last executing test programs: 47m36.800897328s ago: executing program 4 (id=547): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 47m36.630911477s ago: executing program 4 (id=552): modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5d", 0x44}) 47m36.346283833s ago: executing program 4 (id=556): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48001059, r2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 47m36.202100556s ago: executing program 4 (id=560): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) lseek(r0, 0x10001, 0x0) 47m36.06717056s ago: executing program 4 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 47m35.857270894s ago: executing program 4 (id=567): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 47m20.522670049s ago: executing program 32 (id=567): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 42m16.602933778s ago: executing program 0 (id=4813): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) prlimit64(0x0, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x52534000) dup3(r1, r0, 0x0) 42m16.031050188s ago: executing program 0 (id=4821): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 42m13.38959627s ago: executing program 0 (id=4855): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 42m12.463678323s ago: executing program 0 (id=4878): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x20060400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 42m12.311266603s ago: executing program 0 (id=4881): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x211}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 42m12.0968845s ago: executing program 0 (id=4885): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000980)=ANY=[@ANYBLOB="08000400640101010800080010000000080001007f00000108000200ffffffff0800090031000000080009000301000018a77aa5a2cc57ebb7c084ac0180986fc2c4e0efd00bcd8e0e2195fb49b8c1463a8087da5749a8ec232d06aa9b4802c74ff67281a150b908a335d641edf1a4aa2d3425d17903e30003fdc7218eaff8b719a4a1de249e025c6d2d9fd02bfb5408646e08e40c665829b4d34f6c2d70b7e43842ef7f418c1bd3d16abe6a7d63f07067c71aec69fbc04de0bbab550d7d35b7509f6a26c86b5b3dbfca21524efae63bb60d38caad425273e46d164974d02944d8bf13"], 0x48}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 42m11.551909275s ago: executing program 33 (id=4885): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000980)=ANY=[@ANYBLOB="08000400640101010800080010000000080001007f00000108000200ffffffff0800090031000000080009000301000018a77aa5a2cc57ebb7c084ac0180986fc2c4e0efd00bcd8e0e2195fb49b8c1463a8087da5749a8ec232d06aa9b4802c74ff67281a150b908a335d641edf1a4aa2d3425d17903e30003fdc7218eaff8b719a4a1de249e025c6d2d9fd02bfb5408646e08e40c665829b4d34f6c2d70b7e43842ef7f418c1bd3d16abe6a7d63f07067c71aec69fbc04de0bbab550d7d35b7509f6a26c86b5b3dbfca21524efae63bb60d38caad425273e46d164974d02944d8bf13"], 0x48}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 36m34.58865955s ago: executing program 6 (id=7749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) 36m33.001604635s ago: executing program 6 (id=7743): socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRESOCT], 0x20) 36m32.869107009s ago: executing program 6 (id=7746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffffff, 0x0, 0x400002, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 36m31.858889903s ago: executing program 6 (id=7747): r0 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2}) 36m30.821234686s ago: executing program 6 (id=7752): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) 36m30.636088012s ago: executing program 6 (id=7754): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x0, 0xfffffffc, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x3, {0x3b4, 0x9}, 0x6}, 0x1) 36m15.480693627s ago: executing program 34 (id=7754): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x0, 0xfffffffc, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x3, {0x3b4, 0x9}, 0x6}, 0x1) 1m37.020639473s ago: executing program 2 (id=13846): r0 = socket(0x11, 0x80a, 0x0) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r2 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() timer_create(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) read$msr(r8, &(0x7f0000000780)=""/4, 0x4) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xfffffffe, 0x0, 0x54}, 0x9c) 1m34.635834562s ago: executing program 2 (id=13853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071108d0000000000a680f4ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x23) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0xffffffffffffff24, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) creat(0x0, 0x72) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x107, 0x0, 0x0, {0x3, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}}, 0x4000000) 1m34.191945321s ago: executing program 2 (id=13855): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r6, 0x0, r5}) ftruncate(0xffffffffffffffff, 0x2007ffb) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) lseek(0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_secret(0x80000) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 1m32.829707751s ago: executing program 2 (id=13858): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x284, 0x7f, 0xe3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xd0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x10100}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) 1m31.371893478s ago: executing program 2 (id=13862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) 1m28.976794929s ago: executing program 2 (id=13867): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x5da, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c8, 0x2, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x7e, 0x8, 0x9, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x62, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x7b, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb6, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa61"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}, @generic={0x6c, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22"}]}}]}}, {{0x9, 0x4, 0x6, 0x81, 0xf, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x69, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885e0"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2c, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7"}, @generic={0x5e, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e90"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x64, 0x22, "54d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e390ff4d8399b71c69deb70ff938756404953b45c193bad68ff74b3f3fb0192880b5bb2913370fcf3e84d1890266b9374fb"}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.235100694s ago: executing program 35 (id=13867): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x5da, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c8, 0x2, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x7e, 0x8, 0x9, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x62, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x7b, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb6, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa61"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}, @generic={0x6c, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22"}]}}]}}, {{0x9, 0x4, 0x6, 0x81, 0xf, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x69, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885e0"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2c, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7"}, @generic={0x5e, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e90"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x64, 0x22, "54d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e390ff4d8399b71c69deb70ff938756404953b45c193bad68ff74b3f3fb0192880b5bb2913370fcf3e84d1890266b9374fb"}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 11.681988735s ago: executing program 7 (id=14050): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x284, 0x7f, 0xe3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xd0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x0) 11.511973813s ago: executing program 5 (id=14051): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001800000008000a00", @ANYRES64=r2], 0x24}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) tee(r3, r7, 0x8f5, 0x100000000000000) write$cgroup_type(r7, &(0x7f0000000180), 0x9) write(r5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x400, 0x360, 0x556, 0x2000, 0xbdf2, 0xb, 0xa, 0x1, {0x8000, 0x569, 0x1}, {0x6, 0x1}, {0x8, 0x36, 0x1}, {0x8001, 0x80000001, 0x1}, 0x1, 0x40, 0x6, 0x6, 0x0, 0xfffffff2, 0x5, 0x73a, 0x8, 0x90, 0x6, 0x3ff, 0x55, 0x200, 0x3, 0xa}) 10.712872156s ago: executing program 8 (id=14053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000004200)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0xb, 0x0, 0x5e, 0x2}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x1, 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x8) mount(&(0x7f0000000180)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x10004, &(0x7f0000000300)='trans=rdma,') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000000)={0x8}) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, 0x0) 10.698204991s ago: executing program 7 (id=14054): r0 = socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getpid() ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000580)=ANY=[@ANYBLOB]) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x7ffd, 0xc5fb, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)="b6b068", 0x3, 0xfffffffffffffffe) iopl(0x3) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000780)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xcefec000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000e2ff65490000000000000000001a00000000000000000002"], 0x48) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x5}) 10.697907288s ago: executing program 3 (id=14055): r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) readv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000140)=""/26, 0x1a}, {0x0}], 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000001000100050000009178000000040000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000040000000800"/28], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000280)="9e165c7921a66f678209d20997465e3fef06b1b9019f4446c774437883077e71aa89cc773b62ad3ced1349fe709a3cad8e178c6d32c8d1cdee7eb7", &(0x7f00000002c0)=""/130}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000000c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x25, &(0x7f00000000c0)) r8 = dup2(r4, r3) close_range(r8, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r5, &(0x7f00000003c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3b, 0x9, 0x81, 0x4, 0x20, 0x7fffffff, 0xff}, &(0x7f0000000140)=0x9c) socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r10, @ANYRES16], 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000200)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x1, &(0x7f00000001c0)) epoll_create1(0x80000) 9.686894929s ago: executing program 8 (id=14056): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002e40), r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe2$watch_queue(0x0, 0x80) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xffffffffffffffff) r9 = inotify_init1(0x0) inotify_add_watch(r9, 0x0, 0xa4000021) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) unshare(0x20000400) 9.549632675s ago: executing program 7 (id=14057): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000005c0)={r5, 0x1, 0x6, @broadcast}, 0x10) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 8.799911824s ago: executing program 3 (id=14058): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002e40), r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe2$watch_queue(0x0, 0x80) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xffffffffffffffff) r9 = inotify_init1(0x0) inotify_add_watch(r9, 0x0, 0xa4000021) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) unshare(0x20000400) 8.746382535s ago: executing program 1 (id=14059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000062c0)=@base={0x9, 0x8001, 0x9, 0x8}, 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=@getlink={0x34, 0x12, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x62100, 0x440}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6tnl0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r10 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xa, 0x9, 0x2, 0x9}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.98244275s ago: executing program 5 (id=14061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)={@multicast, @random="58a4ab044a92", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0xb0, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x400, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "4e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd82418", "80bdd625bd905ba90d0a6927c37cefe3c4b48ef7ded481883e35fd85afe3254b3e1441af5775976715bf29ed4dcc166e", "7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738d", {"fdeca3693c5b2785e92ce602a669b6dd", "af8ff0acae2f2a3d0d0de9d22c2e3cf8"}}}}}}}, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000cac000/0x1000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = gettid() fsmount(r5, 0x0, 0x0) tkill(r7, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6, 0x2010, 0xffffffffffffffff, 0x180000000) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x47524247, 0x3, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x5}}) syz_open_dev$vim2m(0x0, 0x3, 0x2) 6.98173066s ago: executing program 7 (id=14062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071108d0000000000a680f4ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x23) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0xffffffffffffff24, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) socket$can_raw(0x1d, 0x3, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) creat(0x0, 0x72) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x107, 0x0, 0x0, {0x3, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}}, 0x4000000) 5.764143359s ago: executing program 8 (id=14063): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 5.762917756s ago: executing program 3 (id=14064): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x284, 0x7f, 0xe3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xd0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x0) 4.829445433s ago: executing program 1 (id=14065): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioprio_set$pid(0x1, 0x0, 0x6000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0xa, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000500)=r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x23, 0x0, 0x2}, 0x10) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) shmctl$IPC_RMID(0x0, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x24) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c8000/0x4000)=nil, 0x4000, &(0x7f0000000040)='[:Q%@\x00') setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 4.829013053s ago: executing program 5 (id=14066): syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="b86ddcb8beea067a0eb278d3180200000000000000000000000000008500000013000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r4 = userfaultfd(0x801) r5 = socket(0x10, 0x3, 0x0) setresuid(0xee01, 0xee00, 0x0) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socket$nl_generic(0x10, 0x3, 0x10) 4.734246271s ago: executing program 3 (id=14067): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40880, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x2, 0x10}, 0xc) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000001600)={0x0, 0xea60}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xdce, 0x101, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r3}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x8a50adcc399d9d2a, &(0x7f0000000380)=""/150, &(0x7f0000000240)=0x96) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r4, 0x10}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r4, 0xe}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$session_to_parent(0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073"], 0xd0}}, 0x20050800) readv(r1, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/133, 0x85}], 0x1) sendto$inet6(r0, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 4.395922042s ago: executing program 7 (id=14068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x0, 0x0, 0x0, 0xfe, 0x9, 0xe00}, [@RTA_PRIORITY={0x8, 0x1e, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x44000) setresuid(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r5, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4004, r8, 0x2}) lseek(r10, 0x289e0cb9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) 3.745648026s ago: executing program 5 (id=14069): unshare(0x480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)) rseq(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xa06}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000180)=0xffff0018) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) migrate_pages(0x0, 0x49, 0x0, &(0x7f00000003c0)=0x100005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x10) syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x482200) 3.682952994s ago: executing program 1 (id=14070): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002e40), r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe2$watch_queue(0x0, 0x80) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xffffffffffffffff) r9 = inotify_init1(0x0) inotify_add_watch(r9, 0x0, 0xa4000021) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) unshare(0x20000400) 3.631937863s ago: executing program 8 (id=14071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(r0, 0x3, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) chdir(0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) syz_clone3(&(0x7f0000000500)={0x30040000, &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000380), {0x2e}, &(0x7f00000003c0)=""/16, 0x10, &(0x7f0000000440)=""/22, &(0x7f0000000480)=[r0, r0], 0x2}, 0x58) 2.540975124s ago: executing program 7 (id=14072): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000003440)="172cd448287c5a6c51", 0x9, 0x20000000, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x8001, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2.540232211s ago: executing program 1 (id=14073): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xe99, 0x8080) r1 = syz_open_dev$sndctrl(0x0, 0x1ff, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r5, 0x0, 0x1004000, 0x0, 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x2, 0x110, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) sendmsg$nl_xfrm(r6, 0x0, 0x4000080) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x3, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x2, 0x5, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0x1ed40, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x201, 0x4, 0x1, 0x3, 0x3, 0x1, 0x20000000000, 0xc, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x6, 0x201, 0x77d, 0xb3, 0x5, 0xffffffff00000001, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x67fffffffffe, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0xc9cd, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000005, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0xf, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x16, 0x54, 0x93d, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@loopback, 0x86dd}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000003c0)={0x0, 0x0, {0xfffffff9, 0xfffffffd, 0xfffff1b4}}) 2.20689964s ago: executing program 1 (id=14074): r0 = socket$alg(0x26, 0x5, 0x0) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04030000000000000006"], 0xa, 0x2) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x1208023, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x3}, @release={0x40046306, 0x3}, @increfs_done, @acquire={0x40046305, 0x3}, @dead_binder_done, @request_death={0x400c630e, 0x3}], 0xbf, 0x0, &(0x7f0000000240)="71448e5c7aa61a8dd9b017996d377db4373d18d014e2b252557cb707f699334cc06336cfdf9c43970c91b11778ed65680669d77a83862c442d5fe4df41f6eba369a21315063472970b7e96a9255e944f5fef7c3a9c077fc8c5146ed524381fd135a40226122d2b19baee31e3716cfb9c93aa62653d23e2773e2c0f55191e4ee2b9a73f6b229b68d4a5cfce96113966d5761017aa82e8441fcbfe1a23109b2be0d018740f148277cf4739bea112803d8a730ad7f9ccdd4c2ec8ec62dc75fb85"}) openat$kvm(0xffffffffffffff9c, &(0x7f00000020c0), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) socket(0x25, 0x5, 0x0) socketpair(0xb, 0x80000, 0x6, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {0x9b}, {}, @raw32}, {0x0, 0x0, 0x1, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x3, 0xffffffff, 0x5df]}}], 0x38) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000000)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 2.03457263s ago: executing program 5 (id=14075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)={@multicast, @random="58a4ab044a92", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0xb0, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x400, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "4e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd82418", "80bdd625bd905ba90d0a6927c37cefe3c4b48ef7ded481883e35fd85afe3254b3e1441af5775976715bf29ed4dcc166e", "7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738d", {"fdeca3693c5b2785e92ce602a669b6dd", "af8ff0acae2f2a3d0d0de9d22c2e3cf8"}}}}}}}, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000cac000/0x1000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = gettid() fsmount(r5, 0x0, 0x0) tkill(r7, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6, 0x2010, 0xffffffffffffffff, 0x180000000) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x47524247, 0x3, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x5}}) syz_open_dev$vim2m(0x0, 0x3, 0x2) 394.842798ms ago: executing program 8 (id=14077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x5) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4880}, 0x40881) 394.397566ms ago: executing program 5 (id=14078): r0 = socket$kcm(0xa, 0xd, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000004503"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 244.296561ms ago: executing program 3 (id=14079): r0 = socket(0x2, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000004000000040000000800000020", @ANYRES32, @ANYBLOB="040000000000000000002731a379a911b885713b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000a00"/24, @ANYRES32, @ANYBLOB], 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @remote}, &(0x7f0000000280)=0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000000000000000003000000000200000004000000faffffff00005f5f0055b0e4b1766e2b74bf50bd2289b7aea25d727da2b6c8407f218fe58606db73987ede14112efa90d1d649adabeb251e2b47a065bcc60f965f2253d850ab060f6f516335eae3344145fbc4ea50fcfd810b6a03306b40a286acf51433e3c7fe"], &(0x7f0000000440)=""/221, 0x35, 0xdd, 0x1, 0x1, 0x10000}, 0x28) syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400fdffffff02000000000e830000000000000000", @ANYRES32=r6, @ANYBLOB="1100"/18, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="01000000040000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) close_range(r1, r5, 0x2) sendmsg$inet(r4, 0x0, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000f7dbdf2501000000100007800c00018008000100", @ANYRES32=r9, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$kcm(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) 0s ago: executing program 1 (id=14080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141082) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f1", 0x17}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x2, 0x0, {0xe}}, 0x14}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000004200010a2fbd0f7000fddbdf2516000000612136602a2b43ee6490cd0025bd8f9d46aa0d60c63023398427f8024c4e86552ebe839952d1586f9e7faa2e615b347794e6203144e65bf1377292111946389a6bee81e23908b5036955ee6128e7e26ff67048824fd39bc7e21e6261ac8de6dad55665a1e447b7b3"], 0x14}}, 0x0) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10111) kernel console output (not intermixed with test programs): ct_data cause=failed comm="syz.3.11563" name="SYSV798dd820" dev="tmpfs" ino=0 res=0 errno=0 [ 2013.903509][ T7281] xt_HMARK: proto mask must be zero with L3 mode [ 2021.022356][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11581'. [ 2021.948430][ T7340] hpfs: Bad magic ... probably not HPFS [ 2022.696516][ T30] audit: type=1326 audit(1751811370.129:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7360 comm="syz.1.11594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x0 [ 2024.249553][ T30] audit: type=1326 audit(1751811371.679:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2024.286406][ T30] audit: type=1326 audit(1751811371.679:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2024.449592][ T30] audit: type=1326 audit(1751811371.709:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2024.528184][ T30] audit: type=1326 audit(1751811371.709:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2024.558753][ T30] audit: type=1326 audit(1751811371.709:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2024.606420][ T30] audit: type=1326 audit(1751811371.709:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2024.628045][ C0] vkms_vblank_simulate: vblank timer overrun [ 2024.649867][ T7382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2024.678128][ T30] audit: type=1326 audit(1751811371.709:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2024.739449][ T30] audit: type=1326 audit(1751811371.709:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2024.761216][ C0] vkms_vblank_simulate: vblank timer overrun [ 2024.777882][ T30] audit: type=1326 audit(1751811371.749:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.7.11592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2028.036765][ T7421] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2029.192944][ T7432] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11615'. [ 2030.196176][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11619'. [ 2033.074791][ T7491] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 2033.083722][ T7491] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 2037.549577][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.556776][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2040.245160][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2040.245180][ T30] audit: type=1400 audit(1751811643.662:2262): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7561 comm="syz.1.11652" dest=2 [ 2042.297275][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11659'. [ 2043.014060][ T7586] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2043.143726][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2047.451186][ T30] audit: type=1400 audit(1751811650.852:2263): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7605 comm="syz.2.11665" dest=20000 [ 2047.476006][ T7635] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[7635] [ 2047.994615][ T30] audit: type=1400 audit(1751811651.422:2264): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7646 comm="syz.7.11678" [ 2048.770691][ T30] audit: type=1400 audit(1751811652.202:2265): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7652 comm="syz.7.11681" daddr=::ffff:172.20.20.187 dest=3 [ 2052.328840][ T5664] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2052.548229][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11688'. [ 2052.557316][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11688'. [ 2053.389548][ T5664] usb 8-1: Using ep0 maxpacket: 32 [ 2055.528646][ T5664] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 2055.551398][ T5664] usb 8-1: can't read configurations, error -71 [ 2057.453739][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11692'. [ 2059.233079][ T7739] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11699'. [ 2061.841034][ T7753] overlayfs: failed to clone upperpath [ 2065.239241][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11709'. [ 2069.491134][ T30] audit: type=1400 audit(1751811672.872:2266): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7821 comm="syz.5.11721" dest=20000 [ 2070.479457][ T30] audit: type=1400 audit(1751811673.912:2267): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7813 comm="syz.2.11720" daddr=::ffff:127.0.0.1 [ 2070.589193][ T7839] xt_hashlimit: max too large, truncated to 1048576 [ 2070.598053][ T7839] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2071.239396][ T7840] /dev/nullb0: Can't lookup blockdev [ 2075.749269][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11736'. [ 2076.224478][ T7887] block nbd7: NBD_DISCONNECT [ 2080.076099][ T7912] fuse: Bad value for 'group_id' [ 2080.081501][ T7912] fuse: Bad value for 'group_id' [ 2081.656305][ T7923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11751'. [ 2083.497120][ T30] audit: type=1400 audit(1751811686.922:2268): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7930 comm="syz.7.11754" daddr=::ffff:172.20.20.59 dest=20003 [ 2083.776180][ T7951] fuse: Bad value for 'group_id' [ 2083.836538][ T7953] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11762'. [ 2084.043865][ T7953] bond0 (unregistering): Released all slaves [ 2084.068596][ T7951] fuse: Bad value for 'group_id' [ 2085.152789][ T7966] No such timeout policy "syz1" [ 2086.855535][ T7978] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2088.339385][ T7991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2088.351958][ T7991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2088.742068][ T30] audit: type=1400 audit(1751811692.162:2269): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7996 comm="syz.1.11776" dest=2 [ 2089.378657][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2095.266728][ T8067] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2096.767149][ T8079] CIFS: Unable to determine destination address [ 2099.119282][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.125636][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.233337][ T8104] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 2100.091042][ T8120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2104.195515][ T8163] netlink: 'syz.5.11821': attribute type 1 has an invalid length. [ 2104.399394][ T30] audit: type=1326 audit(1751811707.792:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8156 comm="syz.5.11821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7ffc0000 [ 2104.421104][ C0] vkms_vblank_simulate: vblank timer overrun [ 2104.731783][ T30] audit: type=1326 audit(1751811707.802:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8156 comm="syz.5.11821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7ffc0000 [ 2104.753489][ C0] vkms_vblank_simulate: vblank timer overrun [ 2104.930092][ T30] audit: type=1326 audit(1751811707.802:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8156 comm="syz.5.11821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e6ef8e929 code=0x7ffc0000 [ 2104.969399][ T30] audit: type=1326 audit(1751811707.812:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8156 comm="syz.5.11821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7ffc0000 [ 2104.991061][ C0] vkms_vblank_simulate: vblank timer overrun [ 2105.198776][ T8173] /dev/nullb0: Can't lookup blockdev [ 2105.749960][ T30] audit: type=1326 audit(1751811707.812:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8156 comm="syz.5.11821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7ffc0000 [ 2106.628559][ T8166] syz.7.11823: attempt to access beyond end of device [ 2106.628559][ T8166] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 2106.678590][ T8166] vxfs: unable to read disk superblock at 1 [ 2106.717159][ T8166] syz.7.11823: attempt to access beyond end of device [ 2106.717159][ T8166] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 2106.729084][ T30] audit: type=1326 audit(1751811707.822:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8156 comm="syz.5.11821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f2e6ef8e929 code=0x7ffc0000 [ 2106.758764][ T8166] vxfs: unable to read disk superblock at 8 [ 2106.764778][ T8166] vxfs: can't find superblock. [ 2106.961139][ T30] audit: type=1326 audit(1751811707.822:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8156 comm="syz.5.11821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7ffc0000 [ 2107.052386][ T30] audit: type=1326 audit(1751811707.822:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8156 comm="syz.5.11821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7ffc0000 [ 2107.389638][ T8193] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 2108.084065][ T8196] fuse: Bad value for 'user_id' [ 2108.089411][ T8196] fuse: Bad value for 'user_id' [ 2108.473558][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11835'. [ 2110.062586][ T8220] /dev/nullb0: Can't lookup blockdev [ 2113.745544][ T8258] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.11850'. [ 2115.873452][ T8267] /dev/nullb0: Can't lookup blockdev [ 2116.101452][ T8272] tipc: Enabling of bearer rejected, failed to enable media [ 2117.668441][ T8283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2118.097945][ T8291] netlink: 'syz.5.11861': attribute type 10 has an invalid length. [ 2119.433612][ T8307] /dev/nullb0: Can't lookup blockdev [ 2121.050822][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11868'. [ 2121.647295][ T30] audit: type=1400 audit(1751811725.072:2278): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8326 comm="syz.1.11871" dest=2 [ 2122.894950][ T5838] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2123.233832][ T8348] /dev/nullb0: Can't lookup blockdev [ 2123.417240][ T5838] usb 8-1: Using ep0 maxpacket: 32 [ 2123.429439][ T5838] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 2123.439929][ T5838] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2123.453245][ T5838] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2123.464513][ T5838] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2123.480585][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2123.493706][ T5838] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2123.516129][ T5838] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2123.617701][ T5838] usb 8-1: Product: syz [ 2123.623404][ T8353] @: renamed from vlan0 [ 2123.649004][ T5838] usb 8-1: Manufacturer: syz [ 2123.660494][ T5838] usb 8-1: SerialNumber: syz [ 2123.679063][ T5838] usb 8-1: config 0 descriptor?? [ 2123.687144][ T5838] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2123.699912][ T5838] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2123.793544][ T8359] netlink: 'syz.3.11884': attribute type 5 has an invalid length. [ 2123.941959][T14842] usb 8-1: USB disconnect, device number 24 [ 2123.969865][T14842] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 2124.172801][ T30] audit: type=1400 audit(1751811727.602:2279): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8369 comm="syz.2.11886" dest=2 [ 2124.790966][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11891'. [ 2124.814968][ T8382] xt_CT: No such helper "netbios-ns" [ 2125.049014][ T5838] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2125.517078][ T8395] /dev/nullb0: Can't lookup blockdev [ 2125.528980][ T5838] usb 8-1: Using ep0 maxpacket: 32 [ 2125.537769][ T5838] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 2125.551926][ T5838] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2125.564472][ T5838] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2126.278797][ T5838] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2126.293124][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2126.307935][ T5838] usb 8-1: string descriptor 0 read error: -71 [ 2126.317108][ T5838] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2126.331125][ T5838] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2126.349844][ T5838] usb 8-1: config 0 descriptor?? [ 2126.358769][ T5838] usb 8-1: can't set config #0, error -71 [ 2126.491126][ T5838] usb 8-1: USB disconnect, device number 25 [ 2126.935213][ T8420] overlayfs: failed to clone upperpath [ 2127.453121][ T8422] trusted_key: encrypted_key: insufficient parameters specified [ 2128.619173][ T30] audit: type=1400 audit(1751811732.042:2280): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8428 comm="syz.3.11904" dest=2 [ 2128.915444][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11907'. [ 2131.754762][ T30] audit: type=1400 audit(1751811735.122:2281): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8477 comm="syz.1.11919" dest=2 [ 2136.014110][ T30] audit: type=1400 audit(1751811739.442:2282): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8514 comm="syz.5.11931" dest=2 [ 2136.642555][ T30] audit: type=1400 audit(1751811740.072:2283): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8518 comm="syz.3.11932" dest=2 [ 2139.014195][ T30] audit: type=1326 audit(1751811742.432:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8546 comm="syz.3.11941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2139.059290][ T30] audit: type=1326 audit(1751811742.432:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8546 comm="syz.3.11941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2139.082886][ T30] audit: type=1326 audit(1751811742.442:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8546 comm="syz.3.11941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2139.153818][ T30] audit: type=1326 audit(1751811742.442:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8546 comm="syz.3.11941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2139.209304][ T30] audit: type=1326 audit(1751811742.442:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8546 comm="syz.3.11941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2139.262247][ T30] audit: type=1326 audit(1751811742.442:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8546 comm="syz.3.11941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2139.292991][ T30] audit: type=1326 audit(1751811742.462:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8546 comm="syz.3.11941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2139.331351][ T30] audit: type=1326 audit(1751811742.462:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8546 comm="syz.3.11941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2142.269777][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2142.269793][ T30] audit: type=1400 audit(1751811745.592:2331): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8572 comm="syz.7.11947" dest=2 [ 2143.639857][ T8607] Invalid ELF header magic: != ELF [ 2145.180308][ T30] audit: type=1400 audit(1751811748.612:2332): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8635 comm="syz.7.11964" dest=2 [ 2145.511281][ T8643] netlink: 'syz.2.11965': attribute type 6 has an invalid length. [ 2145.522207][ T8643] netlink: 'syz.2.11965': attribute type 1 has an invalid length. [ 2145.532309][ T8643] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.11965'. [ 2145.818723][ T30] audit: type=1400 audit(1751811749.232:2333): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8644 comm="syz.7.11967" dest=2 [ 2146.948421][ T8655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11971'. [ 2148.541132][ T30] audit: type=1400 audit(1751811751.972:2334): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8672 comm="syz.2.11977" dest=2 [ 2151.056651][ T8689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2151.348593][ T30] audit: type=1400 audit(1751811754.772:2335): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8692 comm="syz.7.11981" dest=2 [ 2151.449610][ T8702] overlayfs: failed to clone upperpath [ 2152.355541][ T8710] kthread_run failed with err -4 [ 2154.273609][ T30] audit: type=1400 audit(1751811757.702:2336): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8723 comm="syz.3.11989" dest=2 [ 2158.307062][ T8765] IPVS: length: 91 != 24 [ 2158.598651][ T30] audit: type=1400 audit(1751811762.012:2337): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8758 comm="syz.7.12000" dest=2 [ 2159.191254][ T30] audit: type=1400 audit(1751811762.602:2338): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8771 comm="syz.2.12002" daddr=::ffff:172.20.20.187 [ 2159.662908][ T30] audit: type=1326 audit(1751811763.092:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8774 comm="syz.3.12003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x0 [ 2159.684103][ C0] vkms_vblank_simulate: vblank timer overrun [ 2160.960454][ T8790] overlayfs: failed to clone upperpath [ 2161.208922][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.215286][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.985805][ T30] audit: type=1400 audit(1751811765.412:2340): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8794 comm="syz.5.12011" dest=2 [ 2162.080539][ T30] audit: type=1400 audit(1751811765.512:2341): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8803 comm="syz.2.12013" dest=2 [ 2162.367325][ T8808] sctp: [Deprecated]: syz.2.12013 (pid 8808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2162.367325][ T8808] Use struct sctp_sack_info instead [ 2164.376836][ T8828] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12016'. [ 2165.101735][ T8839] overlayfs: failed to clone upperpath [ 2167.468127][ T30] audit: type=1400 audit(1751811770.112:2342): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8851 comm="syz.2.12024" [ 2168.732058][ T8858] delete_channel: no stack [ 2176.998686][ T30] audit: type=1400 audit(1751811780.312:2343): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8896 comm="syz.2.12034" daddr=::1c9a:e7ff:fe9a:6f34 [ 2177.016598][ C0] vkms_vblank_simulate: vblank timer overrun [ 2177.285140][ T8905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12034'. [ 2177.294356][ T8905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12034'. [ 2177.334957][ T8901] netlink: 'syz.2.12034': attribute type 1 has an invalid length. [ 2177.857887][ T30] audit: type=1400 audit(1751811781.032:2344): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8902 comm="syz.5.12039" dest=20004 [ 2179.499298][ T30] audit: type=1326 audit(1751811782.922:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8907 comm="syz.7.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7fc00000 [ 2183.049730][ T30] audit: type=1400 audit(1751811786.452:2346): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8962 comm="syz.1.12054" dest=2 [ 2184.124802][ T8980] o2cb: This node has not been configured. [ 2184.130810][ T8980] o2cb: Cluster check failed. Fix errors before retrying. [ 2184.137952][ T8980] (syz.2.12058,8980,1):user_dlm_register:674 ERROR: status = -22 [ 2184.145752][ T8980] (syz.2.12058,8980,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 2184.519105][ T8986] CIFS mount error: No usable UNC path provided in device string! [ 2184.519105][ T8986] [ 2184.529948][ T8986] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2187.266620][ T9002] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12065'. [ 2187.817337][ T30] audit: type=1400 audit(1751811791.242:2347): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9009 comm="syz.3.12067" dest=2 [ 2188.514891][ T9023] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 2188.523887][ T9023] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 2201.302209][ T9104] schedule_timeout: wrong timeout value fffffffffffffffe [ 2201.309695][ T9104] CPU: 0 UID: 0 PID: 9104 Comm: vivid-000-vid-c Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2201.309722][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2201.309734][ T9104] Call Trace: [ 2201.309742][ T9104] [ 2201.309751][ T9104] dump_stack_lvl+0x189/0x250 [ 2201.309782][ T9104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2201.309805][ T9104] ? __pfx__printk+0x10/0x10 [ 2201.309844][ T9104] schedule_timeout+0x1e1/0x270 [ 2201.309870][ T9104] ? __pfx_schedule_timeout+0x10/0x10 [ 2201.309906][ T9104] ? prepare_to_wait_event+0x437/0x480 [ 2201.309943][ T9104] vivid_thread_vid_cap+0xaea/0x10d0 [ 2201.309994][ T9104] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2201.310027][ T9104] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2201.310052][ T9104] ? __kthread_parkme+0x7b/0x200 [ 2201.310075][ T9104] ? __kthread_parkme+0x1a1/0x200 [ 2201.310104][ T9104] kthread+0x711/0x8a0 [ 2201.310133][ T9104] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2201.310153][ T9104] ? __pfx_kthread+0x10/0x10 [ 2201.310179][ T9104] ? _raw_spin_unlock_irq+0x23/0x50 [ 2201.310207][ T9104] ? lockdep_hardirqs_on+0x9c/0x150 [ 2201.310234][ T9104] ? __pfx_kthread+0x10/0x10 [ 2201.310261][ T9104] ret_from_fork+0x3fc/0x770 [ 2201.310284][ T9104] ? __pfx_ret_from_fork+0x10/0x10 [ 2201.310319][ T9104] ? __switch_to_asm+0x39/0x70 [ 2201.310342][ T9104] ? __switch_to_asm+0x33/0x70 [ 2201.310364][ T9104] ? __pfx_kthread+0x10/0x10 [ 2201.310391][ T9104] ret_from_fork_asm+0x1a/0x30 [ 2201.310432][ T9104] [ 2201.464946][ C0] vkms_vblank_simulate: vblank timer overrun [ 2201.710085][ T9112] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2203.513335][ T9115] orangefs_mount: mount request failed with -4 [ 2206.969154][ T30] audit: type=1400 audit(1751811810.342:2348): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9143 comm="syz.1.12099" dest=2 [ 2208.293304][ T9153] 9pnet: Found fid 0 not clunked [ 2208.411370][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12103'. [ 2208.654342][ T9169] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:21 [ 2210.119480][ T9175] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12108'. [ 2210.466826][ T30] audit: type=1400 audit(1751811813.872:2349): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9188 comm="syz.3.12113" dest=2 [ 2211.931363][ T9196] Cannot find set identified by id 0 to match [ 2212.569968][ T30] audit: type=1400 audit(1751811815.452:2350): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9193 comm="syz.2.12114" dest=2 [ 2212.586899][ T9209] PKCS7: Unknown OID: [5] (bad) [ 2212.606255][ T9209] PKCS7: Only support pkcs7_signedData type [ 2213.128668][ T9217] netlink: 84 bytes leftover after parsing attributes in process `syz.5.12121'. [ 2213.317879][ T30] audit: type=1400 audit(1751811816.742:2351): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9218 comm="syz.3.12122" dest=20002 [ 2214.255264][ T30] audit: type=1400 audit(1751811817.682:2352): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9228 comm="syz.1.12125" dest=2 [ 2220.991431][ T9284] overlayfs: failed to clone upperpath [ 2221.393476][ T9293] netlink: 236 bytes leftover after parsing attributes in process `syz.7.12140'. [ 2221.861124][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.978293][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.222239][ T9320] loop6: detected capacity change from 0 to 524287999 [ 2224.309967][ T9327] fuse: Bad value for 'user_id' [ 2224.482568][ T9327] fuse: Bad value for 'user_id' [ 2226.437149][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12152'. [ 2227.432535][ T9360] fuse: Bad value for 'fd' [ 2228.893132][ T9374] netlink: 252 bytes leftover after parsing attributes in process `syz.3.12158'. [ 2230.009640][ T9381] fuse: Bad value for 'fd' [ 2232.021953][ T9407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2234.013889][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12169'. [ 2235.781478][ T9438] fuse: Bad value for 'fd' [ 2236.971413][ T9442] overlayfs: failed to clone lowerpath [ 2239.341951][ T9471] rdma_rxe: rxe_newlink: failed to add lo [ 2239.903551][ T9481] fuse: Bad value for 'fd' [ 2241.829173][ T9496] blktrace: Concurrent blktraces are not allowed on loop2 [ 2242.284612][ T9496] relay: one or more items not logged [item size (56) > sub-buffer size (16)] [ 2245.356720][ T9502] syz.7.12190 (9502): drop_caches: 2 [ 2245.365161][ T9502] syz.7.12190 (9502): drop_caches: 2 [ 2249.246161][ T9530] fuse: Bad value for 'fd' [ 2249.685399][ T9540] netlink: 'syz.1.12199': attribute type 1 has an invalid length. [ 2249.693380][ T9540] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.12199'. [ 2250.637125][ T9543] netlink: 'syz.3.12201': attribute type 39 has an invalid length. [ 2253.127015][ T30] audit: type=1400 audit(1751811856.542:2353): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9552 comm="syz.1.12204" dest=2 [ 2253.260153][ T9564] overlayfs: failed to resolve './file0': -2 [ 2253.563002][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12205'. [ 2255.916611][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12206'. [ 2256.020904][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12210'. [ 2256.715440][ T9594] fuse: Bad value for 'fd' [ 2257.778320][ T9610] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12216'. [ 2258.938840][ T30] audit: type=1400 audit(1751811862.312:2354): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9611 comm="syz.7.12217" dest=2 [ 2260.113245][ T9630] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12221'. [ 2264.526178][ T9653] fuse: Bad value for 'fd' [ 2269.708340][ T30] audit: type=1400 audit(1751811873.132:2355): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9670 comm="syz.3.12233" dest=2 [ 2272.026227][ T9701] fuse: Invalid rootmode [ 2272.144442][ T30] audit: type=1400 audit(1751811875.572:2356): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9692 comm="syz.2.12237" dest=2 [ 2274.123615][ T9721] tipc: Enabling of bearer rejected, failed to enable media [ 2276.588636][ T30] audit: type=1400 audit(1751811880.012:2357): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9725 comm="syz.3.12245" dest=2 [ 2277.858418][ T9743] fuse: Invalid rootmode [ 2278.908686][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12247'. [ 2281.547706][ T9774] batadv1: entered promiscuous mode [ 2282.693469][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12257'. [ 2283.314664][ T9774] random: crng reseeded on system resumption [ 2283.321854][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.329020][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.488801][ T30] audit: type=1400 audit(1751811886.902:2358): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9781 comm="syz.3.12259" dest=2 [ 2285.896990][ T9807] fuse: Invalid rootmode [ 2287.248713][ T9819] netlink: 'syz.3.12267': attribute type 21 has an invalid length. [ 2287.256800][ T9819] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12267'. [ 2287.266770][ T9819] netlink: 'syz.3.12267': attribute type 6 has an invalid length. [ 2287.274698][ T9819] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12267'. [ 2287.593892][ T9817] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2290.378642][ T30] audit: type=1400 audit(1751811893.802:2359): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9836 comm="syz.3.12273" dest=2 [ 2290.404214][ T30] audit: type=1326 audit(1751811893.822:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2290.427408][ T30] audit: type=1326 audit(1751811893.822:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2290.457578][ T30] audit: type=1326 audit(1751811893.822:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2290.479286][ C0] vkms_vblank_simulate: vblank timer overrun [ 2290.486216][ T5697] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2290.609838][ T30] audit: type=1326 audit(1751811893.822:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2290.632413][ T30] audit: type=1326 audit(1751811893.822:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2290.654214][ T30] audit: type=1326 audit(1751811893.822:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2290.676184][ T30] audit: type=1326 audit(1751811893.822:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2290.701115][ T5697] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2290.711779][ T30] audit: type=1326 audit(1751811893.822:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2290.715759][ T5697] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2290.959282][ T30] audit: type=1326 audit(1751811893.822:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.5.12268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2291.748722][ T5697] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2291.757957][ T5697] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2291.768168][ T5697] usb 8-1: SerialNumber: syz [ 2292.516572][ T5697] usb 8-1: can't set config #1, error -71 [ 2292.699070][ T5697] usb 8-1: USB disconnect, device number 26 [ 2292.772649][ T9863] fuse: Bad value for 'rootmode' [ 2295.757662][ T9871] uprobe: syz.1.12284:9871 failed to unregister, leaking uprobe [ 2298.350738][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2298.350759][ T30] audit: type=1400 audit(1751811901.752:2426): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9879 comm="syz.5.12286" dest=2 [ 2298.420797][ T9894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12290'. [ 2299.334041][ T9903] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12294'. [ 2299.677757][ T30] audit: type=1400 audit(1751811903.092:2427): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9907 comm="syz.1.12295" daddr=::ffff:172.20.20.0 [ 2301.814157][ T30] audit: type=1400 audit(1751811905.242:2428): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9936 comm="syz.5.12302" dest=2 [ 2302.412340][ T9943] ptrace attach of "./syz-executor exec"[9944] was attempted by "./syz-executor exec"[9943] [ 2305.013912][ T9957] fuse: Bad value for 'rootmode' [ 2307.231642][ T9981] overlayfs: failed to clone lowerpath [ 2307.354943][ T9983] overlayfs: failed to clone upperpath [ 2308.767929][ T30] audit: type=1400 audit(1751811912.182:2429): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9988 comm="syz.3.12316" dest=2 [ 2310.199572][T10004] trusted_key: encrypted_key: insufficient parameters specified [ 2310.291736][T10007] fuse: Bad value for 'rootmode' [ 2311.488155][T10024] SET target dimension over the limit! [ 2312.137946][ T30] audit: type=1400 audit(1751811915.562:2430): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10027 comm="syz.5.12328" dest=2 [ 2312.687930][T10042] syz.3.12331: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2312.703704][T10042] CPU: 1 UID: 0 PID: 10042 Comm: syz.3.12331 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2312.703736][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2312.703750][T10042] Call Trace: [ 2312.703760][T10042] [ 2312.703770][T10042] dump_stack_lvl+0x189/0x250 [ 2312.703802][T10042] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2312.703836][T10042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2312.703860][T10042] ? __pfx__printk+0x10/0x10 [ 2312.703887][T10042] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2312.703916][T10042] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2312.703952][T10042] warn_alloc+0x214/0x310 [ 2312.703974][T10042] ? stack_depot_save_flags+0x334/0x900 [ 2312.704009][T10042] ? __pfx_warn_alloc+0x10/0x10 [ 2312.704033][T10042] ? kasan_save_track+0x4f/0x80 [ 2312.704063][T10042] ? xskq_create+0x56/0x170 [ 2312.704092][T10042] ? xsk_init_queue+0xb0/0x110 [ 2312.704119][T10042] ? xsk_setsockopt+0x43f/0x710 [ 2312.704145][T10042] ? do_sock_setsockopt+0x257/0x3e0 [ 2312.704170][T10042] ? __x64_sys_setsockopt+0x18b/0x220 [ 2312.704194][T10042] ? do_syscall_64+0xfa/0x3b0 [ 2312.704213][T10042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.704243][T10042] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2312.704296][T10042] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2312.704319][T10042] ? preempt_schedule_thunk+0x16/0x30 [ 2312.704351][T10042] ? __kasan_kmalloc+0x93/0xb0 [ 2312.704384][T10042] vmalloc_user_noprof+0xad/0xf0 [ 2312.704415][T10042] ? xskq_create+0xbf/0x170 [ 2312.704447][T10042] xskq_create+0xbf/0x170 [ 2312.704481][T10042] xsk_init_queue+0xb0/0x110 [ 2312.704514][T10042] xsk_setsockopt+0x43f/0x710 [ 2312.704541][T10042] ? rcu_is_watching+0x15/0xb0 [ 2312.704567][T10042] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2312.704594][T10042] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 2312.704625][T10042] ? preempt_schedule_notrace+0xd1/0x110 [ 2312.704655][T10042] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 2312.704692][T10042] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2312.704722][T10042] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2312.704753][T10042] do_sock_setsockopt+0x257/0x3e0 [ 2312.704782][T10042] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2312.704814][T10042] ? __fget_files+0x2a/0x420 [ 2312.704844][T10042] __x64_sys_setsockopt+0x18b/0x220 [ 2312.704877][T10042] do_syscall_64+0xfa/0x3b0 [ 2312.704899][T10042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.704919][T10042] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2312.704939][T10042] ? clear_bhb_loop+0x60/0xb0 [ 2312.704965][T10042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.704985][T10042] RIP: 0033:0x7fa3b698e929 [ 2312.705006][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2312.705025][T10042] RSP: 002b:00007fa3b7871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2312.705048][T10042] RAX: ffffffffffffffda RBX: 00007fa3b6bb6160 RCX: 00007fa3b698e929 [ 2312.705064][T10042] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 2312.705078][T10042] RBP: 00007fa3b6a10b39 R08: 0000000000000052 R09: 0000000000000000 [ 2312.705092][T10042] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2312.705106][T10042] R13: 0000000000000000 R14: 00007fa3b6bb6160 R15: 00007ffd0dc9c408 [ 2312.705139][T10042] [ 2312.705177][T10042] Mem-Info: [ 2312.915596][ T30] audit: type=1400 audit(1751811916.112:2431): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10037 comm="syz.3.12331" daddr=::ffff:172.20.20.57 dest=20001 [ 2312.918752][T10042] active_anon:38160 inactive_anon:37050 isolated_anon:0 [ 2312.918752][T10042] active_file:27019 inactive_file:34862 isolated_file:0 [ 2312.918752][T10042] unevictable:770 dirty:418 writeback:0 [ 2312.918752][T10042] slab_reclaimable:12758 slab_unreclaimable:124518 [ 2312.918752][T10042] mapped:36168 shmem:63753 pagetables:1818 [ 2312.918752][T10042] sec_pagetables:0 bounce:0 [ 2312.918752][T10042] kernel_misc_reclaimable:0 [ 2312.918752][T10042] free:1199826 free_pcp:15696 free_cma:0 [ 2312.918812][T10042] Node 0 active_anon:152640kB inactive_anon:137896kB active_file:107776kB inactive_file:139448kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:144584kB dirty:1672kB writeback:0kB shmem:253476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13092kB pagetables:6996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2312.918869][T10042] Node 1 active_anon:0kB inactive_anon:10304kB active_file:300kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2313.167632][T10042] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2313.196737][T10042] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 2313.202931][T10042] Node 0 DMA32 free:893664kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:154536kB inactive_anon:136104kB active_file:105996kB inactive_file:139388kB unevictable:1544kB writepending:1672kB present:3129332kB managed:2560900kB mlocked:0kB bounce:0kB free_pcp:39636kB local_pcp:9908kB free_cma:0kB [ 2313.236289][T10042] lowmem_reserve[]: 0 0 1 1 1 [ 2313.241285][T10042] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 2313.270929][T10042] lowmem_reserve[]: 0 0 0 0 0 [ 2313.275693][T10042] Node 1 Normal free:3890272kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:10304kB active_file:300kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22756kB local_pcp:12184kB free_cma:0kB [ 2313.308253][T10042] lowmem_reserve[]: 0 0 0 0 0 [ 2313.313099][T10042] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2313.325787][T10042] Node 0 DMA32: 2552*4kB (UE) 1447*8kB (UE) 656*16kB (UME) 1551*32kB (UME) 571*64kB (UME) 268*128kB (UME) 127*256kB (UME) 65*512kB (UME) 17*1024kB (UME) 7*2048kB (UM) 157*4096kB (UM) = 893368kB [ 2313.345038][T10042] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2313.356886][T10042] Node 1 Normal: 3*4kB (UME) 5*8kB (UE) 8*16kB (ME) 221*32kB (UE) 92*64kB (UE) 32*128kB (UME) 9*256kB (U) 4*512kB (U) 4*1024kB (UM) 5*2048kB (UM) 941*4096kB (UM) = 3890260kB [ 2313.374466][T10042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2313.384031][T10042] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2313.393341][T10042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2313.403024][T10042] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2313.412341][T10042] 125629 total pagecache pages [ 2313.417090][T10042] 1 pages in swap cache [ 2313.421244][T10042] Free swap = 124992kB [ 2313.425377][T10042] Total swap = 124996kB [ 2313.429687][T10042] 2097051 pages RAM [ 2313.433473][T10042] 0 pages HighMem/MovableOnly [ 2313.438125][T10042] 424719 pages reserved [ 2313.442283][T10042] 0 pages cma reserved [ 2313.761429][T10051] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2314.761124][T10052] netlink: 'syz.5.12333': attribute type 10 has an invalid length. [ 2314.888601][T27673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2314.973515][T27673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2317.098582][ T30] audit: type=1400 audit(1751811920.522:2432): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10071 comm="syz.3.12339" dest=2 [ 2317.338183][ T30] audit: type=1400 audit(1751811920.762:2433): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10077 comm="syz.2.12341" dest=2 [ 2319.077203][ T30] audit: type=1400 audit(1751812178.506:2434): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10096 comm="syz.5.12348" dest=2 [ 2320.554584][ T30] audit: type=1400 audit(1751812179.986:2435): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10125 comm="syz.1.12355" dest=2 [ 2320.869566][ T30] audit: type=1400 audit(1751812180.306:2436): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10128 comm="syz.2.12356" daddr=::ffff:172.20.20.4 [ 2321.074955][ T30] audit: type=1400 audit(1751812180.506:2437): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10137 comm="syz.7.12359" dest=2 [ 2321.854654][T10151] bond0: Error: Cannot enslave bond to itself. [ 2321.918841][T10153] netlink: 'syz.1.12363': attribute type 21 has an invalid length. [ 2322.138389][ T30] audit: type=1400 audit(1751812181.556:2438): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10161 comm="syz.1.12367" dest=2 [ 2322.342372][ T30] audit: type=1326 audit(1751812181.776:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10162 comm="syz.5.12368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2322.421358][ T30] audit: type=1400 audit(1751812181.846:2440): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10169 comm="syz.2.12370" dest=2 [ 2323.098563][ T30] audit: type=1326 audit(1751812182.516:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10162 comm="syz.5.12368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e6ef8e929 code=0x7fc00000 [ 2323.383554][T10150] dlm: no local IP address has been set [ 2323.401560][T10150] dlm: cannot start dlm midcomms -107 [ 2324.539845][T10196] batadv_slave_0: entered allmulticast mode [ 2325.312590][ T30] audit: type=1400 audit(1751812184.736:2442): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10200 comm="syz.3.12379" dest=2 [ 2326.426674][ T30] audit: type=1400 audit(1751812185.846:2443): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10219 comm="syz.5.12383" dest=2 [ 2326.824565][T10230] overlayfs: failed to clone lowerpath [ 2326.872653][T10230] overlayfs: failed to clone upperpath [ 2328.366237][T10238] netlink: 'syz.3.12389': attribute type 30 has an invalid length. [ 2329.178407][T10229] trusted_key: encrypted_key: insufficient parameters specified [ 2329.205170][T10246] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12390'. [ 2329.329817][ T30] audit: type=1400 audit(1751812188.766:2444): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10247 comm="syz.3.12391" dest=2 [ 2329.503730][ T30] audit: type=1400 audit(1751812188.936:2445): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10251 comm="syz.3.12395" dest=2 [ 2330.845990][ T30] audit: type=1400 audit(1751812190.146:2446): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10271 comm="syz.3.12398" dest=2 [ 2330.971635][T10276] overlayfs: failed to clone upperpath [ 2332.172062][T10284] overlayfs: failed to clone upperpath [ 2333.282658][T10303] tipc: Started in network mode [ 2333.282915][T10303] tipc: Node identity ac1414aa, cluster identity 4711 [ 2333.283663][T10303] tipc: Enabling of bearer rejected, failed to enable media [ 2333.293915][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12403'. [ 2333.471417][ T30] audit: type=1400 audit(1751812192.906:2447): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10298 comm="syz.2.12405" dest=2 [ 2335.046932][T10312] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12406'. [ 2335.127575][ T30] audit: type=1400 audit(1751812194.556:2448): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10317 comm="syz.2.12408" dest=2 [ 2337.346292][T10346] batman_adv: batadv0: Adding interface: ip6gretap2 [ 2337.355210][T10346] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 2337.375232][T10346] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 2337.398721][T10346] batman_adv: batadv0: Removing interface: dummy0 [ 2337.409446][T10346] batman_adv: batadv0: Removing interface: ip6gretap2 [ 2338.639370][T10361] netlink: 2384 bytes leftover after parsing attributes in process `syz.7.12417'. [ 2338.651582][ T30] audit: type=1400 audit(1751812198.086:2449): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10350 comm="syz.1.12418" dest=2 [ 2340.151764][ T30] audit: type=1400 audit(1751812199.586:2450): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10372 comm="syz.1.12422" dest=2 [ 2340.294739][T10386] set match dimension is over the limit! [ 2343.597049][ T30] audit: type=1400 audit(1751812203.026:2451): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10416 comm="syz.3.12432" dest=2 [ 2343.789881][ T30] audit: type=1400 audit(1751812203.226:2452): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10421 comm="syz.5.12435" dest=2 [ 2344.418644][ T30] audit: type=1400 audit(1751812203.316:2453): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10418 comm="syz.1.12433" dest=2 [ 2344.676685][ T30] audit: type=1400 audit(1751812204.106:2454): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10432 comm="syz.1.12437" dest=2 [ 2344.744878][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.752023][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.294304][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12438'. [ 2345.454745][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12439'. [ 2345.477400][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12439'. [ 2347.839157][ T30] audit: type=1400 audit(1751812207.256:2455): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10461 comm="syz.5.12446" dest=2 [ 2347.921691][ T30] audit: type=1400 audit(1751812207.336:2456): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10464 comm="syz.1.12448" dest=2 [ 2348.015322][ T30] audit: type=1400 audit(1751812207.436:2457): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10467 comm="syz.5.12449" dest=2 [ 2350.446898][T10498] Device name cannot be null; rc = [-22] [ 2351.980579][ T30] audit: type=1400 audit(1751812211.406:2458): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10509 comm="syz.5.12460" dest=2 [ 2352.088516][T10513] Device name cannot be null; rc = [-22] [ 2352.208206][ T30] audit: type=1400 audit(1751812211.636:2459): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10511 comm="syz.1.12459" dest=2 [ 2352.228034][T10513] overlayfs: overlapping lowerdir path [ 2352.498524][ T30] audit: type=1400 audit(1751812211.926:2460): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10515 comm="syz.5.12461" dest=2 [ 2353.746444][ T30] audit: type=1400 audit(1751812213.176:2461): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10521 comm="syz.5.12465" [ 2355.063043][T10540] syz.7.12469 (10540): drop_caches: 2 [ 2355.069320][T10540] syz.7.12469 (10540): drop_caches: 2 [ 2355.918753][ T30] audit: type=1400 audit(1751812215.326:2462): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10556 comm="syz.2.12471" dest=2 [ 2355.969065][T10559] netlink: 'syz.1.12472': attribute type 6 has an invalid length. [ 2356.177661][ T30] audit: type=1400 audit(1751812215.596:2463): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10560 comm="syz.2.12473" dest=2 [ 2358.359564][T10580] ceph: No mds server is up or the cluster is laggy [ 2358.374982][T10584] /dev/nullb0: Can't lookup blockdev [ 2358.394617][ T43] libceph: connect (1)[c::]:6789 error -22 [ 2358.415801][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 2358.477877][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12478'. [ 2358.788955][ T43] libceph: connect (1)[c::]:6789 error -22 [ 2358.795011][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 2363.337344][ T30] audit: type=1400 audit(1751812222.766:2464): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10614 comm="syz.3.12486" dest=2 [ 2363.600121][ T30] audit: type=1400 audit(1751812223.026:2465): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10609 comm="syz.7.12484" dest=2 [ 2363.642771][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12487'. [ 2363.663031][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12487'. [ 2363.780256][ T30] audit: type=1326 audit(1751812223.076:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10619 comm="syz.1.12487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2363.806780][ T30] audit: type=1326 audit(1751812223.076:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10619 comm="syz.1.12487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2363.833840][ T30] audit: type=1326 audit(1751812223.076:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10619 comm="syz.1.12487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2363.864010][ T30] audit: type=1326 audit(1751812223.076:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10619 comm="syz.1.12487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2363.969687][ T30] audit: type=1326 audit(1751812223.076:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10619 comm="syz.1.12487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2364.136915][ T30] audit: type=1326 audit(1751812223.076:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10619 comm="syz.1.12487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2364.173986][ T30] audit: type=1326 audit(1751812223.076:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10619 comm="syz.1.12487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2365.313652][ T30] audit: type=1326 audit(1751812223.076:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10619 comm="syz.1.12487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2366.348834][T10643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12492'. [ 2366.373234][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12492'. [ 2366.388538][T10643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12492'. [ 2366.408179][T10643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12492'. [ 2367.726751][T10662] Invalid ELF header magic: != ELF [ 2367.756520][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12500'. [ 2367.765640][T10662] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 2367.773406][T10662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2368.846246][T10670] kAFS: No cell specified [ 2369.128837][T10672] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 2369.359497][T10672] bond8: entered promiscuous mode [ 2369.364652][T10672] bond8: entered allmulticast mode [ 2369.372440][T10672] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2369.662981][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2369.663000][ T30] audit: type=1400 audit(1751812229.096:2513): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10675 comm="syz.1.12503" daddr=::ffff:172.20.20.20 dest=20001 [ 2370.574744][ T30] audit: type=1400 audit(1751812230.006:2514): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10676 comm="syz.3.12502" dest=2 [ 2371.667175][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12509'. [ 2372.301035][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12509'. [ 2374.058738][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12512'. [ 2374.092775][T10717] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 2377.926125][T10738] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.943997][T10738] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.153668][T10744] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12517'. [ 2378.916334][T10738] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.926649][T10738] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.640017][T10745] xt_SECMARK: unable to map security context 'system_u:object_r:initctl_t:s0' [ 2382.070058][ T30] audit: type=1800 audit(1751812241.496:2515): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.12525" name="nullb0" dev="tmpfs" ino=5354 res=0 errno=0 [ 2382.210956][T10773] bond0: entered promiscuous mode [ 2382.216033][T10773] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 2383.734466][T10784] overlayfs: failed to clone upperpath [ 2384.533520][T10787] fuse: Bad value for 'fd' [ 2385.373220][T10797] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2389.196873][T10825] overlayfs: failed to clone upperpath [ 2389.487014][T10830] kAFS: No cell specified [ 2390.131246][T10831] delete_channel: no stack [ 2390.324196][T10826] orangefs_mount: mount request failed with -4 [ 2390.823586][T10843] overlayfs: failed to clone upperpath [ 2391.656394][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12550'. [ 2391.667766][T10838] orangefs_mount: mount request failed with -4 [ 2391.675370][T10860] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12550'. [ 2393.339919][ T30] audit: type=1400 audit(1751812252.776:2516): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10879 comm="syz.1.12556" dest=20002 [ 2395.104109][T10883] netlink: 'syz.3.12557': attribute type 1 has an invalid length. [ 2395.112051][T10883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12557'. [ 2395.125936][T10891] overlayfs: failed to clone upperpath [ 2397.178291][T27256] batman_adv: batadv1: IGMP Querier appeared [ 2397.184450][T27256] batman_adv: batadv1: MLD Querier appeared [ 2397.826569][ T30] audit: type=1400 audit(1751812257.256:2517): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10923 comm="syz.2.12569" dest=2 [ 2399.283946][ T30] audit: type=1400 audit(1751812258.706:2518): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10943 comm="syz.3.12575" dest=2 [ 2400.882041][T10964] netlink: 452 bytes leftover after parsing attributes in process `syz.3.12577'. [ 2401.961395][ T30] audit: type=1400 audit(1751812261.376:2519): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10977 comm="syz.7.12583" dest=2 [ 2402.847307][ T30] audit: type=1400 audit(1751812262.276:2520): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10988 comm="syz.3.12587" dest=2 [ 2403.058284][T10991] xt_hashlimit: overflow, rate too high: 0 [ 2405.140611][T11023] overlayfs: failed to clone upperpath [ 2405.772009][T11014] hsr0: entered promiscuous mode [ 2405.846068][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12591'. [ 2406.210351][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.317265][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.338152][T11032] hsr_slave_0: left promiscuous mode [ 2406.389677][T11032] hsr0 (unregistering): left promiscuous mode [ 2406.525582][ T30] audit: type=1400 audit(1751812265.956:2521): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11038 comm="syz.5.12599" dest=2 [ 2409.081079][T11055] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.12605'. [ 2409.413287][T11068] overlayfs: failed to clone upperpath [ 2412.670621][ T30] audit: type=1326 audit(1751812528.026:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11088 comm="syz.1.12616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a5cd8e929 code=0x0 [ 2413.348781][ T30] audit: type=1400 audit(1751812528.776:2523): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11093 comm="syz.3.12612" dest=2 [ 2417.698389][T11118] overlayfs: failed to resolve './file0': -2 [ 2418.740932][ T30] audit: type=1400 audit(1751812534.056:2524): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11115 comm="syz.5.12623" dest=2 [ 2422.442567][ T30] audit: type=1400 audit(1751812537.876:2525): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11146 comm="syz.7.12630" dest=2 [ 2422.517194][T11153] netem: invalid attributes len -24 [ 2422.907258][T11166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12637'. [ 2425.721290][ T30] audit: type=1400 audit(1751812541.156:2526): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11200 comm="syz.3.12646" dest=2 [ 2427.303438][T11216] IPv6: Can't replace route, no match found [ 2429.645557][T11240] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12657'. [ 2431.601594][ T30] audit: type=1400 audit(1751812547.026:2527): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11251 comm="syz.1.12661" dest=2 [ 2432.561730][T11269] netlink: 'syz.7.12664': attribute type 1 has an invalid length. [ 2432.725292][T11269] netlink: 'syz.7.12664': attribute type 2 has an invalid length. [ 2435.419227][T11283] overlay: Unknown parameter '/' [ 2437.947029][ T30] audit: type=1400 audit(1751812553.376:2528): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11293 comm="syz.3.12671" dest=2 [ 2438.019130][T11297] xt_hashlimit: overflow, rate too high: 0 [ 2438.264830][ T30] audit: type=1400 audit(1751812553.696:2529): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11303 comm="syz.3.12675" dest=2 [ 2440.752875][T11324] tmpfs: Unknown parameter 'nr_blo' [ 2440.905750][ T30] audit: type=1400 audit(1751812556.336:2530): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11327 comm="syz.7.12681" dest=2 [ 2442.371945][ T30] audit: type=1400 audit(1751812557.806:2531): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11336 comm="syz.7.12685" dest=2 [ 2442.968834][T11348] xt_SECMARK: unable to map security context 'system_u:object_r:initctl_t:s0' [ 2444.662844][ T30] audit: type=1400 audit(1751812560.086:2532): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11362 comm="syz.7.12688" dest=2 [ 2447.095578][ T30] audit: type=1400 audit(1751812562.516:2533): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11375 comm="syz.7.12695" dest=2 [ 2449.016553][T11396] kAFS: No cell specified [ 2449.432103][ T30] audit: type=1400 audit(1751812564.676:2534): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11394 comm="syz.1.12701" dest=2 [ 2449.703585][T11410] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 2450.307638][T11403] delete_channel: no stack [ 2450.778972][T11410] bond1: entered promiscuous mode [ 2450.784086][T11410] bond1: entered allmulticast mode [ 2450.789792][T11410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2453.351162][T11437] IPVS: Error connecting to the multicast addr [ 2454.023717][ T30] audit: type=1400 audit(1751812569.426:2535): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11441 comm="syz.1.12711" dest=2 [ 2454.334709][T11446] overlayfs: missing 'lowerdir' [ 2454.420454][ T30] audit: type=1400 audit(1751812569.856:2536): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11443 comm="syz.1.12712" daddr=::ffff:172.20.20.57 dest=20001 [ 2458.237718][ T30] audit: type=1400 audit(1751812573.186:2537): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11468 comm="syz.5.12717" daddr=::ffff:172.20.20.187 [ 2460.268492][ T30] audit: type=1400 audit(1751812575.686:2538): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11494 comm="syz.7.12722" dest=2 [ 2462.443804][T11521] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 2463.362938][ T30] audit: type=1400 audit(1751812578.796:2539): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11526 comm="syz.2.12732" daddr=::ffff:172.20.20.42 dest=20004 [ 2463.366991][T11532] netlink: 'syz.2.12732': attribute type 27 has an invalid length. [ 2464.184288][T11532] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 2465.074557][ T30] audit: type=1400 audit(1751812580.506:2540): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11546 comm="syz.2.12738" dest=2 [ 2466.117131][T11550] /dev/nullb0: Can't lookup blockdev [ 2466.836940][T11569] overlayfs: failed to clone upperpath [ 2467.689016][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.693141][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2469.787233][T11585] lo speed is unknown, defaulting to 1000 [ 2469.793860][T11585] lo speed is unknown, defaulting to 1000 [ 2469.804677][T11585] lo speed is unknown, defaulting to 1000 [ 2469.911203][T11585] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 2470.089526][T11585] lo speed is unknown, defaulting to 1000 [ 2470.109942][T11585] lo speed is unknown, defaulting to 1000 [ 2470.130641][T11585] lo speed is unknown, defaulting to 1000 [ 2470.150954][T11585] lo speed is unknown, defaulting to 1000 [ 2470.206237][T11585] lo speed is unknown, defaulting to 1000 [ 2471.088548][ T30] audit: type=1400 audit(1751812586.496:2541): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11589 comm="syz.1.12750" dest=2 [ 2472.182374][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12752'. [ 2472.712132][T11611] cgroup: subsys name conflicts with all [ 2474.441431][T11634] new mount options do not match the existing superblock, will be ignored [ 2475.304688][T11647] Device name cannot be null; rc = [-22] [ 2475.318796][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12761'. [ 2476.058581][ T30] audit: type=1400 audit(1751812591.486:2542): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11643 comm="syz.1.12765" dest=2 [ 2476.417231][ T30] audit: type=1400 audit(1751812591.846:2543): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11649 comm="syz.3.12767" dest=2 [ 2476.434831][T11658] __vm_enough_memory: pid: 11658, comm: syz.1.12771, bytes: 21200642801664 not enough memory for the allocation [ 2477.730579][T11670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12774'. [ 2477.743667][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12774'. [ 2477.947654][ T30] audit: type=1400 audit(1751812593.376:2544): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11668 comm="syz.3.12774" daddr=::ffff:172.20.20.0 [ 2479.587178][T11687] xt_nat: multiple ranges no longer supported [ 2479.606053][T11687] 9pnet_fd: Insufficient options for proto=fd [ 2480.367821][T11691] /dev/nullb0: Can't lookup blockdev [ 2481.380989][ T30] audit: type=1400 audit(1751812852.808:2545): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11695 comm="syz.2.12781" dest=2 [ 2481.461656][ T30] audit: type=1400 audit(1751812852.898:2546): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11699 comm="syz.1.12784" dest=2 [ 2485.328632][ T30] audit: type=1326 audit(1751812856.758:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2485.363318][ T30] audit: type=1326 audit(1751812856.758:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2485.388244][ T30] audit: type=1326 audit(1751812856.758:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2485.581719][ T30] audit: type=1326 audit(1751812856.758:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2485.603868][ T30] audit: type=1326 audit(1751812856.758:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2486.079751][ T30] audit: type=1326 audit(1751812856.758:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2486.079806][ T30] audit: type=1326 audit(1751812856.788:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2486.085760][ T30] audit: type=1326 audit(1751812856.788:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2486.086192][ T30] audit: type=1326 audit(1751812856.788:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11730 comm="syz.1.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0a5cd8e929 code=0x7ffc0000 [ 2486.463062][T11749] overlayfs: failed to clone upperpath [ 2487.240964][T11755] /dev/nullb0: Can't lookup blockdev [ 2488.109763][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2488.109784][ T30] audit: type=1400 audit(1751812859.348:2598): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11746 comm="syz.1.12797" dest=2 [ 2490.031350][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12802'. [ 2490.093588][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12802'. [ 2490.768198][ T30] audit: type=1400 audit(1751812862.198:2599): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11801 comm="syz.1.12810" dest=2 [ 2491.913479][T11817] fuse: Bad value for 'fd' [ 2491.985278][T11817] /dev/nbd3: Can't lookup blockdev [ 2493.409843][T11813] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 2493.480201][T11823] netlink: 'syz.7.12816': attribute type 10 has an invalid length. [ 2493.498035][T11823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2493.506114][T11823] team0: Port device bond0 added [ 2493.876587][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12822'. [ 2494.992078][ T30] audit: type=1400 audit(1751812866.418:2600): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11850 comm="syz.2.12823" dest=2 [ 2495.643933][T11845] delete_channel: no stack [ 2495.655907][ T30] audit: type=1400 audit(1751812866.528:2601): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11847 comm="syz.1.12825" dest=20003 [ 2495.938996][T11860] /dev/nullb0: Can't lookup blockdev [ 2496.057992][ T30] audit: type=1400 audit(1751812867.488:2602): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11857 comm="syz.1.12827" dest=2 [ 2497.726612][T11879] : entered promiscuous mode [ 2499.659422][ T30] audit: type=1400 audit(1751812871.098:2603): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11895 comm="syz.2.12836" dest=2 [ 2499.948614][T11898] fuse: Bad value for 'rootmode' [ 2500.104024][ T30] audit: type=1400 audit(1751812871.538:2604): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11909 comm="syz.5.12838" dest=2 [ 2501.531951][ T30] audit: type=1400 audit(1751812872.958:2605): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11921 comm="syz.1.12845" [ 2503.647835][ T30] audit: type=1400 audit(1751812875.078:2606): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11960 comm="syz.7.12853" dest=2 [ 2503.844874][ T30] audit: type=1400 audit(1751812875.108:2607): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11959 comm="syz.2.12852" dest=2 [ 2504.596153][T11958] netlink: 'syz.1.12854': attribute type 10 has an invalid length. [ 2504.630174][T11968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2507.237466][ T30] audit: type=1400 audit(1751812878.658:2608): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12002 comm="syz.1.12866" dest=2 [ 2507.288923][ T30] audit: type=1400 audit(1751812878.728:2609): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12004 comm="syz.1.12867" dest=2 [ 2508.546296][T12029] kAFS: No cell specified [ 2509.309672][ T30] audit: type=1400 audit(1751812880.748:2610): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12034 comm="syz.7.12877" dest=2 [ 2509.378238][ T30] audit: type=1400 audit(1751812880.798:2611): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12036 comm="syz.3.12878" dest=2 [ 2509.853758][ T7691] libceph: connect (1)[c::]:6789 error -22 [ 2509.935757][ T7691] libceph: mon0 (1)[c::]:6789 connect error [ 2510.245061][T12045] ceph: No mds server is up or the cluster is laggy [ 2510.287915][ T7691] libceph: connect (1)[c::]:6789 error -22 [ 2510.489597][T12059] 9pnet_fd: Insufficient options for proto=fd [ 2510.890695][ T7691] libceph: mon0 (1)[c::]:6789 connect error [ 2511.102606][T12068] @: renamed from vlan0 [ 2513.096190][ T30] audit: type=1400 audit(1751812884.528:2612): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12078 comm="syz.5.12892" dest=2 [ 2515.966243][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12900'. [ 2518.236221][ T30] audit: type=1400 audit(1751812889.668:2613): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12137 comm="syz.2.12907" dest=2 [ 2519.297562][T12155] IPVS: length: 129 != 8 [ 2519.560534][T12158] fuse: Bad value for 'group_id' [ 2519.565599][T12158] fuse: Bad value for 'group_id' [ 2520.616314][T12165] delete_channel: no stack [ 2520.653064][T12167] /dev/nullb0: Can't lookup blockdev [ 2522.233085][ T30] audit: type=1400 audit(1751812893.668:2614): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12176 comm="syz.5.12920" dest=2 [ 2524.329070][ T30] audit: type=1326 audit(1751812895.358:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12188 comm="syz.5.12924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e6ef8e929 code=0x0 [ 2527.219893][ T30] audit: type=1400 audit(1751812898.658:2616): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12225 comm="syz.2.12932" dest=2 [ 2529.092968][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.099429][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.376485][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2532.605552][T12284] netlink: 252 bytes leftover after parsing attributes in process `syz.1.12947'. [ 2532.618519][ T30] audit: type=1400 audit(1751812904.028:2617): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12286 comm="syz.5.12948" dest=2 [ 2532.984150][T12295] IPv6: NLM_F_CREATE should be specified when creating new route [ 2533.309036][T12298] /dev/nullb0: Can't lookup blockdev [ 2533.355985][T12297] atomic_op ffff888077b58198 conn xmit_atomic 0000000000000000 [ 2535.421515][ T30] audit: type=1400 audit(1751812906.858:2618): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12325 comm="syz.2.12960" dest=2 [ 2536.520949][ T30] audit: type=1800 audit(1751812907.918:2619): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.12963" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2539.242175][T12367] No such timeout policy "syz1" [ 2540.022247][T12375] futex_wake_op: syz.7.12974 tries to shift op by -1; fix this program [ 2542.103820][T12387] delete_channel: no stack [ 2543.079940][T12398] set match dimension is over the limit! [ 2546.196966][T12410] IPVS: ip_vs_add_dest(): server weight less than zero [ 2548.852834][T12443] netlink: 452 bytes leftover after parsing attributes in process `syz.7.12990'. [ 2549.237900][T12444] netlink: 'syz.5.12993': attribute type 10 has an invalid length. [ 2550.199732][T12456] xt_SECMARK: invalid mode: 2 [ 2550.305098][T12452] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 2550.504194][T12444] bond0: (slave wlan1): Releasing backup interface [ 2550.544788][T12462] xt_hashlimit: size too large, truncated to 1048576 [ 2550.574114][T12444] team0: Port device wlan1 added [ 2550.602308][T12465] netlink: 'syz.1.12998': attribute type 33 has an invalid length. [ 2550.708896][T12465] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12998'. [ 2551.798306][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13000'. [ 2556.090267][ T30] audit: type=1326 audit(1751812927.518:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2556.133758][ T30] audit: type=1326 audit(1751812927.528:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2556.157296][ T30] audit: type=1326 audit(1751812927.548:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa3b698d3df code=0x7ffc0000 [ 2556.185259][T12515] sctp: [Deprecated]: syz.3.13012 (pid 12515) Use of int in maxseg socket option. [ 2556.185259][T12515] Use struct sctp_assoc_value instead [ 2556.218904][ T30] audit: type=1326 audit(1751812927.548:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2556.241432][ T30] audit: type=1326 audit(1751812927.548:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2556.265139][ T30] audit: type=1326 audit(1751812927.548:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2556.305725][ T30] audit: type=1326 audit(1751812927.548:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2556.372315][ T30] audit: type=1326 audit(1751812927.548:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2556.404518][ T30] audit: type=1326 audit(1751812927.548:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2556.676149][ T30] audit: type=1326 audit(1751812927.548:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.3.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x7ffc0000 [ 2557.716609][T12536] futex_wake_op: syz.7.13017 tries to shift op by -1; fix this program [ 2559.417745][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13023'. [ 2561.590138][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 2561.590169][ T30] audit: type=1400 audit(1751812933.028:2690): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12575 comm="syz.1.13030" dest=2 [ 2563.208596][T12592] fuse: Bad value for 'fd' [ 2563.214465][T12592] Invalid source name [ 2563.218986][T12592] UBIFS error (pid: 12592): cannot open "./file0", error -22 [ 2563.221187][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13033'. [ 2563.964961][ T30] audit: type=1400 audit(1751812935.388:2691): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12594 comm="syz.1.13036" dest=2 [ 2564.675354][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13032'. [ 2564.927629][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13039'. [ 2565.667869][T12611] xt_nat: multiple ranges no longer supported [ 2570.512072][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13052'. [ 2571.155386][ T30] audit: type=1326 audit(1751812942.578:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12657 comm="syz.2.13053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cca18e929 code=0x0 [ 2573.897642][T12675] set match dimension is over the limit! [ 2575.199803][ T30] audit: type=1400 audit(1751812945.788:2693): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12682 comm="syz.5.13060" daddr=::ffff:127.0.0.1 [ 2577.827285][T12728] overlayfs: failed to clone upperpath [ 2580.599082][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13072'. [ 2581.338337][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13074'. [ 2581.347491][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13074'. [ 2581.364244][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13074'. [ 2582.825440][ T30] audit: type=1400 audit(1751812954.258:2694): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12747 comm="syz.2.13076" dest=2 [ 2583.983588][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13078'. [ 2583.992766][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13078'. [ 2584.321921][ T30] audit: type=1400 audit(1751812955.458:2695): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12755 comm="syz.5.13078" daddr=::ffff:127.0.0.1 [ 2584.578329][ T30] audit: type=1400 audit(1751812956.008:2696): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12768 comm="syz.2.13083" dest=2 [ 2587.094456][T12798] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2587.792388][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13091'. [ 2587.871810][T12805] netlink: 'syz.1.13090': attribute type 27 has an invalid length. [ 2588.151149][ T30] audit: type=1400 audit(1751812959.318:2697): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12794 comm="syz.1.13090" dest=2 [ 2588.417154][ T30] audit: type=1400 audit(1751812959.848:2698): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12812 comm="syz.5.13093" dest=2 [ 2589.581443][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13103'. [ 2589.688532][ T30] audit: type=1400 audit(1751812961.128:2699): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12826 comm="syz.5.13096" dest=2 [ 2589.903236][T12830] vlan2: left allmulticast mode [ 2589.946932][ T30] audit: type=1400 audit(1751812961.378:2700): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12829 comm="syz.3.13098" dest=2 [ 2590.080435][T12838] No such timeout policy "syz0" [ 2590.206336][T12847] xt_TCPMSS: Only works on TCP SYN packets [ 2590.219490][T12847] tmpfs: Bad value for 'mpol' [ 2590.512023][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.520027][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.482995][ T30] audit: type=1400 audit(1751812963.918:2701): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12866 comm="syz.1.13109" dest=2 [ 2592.523515][ T30] audit: type=1400 audit(1751812963.958:2702): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12864 comm="syz.3.13108" dest=2 [ 2593.581930][T12884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13113'. [ 2594.376796][ T30] audit: type=1400 audit(1751812965.808:2703): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12889 comm="syz.7.13116" dest=20000 [ 2595.947231][ T30] audit: type=1400 audit(1751812967.378:2704): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12906 comm="syz.1.13122" dest=2 [ 2597.212307][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13128'. [ 2598.060322][ T30] audit: type=1400 audit(1751812969.478:2705): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12932 comm="syz.1.13129" dest=2 [ 2598.532793][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13133'. [ 2600.973757][ T30] audit: type=1400 audit(1751812972.408:2706): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12942 comm="syz.1.13134" [ 2601.628607][ T30] audit: type=1400 audit(1751812972.708:2707): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12949 comm="syz.3.13136" dest=2 [ 2603.293883][ T30] audit: type=1400 audit(1751812974.728:2708): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12992 comm="syz.5.13145" dest=2 [ 2604.360971][ T30] audit: type=1400 audit(1751812975.798:2709): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13009 comm="syz.1.13151" dest=2 [ 2605.851547][T13021] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 2606.464382][T13029] netlink: 788 bytes leftover after parsing attributes in process `syz.7.13153'. [ 2606.858262][T13027] xt_TCPMSS: Only works on TCP SYN packets [ 2607.762164][T13041] lo speed is unknown, defaulting to 1000 [ 2607.769448][T13041] lo speed is unknown, defaulting to 1000 [ 2607.776568][T13041] lo speed is unknown, defaulting to 1000 [ 2608.175620][T13045] 9pnet_fd: Insufficient options for proto=fd [ 2610.849085][T13062] netlink: 'syz.1.13164': attribute type 11 has an invalid length. [ 2613.790444][T13093] 9pnet_fd: Insufficient options for proto=fd [ 2614.954523][ T30] audit: type=1400 audit(1751812986.388:2710): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13109 comm="syz.1.13179" dest=2 [ 2617.110381][T13123] could not allocate digest TFM handle poly1305-generic [ 2618.896477][T13157] batadv1: entered promiscuous mode [ 2620.871961][ T30] audit: type=1400 audit(1751812992.288:2711): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13161 comm="syz.5.13192" dest=2 [ 2620.964271][T13170] futex_wake_op: syz.3.13194 tries to shift op by -1; fix this program [ 2621.678137][ T30] audit: type=1326 audit(1751812993.068:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13171 comm="syz.2.13195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1cca18e929 code=0x0 [ 2624.557813][T13204] netlink: 'syz.3.13199': attribute type 1 has an invalid length. [ 2624.568266][T13204] overlayfs: failed to clone upperpath [ 2625.816320][ T30] audit: type=1400 audit(1751812997.248:2713): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13208 comm="syz.2.13205" daddr=::ffff:172.20.20.20 dest=20001 [ 2626.858862][ T30] audit: type=1400 audit(1751812998.278:2714): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13216 comm="syz.3.13207" dest=2 [ 2628.157908][T13232] bridge0: entered allmulticast mode [ 2628.565292][T13241] overlayfs: failed to clone upperpath [ 2629.009014][T13250] overlayfs: failed to clone upperpath [ 2630.157087][ T30] audit: type=1326 audit(1751813000.008:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13235 comm="syz.2.13213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1cca18e929 code=0x0 [ 2632.136243][T13273] overlayfs: failed to clone upperpath [ 2633.525354][ T30] audit: type=1400 audit(1751813004.958:2716): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13280 comm="syz.7.13222" dest=2 [ 2634.216066][ T43] libceph: connect (1)[c::]:6789 error -22 [ 2634.231539][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 2634.531348][ T43] libceph: connect (1)[c::]:6789 error -22 [ 2634.942152][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 2634.951469][T13291] ceph: No mds server is up or the cluster is laggy [ 2635.417850][T13315] xt_socket: unknown flags 0x8 [ 2636.501247][T13324] overlayfs: failed to clone lowerpath [ 2639.060788][ T30] audit: type=1400 audit(1751813010.498:2717): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13346 comm="syz.7.13239" dest=2 [ 2643.282130][ T30] audit: type=1400 audit(1751813014.718:2718): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13392 comm="syz.3.13252" dest=2 [ 2643.977187][T13399] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2644.111723][T13397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13254'. [ 2646.252515][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13257'. [ 2646.261771][T13423] vcan0: entered promiscuous mode [ 2646.266858][T13423] vcan0: entered allmulticast mode [ 2648.083846][T13437] overlayfs: failed to clone upperpath [ 2648.317845][ T30] audit: type=1400 audit(1751813019.748:2719): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13443 comm="syz.1.13265" dest=2 [ 2648.581107][ T30] audit: type=1400 audit(1751813020.008:2720): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13448 comm="syz.5.13267" dest=2 [ 2650.500106][T13467] bridge0: left allmulticast mode [ 2650.526270][ T30] audit: type=1400 audit(1751813021.958:2721): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13465 comm="syz.5.13274" dest=2 [ 2651.292556][ T30] audit: type=1400 audit(1751813022.728:2722): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13477 comm="syz.3.13278" dest=2 [ 2652.228917][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.235270][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.544355][T13505] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2653.556439][T13505] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2653.568519][T13505] bridge_slave_0: default FDB implementation only supports local addresses [ 2653.761685][T13506] /dev/nullb0: Can't lookup blockdev [ 2654.087119][T13504] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2655.005146][T13516] SET target dimension over the limit! [ 2658.491102][T13554] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2658.609135][T13551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2658.625734][T13551] IPv6: NLM_F_CREATE should be set when creating new route [ 2658.632994][T13551] IPv6: NLM_F_CREATE should be set when creating new route [ 2658.640215][T13551] IPv6: NLM_F_CREATE should be set when creating new route [ 2660.734391][T13572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13301'. [ 2661.638749][T14842] libceph: connect (1)[c::]:6789 error -22 [ 2661.884033][T13581] ceph: No mds server is up or the cluster is laggy [ 2661.886616][T14842] libceph: mon0 (1)[c::]:6789 connect error [ 2662.213242][ T7691] libceph: connect (1)[c::]:6789 error -22 [ 2662.684185][ T7691] libceph: mon0 (1)[c::]:6789 connect error [ 2664.166557][T13612] overlayfs: failed to clone lowerpath [ 2665.114033][T13621] lo speed is unknown, defaulting to 1000 [ 2665.120808][T13621] lo speed is unknown, defaulting to 1000 [ 2665.127540][T13621] lo speed is unknown, defaulting to 1000 [ 2665.249750][T13625] /dev/nullb0: Can't lookup blockdev [ 2665.567969][T13636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13319'. [ 2665.949281][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13320'. [ 2674.558943][T13701] 9pnet_fd: Insufficient options for proto=fd [ 2675.254326][ T30] audit: type=1326 audit(1751813755.602:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.5.13335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e6ef8e929 code=0x0 [ 2679.325534][T14823] libceph: connect (1)[c::]:6789 error -22 [ 2679.336940][T14823] libceph: mon0 (1)[c::]:6789 connect error [ 2679.386501][T13750] ceph: No mds server is up or the cluster is laggy [ 2679.415822][T13759] trusted_key: encrypted_key: insufficient parameters specified [ 2681.458916][T13767] ptrace attach of "./syz-executor exec"[8587] was attempted by "./syz-executor exec"[13767] [ 2681.470771][T13767] overlayfs: failed to clone upperpath [ 2681.511279][T13774] virtio-fs: tag not found [ 2681.800924][T13784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13356'. [ 2681.814157][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13356'. [ 2683.576392][T13805] overlayfs: failed to clone upperpath [ 2683.638794][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13365'. [ 2684.860056][T13827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13368'. [ 2685.584683][T13830] overlayfs: failed to clone upperpath [ 2687.295076][T13839] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13370'. [ 2689.694345][T13858] netlink: 'syz.2.13378': attribute type 1 has an invalid length. [ 2690.682045][ T30] audit: type=1400 audit(1751813771.122:2724): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=13868 comm="syz.5.13380" [ 2691.215170][T13873] veth1_macvtap: left promiscuous mode [ 2691.226973][T13873] macsec0: entered promiscuous mode [ 2691.236463][T13873] macsec0: entered allmulticast mode [ 2691.350986][T13873] veth1_macvtap: entered promiscuous mode [ 2691.357116][T13873] veth1_macvtap: entered allmulticast mode [ 2691.372846][T13873] macsec0: left promiscuous mode [ 2691.377943][T13873] macsec0: left allmulticast mode [ 2691.418325][T13873] veth1_macvtap: left allmulticast mode [ 2692.914945][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13388'. [ 2693.649337][T13900] netlink: 'syz.2.13387': attribute type 10 has an invalid length. [ 2693.663155][T13900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2693.734790][T13900] batadv0: entered promiscuous mode [ 2693.735120][T13900] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2694.738255][T13925] trusted_key: encrypted_key: insufficient parameters specified [ 2696.484387][T13948] fuse: Bad value for 'fd' [ 2707.769433][T14017] tmpfs: Bad value for 'nr_blocks' [ 2707.785075][T14017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2709.231363][T14030] : entered promiscuous mode [ 2714.253975][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2714.267558][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.431155][T14064] batadv_slave_1: entered promiscuous mode [ 2716.017829][T14058] batadv_slave_1: left promiscuous mode [ 2716.856440][T14069] 9pnet_fd: Insufficient options for proto=fd [ 2717.280280][T14080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2718.267648][T14093] overlayfs: failed to clone upperpath [ 2719.133567][ T30] audit: type=1400 audit(1751813799.572:2725): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14090 comm="syz.3.13440" dest=2 [ 2720.199276][T14110] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2721.045586][T14136] rdma_rxe: rxe_newlink: failed to add lo [ 2723.213139][ T30] audit: type=1400 audit(1751813803.652:2726): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14155 comm="syz.2.13455" dest=2 [ 2723.270486][ T7691] libceph: connect (1)[c::]:6789 error -22 [ 2723.276546][ T7691] libceph: mon0 (1)[c::]:6789 connect error [ 2723.606089][ T7691] libceph: connect (1)[c::]:6789 error -22 [ 2723.623808][T14153] ceph: No mds server is up or the cluster is laggy [ 2723.633106][ T7691] libceph: mon0 (1)[c::]:6789 connect error [ 2726.241987][ T30] audit: type=1400 audit(1751813806.652:2727): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14190 comm="syz.1.13466" dest=20002 [ 2732.226095][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13480'. [ 2735.320861][T14273] overlayfs: failed to clone upperpath [ 2735.980096][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13486'. [ 2736.007732][T14285] No such timeout policy "syz1" [ 2737.596316][ T30] audit: type=1400 audit(1751813818.032:2728): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14304 comm="syz.3.13495" daddr=::ffff:127.0.0.1 dest=20003 [ 2737.759284][ T30] audit: type=1400 audit(1751813818.202:2729): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14306 comm="syz.7.13496" daddr=::ffff:127.0.0.1 dest=20003 [ 2738.574653][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13497'. [ 2738.583952][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13497'. [ 2739.055332][T14321] bridge0: port 3(netdevsim0) entered blocking state [ 2739.062483][T14321] bridge0: port 3(netdevsim0) entered disabled state [ 2739.346780][T14321] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 2739.361116][T14321] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 2739.369817][T14321] bridge0: port 3(netdevsim0) entered blocking state [ 2739.377337][T14321] bridge0: port 3(netdevsim0) entered forwarding state [ 2740.721478][ T30] audit: type=1400 audit(1751813821.162:2730): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14340 comm="syz.3.13508" daddr=::ffff:127.0.0.1 dest=20003 [ 2742.123022][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13513'. [ 2742.311055][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13514'. [ 2742.497723][T14365] overlayfs: failed to clone upperpath [ 2743.089258][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13514'. [ 2744.303216][ T30] audit: type=1400 audit(1751813824.742:2731): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14382 comm="syz.5.13521" daddr=::ffff:127.0.0.1 dest=20003 [ 2744.745059][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13524'. [ 2745.600872][ T30] audit: type=1326 audit(1751813826.042:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2745.927609][ T30] audit: type=1326 audit(1751813826.062:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2745.962790][ T30] audit: type=1326 audit(1751813826.062:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2745.986111][ T30] audit: type=1326 audit(1751813826.062:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2746.017626][ T30] audit: type=1326 audit(1751813826.062:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2746.061017][ T30] audit: type=1326 audit(1751813826.062:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2746.083607][ T30] audit: type=1326 audit(1751813826.062:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2746.108462][ T30] audit: type=1326 audit(1751813826.062:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2d3d8d290 code=0x7ffc0000 [ 2746.147866][ T30] audit: type=1326 audit(1751813826.072:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14403 comm="syz.7.13529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d3d8e929 code=0x7ffc0000 [ 2748.803370][T14451] fuse: Bad value for 'fd' [ 2749.918013][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2749.918108][ T30] audit: type=1400 audit(1751813830.352:2785): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14467 comm="syz.5.13544" daddr=::ffff:127.0.0.1 dest=20003 [ 2750.514099][T14479] bridge0: port 3(team0) entered blocking state [ 2750.520771][T14479] bridge0: port 3(team0) entered disabled state [ 2750.527955][T14479] team0: entered allmulticast mode [ 2750.533435][T14479] geneve0: entered allmulticast mode [ 2750.545513][T14479] team0: entered promiscuous mode [ 2750.550952][T14479] geneve0: entered promiscuous mode [ 2758.679478][T14517] 9pnet_fd: Insufficient options for proto=fd [ 2760.076189][ T30] audit: type=1326 audit(1751813840.512:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14524 comm="syz.3.13559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3b698e929 code=0x0 [ 2761.655451][T14526] ceph: No mds server is up or the cluster is laggy [ 2762.589775][T14547] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 2763.369236][T14552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13559'. [ 2771.862692][T14595] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13572'. [ 2773.196229][ T30] audit: type=1400 audit(1751813853.632:2787): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14600 comm="syz.1.13575" daddr=::ffff:127.0.0.1 dest=20003 [ 2774.510721][T14612] ceph: No mds server is up or the cluster is laggy [ 2775.431091][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.437402][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.470988][T14621] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2776.839700][ T30] audit: type=1400 audit(1751813857.282:2788): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14632 comm="syz.3.13586" daddr=::ffff:0.0.0.0 dest=20003 [ 2776.863532][T14641] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13584'. [ 2778.403850][T14639] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 2778.512982][ T30] audit: type=1400 audit(1751813858.952:2789): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14652 comm="syz.7.13589" daddr=::ffff:127.0.0.1 dest=20003 [ 2778.671422][T14659] netlink: 'syz.5.13594': attribute type 2 has an invalid length. [ 2781.368062][T14698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13602'. [ 2781.465044][ T30] audit: type=1400 audit(1751813861.902:2790): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14692 comm="syz.1.13603" daddr=::ffff:127.0.0.1 dest=20003 [ 2782.306719][T14706] netlink: 588 bytes leftover after parsing attributes in process `syz.5.13604'. [ 2787.909859][T14756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2788.582042][ T30] audit: type=1400 audit(1751813869.022:2791): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14765 comm="syz.7.13618" daddr=::ffff:127.0.0.1 dest=20003 [ 2788.679675][T14767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2790.223932][T14778] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13622'. [ 2792.029542][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13626'. [ 2792.532526][T14793] xt_CT: No such helper "netbios-ns" [ 2796.451368][T14818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2804.302822][T14853] lo speed is unknown, defaulting to 1000 [ 2804.309622][T14853] lo speed is unknown, defaulting to 1000 [ 2804.316322][T14853] lo speed is unknown, defaulting to 1000 [ 2805.713304][T14874] /dev/loop5: Can't lookup blockdev [ 2810.630673][T14908] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2813.588890][T14939] ceph: No mds server is up or the cluster is laggy [ 2813.921167][T14927] trusted_key: encrypted_key: insufficient parameters specified [ 2814.172177][ T30] audit: type=1400 audit(1751813894.562:2792): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14945 comm="syz.5.13667" daddr=::ffff:172.20.20.0 [ 2815.243439][T14953] futex_wake_op: syz.2.13663 tries to shift op by 144; fix this program [ 2819.809930][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13671'. [ 2820.334696][ T30] audit: type=1400 audit(1751813900.762:2793): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14978 comm="syz.1.13674" daddr=::ffff:127.0.0.1 dest=20003 [ 2822.682533][T14997] ceph: No mds server is up or the cluster is laggy [ 2822.710255][T14823] libceph: connect (1)[c::]:6789 error -22 [ 2822.716300][T14823] libceph: mon0 (1)[c::]:6789 connect error [ 2823.190902][T14823] libceph: connect (1)[c::]:6789 error -22 [ 2823.219021][T14823] libceph: mon0 (1)[c::]:6789 connect error [ 2823.343886][T15010] ceph: No mds server is up or the cluster is laggy [ 2824.593473][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13683'. [ 2824.976323][T15044] IPVS: Unknown mcast interface: geneve0 [ 2827.201261][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13697'. [ 2827.948211][T15064] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2828.005445][T15069] 9pnet: Unknown protocol version 9p200 [ 2829.783966][T15091] overlayfs: failed to clone upperpath [ 2835.741548][T15120] ceph: No mds server is up or the cluster is laggy [ 2835.895878][T15126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13711'. [ 2836.408205][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.415338][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2839.162830][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13716'. [ 2839.679652][T15147] netlink: 252 bytes leftover after parsing attributes in process `syz.3.13718'. [ 2843.426453][T15185] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2845.724376][T15214] netlink: 452 bytes leftover after parsing attributes in process `syz.2.13733'. [ 2848.553451][T15250] 9pnet_fd: Insufficient options for proto=fd [ 2849.587686][ T30] audit: type=1400 audit(1751813930.022:2794): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15246 comm="syz.3.13743" dest=10 [ 2850.827927][T15262] overlayfs: failed to clone upperpath [ 2851.606998][T15270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13752'. [ 2852.512212][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13756'. [ 2852.523486][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13756'. [ 2853.300722][T15292] trusted_key: encrypted_key: insufficient parameters specified [ 2854.415626][T15299] 9pnet_fd: Insufficient options for proto=fd [ 2856.035016][T15317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2856.071387][T15317] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2856.079731][T15317] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2856.087920][T15317] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2856.096289][T15317] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2856.209010][T14842] lo speed is unknown, defaulting to 1000 [ 2856.922434][T14842] s: Port: 1 Link ACTIVE [ 2857.386574][T15320] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 2858.646095][ T30] audit: type=1400 audit(1751813939.082:2795): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15332 comm="syz.1.13768" daddr=::ffff:172.20.20.59 dest=20003 [ 2858.691734][T15335] Device name cannot be null; rc = [-22] [ 2858.709535][T15335] overlayfs: failed to clone lowerpath [ 2859.006099][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13770'. [ 2859.017558][T15344] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 2859.025632][T15344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2861.726360][T15355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2861.745942][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13774'. [ 2861.755057][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13774'. [ 2863.860326][ T30] audit: type=1400 audit(1751813944.302:2796): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15375 comm="syz.5.13780" daddr=::ffff:172.20.20.20 dest=20001 [ 2864.805544][T15386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13782'. [ 2870.582475][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13806'. [ 2872.904518][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13809'. [ 2873.243937][ T30] audit: type=1400 audit(1751813953.682:2797): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15483 comm="syz.1.13812" dest=20004 [ 2873.323223][ T30] audit: type=1400 audit(1751813953.682:2798): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15486 comm="syz.5.13813" daddr=::ffff:127.0.0.1 dest=20003 [ 2873.460811][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13815'. [ 2875.363579][T14823] Process accounting resumed [ 2875.563127][ T30] audit: type=1400 audit(1751813956.002:2799): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15532 comm="syz.5.13827" daddr=::ffff:127.0.0.1 dest=20003 [ 2877.723203][ T30] audit: type=1400 audit(1751813957.702:2800): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15552 comm="syz.1.13832" daddr=::ffff:172.20.20.7 [ 2880.122508][ T30] audit: type=1400 audit(1751813960.562:2801): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15578 comm="syz.3.13840" daddr=::ffff:127.0.0.1 dest=20003 [ 2880.314443][T15581] netlink: 'syz.2.13841': attribute type 1 has an invalid length. [ 2880.379521][T15581] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2885.424044][T15622] veth0_to_team: entered promiscuous mode [ 2885.430212][T15622] veth0_to_team: entered allmulticast mode [ 2886.029209][T15625] ceph: No mds server is up or the cluster is laggy [ 2886.155316][ T30] audit: type=1400 audit(1751813966.592:2802): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15631 comm="syz.2.13853" daddr=::ffff:127.0.0.1 dest=20003 [ 2887.844817][T15653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13857'. [ 2893.636673][T15703] batadv0: entered promiscuous mode [ 2895.310959][T15720] netlink: 'syz.3.13872': attribute type 10 has an invalid length. [ 2895.515852][T15737] tipc: Enabling of bearer rejected, failed to enable media [ 2896.464458][ T30] audit: type=1400 audit(1751813976.902:2803): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15749 comm="syz.7.13882" dest=20000 [ 2897.700921][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.707278][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.545308][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13896'. [ 2898.883947][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13896'. [ 2899.878600][T15797] xt_TCPMSS: Only works on TCP SYN packets [ 2902.434766][T15828] netlink: 'syz.5.13902': attribute type 6 has an invalid length. [ 2908.871067][T15883] siw: device registration error -23 [ 2909.605494][T31944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2909.623603][T31944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2909.635664][T31944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2909.654572][T31944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2909.664993][T31944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2909.763442][T15896] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2911.781299][T31944] Bluetooth: hci4: command tx timeout [ 2912.181197][T15886] lo speed is unknown, defaulting to 1000 [ 2912.187932][T15886] lo speed is unknown, defaulting to 1000 [ 2912.237561][T15886] lo speed is unknown, defaulting to 1000 [ 2912.265059][T15920] xt_bpf: check failed: parse error [ 2913.869136][T31944] Bluetooth: hci4: command tx timeout [ 2914.153845][ T30] audit: type=1400 audit(1751813994.562:2804): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15940 comm="syz.5.13933" daddr=::ffff:172.20.20.20 dest=20001 [ 2915.104706][T15886] chnl_net:caif_netlink_parms(): no params data found [ 2916.329983][ T5156] Bluetooth: hci4: command tx timeout [ 2917.212397][T15886] bridge0: port 1(bridge_slave_0) entered blocking state [ 2917.221990][T15886] bridge0: port 1(bridge_slave_0) entered disabled state [ 2917.233255][T15886] bridge_slave_0: entered allmulticast mode [ 2917.980780][T15886] bridge_slave_0: entered promiscuous mode [ 2918.013795][T15886] bridge0: port 2(bridge_slave_1) entered blocking state [ 2918.176372][T15886] bridge0: port 2(bridge_slave_1) entered disabled state [ 2918.198181][T15886] bridge_slave_1: entered allmulticast mode [ 2918.230455][T15886] bridge_slave_1: entered promiscuous mode [ 2918.548583][T31944] Bluetooth: hci4: command tx timeout [ 2919.789854][T15886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2920.856312][T15886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2921.020446][T15886] team0: Port device team_slave_0 added [ 2921.086868][T15886] team0: Port device team_slave_1 added [ 2921.158488][T15886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2921.170612][T16002] /dev/loop5: Can't lookup blockdev [ 2921.194223][T15886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2921.221282][T15886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2921.237255][T15886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2921.244961][T15886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2921.288892][T15886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2921.329183][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13949'. [ 2922.787854][T15886] hsr_slave_0: entered promiscuous mode [ 2922.901504][T15886] hsr_slave_1: entered promiscuous mode [ 2925.709756][T16035] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2925.950125][T16033] 9pnet_fd: Insufficient options for proto=fd [ 2928.993969][T15886] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2929.032222][T15886] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2929.085229][T15886] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2929.112838][T16059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13964'. [ 2929.129552][T15886] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2929.141242][T16060] netlink: 'syz.3.13965': attribute type 10 has an invalid length. [ 2929.163766][T11325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.177984][T11325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.186273][T16061] delete_channel: no stack [ 2929.361905][T15886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2929.411650][T15886] 8021q: adding VLAN 0 to HW filter on device team0 [ 2929.541235][T13154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2929.550685][T13154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2929.561453][T13154] bridge0: port 2(bridge_slave_1) entered blocking state [ 2929.568701][T13154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2930.261512][T16082] ceph: No mds server is up or the cluster is laggy [ 2931.126574][T16093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2933.962945][T16095] netlink: 'syz.3.13972': attribute type 11 has an invalid length. [ 2935.327774][T15886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2936.389575][T16108] ip6erspan0: entered allmulticast mode [ 2936.401596][ T30] audit: type=1400 audit(1751814016.842:2805): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16101 comm="syz.7.13974" dest=20004 [ 2936.943749][ T30] audit: type=1400 audit(1751814017.382:2806): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16120 comm="syz.7.13981" daddr=::ffff:127.0.0.1 dest=20003 [ 2938.254430][T15886] veth0_vlan: entered promiscuous mode [ 2939.224891][T15886] veth1_vlan: entered promiscuous mode [ 2939.255923][T15886] veth0_macvtap: entered promiscuous mode [ 2940.281163][T15886] veth1_macvtap: entered promiscuous mode [ 2940.308181][T15886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2940.384665][T15886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2940.404896][T15886] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2940.416999][T16142] xt_l2tp: v2 doesn't support IP mode [ 2940.429590][T15886] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2940.448488][T15886] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2940.467950][T15886] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2941.644169][T16158] ceph: No mds server is up or the cluster is laggy [ 2942.007517][T13154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2942.022249][T13154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2942.088384][T15331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2942.097506][T15331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2942.158514][ T30] audit: type=1400 audit(1751814022.582:2807): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=16170 comm="syz.7.13991" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2942.381183][ T30] audit: type=1400 audit(1751814022.822:2808): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16168 comm="syz.1.13990" dest=20003 [ 2944.071175][T16184] macvtap1: entered allmulticast mode [ 2944.076615][T16184] veth0_macvtap: entered allmulticast mode [ 2944.314135][T16182] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.13914'. [ 2944.647629][T16188] delete_channel: no stack [ 2944.768364][ T30] audit: type=1400 audit(1751814025.202:2809): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16196 comm="syz.5.13995" daddr=::ffff:127.0.0.1 dest=20003 [ 2948.953007][T16232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2949.147795][T16232] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2949.156710][T16232] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2949.165308][T16232] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2949.173637][T16232] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2949.186538][T14842] lo speed is unknown, defaulting to 1000 [ 2949.192582][T14842] syz0: Port: 1 Link ACTIVE [ 2951.694943][T16248] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 2951.704592][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14008'. [ 2952.593677][T16256] fuse: Unknown parameter 'fd0x0000000000000006' [ 2953.272262][ T30] audit: type=1400 audit(1751814033.712:2810): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16257 comm="syz.8.14009" daddr=::ffff:127.0.0.1 dest=20003 [ 2958.425958][T16305] xt_NFQUEUE: number of total queues is 0 [ 2958.591304][ T30] audit: type=1400 audit(1751814039.032:2811): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16310 comm="syz.8.14026" daddr=::ffff:127.0.0.1 dest=20003 [ 2959.455679][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.464512][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2961.554058][T16338] fuse: Unknown parameter '`fd' [ 2963.988567][T16354] Device name cannot be null; rc = [-22] [ 2964.178719][T16354] overlayfs: overlapping lowerdir path [ 2964.291681][ T30] audit: type=1400 audit(1751814044.732:2812): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16355 comm="syz.5.14039" daddr=::ffff:127.0.0.1 dest=20003 [ 2965.935011][T16376] netlink: 'syz.3.14042': attribute type 10 has an invalid length. [ 2968.369175][T14823] libceph: connect (1)[c::]:6789 error -22 [ 2968.388692][T14823] libceph: mon0 (1)[c::]:6789 connect error [ 2968.418928][T16395] ceph: No mds server is up or the cluster is laggy [ 2968.609462][T16401] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2968.688469][ T30] audit: type=1400 audit(1751814049.122:2813): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16400 comm="syz.1.14049" daddr=::ffff:127.0.0.1 dest=20003 [ 2969.770670][T16414] netlink: 'syz.5.14051': attribute type 10 has an invalid length. [ 2969.779117][T16414] team0: Device bond0 is already an upper device of the team interface [ 2970.163633][T16428] netlink: 'syz.1.14052': attribute type 4 has an invalid length. [ 2971.013115][T16432] Device name cannot be null; rc = [-22] [ 2971.020080][T16432] overlayfs: failed to clone lowerpath [ 2971.803995][T16444] batadv_slave_1: entered promiscuous mode [ 2971.813299][T16443] batadv_slave_1: left promiscuous mode [ 2973.262728][T16452] ceph: No mds server is up or the cluster is laggy [ 2975.110680][ T30] audit: type=1400 audit(1751814055.542:2814): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=16471 comm="syz.7.14062" daddr=::ffff:127.0.0.1 dest=20003 [ 2976.171598][T16483] netlink: 84 bytes leftover after parsing attributes in process `syz.3.14067'. [ 2978.456287][T16503] kernel profiling enabled (shift: 17) [ 2979.956227][T16516] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2980.548256][T16521] smc: removing ib device syz2 [ 2981.411123][T16521] ------------[ cut here ]------------ [ 2981.416627][T16521] WARNING: CPU: 0 PID: 16521 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x48/0x60 [ 2981.427498][T16521] Modules linked in: [ 2981.432397][T16521] CPU: 0 UID: 0 PID: 16521 Comm: syz.7.14072 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2981.444625][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2981.454723][T16521] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 2981.460227][T16521] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 40 50 88 f9 48 83 3b 00 75 0c e8 25 f8 26 f9 5b e9 ff 9c d1 02 cc e8 19 f8 26 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 2981.479897][T16521] RSP: 0018:ffffc9000bea7098 EFLAGS: 00010246 [ 2981.485959][T16521] RAX: ffffffff88996567 RBX: ffff8880756c53a0 RCX: 0000000000080000 [ 2981.493991][T16521] RDX: ffffc9001b280000 RSI: 000000000007ffff RDI: 0000000000080000 [ 2981.502014][T16521] RBP: ffff8880756c5080 R08: ffff8880756c4783 R09: 1ffff1100ead88f0 [ 2981.510018][T16521] R10: dffffc0000000000 R11: ffffffff8897a290 R12: dffffc0000000000 [ 2981.518069][T16521] R13: dffffc0000000000 R14: ffffffff8897a290 R15: dffffc0000000000 [ 2981.526086][T16521] FS: 00007fa2d4c036c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 2981.535440][T16521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2981.542102][T16521] CR2: 00007ff4f91b3f98 CR3: 000000006225c000 CR4: 00000000003526f0 [ 2981.550116][T16521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2981.558078][T16521] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2981.566085][T16521] Call Trace: [ 2981.569380][T16521] [ 2981.572302][T16521] rxe_dealloc+0x27/0xc0 [ 2981.576541][T16521] ? __pfx_rxe_dealloc+0x10/0x10 [ 2981.581523][T16521] ib_dealloc_device+0x54/0x200 [ 2981.586370][T16521] __ib_unregister_device+0x393/0x3f0 [ 2981.591779][T16521] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 2981.597669][T16521] ib_unregister_device_and_put+0xb8/0xf0 [ 2981.603430][T16521] nldev_dellink+0x2d1/0x320 [ 2981.608013][T16521] ? __pfx_nldev_dellink+0x10/0x10 [ 2981.613240][T16521] ? rcu_is_watching+0x15/0xb0 [ 2981.617998][T16521] ? cap_capable+0x11f/0x460 [ 2981.622686][T16521] ? safesetid_security_capable+0xa9/0x1a0 [ 2981.628524][T16521] ? bpf_lsm_capable+0x9/0x20 [ 2981.633193][T16521] ? security_capable+0x7e/0x2e0 [ 2981.638507][T16521] ? __pfx_nldev_dellink+0x10/0x10 [ 2981.643647][T16521] rdma_nl_rcv+0x6ab/0x980 [ 2981.648062][T16521] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 2981.653219][T16521] ? __lock_acquire+0xab9/0xd20 [ 2981.658089][T16521] ? netlink_deliver_tap+0x2e/0x1b0 [ 2981.663323][T16521] ? netlink_deliver_tap+0x2e/0x1b0 [ 2981.668571][T16521] netlink_unicast+0x75b/0x8d0 [ 2981.673330][T16521] netlink_sendmsg+0x805/0xb30 [ 2981.678087][T16521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2981.683421][T16521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2981.688763][T16521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2981.694066][T16521] __sock_sendmsg+0x21c/0x270 [ 2981.698835][T16521] ____sys_sendmsg+0x505/0x830 [ 2981.703604][T16521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2981.708936][T16521] ? import_iovec+0x74/0xa0 [ 2981.713433][T16521] ___sys_sendmsg+0x21f/0x2a0 [ 2981.718101][T16521] ? __pfx____sys_sendmsg+0x10/0x10 [ 2981.723352][T16521] ? __fget_files+0x2a/0x420 [ 2981.727927][T16521] ? __fget_files+0x3a0/0x420 [ 2981.732659][T16521] __x64_sys_sendmsg+0x19b/0x260 [ 2981.737793][T16521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2981.743438][T16521] ? do_syscall_64+0xbe/0x3b0 [ 2981.748109][T16521] do_syscall_64+0xfa/0x3b0 [ 2981.752674][T16521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2981.758781][T16521] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2981.764410][T16521] ? clear_bhb_loop+0x60/0xb0 [ 2981.769155][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2981.775044][T16521] RIP: 0033:0x7fa2d3d8e929 [ 2981.779491][T16521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2981.799168][T16521] RSP: 002b:00007fa2d4c03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2981.807589][T16521] RAX: ffffffffffffffda RBX: 00007fa2d3fb5fa0 RCX: 00007fa2d3d8e929 [ 2981.815620][T16521] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 2981.823646][T16521] RBP: 00007fa2d3e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2981.831647][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2981.839951][T16521] R13: 0000000000000000 R14: 00007fa2d3fb5fa0 R15: 00007ffe7a326108 [ 2981.847930][T16521] [ 2981.851151][T16521] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2981.858432][T16521] CPU: 0 UID: 0 PID: 16521 Comm: syz.7.14072 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 2981.870574][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2981.880619][T16521] Call Trace: [ 2981.883887][T16521] [ 2981.886804][T16521] dump_stack_lvl+0x99/0x250 [ 2981.891383][T16521] ? __asan_memcpy+0x40/0x70 [ 2981.895956][T16521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2981.901137][T16521] ? __pfx__printk+0x10/0x10 [ 2981.905720][T16521] panic+0x2db/0x790 [ 2981.909608][T16521] ? __pfx_panic+0x10/0x10 [ 2981.914021][T16521] __warn+0x31b/0x4b0 [ 2981.917986][T16521] ? rxe_pool_cleanup+0x48/0x60 [ 2981.922821][T16521] ? rxe_pool_cleanup+0x48/0x60 [ 2981.927651][T16521] report_bug+0x2be/0x4f0 [ 2981.931967][T16521] ? rxe_pool_cleanup+0x48/0x60 [ 2981.936800][T16521] ? rxe_pool_cleanup+0x48/0x60 [ 2981.941636][T16521] ? rxe_pool_cleanup+0x4a/0x60 [ 2981.946475][T16521] handle_bug+0x84/0x160 [ 2981.950707][T16521] exc_invalid_op+0x1a/0x50 [ 2981.955197][T16521] asm_exc_invalid_op+0x1a/0x20 [ 2981.960048][T16521] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 2981.965494][T16521] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 40 50 88 f9 48 83 3b 00 75 0c e8 25 f8 26 f9 5b e9 ff 9c d1 02 cc e8 19 f8 26 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 2981.985085][T16521] RSP: 0018:ffffc9000bea7098 EFLAGS: 00010246 [ 2981.991149][T16521] RAX: ffffffff88996567 RBX: ffff8880756c53a0 RCX: 0000000000080000 [ 2981.999110][T16521] RDX: ffffc9001b280000 RSI: 000000000007ffff RDI: 0000000000080000 [ 2982.007065][T16521] RBP: ffff8880756c5080 R08: ffff8880756c4783 R09: 1ffff1100ead88f0 [ 2982.015030][T16521] R10: dffffc0000000000 R11: ffffffff8897a290 R12: dffffc0000000000 [ 2982.022986][T16521] R13: dffffc0000000000 R14: ffffffff8897a290 R15: dffffc0000000000 [ 2982.030947][T16521] ? __pfx_rxe_dealloc+0x10/0x10 [ 2982.035875][T16521] ? __pfx_rxe_dealloc+0x10/0x10 [ 2982.040805][T16521] ? rxe_pool_cleanup+0x47/0x60 [ 2982.045643][T16521] ? rxe_pool_cleanup+0x47/0x60 [ 2982.050478][T16521] rxe_dealloc+0x27/0xc0 [ 2982.054709][T16521] ? __pfx_rxe_dealloc+0x10/0x10 [ 2982.059636][T16521] ib_dealloc_device+0x54/0x200 [ 2982.064481][T16521] __ib_unregister_device+0x393/0x3f0 [ 2982.069841][T16521] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 2982.075724][T16521] ib_unregister_device_and_put+0xb8/0xf0 [ 2982.081434][T16521] nldev_dellink+0x2d1/0x320 [ 2982.086012][T16521] ? __pfx_nldev_dellink+0x10/0x10 [ 2982.091152][T16521] ? rcu_is_watching+0x15/0xb0 [ 2982.095900][T16521] ? cap_capable+0x11f/0x460 [ 2982.100486][T16521] ? safesetid_security_capable+0xa9/0x1a0 [ 2982.106282][T16521] ? bpf_lsm_capable+0x9/0x20 [ 2982.110967][T16521] ? security_capable+0x7e/0x2e0 [ 2982.115897][T16521] ? __pfx_nldev_dellink+0x10/0x10 [ 2982.120996][T16521] rdma_nl_rcv+0x6ab/0x980 [ 2982.125406][T16521] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 2982.130332][T16521] ? __lock_acquire+0xab9/0xd20 [ 2982.135183][T16521] ? netlink_deliver_tap+0x2e/0x1b0 [ 2982.140381][T16521] ? netlink_deliver_tap+0x2e/0x1b0 [ 2982.145567][T16521] netlink_unicast+0x75b/0x8d0 [ 2982.150323][T16521] netlink_sendmsg+0x805/0xb30 [ 2982.155086][T16521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2982.160364][T16521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2982.165638][T16521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2982.170908][T16521] __sock_sendmsg+0x21c/0x270 [ 2982.175574][T16521] ____sys_sendmsg+0x505/0x830 [ 2982.180328][T16521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2982.185605][T16521] ? import_iovec+0x74/0xa0 [ 2982.190097][T16521] ___sys_sendmsg+0x21f/0x2a0 [ 2982.194771][T16521] ? __pfx____sys_sendmsg+0x10/0x10 [ 2982.199973][T16521] ? __fget_files+0x2a/0x420 [ 2982.204547][T16521] ? __fget_files+0x3a0/0x420 [ 2982.209226][T16521] __x64_sys_sendmsg+0x19b/0x260 [ 2982.214167][T16521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2982.219625][T16521] ? do_syscall_64+0xbe/0x3b0 [ 2982.224289][T16521] do_syscall_64+0xfa/0x3b0 [ 2982.228791][T16521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2982.234857][T16521] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2982.240478][T16521] ? clear_bhb_loop+0x60/0xb0 [ 2982.245141][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2982.251018][T16521] RIP: 0033:0x7fa2d3d8e929 [ 2982.255424][T16521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2982.275031][T16521] RSP: 002b:00007fa2d4c03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2982.283449][T16521] RAX: ffffffffffffffda RBX: 00007fa2d3fb5fa0 RCX: 00007fa2d3d8e929 [ 2982.291412][T16521] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 2982.299373][T16521] RBP: 00007fa2d3e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2982.307329][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2982.315294][T16521] R13: 0000000000000000 R14: 00007fa2d3fb5fa0 R15: 00007ffe7a326108 [ 2982.323263][T16521] [ 2982.326522][T16521] Kernel Offset: disabled [ 2982.330834][T16521] Rebooting in 86400 seconds..