overlayfs: missing 'lowerdir' [ 566.525619][ T25] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input25 [ 566.742763][ T25] em28xx 3-1:0.89: Remote control support is not available for this card. [ 566.755350][ T45] em28xx 3-1:0.89: Closing input extension [ 566.766413][ T45] em28xx 3-1:0.89: Deregistering snapshot button [ 566.789787][T11319] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 566.798649][T11319] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 566.810431][T11319] overlayfs: missing 'lowerdir' [ 567.021448][T11323] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 567.030978][T11323] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 567.042659][T11323] overlayfs: missing 'lowerdir' [ 567.164901][ T45] em28xx 3-1:0.89: Freeing device [ 567.179242][ T29] audit: type=1400 audit(1740663506.872:1863): avc: denied { ioctl } for pid=11329 comm="syz.7.1164" path="socket:[33243]" dev="sockfs" ino=33243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 567.224673][ T29] audit: type=1400 audit(1740663506.902:1864): avc: denied { bind } for pid=11329 comm="syz.7.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 567.246145][ T29] audit: type=1400 audit(1740663506.902:1865): avc: denied { write } for pid=11329 comm="syz.7.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 567.285389][T11326] ceph: No mds server is up or the cluster is laggy [ 567.690685][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 567.852145][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.861336][ T25] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 567.878312][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.888576][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 567.912822][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 567.927906][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.941951][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.951512][ T25] usb 8-1: Product: syz [ 567.956286][ T25] usb 8-1: Manufacturer: syz [ 568.015555][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 568.023115][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 568.066430][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 568.085697][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 568.356771][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.363680][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.370641][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.377279][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.383831][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.390455][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.396819][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.403428][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.410435][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.417057][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.423439][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.430061][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.436356][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.442979][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.450418][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.457047][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.467159][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.473799][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.480568][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 568.487224][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 568.530484][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 568.539292][ T25] usb 8-1: USB disconnect, device number 8 [ 568.813418][T11366] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 568.820524][ T5900] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 568.929967][ T29] audit: type=1400 audit(1740663508.622:1866): avc: denied { create } for pid=11364 comm="syz.5.1172" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 568.970625][ T29] audit: type=1400 audit(1740663508.642:1867): avc: denied { associate } for pid=11364 comm="syz.5.1172" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 569.022845][T11367] overlayfs: failed to resolve './file1': -2 [ 569.062036][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.242157][ T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 569.339153][ T29] audit: type=1400 audit(1740663509.032:1868): avc: denied { rmdir } for pid=8318 comm="syz-executor" name="file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 569.360481][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 569.457341][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 569.489769][ T5900] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 569.504032][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.507271][ T25] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 569.514718][ T5900] usb 3-1: Product: syz [ 569.525917][ T5900] usb 3-1: Manufacturer: syz [ 569.530838][ T5900] usb 3-1: SerialNumber: syz [ 569.539669][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.541694][ T5900] usb 3-1: config 0 descriptor?? [ 569.569579][ T25] usb 7-1: config 0 descriptor?? [ 569.611184][ T5903] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 569.620008][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 569.750600][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 569.783683][ T5900] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 569.792249][ T5903] usb 8-1: Using ep0 maxpacket: 16 [ 569.809586][ T5903] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.829374][ T5903] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.840241][ T5903] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 569.850417][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.861757][ T5903] usb 8-1: config 0 descriptor?? [ 569.900526][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 569.910190][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.922631][ T9] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 569.932413][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.944493][ T9] usb 6-1: config 0 descriptor?? [ 570.232342][ T5900] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 570.282309][ T5900] usb 3-1: USB disconnect, device number 19 [ 570.295444][ T25] gspca_nw80x: reg_w err -71 [ 570.300126][ T25] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 570.312184][ T25] usb 7-1: USB disconnect, device number 14 [ 570.329501][ T5903] corsair 0003:1B1C:1B02.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0 [ 570.406272][ T9] hid-multitouch 0003:1FD2:6007.0009: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 570.522921][ T5903] corsair 0003:1B1C:1B02.0008: Failed to get K90 initial state (error -32). [ 570.543751][ T5903] usb 8-1: USB disconnect, device number 9 [ 570.630886][ T25] usb 6-1: USB disconnect, device number 11 [ 571.458940][T11396] netlink: 'syz.2.1179': attribute type 2 has an invalid length. [ 572.217250][ T29] audit: type=1400 audit(1740663511.912:1869): avc: denied { create } for pid=11405 comm="syz.2.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 572.370440][ T29] audit: type=1400 audit(1740663512.042:1870): avc: denied { mount } for pid=11407 comm="syz.7.1183" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 572.486023][ T29] audit: type=1400 audit(1740663512.132:1871): avc: denied { unmount } for pid=8461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 572.723786][ T29] audit: type=1400 audit(1740663512.422:1872): avc: denied { bind } for pid=11421 comm="syz.5.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 572.762010][T11422] tipc: Failed to remove unknown binding: 66,1,1/10398378:1105606967/1105606969 [ 572.812410][T11422] tipc: Failed to remove unknown binding: 66,1,1/10398378:1105606967/1105606969 [ 572.832476][ T29] audit: type=1400 audit(1740663512.482:1873): avc: denied { mounton } for pid=11423 comm="syz.2.1189" path="/280/file0" dev="tmpfs" ino=1511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 572.855601][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.870568][T11422] tipc: Failed to remove unknown binding: 66,1,1/10398378:1105606967/1105606969 [ 572.929050][ T29] audit: type=1400 audit(1740663512.512:1874): avc: denied { setattr } for pid=11423 comm="syz.2.1189" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 572.952456][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.163092][ T29] audit: type=1400 audit(1740663512.862:1875): avc: denied { read } for pid=11431 comm="syz.4.1190" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 573.185250][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.533145][T11451] No control pipe specified [ 573.842755][ T29] audit: type=1400 audit(1740663512.862:1876): avc: denied { open } for pid=11431 comm="syz.4.1190" path="/266/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 573.900491][ T29] audit: type=1400 audit(1740663512.892:1877): avc: denied { ioctl } for pid=11431 comm="syz.4.1190" path="/266/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 574.157596][ T29] audit: type=1400 audit(1740663513.852:1878): avc: denied { bind } for pid=11460 comm="syz.7.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.177919][T11459] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 574.186697][T11459] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 574.200290][T11459] overlayfs: missing 'lowerdir' [ 574.398484][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1198'. [ 574.423233][T11474] netlink: 'syz.5.1198': attribute type 3 has an invalid length. [ 575.202191][T11514] nbd7: detected capacity change from 0 to 67108884 [ 575.219012][ T6258] block nbd7: Send control failed (result -89) [ 575.237739][ T6258] block nbd7: Request send failed, requeueing [ 575.256635][T11510] syzkaller0: entered promiscuous mode [ 575.258415][ T5134] block nbd7: Receive control failed (result -32) [ 575.277198][ T46] block nbd7: Dead connection, failed to find a fallback [ 575.286392][ T46] block nbd7: shutting down sockets [ 575.291524][T11510] syzkaller0: entered allmulticast mode [ 575.292465][ T46] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.309024][ T46] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.317118][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.322479][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 575.326886][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.343956][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.354236][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.362318][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.375961][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.384062][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.393251][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.402615][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.415350][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.423743][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.433320][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.441566][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.455105][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.464630][ T6258] ldm_validate_partition_table(): Disk read failed. [ 575.474657][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.486970][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.498175][ T6258] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 575.513433][ T6258] Buffer I/O error on dev nbd7, logical block 0, async page read [ 575.535855][ T6258] Dev nbd7: unable to read RDB block 0 [ 575.554195][ T6258] nbd7: unable to read partition table [ 575.588010][T11514] ldm_validate_partition_table(): Disk read failed. [ 575.606126][T11514] Dev nbd7: unable to read RDB block 0 [ 575.623935][T11514] nbd7: unable to read partition table [ 575.694097][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 575.726016][ T6258] ldm_validate_partition_table(): Disk read failed. [ 575.755932][ T6258] Dev nbd7: unable to read RDB block 0 [ 575.771607][ T6258] nbd7: unable to read partition table [ 575.790814][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554441, location=33554441 [ 575.812286][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554185, location=33554185 [ 575.831341][ T5871] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 575.871464][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554440, location=33554440 [ 575.888160][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554184, location=33554184 [ 575.934358][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554439, location=33554439 [ 575.971389][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554183, location=33554183 [ 575.994322][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 575.996557][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554291, location=33554291 [ 576.005750][ T5871] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 576.026559][ T5871] usb 5-1: config 0 has no interface number 0 [ 576.035105][ T5871] usb 5-1: config 0 interface 184 has no altsetting 0 [ 576.035784][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554035, location=33554035 [ 576.049412][ T5871] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 576.053543][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554289, location=33554289 [ 576.065970][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.085892][ T5871] usb 5-1: Product: syz [ 576.094935][ T5871] usb 5-1: Manufacturer: syz [ 576.106336][ T5871] usb 5-1: SerialNumber: syz [ 576.113287][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554033, location=33554033 [ 576.134022][ T5871] usb 5-1: config 0 descriptor?? [ 576.147303][ T5871] smsc75xx v1.0.0 [ 576.148240][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 576.191991][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 576.230073][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777220, location=16777220 [ 576.286159][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776964, location=16776964 [ 576.319092][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777219, location=16777219 [ 576.352158][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776963, location=16776963 [ 576.394631][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777218, location=16777218 [ 576.443571][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776962, location=16776962 [ 576.490717][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777070, location=16777070 [ 576.541608][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776814, location=16776814 [ 576.580855][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777068, location=16777068 [ 576.624964][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776812, location=16776812 [ 576.636483][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 576.719531][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 576.733489][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388609, location=8388609 [ 576.760861][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388353, location=8388353 [ 576.771592][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388608, location=8388608 [ 576.784882][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388352, location=8388352 [ 576.795923][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388607, location=8388607 [ 576.806449][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388351, location=8388351 [ 576.817133][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388459, location=8388459 [ 576.827589][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388203, location=8388203 [ 576.843640][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388457, location=8388457 [ 576.850872][ T5871] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 576.858172][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388201, location=8388201 [ 576.878390][ T5871] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 576.896558][T11514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 576.915697][T11514] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 577.419572][T11560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 577.428644][T11560] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 577.440324][T11560] overlayfs: missing 'lowerdir' [ 577.723063][ T5871] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 577.734387][ T5871] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 577.749230][ T5871] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 577.759073][ T5871] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 577.771897][ T5871] usb 5-1: USB disconnect, device number 18 [ 577.830474][T11565] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 577.839225][T11565] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 577.853150][T11565] overlayfs: missing 'lowerdir' [ 579.740614][ T5903] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 579.935371][T11585] syzkaller0: entered promiscuous mode [ 579.942909][T11585] syzkaller0: entered allmulticast mode [ 579.971670][T11594] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 579.980540][T11594] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 579.992145][T11594] overlayfs: missing 'lowerdir' [ 580.001942][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 580.013344][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.066145][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.076316][ T5903] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 580.086414][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.101911][ T5903] usb 7-1: config 0 descriptor?? [ 580.552111][ T5903] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 580.936874][ T45] usb 7-1: USB disconnect, device number 15 [ 584.060510][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 584.231140][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 584.249910][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 584.278829][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.297463][ T9] usb 5-1: Product: syz [ 584.302053][ T8695] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 584.319122][ T9] usb 5-1: Manufacturer: syz [ 584.330314][ T9] usb 5-1: SerialNumber: syz [ 584.338466][T11653] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 584.347303][T11653] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 584.358922][T11653] overlayfs: missing 'lowerdir' [ 584.618622][ T9] usb 5-1: config 0 descriptor?? [ 584.691333][ T8695] usb 6-1: Using ep0 maxpacket: 16 [ 584.698895][ T8695] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 584.708235][ T8695] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.718811][ T8695] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.730741][ T8695] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.740032][ T8695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.748675][ T8695] usb 6-1: Product: syz [ 584.767462][ T8695] usb 6-1: Manufacturer: syz [ 584.772318][ T8695] usb 6-1: SerialNumber: syz [ 584.856514][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 585.049506][T11663] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 585.563370][ T8695] usb 6-1: 0:2 : does not exist [ 585.864048][T11678] overlayfs: failed to resolve './file0': -2 [ 586.640892][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 586.699058][ T8695] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 586.718732][ T9] usb 5-1: USB disconnect, device number 19 [ 586.719000][T11698] block nbd6: NBD_DISCONNECT [ 586.777490][T11698] block nbd6: Disconnected due to user request. [ 586.811208][ T8695] usb 6-1: USB disconnect, device number 12 [ 586.812511][T11698] block nbd6: shutting down sockets [ 587.920471][ T5900] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 588.065694][T11736] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1251'. [ 588.146538][ T5900] usb 8-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 588.166105][ T5900] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.201530][ T5900] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 588.215361][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.227077][ T5900] usb 8-1: SerialNumber: syz [ 588.330495][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 588.360813][ T8695] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 588.446901][ T5900] usb 8-1: 0:2 : does not exist [ 588.462169][ T5900] usb 8-1: unit 255 not found! [ 588.472070][ T5900] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 588.490541][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 588.498069][ T5900] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 588.510137][ T5871] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 588.520026][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.539740][ T5871] usb 3-1: config 0 descriptor?? [ 588.550534][ T5900] usb 8-1: 5:0: cannot get min/max values for control 6 (id 5) [ 588.558304][ T8695] usb 5-1: Using ep0 maxpacket: 8 [ 588.569773][ T8695] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 588.575527][T11746] sd 0:0:1:0: PR command failed: 1026 [ 588.585508][T11746] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 588.593580][T11746] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 588.632326][ T8695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.647236][ T5900] usb 8-1: USB disconnect, device number 10 [ 588.667142][ T8695] usb 5-1: config 0 descriptor?? [ 588.828241][ T5871] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 588.863814][ T6258] udevd[6258]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.039206][ T5871] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 589.054442][ T5871] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 589.065885][ T5871] asix 3-1:0.0: probe with driver asix failed with error -71 [ 589.111058][ T5871] usb 3-1: USB disconnect, device number 20 [ 590.181776][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1262'. [ 590.234146][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1262'. [ 590.470260][ T8695] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 590.498777][ T8695] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 590.530702][ T8695] asix 5-1:0.0: probe with driver asix failed with error -71 [ 590.850710][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 590.850727][ T29] audit: type=1400 audit(1740663530.442:1888): avc: denied { read write } for pid=11775 comm="syz.2.1267" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 590.972693][ T8695] usb 5-1: USB disconnect, device number 20 [ 591.049198][ T29] audit: type=1400 audit(1740663530.442:1889): avc: denied { open } for pid=11775 comm="syz.2.1267" path="/296/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 591.615463][T11793] vlan2: entered allmulticast mode [ 591.655353][ T5871] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 591.680751][T11793] bond0: entered allmulticast mode [ 591.698087][T11793] bond_slave_0: entered allmulticast mode [ 591.712237][T11793] bond_slave_1: entered allmulticast mode [ 591.752898][T11793] bridge0: port 3(vlan2) entered blocking state [ 591.760671][T11793] bridge0: port 3(vlan2) entered disabled state [ 591.778409][T11793] vlan2: entered promiscuous mode [ 591.784653][T11793] bond0: entered promiscuous mode [ 591.792670][T11793] bond_slave_0: entered promiscuous mode [ 591.799356][T11793] bond_slave_1: entered promiscuous mode [ 591.807898][T11793] bridge0: port 3(vlan2) entered blocking state [ 591.814530][T11793] bridge0: port 3(vlan2) entered forwarding state [ 591.840462][ T5871] usb 8-1: Using ep0 maxpacket: 32 [ 591.868662][ T5871] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 591.879942][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.951092][ T5871] usb 8-1: config 0 descriptor?? [ 591.968081][ T5871] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 592.787717][T11815] netlink: 'syz.4.1279': attribute type 2 has an invalid length. [ 594.078177][ T8695] usb 8-1: USB disconnect, device number 11 [ 594.247608][T11830] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 594.256529][T11830] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 594.268460][T11830] overlayfs: missing 'lowerdir' [ 594.546783][ T29] audit: type=1400 audit(1740663534.242:1890): avc: denied { bind } for pid=11833 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 594.566102][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.971198][ T5900] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 595.371900][ T5900] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 595.384587][ T5900] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 595.395580][ T5900] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 595.428487][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.456618][T11857] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 595.847297][T11843] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 596.006615][ T5900] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 596.378864][T11867] netlink: 'syz.7.1293': attribute type 2 has an invalid length. [ 596.501627][T11868] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 597.766816][ T25] usb 7-1: USB disconnect, device number 16 [ 597.843524][T11870] : entered promiscuous mode [ 597.861784][ T29] audit: type=1400 audit(1740663537.552:1891): avc: denied { ioctl } for pid=11871 comm="syz.7.1296" path="socket:[35777]" dev="sockfs" ino=35777 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 597.886484][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.944815][T11872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.958137][T11872] bond0: (slave rose0): Enslaving as an active interface with an up link [ 597.984586][T11874] SELinux: failed to load policy [ 598.122466][T11879] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 598.131235][T11879] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 598.142841][T11879] overlayfs: missing 'lowerdir' [ 598.250959][T11881] ======================================================= [ 598.250959][T11881] WARNING: The mand mount option has been deprecated and [ 598.250959][T11881] and is ignored by this kernel. Remove the mand [ 598.250959][T11881] option from the mount to silence this warning. [ 598.250959][T11881] ======================================================= [ 598.285882][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.550778][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 598.787200][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.852114][ T25] usb 5-1: config 1 has no interface number 0 [ 598.858240][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.888750][ T29] audit: type=1400 audit(1740663538.552:1892): avc: denied { mount } for pid=11880 comm="syz.5.1299" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 598.930553][ T25] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 598.971736][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 599.042216][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.051637][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.059656][ T25] usb 5-1: Product: syz [ 599.067641][ T29] audit: type=1400 audit(1740663538.772:1893): avc: denied { unmount } for pid=8318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 599.069612][ T25] usb 5-1: Manufacturer: syz [ 599.157776][ T25] usb 5-1: SerialNumber: syz [ 599.189482][T11903] capability: warning: `syz.5.1303' uses deprecated v2 capabilities in a way that may be insecure [ 599.238517][ T29] audit: type=1400 audit(1740663538.932:1894): avc: denied { write } for pid=11900 comm="syz.5.1303" path="socket:[34545]" dev="sockfs" ino=34545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 599.361966][ T29] audit: type=1400 audit(1740663538.932:1895): avc: denied { nlmsg_read } for pid=11900 comm="syz.5.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 599.382869][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.049305][T11921] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 600.058088][T11921] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 600.069703][T11921] overlayfs: missing 'lowerdir' [ 600.300557][ T29] audit: type=1400 audit(1740663539.992:1896): avc: denied { mount } for pid=11932 comm="syz.2.1312" name="/" dev="ramfs" ino=34577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 600.336690][T11933] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 600.350015][ T25] cdc_ncm 5-1:1.1: bind() failure [ 600.393036][ T29] audit: type=1400 audit(1740663540.092:1897): avc: denied { create } for pid=11932 comm="syz.2.1312" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 600.529533][ T29] audit: type=1400 audit(1740663540.122:1898): avc: denied { link } for pid=11932 comm="syz.2.1312" name="file1" dev="ramfs" ino=34582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 600.551659][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.625876][ T29] audit: type=1400 audit(1740663540.132:1899): avc: denied { rename } for pid=11932 comm="syz.2.1312" name="file1" dev="overlay" ino=34582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 600.648353][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.716578][ T29] audit: type=1400 audit(1740663540.132:1900): avc: denied { unlink } for pid=11932 comm="syz.2.1312" name="file0" dev="overlay" ino=34582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 600.748344][ T9] usb 5-1: USB disconnect, device number 21 [ 601.175705][T11962] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 601.184564][T11962] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 601.196235][T11962] overlayfs: missing 'lowerdir' [ 601.810528][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1322'. [ 601.850481][T11981] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 601.857480][T11981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.911834][T11981] vhci_hcd vhci_hcd.0: Device attached [ 601.945004][T11982] vhci_hcd: connection closed [ 601.953616][ T4583] vhci_hcd: stop threads [ 601.981028][ T4583] vhci_hcd: release socket [ 601.990597][ T4583] vhci_hcd: disconnect device [ 602.240445][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 602.410648][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 602.450511][ T5900] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 602.509673][T12009] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 602.646260][ T5900] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.806483][ T5900] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 602.995872][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.015098][ T25] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 603.023499][ T25] usb 5-1: config 0 has no interface number 0 [ 603.029681][ T25] usb 5-1: config 0 interface 89 has no altsetting 0 [ 603.041086][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 603.050824][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.058844][ T25] usb 5-1: Product: syz [ 603.063084][ T25] usb 5-1: Manufacturer: syz [ 603.067739][ T25] usb 5-1: SerialNumber: syz [ 603.072491][ T5900] usb 7-1: Product: syz [ 603.107251][ T25] usb 5-1: config 0 descriptor?? [ 603.146843][ T25] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 603.160593][ T5900] usb 7-1: Manufacturer: syz [ 603.165248][ T5900] usb 7-1: SerialNumber: syz [ 603.203600][ T5900] usb 7-1: config 0 descriptor?? [ 603.224131][ T25] em28xx 5-1:0.89: Video interface 89 found: bulk [ 603.224263][ T5900] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.386494][T12019] dlm: no locking on control device [ 604.293177][ T5900] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 604.411827][ T25] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 604.487106][ T6741] udevd[6741]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.583820][T12023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 604.592678][T12023] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 604.604413][T12023] overlayfs: missing 'lowerdir' [ 604.734783][ T5903] usb 7-1: USB disconnect, device number 17 [ 604.789335][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 604.789351][ T29] audit: type=1400 audit(1740663544.452:1903): avc: denied { write } for pid=12028 comm="syz.7.1333" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 604.816254][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.830480][ T29] audit: type=1400 audit(1740663544.452:1904): avc: denied { open } for pid=12028 comm="syz.7.1333" path="/161/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 604.852740][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.549254][ T25] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 605.570760][ T25] em28xx 5-1:0.89: board has no eeprom [ 605.786762][ T25] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 605.800522][ T25] em28xx 5-1:0.89: analog set to bulk mode. [ 605.806626][ T45] em28xx 5-1:0.89: Registering V4L2 extension [ 605.875122][ T25] usb 5-1: USB disconnect, device number 22 [ 605.905765][T12042] program syz.5.1334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.256625][T12047] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 606.364552][T12031] program syz.5.1334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.499935][ T25] em28xx 5-1:0.89: Disconnecting em28xx [ 606.528109][ T45] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 606.536084][ T45] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 606.543690][ T45] em28xx 5-1:0.89: No AC97 audio processor [ 606.552959][ T45] usb 5-1: Decoder not found [ 606.557875][ T45] em28xx 5-1:0.89: failed to create media graph [ 606.564372][ T45] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 606.572282][ T45] em28xx 5-1:0.89: Registering snapshot button... [ 606.581473][ T45] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input26 [ 606.593435][ T45] em28xx 5-1:0.89: Remote control support is not available for this card. [ 606.602118][ T25] em28xx 5-1:0.89: Closing input extension [ 606.608023][ T25] em28xx 5-1:0.89: Deregistering snapshot button [ 606.689598][T12047] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 606.882692][ T25] em28xx 5-1:0.89: Freeing device [ 606.894347][T12047] overlayfs: missing 'lowerdir' [ 606.983567][T12057] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 607.988100][T12066] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 608.000963][T12063] pim6reg1: entered promiscuous mode [ 608.006291][T12063] pim6reg1: entered allmulticast mode [ 608.102030][T12066] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 608.178424][T12066] overlayfs: missing 'lowerdir' [ 608.310467][ T29] audit: type=1400 audit(1740663548.002:1905): avc: denied { ioctl } for pid=12068 comm="syz.7.1344" path="/165/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 609.242084][ T29] audit: type=1400 audit(1740663548.932:1906): avc: denied { name_bind } for pid=12080 comm="syz.7.1348" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 609.980973][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 610.245784][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 612.053503][T12124] kvm: pic: single mode not supported [ 612.053967][T12124] kvm: pic: level sensitive irq not supported [ 612.069774][ T29] audit: type=1400 audit(1740663551.762:1907): avc: denied { connect } for pid=12127 comm="syz.6.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 612.370573][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 612.480597][ T5903] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 612.754113][ T29] audit: type=1326 audit(1740663552.452:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 612.896075][ T29] audit: type=1326 audit(1740663552.482:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 612.919550][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.921407][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 612.947419][ T5903] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 612.970382][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.979375][ T5903] usb 7-1: Product: syz [ 612.990431][ T5903] usb 7-1: Manufacturer: syz [ 612.995070][ T5903] usb 7-1: SerialNumber: syz [ 613.217726][ T29] audit: type=1326 audit(1740663552.492:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 613.248949][ T29] audit: type=1326 audit(1740663552.492:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 613.330572][ T29] audit: type=1326 audit(1740663552.492:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 613.354052][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.600714][T12149] IPVS: set_ctl: invalid protocol: 31 170.170.170.170:43536 [ 613.611665][ T29] audit: type=1326 audit(1740663552.492:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 613.635127][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.892667][ T29] audit: type=1326 audit(1740663552.492:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 613.916147][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.133711][T12152] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 614.498463][T12152] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 614.499121][ T5903] usb 7-1: config 0 descriptor?? [ 614.644061][T12160] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 614.653424][ T29] audit: type=1326 audit(1740663552.492:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 614.735134][T12152] overlayfs: missing 'lowerdir' [ 614.749965][ T29] audit: type=1326 audit(1740663552.492:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc943d8d169 code=0x7ffc0000 [ 614.779177][T12160] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 614.895328][ T5903] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 614.945069][T12160] overlayfs: missing 'lowerdir' [ 615.220833][ T4754] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 615.530547][ T4754] usb 5-1: Using ep0 maxpacket: 8 [ 615.538241][ T4754] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 615.548158][ T4754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.566808][ T5903] usb write operation failed. (-71) [ 615.598447][ T5903] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 615.600138][ T4754] usb 5-1: config 0 descriptor?? [ 615.650020][ T5903] dvbdev: DVB: registering new adapter (Terratec H7) [ 615.669876][ T5903] usb 7-1: media controller created [ 615.688573][ T5903] usb read operation failed. (-71) [ 615.700099][ T5903] usb write operation failed. (-71) [ 615.727183][ T5903] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 615.767233][ T5903] usb 7-1: USB disconnect, device number 18 [ 615.843757][ T4754] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 616.548641][ T5903] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 616.865363][ T5900] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 616.873816][ T5903] usb 8-1: Using ep0 maxpacket: 8 [ 617.187134][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.449326][ T5900] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 617.550447][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.566137][ T5900] usb 3-1: config 0 descriptor?? [ 617.576530][ T5900] pwc: Askey VC010 type 2 USB webcam detected. [ 617.622095][ T5903] usb 8-1: unable to get BOS descriptor or descriptor too short [ 617.631551][ T5903] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 617.639170][ T5903] usb 8-1: can't read configurations, error -71 [ 617.851989][T12211] IPVS: set_ctl: invalid protocol: 31 170.170.170.170:43536 [ 617.981095][ T5900] pwc: recv_control_msg error -32 req 02 val 2b00 [ 617.997876][ T5900] pwc: recv_control_msg error -32 req 02 val 2700 [ 618.052789][ T5900] pwc: recv_control_msg error -32 req 02 val 2c00 [ 618.088575][ T5900] pwc: recv_control_msg error -32 req 04 val 1000 [ 618.113755][ T5900] pwc: recv_control_msg error -32 req 04 val 1300 [ 618.134022][ T5900] pwc: recv_control_msg error -32 req 04 val 1400 [ 618.166750][ T5900] pwc: recv_control_msg error -32 req 02 val 2000 [ 618.299440][ T5900] pwc: recv_control_msg error -32 req 02 val 2100 [ 618.380077][ T4754] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 618.399278][ T4754] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 618.695394][ T4754] asix 5-1:0.0: probe with driver asix failed with error -71 [ 618.710154][ T5900] pwc: recv_control_msg error -32 req 04 val 1500 [ 618.718631][ T5900] pwc: recv_control_msg error -32 req 02 val 2500 [ 618.829874][ T4754] usb 5-1: USB disconnect, device number 23 [ 618.949415][ T5900] pwc: recv_control_msg error -71 req 02 val 2600 [ 618.959442][ T5900] pwc: recv_control_msg error -71 req 02 val 2900 [ 618.973499][ T5900] pwc: recv_control_msg error -71 req 02 val 2800 [ 618.984437][ T5900] pwc: recv_control_msg error -71 req 04 val 1100 [ 619.002833][ T5900] pwc: recv_control_msg error -71 req 04 val 1200 [ 619.025599][ T5900] pwc: Registered as video103. [ 619.036366][ T5900] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 619.057903][ T5900] usb 3-1: USB disconnect, device number 21 [ 619.531036][T12241] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 619.572343][T12241] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 619.624983][T12241] overlayfs: missing 'lowerdir' [ 619.800820][T12246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 619.809612][T12246] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 619.821415][T12246] overlayfs: missing 'lowerdir' [ 621.736328][T12272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.146983][T12281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 622.301241][T12281] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 622.609782][T12281] overlayfs: missing 'lowerdir' [ 622.800576][ T45] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 622.970479][ T45] usb 7-1: Using ep0 maxpacket: 8 [ 622.997721][ T45] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.063391][ T45] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 623.093345][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 623.131827][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 623.165478][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 623.196544][ T45] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 623.229640][T12295] kvm: pic: non byte write [ 623.234554][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 623.257422][ T45] usb 7-1: Product: syz [ 623.323927][ T45] usb 7-1: Manufacturer: syz [ 623.328967][T12295] kvm: pic: non byte write [ 623.337197][ T45] usb 7-1: SerialNumber: syz [ 623.361280][T12295] kvm: pic: non byte write [ 623.368081][T12295] kvm: pic: non byte write [ 623.372974][ T45] usb 7-1: config 0 descriptor?? [ 623.395131][T12295] kvm: pic: non byte write [ 623.414230][T12295] kvm: pic: non byte write [ 623.471898][T12295] kvm: pic: non byte write [ 623.521637][T12295] kvm: pic: non byte write [ 623.543961][T12295] kvm: pic: non byte write [ 623.563323][T12295] kvm: pic: non byte write [ 623.603651][ T45] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 623.680573][ T45] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 623.796022][ T45] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 623.804211][ T45] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 624.140668][ T45] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 624.165353][ T45] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 624.347701][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.354334][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.490516][ T4754] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 624.661868][ T4754] usb 5-1: Using ep0 maxpacket: 8 [ 624.668462][ T4754] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 624.677755][ T4754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.688183][ T4754] usb 5-1: config 0 descriptor?? [ 624.910170][ T4754] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 625.367271][T12319] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 625.376266][T12319] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 625.388002][T12319] overlayfs: missing 'lowerdir' [ 625.747146][ T45] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 625.783675][ T45] usb 7-1: USB disconnect, device number 19 [ 625.789740][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 625.789754][ T29] audit: type=1400 audit(1740663565.482:1930): avc: denied { read } for pid=12322 comm="syz.2.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 625.815234][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.212697][ T4754] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 627.252407][ T4754] asix 5-1:0.0: probe with driver asix failed with error -71 [ 627.280131][ T4754] usb 5-1: USB disconnect, device number 24 [ 627.297220][ T29] audit: type=1400 audit(1740663566.992:1931): avc: denied { unmount } for pid=7746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 627.333883][T12336] kernel read not supported for file /rmdFΌμ (pid: 12336 comm: syz.2.1411) [ 627.353693][ T29] audit: type=1800 audit(1740663567.042:1932): pid=12336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1411" name=726D64461716BCEC dev="mqueue" ino=36807 res=0 errno=0 [ 627.451281][ T4754] kernel read not supported for file /rmdFΌμ (pid: 4754 comm: kworker/1:2) [ 627.654805][T12347] No control pipe specified [ 628.196576][ T4754] lo speed is unknown, defaulting to 1000 [ 628.344850][T12351] syz.2.1414: attempt to access beyond end of device [ 628.344850][T12351] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 628.384000][T12351] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 629.372428][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1420'. [ 629.430548][ T45] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 630.466787][ T45] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.478034][ T45] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 630.570222][ T45] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.653776][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.689242][ T45] usb 8-1: Product: syz [ 630.712720][ T45] usb 8-1: Manufacturer: syz [ 630.797903][ T45] usb 8-1: SerialNumber: syz [ 631.761534][T12360] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 631.935465][T12384] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 631.944318][T12384] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 631.956321][T12384] overlayfs: missing 'lowerdir' [ 632.592716][T12360] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 632.845874][ T45] cdc_mbim 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 632.882491][ T45] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 632.917255][ T45] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 633.090980][ T45] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 633.104936][ T45] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 633.218002][T12399] No control pipe specified [ 633.684149][ T45] wwan wwan0: port wwan0mbim0 attached [ 633.704170][ T45] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 42:42:42:42:42:42 [ 633.853001][ T45] usb 8-1: USB disconnect, device number 14 [ 633.859627][ T45] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 634.129327][ T45] wwan wwan0: port wwan0mbim0 disconnected [ 634.241922][T12408] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 634.317970][T12408] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 634.402780][T12408] overlayfs: missing 'lowerdir' [ 636.904626][ T29] audit: type=1400 audit(1740663576.602:1933): avc: denied { connect } for pid=12432 comm="syz.6.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 638.006856][T12445] netlink: 'syz.6.1439': attribute type 2 has an invalid length. [ 638.760887][T12448] block nbd7: NBD_DISCONNECT [ 638.862360][T12448] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.1440'. [ 639.048345][T12447] block nbd7: Disconnected due to user request. [ 639.102972][T12447] block nbd7: shutting down sockets [ 641.666706][ T29] audit: type=1400 audit(1740663581.352:1934): avc: denied { bind } for pid=12481 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 642.331586][T12494] xt_policy: neither incoming nor outgoing policy selected [ 642.642586][T12499] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 642.651393][T12499] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 642.663186][T12499] overlayfs: missing 'lowerdir' [ 644.604843][T12519] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 644.604869][T12519] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 644.604883][T12519] overlayfs: missing 'lowerdir' [ 646.014622][T12536] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 646.014647][T12536] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 646.014662][T12536] overlayfs: missing 'lowerdir' [ 649.485606][T12571] fuse: Bad value for 'fd' [ 649.514786][T12569] ipvlan2: entered promiscuous mode [ 649.515615][T12569] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 649.516217][T12569] team0: Device ipvlan2 is already an upper device of the team interface [ 651.119906][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1474'. [ 651.119938][T12584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.119967][T12584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.120746][T12584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.120763][T12584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.493478][T12586] kvm: kvm [12585]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 651.494536][T12586] kvm: kvm [12585]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 651.933345][T12595] netlink: 'syz.4.1476': attribute type 2 has an invalid length. [ 652.683428][ T29] audit: type=1400 audit(1740663592.382:1935): avc: denied { bind } for pid=12599 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 653.203180][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1482'. [ 655.762106][T12638] netlink: 'syz.4.1488': attribute type 2 has an invalid length. [ 659.530701][T12674] Bluetooth: MGMT ver 1.23 [ 660.591456][ T29] audit: type=1326 audit(1740663600.292:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12682 comm="syz.7.1501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a44f8d169 code=0x0 [ 662.236023][T12694] tipc: Resetting bearer [ 662.492759][T12701] netlink: 'syz.2.1504': attribute type 2 has an invalid length. [ 663.204473][T12694] tipc: Disabling bearer [ 663.272080][ T29] audit: type=1400 audit(1740663602.962:1937): avc: denied { write } for pid=12703 comm="syz.2.1506" name="fd" dev="proc" ino=39950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 663.326446][ T29] audit: type=1400 audit(1740663602.972:1938): avc: denied { add_name } for pid=12703 comm="syz.2.1506" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 663.346301][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.356917][ T29] audit: type=1400 audit(1740663602.992:1939): avc: denied { create } for pid=12703 comm="syz.2.1506" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 663.421500][ T29] audit: type=1400 audit(1740663602.992:1940): avc: denied { associate } for pid=12703 comm="syz.2.1506" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 667.997399][T12765] program syz.5.1524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.031564][T12765] program syz.5.1524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.041859][T12765] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 668.770427][ T29] audit: type=1400 audit(1740663608.462:1941): avc: denied { append } for pid=12770 comm="syz.7.1527" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 670.673588][T12786] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 670.682354][T12786] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 670.694265][T12786] overlayfs: missing 'lowerdir' [ 672.953446][T12791] kvm: kvm [12789]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x54 [ 672.980683][T12791] kvm: kvm [12789]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4054 [ 674.431916][T12819] bond0: entered promiscuous mode [ 674.437059][T12819] bond_slave_0: entered promiscuous mode [ 674.443296][T12819] bond_slave_1: entered promiscuous mode [ 674.449862][T12819] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 675.908536][ T29] audit: type=1400 audit(1740663615.602:1942): avc: denied { write } for pid=12816 comm="syz.6.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 681.132717][ T29] audit: type=1400 audit(1740663620.832:1943): avc: denied { unmount } for pid=8318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 682.448931][ T29] audit: type=1400 audit(1740663622.142:1944): avc: denied { write } for pid=12873 comm="syz.7.1553" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 682.649050][T12878] VFS: could not find a valid V7 on nullb0. [ 684.830868][ T29] audit: type=1400 audit(1740663624.522:1945): avc: denied { connect } for pid=12890 comm="syz.5.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 685.851085][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.857451][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.566719][T12925] syz.4.1563: attempt to access beyond end of device [ 688.566719][T12925] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 688.580955][T12925] syz.4.1563: attempt to access beyond end of device [ 688.580955][T12925] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 688.594075][T12925] Mount JFS Failure: -5 [ 689.741165][T12931] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 698.072513][ T29] audit: type=1400 audit(1740663637.772:1946): avc: denied { bind } for pid=13016 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 698.092592][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.557895][T13021] ERROR: device name not specified. [ 698.850060][ T29] audit: type=1400 audit(1740663638.232:1947): avc: denied { ioctl } for pid=13019 comm="syz.5.1585" path="socket:[41397]" dev="sockfs" ino=41397 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 698.878795][ T29] audit: type=1400 audit(1740663638.232:1948): avc: denied { write } for pid=13019 comm="syz.5.1585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 700.124646][T13028] netlink: 'syz.6.1586': attribute type 2 has an invalid length. [ 700.865939][T13040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.094409][T13047] syz.4.1590: attempt to access beyond end of device [ 704.094409][T13047] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 704.205633][T13047] hpfs: hpfs_map_sector(): read error [ 705.096092][ T29] audit: type=1400 audit(1740663644.622:1949): avc: denied { ioctl } for pid=13066 comm="syz.5.1596" path="socket:[41450]" dev="sockfs" ino=41450 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 706.550480][ T29] audit: type=1400 audit(1740663646.242:1950): avc: denied { connect } for pid=13083 comm="syz.7.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 706.647795][T13092] netlink: 'syz.5.1602': attribute type 5 has an invalid length. [ 706.687181][ T29] audit: type=1400 audit(1740663646.382:1951): avc: denied { accept } for pid=13085 comm="syz.5.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 707.331925][ T29] audit: type=1400 audit(1740663647.022:1952): avc: denied { shutdown } for pid=13083 comm="syz.7.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 711.700325][T13138] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 711.700642][T13138] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 711.700692][T13138] overlayfs: missing 'lowerdir' [ 712.880467][ T29] audit: type=1400 audit(1740663652.562:1953): avc: denied { create } for pid=13142 comm="syz.4.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 714.635348][ T29] audit: type=1400 audit(1740663654.312:1954): avc: denied { write } for pid=13167 comm="syz.5.1625" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 714.659623][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.889957][T13171] 9pnet_fd: Insufficient options for proto=fd [ 717.744881][T13191] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 717.753993][T13191] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 717.765872][T13191] overlayfs: missing 'lowerdir' [ 719.090747][ T5900] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 719.270457][ T5900] usb 8-1: Using ep0 maxpacket: 8 [ 719.290658][ T5900] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 719.311889][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.319891][ T5900] usb 8-1: Product: syz [ 719.360691][ T5900] usb 8-1: Manufacturer: syz [ 719.375578][ T5900] usb 8-1: SerialNumber: syz [ 719.721591][ T5900] usb 8-1: config 0 descriptor?? [ 720.232144][ T5900] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 720.725000][T13211] netlink: 'syz.6.1629': attribute type 27 has an invalid length. [ 722.421131][ T5900] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 722.438915][ T5900] usb 8-1: USB disconnect, device number 15 [ 723.704164][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 724.185220][ T29] audit: type=1400 audit(1740663663.872:1955): avc: denied { connect } for pid=13226 comm="syz.2.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 724.386148][T13236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.871482][T13247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.642499][ T29] audit: type=1400 audit(1740663667.052:1956): avc: denied { mount } for pid=13256 comm="syz.7.1646" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 729.574878][T13278] vivid-008: disconnect [ 729.593681][T13278] vivid-008: reconnect [ 731.350587][ T9556] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 731.581756][ T9556] usb 6-1: Using ep0 maxpacket: 16 [ 731.666009][ T9556] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.677338][ T9556] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.688873][ T9556] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 731.698230][ T9556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.712964][ T9556] usb 6-1: config 0 descriptor?? [ 731.744026][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1657'. [ 731.757699][T13299] team0: No ports can be present during mode change [ 733.540230][ T9556] usbhid 6-1:0.0: can't add hid device: -71 [ 733.556192][ T9556] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 733.797281][ T9556] usb 6-1: USB disconnect, device number 13 [ 734.151506][T13330] trusted_key: encrypted_key: insufficient parameters specified [ 734.630393][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1665'. [ 735.170713][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1665'. [ 735.560626][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 737.193265][T13358] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 737.202160][T13358] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 737.213824][T13358] overlayfs: missing 'lowerdir' [ 738.856051][ T29] audit: type=1400 audit(1740663678.542:1957): avc: denied { connect } for pid=13364 comm="syz.2.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 739.054051][ T29] audit: type=1400 audit(1740663678.592:1958): avc: denied { read } for pid=13364 comm="syz.2.1670" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 739.077947][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.304163][ T29] audit: type=1400 audit(1740663678.602:1959): avc: denied { open } for pid=13364 comm="syz.2.1670" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 740.523007][ T29] audit: type=1400 audit(1740663680.222:1960): avc: denied { write } for pid=13367 comm="syz.4.1672" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 740.902099][T13385] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 741.190712][ T8695] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 742.312905][ T8695] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 742.322818][ T8695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.331503][ T8695] usb 8-1: Product: syz [ 742.335823][ T8695] usb 8-1: Manufacturer: syz [ 742.341138][ T8695] usb 8-1: SerialNumber: syz [ 742.348229][ T8695] usb 8-1: config 0 descriptor?? [ 742.355930][ T8695] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 016 [ 743.043690][ T8695] (null): failure reading functionality [ 743.051190][ T29] audit: type=1400 audit(1740663682.722:1961): avc: denied { ioctl } for pid=13377 comm="syz.7.1675" path="socket:[43129]" dev="sockfs" ino=43129 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 743.076922][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.220494][ T5903] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 744.433856][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1681'. [ 744.943440][T13416] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 745.081087][ T8695] i2c i2c-1: failure reading functionality [ 745.126708][T13415] vivid-004: disconnect [ 745.168397][ T8695] i2c i2c-1: connected i2c-tiny-usb device [ 745.198166][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 745.322958][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.334209][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.350466][ T5903] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 745.356601][ T45] usb 8-1: USB disconnect, device number 16 [ 745.359596][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.361358][ T5903] usb 3-1: config 0 descriptor?? [ 745.430438][T13424] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 745.439247][T13424] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 745.451069][T13424] overlayfs: missing 'lowerdir' [ 746.246910][ T5903] usb 3-1: can't set config #0, error -71 [ 746.261231][T13400] vivid-004: reconnect [ 746.285735][ T5903] usb 3-1: USB disconnect, device number 22 [ 746.583029][T13435] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 746.592063][T13435] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 746.603837][T13435] overlayfs: missing 'lowerdir' [ 747.223164][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.229487][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.459510][ T29] audit: type=1400 audit(1740663687.152:1962): avc: denied { read } for pid=13439 comm="syz.4.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 748.158757][T13444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1686'. [ 752.072135][T13483] netlink: 'syz.7.1696': attribute type 1 has an invalid length. [ 752.924379][T13486] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 752.933363][T13486] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 752.945074][T13486] overlayfs: missing 'lowerdir' [ 754.110905][ T29] audit: type=1400 audit(1740663693.592:1963): avc: denied { write } for pid=13488 comm="syz.5.1700" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 756.188315][T13527] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1706'. [ 756.197703][T13527] netlink: 'syz.7.1706': attribute type 1 has an invalid length. [ 756.532274][T13528] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1706'. [ 756.573351][T13528] netlink: 'syz.7.1706': attribute type 1 has an invalid length. [ 757.892694][T13540] VFS: could not find a valid V7 on nullb0. [ 758.474116][T13539] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 758.853582][ T29] audit: type=1400 audit(1740663698.502:1964): avc: denied { accept } for pid=13544 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 758.873168][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.457988][ T29] audit: type=1400 audit(1740663698.512:1965): avc: denied { create } for pid=13542 comm="syz.6.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 759.526664][ T29] audit: type=1400 audit(1740663698.512:1966): avc: denied { write } for pid=13542 comm="syz.6.1711" path="socket:[42486]" dev="sockfs" ino=42486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 759.713761][ T29] audit: type=1400 audit(1740663698.592:1967): avc: denied { connect } for pid=13544 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 760.396995][T13565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.292851][ T29] audit: type=1326 audit(1740663700.992:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13567 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd278d169 code=0x7ffc0000 [ 762.137776][ T29] audit: type=1326 audit(1740663701.012:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13567 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f2fd278d169 code=0x7ffc0000 [ 762.481267][ T29] audit: type=1326 audit(1740663701.012:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13567 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd278d169 code=0x7ffc0000 [ 762.505353][ T29] audit: type=1326 audit(1740663701.012:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13567 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd278d169 code=0x7ffc0000 [ 762.529494][ T29] audit: type=1326 audit(1740663701.012:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13567 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2fd278d169 code=0x7ffc0000 [ 762.553300][ T29] audit: type=1326 audit(1740663701.012:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13567 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd278d169 code=0x7ffc0000 [ 762.576872][ T29] audit: type=1326 audit(1740663701.022:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13567 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd278d169 code=0x7ffc0000 [ 763.937669][T13596] Can't find a SQUASHFS superblock on nullb0 [ 764.771155][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 764.771191][ T29] audit: type=1400 audit(1740663704.432:2013): avc: denied { connect } for pid=13591 comm="syz.5.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 765.906999][T13607] syz.7.1723 (13607): /proc/13592/oom_adj is deprecated, please use /proc/13592/oom_score_adj instead. [ 766.453494][ T29] audit: type=1400 audit(1740663704.432:2014): avc: denied { write } for pid=13591 comm="syz.5.1722" laddr=fe80::a8aa:aaff:feaa:aa10 lport=2 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 767.661828][ T29] audit: type=1400 audit(1740663707.352:2015): avc: denied { connect } for pid=13608 comm="syz.2.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 771.488127][T13639] usb usb1: usbfs: process 13639 (syz.2.1732) did not claim interface 0 before use [ 776.139076][T13675] siw: device registration error -23 [ 780.622610][T13700] IPv6: sit1: Disabled Multicast RS [ 783.130416][ T29] audit: type=1400 audit(1740663722.572:2016): avc: denied { getopt } for pid=13707 comm="syz.4.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 783.239223][T13704] Invalid ELF header len 8 [ 783.526650][T13727] fuse: Bad value for 'fd' [ 788.810918][ T29] audit: type=1400 audit(1740663728.502:2017): avc: denied { write } for pid=13748 comm="syz.2.1758" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 788.872910][ T29] audit: type=1400 audit(1740663728.542:2018): avc: denied { write } for pid=13748 comm="syz.2.1758" path="socket:[42911]" dev="sockfs" ino=42911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 791.858119][ T29] audit: type=1400 audit(1740663730.922:2019): avc: denied { override_creds } for pid=13770 comm="syz.7.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 791.983123][ T29] audit: type=1400 audit(1740663731.062:2020): avc: denied { read } for pid=13770 comm="iou-wrk-13774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 793.167477][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 793.186884][T13796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.106407][T13803] pim6reg1: left allmulticast mode [ 794.559758][T13813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.547720][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 795.560814][T13818] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.569518][T13818] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.578306][T13818] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.587309][T13818] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.596176][T13818] vxlan0: entered promiscuous mode [ 795.601339][T13818] vxlan0: entered allmulticast mode [ 795.891617][T13821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 795.900639][T13821] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 795.912492][T13821] overlayfs: missing 'lowerdir' [ 797.024352][ T29] audit: type=1400 audit(1740663736.722:2021): avc: denied { ioctl } for pid=13823 comm="syz.6.1772" path="socket:[44054]" dev="sockfs" ino=44054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 798.483559][T13837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.820446][T13844] bridge2: entered allmulticast mode [ 803.515663][T13878] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 803.524604][T13878] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 803.536502][T13878] overlayfs: missing 'lowerdir' [ 803.858426][T13879] x_tables: duplicate underflow at hook 2 [ 804.351334][T13885] netlink: 'syz.7.1784': attribute type 10 has an invalid length. [ 804.433225][T13886] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 804.941563][T13885] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.949631][T13885] bond0: (slave team0): Enslaving as an active interface with an up link [ 807.681070][T13900] bridge1: entered allmulticast mode [ 807.994012][T13913] Unsupported ieee802154 address type: 0 [ 808.308460][ T29] audit: type=1400 audit(1740663748.002:2022): avc: denied { listen } for pid=13911 comm="syz.7.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 808.710805][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.721168][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.111611][ T29] audit: type=1400 audit(1740663748.682:2023): avc: denied { read } for pid=13915 comm="syz.5.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 810.079149][T13929] lo speed is unknown, defaulting to 1000 [ 810.111436][ T29] audit: type=1404 audit(1740663748.802:2024): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 810.126530][ T29] audit: type=1400 audit(1740663748.922:2025): avc: denied { create } for pid=13917 comm="syz.4.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 810.147422][ T29] audit: type=1400 audit(1740663748.952:2026): avc: denied { create } for pid=13917 comm="syz.4.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 810.539258][ T29] audit: type=1400 audit(1740663749.682:2027): avc: denied { write } for pid=13915 comm="syz.5.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 810.559304][ T29] audit: type=1326 audit(1740663750.072:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36958d169 code=0x7ffc0000 [ 810.559347][ T29] audit: type=1326 audit(1740663750.072:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36958d169 code=0x7ffc0000 [ 810.559381][ T29] audit: type=1326 audit(1740663750.082:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff36958d169 code=0x7ffc0000 [ 810.559415][ T29] audit: type=1326 audit(1740663750.082:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36958d169 code=0x7ffc0000 FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 809.111611][ T29] AUDIT: TYPE=1400 AUDIT(1740663748.682:2023): AVC: DENIED { READ } FOR PID=13915 COMM="SYZ.5.1793" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=KEY_SOCKET PERMISSIVE=1 FEB 27 13:42:30 SYZKALLER KERN.WARN KERNEL: [ 810.079149][T13929] LO SPEED IS UNKNOWN, DEFAULTING TO 1000 FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 810.111436][ T29] AUDIT: TYPE=1404 AUDIT(1740663748.802:2024): ENFORCING=1 OLD_ENFORCING=0 AUID=4294967295 SES=4294967295 ENABLED=1 OLD-ENABLED=1 LSM=SELINUX RES=1 FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 810.126530][ T29] AUDIT: TYPE=1400 AUDIT(1740663748.922:2025): AVC: DENIED { CREATE } FOR PID=13917 COMM="SYZ.4.1794" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSI FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 810.147422][ T29] AUDIT: TYPE=1400 AUDIT(1740663748.952:2026): AVC: DENIED { CREATE } FOR PID=13917 COMM="SYZ.4.1794" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSI FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 810.539258][ T29] AUDIT: TYPE=1400 AUDIT(1740663749.682:2027): AVC: DENIED { WRITE } FOR PID=13915 COMM="SYZ.5.1793" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=KEY_SOCKET PERMISSIVE=0 FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 810.559304][ T29] AUDIT: TYPE=1326 AUDIT(1740663750.072:2028): AUID=4294967295 UID=0 GID=0 SES=4294967295 SUBJ=ROOT:SYSADM_R:SYSADM_T PID=13921 COMM="SYZ.6.1785" EXE="/ROOT/SYZ-EXECUTOR" SIG=0 ARCH=C000003E SYSCALL=202 COMP FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 810.559347][ T29] AUDIT: TYPE=1326 AUDIT(1740663750.072:2029): AUID=4294967295 UID=0 GID=0 SES=4294967295 SUBJ=ROOT:SYSADM_R:SYSADM_T PID=13921 COMM="SYZ.6.1785" EXE="/ROOT/SYZ-EXECUTOR" SIG=0 ARCH=C000003E SYSCALL=202 COMP FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 810.559381][ T29] AUDIT: TYPE=1326 AUDIT(1740663750.082:2030): AUID=4294967295 UID=0 GID=0 SES=4294967295 SUBJ=ROOT:SYSADM_R:SYSADM_T PID=13921 COMM="SYZ.6.1785" EXE="/ROOT/SYZ-EXECUTOR" SIG=0 ARCH=C000003E SYSCALL=13 COMPA FEB 27 13:42:30 SYZKALLER KERN.NOTICE KERNEL: [ 810.559415][ T29] AUDIT: TYPE=1326 AUDIT(1740663750.082:2031): AUID=4294967295 UID=0 GID=0 SES=4294967295 SUBJ=ROOT:SYSADM_R:SYSADM_T PID=13921 COMM="SYZ.6.1785" EXE="/ROOT/SYZ-EXECUTOR" SIG=0 ARCH=C000003E SYSCALL=202 COMP [ 812.988397][T13980] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw FEB 27 13:42:32 SYZKALLER KERN.INFO KERNEL: [ 812.988397][T13980] X_TABLES: IP_TABLES: TCPOPTSTRIP TARGET: ONLY VALID IN MANGLE TABLE, NOT RAW [ 813.312490][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 813.312507][ T29] audit: type=1400 audit(1740663753.012:2170): avc: denied { execmem } for pid=13990 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 FEB 27 13:42:33 SYZKALLER K[ 813.384031][ T29] audit: type=1400 audit(1740663753.012:2171): avc: denied { read write } for pid=13990 comm="syz.5.1816" name="video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 ERN.WARN KERNEL: [ 813.312490][ T29] KAUDITD_PRINTK_SKB: 138 CALLBACKS SUPPRESSED FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.312507][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.012:2170): AVC: DENIED { EXECMEM } FOR PID=13990 COMM="SYZ.5.1816" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=PROCESS PERMISSIVE=0 FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.384031][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.012:2171): AVC: DENIED { READ WRITE } FOR PID=13990 COMM="SYZ.5.1816" NAME="VIDEO6" DEV="DEVTMPFS" INO=938 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:V4 [ 813.485590][ T29] audit: type=1400 audit(1740663753.012:2172): avc: denied { map_create } for pid=13990 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.485590][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.012:2172): AVC: DENIED { MAP_CREATE } FOR PID=13990 COMM="SYZ.5.1816" SCONTEXT=ROOT:SYSADM_R:S[ 813.540013][ T29] audit: type=1400 audit(1740663753.012:2173): avc: denied { create } for pid=13990 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 YSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=BPF PERMISSIVE=0 [ 813.570503][ T29] audit: type=1400 audit(1740663753.042:2174): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.540013][ T29] AUDIT: TYPE=1400 AU[ 813.600515][T13999] ipt_ECN: cannot use operation on non-tcp rule DIT(1740663753.012:2173): AVC: DENIED { CREATE } FOR PID=13990 COMM="SYZ.5.1816" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=XDP_SOCKET PERMISSIVE=0 FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.570503][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.042:2174): AVC: DENIED { READ } FOR PID=5177 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTE[ 813.640670][ T29] audit: type=1400 audit(1740663753.052:2175): avc: denied { read } for pid=13988 comm="syz.2.1814" dev="nsfs" ino=4026533334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 M_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= FEB 27 13:42:33 SYZKALLER KERN.INFO KERNEL: [ 813.600515][T13999] IPT_ECN: CANNOT USE OPERATION ON NON-TCP RULE FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.640670][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.052:2175): AVC:[ 813.686829][ T29] audit: type=1400 audit(1740663753.052:2176): avc: denied { read write } for pid=8318 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 DENIED { READ } FOR PID=13988 COMM="SYZ.2.1814" DEV="NSFS" INO=4026533334 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:NSFS_T TCLASS=FILE FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.686829][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.052:2176): AVC: DENIED { READ WRITE } FOR PID=8318 COMM="SYZ-EXECUTOR" NAME="LOOP5" DEV="DEVTMPFS" INO=652 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:FI [ 813.810473][ T29] audit: type=1400 audit(1740663753.052:2177): avc: denied { execmem } for pid=13988 comm="syz.2.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.810473][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.052:2177): AVC: DENIED { EXECMEM } FOR PID=13988 COMM="SYZ.2.1814" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=PROCESS PERMISSIVE=0 [ 813.873392][ T29] audit: type=1400 audit(1740663753.112:2178): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.873392][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.112:2178): AVC: DENIED { READ } FOR PID=5177 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 813.953132][ T29] audit: type=1400 audit(1740663753.112:2179): avc: denied { prog_load } for pid=13988 comm="syz.2.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 FEB 27 13:42:33 SYZKALLER KERN.NOTICE KERNEL: [ 813.953132][ T29] AUDIT: TYPE=1400 AUDIT(1740663753.112:2179): AVC: DENIED { PROG_LOAD } FOR PID=13988 COMM="SYZ.2.1814" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=BPF PERMISSIVE=0 FEB 27 13:42:34 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_SENDPSMMSG: CONNECTION REFUSED FEB 27 13:42:34 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 13476: CONNECTION REFUSED [ 815.546812][T14019] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw FEB 27 13:42:35 SYZKALLER KERN.INFO KERNEL: [ 815.546812][T14019] X_TABLES: IP_TABLES: TCPOPTSTRIP TARGET: ONLY VALID IN MANGLE TABLE, NOT RAW FEB 27 13:42:36 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_SENDPSMMSG: CONNECTION REFUSED FEB 27 13:42:36 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 13490: CONNECTION REFUSED FEB 27 13:42:36 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_SENDPSMMSG: CONNECTION REFUSED FEB 27 13:42:36 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 13484: CONNECTION REFUSED [ 817.124939][T14058] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw FEB 27 13:42:36 SYZKALLER KERN.INFO KERNEL: [ 817.124939][T14058] X_TABLES: IP_TABLES: TCPOPTSTRIP TARGET: ONLY VALID IN MANGLE TABLE, NOT RAW [ 818.002527][T14075] CUSE: unknown device info "€" [ 818.007608][T14075] CUSE: zero length info key specified FEB 27 13:42:37 SYZKALLER KERN.WARN KERNEL: [ 818.002527][T14075] CUSE: UNKNOWN DEVICE INFO "€" FEB 27 13:42:37 SYZKALLER KERN.ERR KERNEL: [ 818.007608][T14075] CUSE: ZERO LENGTH INFO KEY SPECIFIED [ 818.329009][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 818.329020][ T29] audit: type=1400 audit(1740663758.022:2376): avc: denied { create } for pid=14087 comm="syz.7.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 FEB 27 13:42:38 SYZKALLER KERN.WARN KERNEL: [ 818.329009][ T29] KAUDITD_PRINTK_SKB: 196 CALLBACKS SUPPRESSED FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.329020][ T29] AUDIT: TYPE=1400 AUDIT(1740663758.022:2376): AVC: DENIED { CREATE } FOR PID=14087 COMM="SYZ.7.1849" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_NETFILTER_SOCKET PERMIS [ 818.453409][ T29] audit: type=1400 audit(1740663758.062:2377): avc: denied { prog_load } for pid=14085 comm="syz.5.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 818.473210][ T29] audit: type=1400 audit(1740663758.062:2378): avc: denied { execmem } for pid=14085 comm="syz.5.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 818.492989][ T29] audit: type=1400 audit(1740663758.072:2379): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.453409][ T29] AUDIT: TYPE=1400 AUDIT(1740663758.062:2377): AVC: DENIED { PROG_LOAD } FOR PID=14085 COMM="SYZ.5.1847" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=BPF PERMISSIVE=0 FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.473210][ T29] AUDIT: TYPE=1400 AUDIT(1740663758.062:2378): AVC: DENIED { EXECMEM } FOR PID=14085 COMM="SYZ.5.1847" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=PROCESS PERMISSIVE=0 FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.492989][ T29] AUDIT: TYPE=1400 AUDIT(1740663758.072:2379): AVC: DENIED { READ } FOR PID=5177 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 818.646577][ T29] audit: type=1400 audit(1740663758.072:2380): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.[ 818.690532][ T29] audit: type=1400 audit(1740663758.082:2381): avc: denied { read } for pid=14083 comm="syz.4.1848" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 646577][ T29] [ 818.713865][ C1] vkms_vblank_simulate: vblank timer overrun AUDIT: TYPE=1400 AUDIT(1740663758.072:2380): AVC: DENIED { READ } FOR PID=5177 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.6905[ 818.745046][ T29] audit: type=1400 audit(1740663758.082:2382): avc: denied { create } for pid=14087 comm="syz.7.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=0 32][ T29] AUDI[ 818.767090][T14093] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw T: TYPE=1400 AUD[ 818.767205][ T29] audit: type=1400 audit(1740663758.092:2383): avc: denied { read } for pid=14087 comm="syz.7.1849" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 IT(1740663758.082:2381): AVC: DENIED { READ } FOR PID=14083 COMM="SYZ.4.1848" NAME="MSR" DEV="DEVTMPFS" INO=87 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:CPU_DEVICE_T FEB 27 13:42:38 SYZKALLER KERN.WARN K[ 818.819395][ T29] audit: type=1400 audit(1740663758.102:2384): avc: denied { read } for pid=14087 comm="syz.7.1849" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 ERNEL: [ 818.713865][ C1] VKMS_VBLANK_SIMULATE: VBLANK TIMER OVERRUN FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.745046][ T29] AUDIT: TYPE=1400 AUDIT(1740663758.082:2382): AVC: DENIED { CREATE } FOR PID=14087 COMM="SYZ.7.1849" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_TCPDIAG_SOCKET PERMISSI FEB 27 13:42:38 SYZKALLER KERN.INFO KERNEL: [ 818.767090][T14093] X_TABLES: IP_TABLES: TCPOPTSTRIP TARGET: ONLY VALID IN MANGLE TABLE, NOT RAW FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.767205][ T29] AUDIT: TYPE=1400 AUDIT(1740663758.092:2383): AVC: DENIED { READ } FOR PID=14087 COMM="SYZ.7.1849" NAME="KVM" DEV="DEVTMPFS" INO=84 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:KVM_DEVICE_T FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.819395][ T29] AUDIT: TYPE=1400 AUDIT(1740663758.102:2384): AVC: DENIED { READ } FOR PID=14087 COMM="SYZ.7.1849" NAME="MSR" DEV="DEVTMPFS" INO=87 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:CPU_DEVICE_T [ 818.973645][ T29] audit: type=1400 audit(1740663758.102:2385): avc: denied { create } for pid=14087 comm="syz.7.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 FEB 27 13:42:38 SYZKALLER KERN.NOTICE KERNEL: [ 818.973645][ T29] AUDIT: TYPE=1400 AUDIT(1740663758.102:2385): AVC: DENIED { CREATE } FOR PID=14087 COMM="SYZ.7.1849" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=TIPC_SOCKET PERMISSIVE=0 FEB 27 13:42:39 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_SENDPSMMSG: CONNECTION REFUSED FEB 27 13:42:39 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 13516: CONNECTION REFUSED [ 821.575038][T14140] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw FEB 27 13:42:41 SYZKALLER KERN.INFO KERNEL: [ 821.575038][T14140] X_TABLES: IP_TABLES: TCPOPTSTRIP TARGET: ONLY VALID IN MANGLE TABLE, NOT RAW FEB 27 13:42:41 SYZKALLER DAEMON.ERR DHCPCD[14148]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT FEB 27 13:42:41 SYZKALLER DAEMON.ERR DHCPCD[14148]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 822.232034][T14158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14158 comm=syz.4.1870 FEB 27 13:42:41 SYZKALLER KERN.WARN KERNEL: [ 822.232034][T14158] SELINUX: UNRECOGNIZED NETLINK MESSAGE: PROTOCOL=0 NLMSG_TYPE=0 SCLASS=NETLINK_ROUTE_SOCKET PID=14158 COMM=SYZ.4.1870 FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[14165]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[14165]: PS_ROOT_RECVMSG: INVALID ARGUMENT FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_SENDPSMMSG: CONNECTION REFUSED FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 13548: CONNECTION REFUSED [ 822.674276][T14172] dccp_invalid_packet: P.Data Offset(100) too large FEB 27 13:42:42 SYZKALLER KERN.WARN KERNEL: [ 822.674276][T14172] DCCP_INVALID_PACKET: P.DATA OFFSET(100) TOO LARGE FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[14173]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[14173]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 822.952395][T14176] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw FEB 27 13:42:42 SYZKALLER KERN.INFO KERNEL: [ 822.952395][T14176] X_TABLES: IP_TABLES: TCPOPTSTRIP TARGET: ONLY VALID IN MANGLE TABLE, NOT RAW FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[14179]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[14179]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 823.071197][T14181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration FEB 27 13:42:42 SYZKALLER KERN.ERR KERNEL: [ 823.071197][T14181] IPVS: SCHEDULE: PORT ZERO ONLY SUPPORTED IN PERSISTENT SERVICES, CHECK YOUR IPVS CONFIGURATION FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[14190]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT FEB 27 13:42:42 SYZKALLER DAEMON.ERR DHCPCD[14190]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 823.331443][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 823.331460][ T29] audit: type=1400 audit(1740663763.032:2610): avc: denied { read } for pid=14187 comm="syz.7.1881" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 FEB 27 13:42:43 SYZKALLER KERN.WARN KERNEL: [ 823.331443][ T29] KAUDITD_PRINTK_SKB: 224 CALLBACKS SUPPRESSED FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 823.331460][ T2[ 823.386518][ T29] audit: type=1400 audit(1740663763.072:2611): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 9] AUDIT: TYPE=1400 AUDIT(1740663763.032:2610): AVC: DENIED { READ } FOR PID=14187 COMM="SYZ.7.1881" NAME="KVM" DEV="DEVTMPFS" INO=84 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:KVM_DEVICE_T FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 823.386518][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.072:2611): AVC: DENIED { READ } FOR PID=5177 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 823.471718][ T29] audit: type=1400 audit(1740663763.072:2612): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 823.471718][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.072:2612): AVC: DENIED { READ } FOR PID=5177 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 823.600635][ T29] audit: type=1400 audit(1740663763.122:2613): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 82[ 823.629660][ T29] audit: type=1400 audit(1740663763.262:2614): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 3.600635][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.122:2613): AVC: DENIED { READ } FOR PID=5177 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 823.629660][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.262:2614): AVC: DENIED { READ } FOR PID=5177 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYS[ 823.834314][ T29] audit: type=1400 audit(1740663763.272:2615): avc: denied { read } for pid=14194 comm="syz.4.1882" name="cec4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 LOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 823.834314][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.272:2615): AVC: DENIED { READ } FOR PID=14194 COMM="SYZ.4.1882" NAME="CEC4" DEV="DEVTMPFS" INO=974 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:DEVICE_T T [ 823.907854][ T29] audit: type=1400 audit(1740663763.282:2616): avc: denied { prog_load } for pid=14194 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 823.907854][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.282:2616): AVC: DENIED { PROG_LOAD } FOR PID=14194 COMM="SYZ.4.1882" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R[ 823.946223][ T29] audit: type=1400 audit(1740663763.282:2617): avc: denied { execmem } for pid=14194 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 :SYSADM_T TCLASS=BPF PERMISSIVE=0 FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 823.946223][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.282:2617): AVC: DENIED { EXECMEM } FOR PID=14194 COMM="SYZ.4.1882" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=PROCESS PERMISSIVE=0 FEB 27 13:42:43 SYZKALLER DAEMON.ERR DHCPCD[14196]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT FEB 27 13:42:43 SYZKALLER DAEMON.ERR DHCPCD[14196]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 824.012366][ T29] audit: type=1400 audit(1740663763.282:2618): avc: denied { create } for pid=14194 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 824.012366][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.282:2618): AVC: DENIED { CREATE } FOR PID=14194 COMM="SYZ.4.1882" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=NETLINK_GENERIC_SOCKET PERMISSI [ 824.090719][ T29] audit: type=1400 audit(1740663763.282:2619): avc: denied { map_create } for pid=14194 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 FEB 27 13:42:43 SYZKALLER KERN.NOTICE KERNEL: [ 824.090719][ T29] AUDIT: TYPE=1400 AUDIT(1740663763.282:2619): AVC: DENIED { MAP_CREATE } FOR PID=14194 COMM="SYZ.4.1882" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=BPF PERMISSIVE=0 [ 825.145943][T14223] xt_connbytes: Forcing CT accounting to be enabled [ 825.622483][T14223] --map-set only usable from mangle table FEB 27 13:42:45 SYZKALLER KERN.WARN KERNEL: [ 825.145943][T14223] XT_CONNBYTES: FORCING CT ACCOUNTING TO BE ENABLED FEB 27 13:42:45 SYZKALLER KERN.INFO KERNEL: [ 825.622483][T14223] --MAP-SET ONLY USABLE FROM MANGLE TABLE [ 827.491339][T14260] capability: warning: `syz.5.1901' uses 32-bit capabilities (legacy support in use) FEB 27 13:42:47 SYZKALLER KERN.INFO KERNEL: [ 827.491339][T14260] CAPABILITY: WARNING: `SYZ.5.1901' USES 32-BIT CAPABILITIES (LEGACY SUPPORT IN USE) FEB 27 13:42:47 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_SENDPSMMSG: CONNECTION REFUSED FEB 27 13:42:47 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 13600: CONNECTION REFUSED FEB 27 13:42:47 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_SENDPSMMSG: CONNECTION REFUSED FEB 27 13:42:47 SYZKALLER DAEMON.ERR DHCPCD[5489]: PS_ROOT_RECVMSGCB: FAILED TO SEND MESSAGE TO PID 13586: CONNECTION REFUSED