last executing test programs: 42m12.014088975s ago: executing program 1 (id=2944): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 42m12.013254918s ago: executing program 1 (id=2945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x24007, 0xfffffffffffffee9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0xce22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x200}}, 0x0, 0x0, 0x3c, 0x0, "a30b3b2884c69b16668c68a5daa845f387713f4048782ece1e75f1fcb1b3f41e4de625ff106bb28200c01f696109383664417165bba0dd5ace522fa7880000000000000000000300"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 42m11.075826265s ago: executing program 1 (id=2964): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) statx(r1, 0x0, 0x1000, 0x100, 0x0) 42m10.998725824s ago: executing program 1 (id=2965): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 42m10.892843627s ago: executing program 1 (id=2967): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 42m10.624696404s ago: executing program 1 (id=2971): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 42m10.576816936s ago: executing program 32 (id=2971): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 41m12.90404788s ago: executing program 5 (id=3832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r4}, 0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 41m12.8367855s ago: executing program 5 (id=3834): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 41m12.72670525s ago: executing program 5 (id=3835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 41m12.549749657s ago: executing program 5 (id=3841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000480)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 41m12.457980772s ago: executing program 5 (id=3842): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x4c, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 41m12.275934509s ago: executing program 5 (id=3844): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 41m12.032327408s ago: executing program 33 (id=3844): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 38m55.939614307s ago: executing program 0 (id=5461): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 38m55.83700489s ago: executing program 0 (id=5463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c5fc8d3e63588056401261b11905fabd4af", 0x2c}], 0x2) 38m53.627208795s ago: executing program 0 (id=5488): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0x6000201c}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) 38m52.051754231s ago: executing program 0 (id=5498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0xc844, &(0x7f0000000180)={0x2, 0x4620, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000100)="ff", 0x1, 0x24008400, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 38m51.959412221s ago: executing program 0 (id=5499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 38m51.915616929s ago: executing program 0 (id=5500): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 38m35.786856667s ago: executing program 34 (id=5500): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 28m25.076901721s ago: executing program 7 (id=8271): r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)={0x40002000}) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') read$dsp(r4, &(0x7f0000000700)=""/228, 0xe4) 28m23.944821211s ago: executing program 7 (id=8275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x8000) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 28m21.524915766s ago: executing program 7 (id=8280): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x30, 0x2, 0x457f1c9146f8f876, "464905e100000000000000007f00", 0xa0363159}) 28m20.427522313s ago: executing program 7 (id=8282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0x6, &(0x7f0000000040)={0x2008, 0xc}, 0x0) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000080c33f40f70a0101622d000000010902120001000000000904000000cb355200"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r4, 0x4c05, r4) dup2(r3, r1) 28m18.104043364s ago: executing program 7 (id=8299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 28m17.920776807s ago: executing program 7 (id=8293): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hoplimit={{0x14}}, @hopopts={{0xc0, 0x29, 0x36, {0x5e, 0x14, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x190}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 28m17.056247156s ago: executing program 35 (id=8293): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hoplimit={{0x14}}, @hopopts={{0xc0, 0x29, 0x36, {0x5e, 0x14, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x190}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m19.595083045s ago: executing program 8 (id=12052): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,us', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000002280), &(0x7f00000022c0)=@v3={0x3000000, [{0x1, 0x7}, {0x5, 0x3}], r5}, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7m17.786217132s ago: executing program 8 (id=12060): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3d298e7cc1ca36b0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 7m17.449118078s ago: executing program 8 (id=12061): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2624c4, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xb2) 7m14.409623993s ago: executing program 8 (id=12068): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'ipvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000240)=r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r4, 0x0, 0x272) 7m13.40187991s ago: executing program 8 (id=12070): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{&(0x7f00000000c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000400)=""/129, 0x81}, {&(0x7f0000000600)=""/182, 0xb6}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/163, 0xa3}, {&(0x7f0000000840)=""/248, 0xf8}, {&(0x7f0000000940)=""/164, 0xa4}], 0x9, &(0x7f0000000200)=""/5, 0x5}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$yama_ptrace_scope(r0, 0x0, 0x0) write(r2, 0x0, 0x31) connect$vsock_stream(r4, 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x85) r6 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = eventfd2(0x9, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f00000004c0)=0x6) ptrace(0x10, r6) wait4(r6, 0x0, 0x8, 0x0) shutdown(r4, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) dup2(r4, r8) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0x4) 7m13.023694544s ago: executing program 8 (id=12072): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3d298e7cc1ca36b0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 7m12.733217947s ago: executing program 36 (id=12072): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3d298e7cc1ca36b0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 23.307660643s ago: executing program 2 (id=13295): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000003180)=""/4112, &(0x7f00000000c0)=0x1010) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x3b0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004040) futex(&(0x7f00000001c0), 0x80, 0x9, &(0x7f00000002c0), &(0x7f0000000380)=0x1, 0x2) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) 16.726055629s ago: executing program 2 (id=13308): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) mkdir(0x0, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006100), 0x49f, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25ADDFWD(r8, 0x89ea, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r9}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 11.467677365s ago: executing program 9 (id=13322): r0 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r3, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d"], 0x38}}, 0x0) 11.325382267s ago: executing program 3 (id=13324): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2, 0x4}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0xa1b, 0x4}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff]}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000"], 0x1c}}, 0x804) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0xfd], [0x0, 0x3, 0x400000006]}) 10.126410884s ago: executing program 3 (id=13326): socket$kcm(0x1e, 0x4, 0x0) socket(0x40000000015, 0xa, 0x15f) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c0, &(0x7f0000000780)={[{0xb5, 0x4e00, "c5e4ca4da75a02e1aa35d6aad6c7bb5e526c433c7fe248fdb5b8b861ad40fba8f51091a325f8d8cbe45d3a69a53a37c5d679882a8f91ee410ccb2960feb487374b3d259b6301bb73566b3483ecd1f628054aa961aa53a0d10dd140396b3647210416878794ec98f9fd45c5fcf9a8b4e49f4c7144c6d25e9c6e213e17c2274c4187620c3dfc92299365a6cff1ba561991ef210e9797e659916c2aed6bf0300ec6cfd08c13ff172718b43fb0b9fd4fd796bc321f1b0a"}, {0x1000, 0x4e00, "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"}]}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x4, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) 9.604297636s ago: executing program 6 (id=13327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f00005e6000/0x1000)=nil, 0x4000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'xfrm0\x00', 0x400}) shmctl$IPC_RMID(r1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r7, &(0x7f00000009c0)={'#! ', './file0', [{0x20, '),#(!(@\\]%\\'}], 0xa, "4320e0fd6b8559f2a3b8d027aa2a8db72666550764efc41c0100000000000080e9b745c386a37b72fea5b2c6e4e0c7b7f9e7af282a0d603d2afb8943c814"}, 0x55) recvmmsg(r7, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000001e40)=""/29, 0x1d}, 0x9}, {{0x0, 0x0, &(0x7f0000003140)=[{0x0}, {0x0}], 0x2}, 0xb4}], 0x2, 0x208a, 0x0) r8 = socket(0x400000000010, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x58, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x2}}]}}]}, 0x58}}, 0x4044894) 8.092269267s ago: executing program 6 (id=13330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.090828044s ago: executing program 3 (id=13331): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b23d7d00"}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000002c0)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x13, 0xe, &(0x7f00000003c0)=@raw=[@generic={0x9, 0x1, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc0000000001050500000000000000000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb1400040020010000000000000000000000000001080007400000000008000840000000000800154000000003380004803401"], 0xdc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000000020d0000052406000105240000000d240f01fffffffffeff00000206241a00000009058103000200000d0904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000200)='\xa0\x87\x06\x00\x00\x00\x00\x00\x00\x00\nx\xed\x7f\x05\t', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, @exit, @exit, @generic={0x5, 0x7, 0x6, 0xff, 0x1395}]}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x2d, &(0x7f00000004c0)=""/45, 0x0, 0x4c, '\x00', r10, @fallback=0x2b, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0xe, 0x9, 0x200}, 0x10, 0xffffffffffffffff, r5, 0x7, &(0x7f0000000540)=[r1], &(0x7f0000000580)=[{0x0, 0x4, 0x9, 0x2}, {0x2, 0x2, 0x9}, {0x3, 0x5, 0x10, 0x7}, {0x5, 0x2, 0x4, 0x6}, {0x0, 0x2, 0x5, 0x8}, {0x1, 0x5, 0x10, 0xc}, {0x5, 0x1, 0x5, 0x3}], 0x10, 0x352}, 0x94) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.84866808s ago: executing program 4 (id=13333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x8, {}, {0x2, 0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x4, 0x0, 0x0, 0x0, @time={0x802, 0x2}, {0x0, 0x8}, {}, @control={0x0, 0x0, 0x5}}, {0x0, 0x0, 0x1, 0x0, @tick=0x2000001, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x2) ioctl$TCFLSH(r5, 0x400455c8, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0x0) 5.763541104s ago: executing program 3 (id=13334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d000", @ANYRES16=r1, @ANYBLOB, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r2, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) r8 = syz_io_uring_setup(0x6810, &(0x7f0000000400)={0x0, 0x49fa, 0x4, 0x0, 0x4e}, &(0x7f0000000180)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x7, 0x3, 0x3}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_enter(r8, 0x47f6, 0x6ee0, 0x0, 0x0, 0x0) 5.586941322s ago: executing program 9 (id=13335): r0 = socket(0x1e, 0x1, 0x6) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x59, 0x0}}], 0x1, 0x9200000000000000) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x400000000010, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000140)={{0xffff1000, 0x4000, 0x0, 0xe, 0x80, 0xe, 0x81, 0x8, 0x0, 0x84, 0x0, 0xb}, {0xeeee8000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0x1, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0xab, 0x92, 0x80}, {0xdddd0000, 0xffff1000, 0xe, 0x7, 0x1, 0x40, 0xff, 0x3, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xd000, 0xd, 0x9, 0x80, 0x5, 0xfe, 0x9, 0x42, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x8, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x7, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x8, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x10000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x1, 0x0, [0xb, 0x2, 0x3, 0xa]}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x40000000000013f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 4.536274374s ago: executing program 9 (id=13336): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0xd94}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000018c0)=""/102400, 0x19000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4021) pipe2$9p(&(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r3, &(0x7f0000000740), &(0x7f00000006c0)=""/46}, 0x20) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r5, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r5, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) 4.47786179s ago: executing program 3 (id=13337): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2, 0x4}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0xa1b, 0x4}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000"], 0x1c}}, 0x804) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) 4.473599408s ago: executing program 4 (id=13338): socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r3 = socket(0x2d, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, r5, 0xa}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') landlock_restrict_self(0xffffffffffffffff, 0x0) 3.640651014s ago: executing program 2 (id=13339): openat$tun(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}]}}]}, 0x3c}}, 0x400c4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r8}, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r8}, 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000000001907864010100ac1414aa0b009078032c00004500000000c3eaab8889000000000d00e0000002"], 0x0) 3.627222998s ago: executing program 6 (id=13340): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x400, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) bind$packet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) userfaultfd(0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000200)="0c0cd5c37139a6f443f31c353df8a157eca74370fa4cebe7db56d9521dc5", 0x1e}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) io_uring_setup(0x2f10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) io_uring_enter(r1, 0x847be, 0xdbff, 0x46, 0x0, 0x0) 3.524948635s ago: executing program 4 (id=13341): socket$kcm(0x1e, 0x4, 0x0) socket(0x40000000015, 0xa, 0x15f) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10c0, &(0x7f0000000780)={[{0xb5, 0x4e00, "c5e4ca4da75a02e1aa35d6aad6c7bb5e526c433c7fe248fdb5b8b861ad40fba8f51091a325f8d8cbe45d3a69a53a37c5d679882a8f91ee410ccb2960feb487374b3d259b6301bb73566b3483ecd1f628054aa961aa53a0d10dd140396b3647210416878794ec98f9fd45c5fcf9a8b4e49f4c7144c6d25e9c6e213e17c2274c4187620c3dfc92299365a6cff1ba561991ef210e9797e659916c2aed6bf0300ec6cfd08c13ff172718b43fb0b9fd4fd796bc321f1b0a"}, {0x1000, 0x4e00, "4dee5696ca144f33219f8920d6af841739888087a0f94e4ead44f6242d260c8cc25fa97298ea1b6fedde5fab9d66a06f9831be871c159b858e9a639e8c07a680526c5065dac38cf2ba140d669718dcd7acc71a3c681304d9c8d9cd029f174b623876bad0411a61d07c7b601160cdb71585dd0b59debc51682ac5cd2018d503f773dff1d44336864175075291949a66cb9e481a1b42b8895d3c1b4d0939df9825abff23e029426a25c6aa27b0d70547209440236cf6fe5cea50c11b98c6490fc0230d4a22ff92dd89687bc382b751c66db1901745a61e76c21aad0ee992752bc98e83b8d535543a2b8ee9149b9292dc36819734548f228afc7e13de16d434ebcf6a092b692732458811d54f1e2939432e7f3fec01dd3268fbd2615db8e21829ba7696cad38cb0b1294763aa59099d28b0a4ab6b466f031627834628eca37d82a35449512075426681c0ca89d7d752927a47fcdd4ae786caa418a4b9e866a0e679a83d0c96d00432c3af0480ccc52b03f5e088a2b011c3bce23961b3106821e1fe5a17a21f4acb88b419ce5345ade32dcf338123275e47da248d893b386bc741a9779df192ad06853f2220e69bb093e27acfe0d5cdb7f0fdc87832ee6330b94e44d54df9841a36f905e06153bebdbf22dba48048b4c73acaa35fe104ee12484008797db977445ba6ad0d57d2aa4c93319e20f9b83cc1074b6231d8937546e632ae4453d86ec0c66aac00959b66abc1cde4ccafce2763cfe729285d4794e4fc98e09da07d03c4057faa82356e9ab57542bc201d66bc8ee3c94319687142f0f0f7ba1dcf98d6379f12ddf653d23bebbaa49b5794f90a1dc419fd3ef3e9a4e1876be0699d92a75e36baec43a1c58f98eab71f0128c4ac901e53e008a628adf3d1b8c65589fa3a9a2c33a9c0990d517608917930199ebf34e650174e7d6ddf4c5364803b84e7fdebea3994399af0d251489eed7091da5aa6b1df4e19ef2285b3fcf61bf189b117e718c07a44d9444e30e7cfd321e1a6d7416b9f24cbad816b94c1b696ba96548bea4e7b3faab27298897914df509499fc2fcdb8e2c95b610c8ae5b9dc9d43dae17f2c2d110d58896a7b8d06c7ee67bfce6c1cb1bb6d1c2d61b0ba81f0f216d1ceba40594fa5ebe0fee6ab694a70b4e624223ac79a58911e0010e03fd03fd8f29c11c80e572c2d0404d4cd277852512327f9c19b91f0d56aa76fd78a0ea483fd203d634d2bd28e1113de25b5ea1f559f70d9c7328d4da05aa8a8c1a52eb6ccfc515c41489a43b300324a1c825c71c0d0693db154b6efe886b0cef9ace6c2813a13019b6711e1d7554432dfceac7d18cece83b68f5239f283567237c1462a7d28aa5ed8758f5299bce8b1b6f2d6a3933ac2dba4fafadcf8e9ac7011e62aeac400f1a2c920b9f21ef22f4fc290ea17ddbdb2d3c47308c9e5ebde60ca238b7c42264602b50dda03aff6119f6c5f89bd731191d17cf5a544fbbbb924c9d1dc14e7ecd9056521911cc1dbeb20d29526703aca990884e3b930aadaf24726b3e2c72a2c2a7fc8e8d5f22a3b6b94427f5fcaf715b4a35c2b3f2fbfa34aea077b6ccc2bbfe3ed646d9c268b3b15683dbc56bd73aa60f0248d75881922f60f7605528b9d5963755872b4c2bc3b0f1dea7dc54b1d888a3426846102b5f5f12242d6a02b09970709508e4b09c223726b7294047abc8c57d81b98a604cb7c37cb9dbf37490fbf2d053da2d3f3fe821b412957c36eef2ab9c9b1b87e357b47afb9697c47609ecdd4ef0e4dbb94e94960b5018b1744898335d7f3e06e3760fe3f82b442cb6efedba99d0d59aca3b9b83d26feb7931d569cccf8e20426ca2535aa0e968850136e8bf9aa92f6397f884aeca1f39df3bdbbbe2d45a48aec3e9e2d6facd76950bcc5c6b5e783c48e6ba342636c5b06047661275cf737aab2305336c5514d1e1ca3a4d994e0d16d3898b9291fd7f1cf6ad38bf92c009e1fdbb854edebd0e92dae6d8f4164a149743260681808a178c1760771c17b9e3df2ca46e1bc4cef5dbbbd9e3db99952437db18f06b9c9bf4abb29f14f3191c8a5e17e2074699349f581388778ddc9bb25466b3415de5a5c8188df8de88099f537caf0744ea62adce6570e8f6a4086fb114bfc3135ad92cb3cc6ee0830080b8543c53da31a99185961e74d997e9d85d13f04c2468ca4301e5060bfe43dcd5e602c5f929f26102b74e845e2114601faa56d7156c0870ee760006d2be44d30669da58dd2316834bafe871e88b8bead61f7655e7c0b31ce7d313dc2812e7a7899795a8c8d745781a22d8fe782479da72a110512ad622765d632b1d6dc90b535ab11d576b13353724ee9a9cde452bf65ff9121303c9c93400ebe65109ee8382849e88502a5dc3b5b5f2f555b88a0339c40438612e4f5814c508e6fbd85b4b4f25df67d83ad713351a4d13ab68754b1321ff53642080a5b89d1d0054b3fab31d9cdee489bce85560beed162d3137ce64bf5f167ec8dacaf5dc4155aaca32b18f575ad80734eb12626d0d4a2dcf2f7a037125b148ecfffc78c048bed65620a25d675a069e5088dc2c370cede88aacfa36bd29c02ff539121425154ccabb4d13bffcaac5eeca7d10836c850dd48cecab1211f75eb6021bb7ac8e9bc899f62113cf48454d7d495dc097050317408317f092415a6d3072f472c94a8a1e52305d9e36aa00c152bdcd398d1736dba02e94a1baee03d080ff53a7d401341869d8ba011ecaaa41c0e6edbc903ece627b6cd63afed10cdad136e481f9ec7bb355ad2eac78f9478ee3943382c479e9dad8b61298d48d32e64b61b669a522895a0a58a124edd33be1411fa5cf74659bbfdb3b9ceed957a16637afb379d5fad6792d8db853e61ea33e432326e68fb4d21d0174be1e5b247b82a3102556bf0e51b8fccce41293100b73d93ae43695ad6f90c25ecdae7ef919be7d5191e6c1d20f156bd1592503d600967f373a1384c1f37acda3b1f12c2fbdcf85a1ddc7f9a020416cb51fed3bda7623a29043c5593224ba3d738e0afc1c5c459991a2281398ea19234ed6f4d6784420666a75658570990e7c8344bdade0f0d7e6cec63e17f3274dbe6e6367b814c85cbdb405e6e383e9b600f554a4d72e30f029819a0a9463529a8a8e447db48676b593b88c5cac2cc56a2b8a16f92f1a1998a9c9b6a9d03794f74891c165f385aa8a516e96fd9e93cd26385f74a774e6f54ee50ae8e9c0504bfcc9b9cf1f6377e001908573692fd8e03c21b790e217fa57046c928b4bbb989bcdf55ccffd342a8c53bd8a236a60fc220d117217f74482637f9459d0acc3b2bdb454bd11eb4b4ddd936b65a702a5aee82c56a3afbde462ec8f5f49f23fffc6179e450065414876f7b4f470c44034f6fa5e009c3f136e519bbf10929cbc9591e0fb006e15eb724622fa96227dde6f1076d2a3c0491da1f04874259f7c998a9acd53c9b996f4ba58b6efa253ef49aa9cf0fbca9b098589af637e5ed97bb2758f4c83bc221913ed2c7bbe397752310fa78a932da28ed6bf1ef3a728983b5597364b179a79184da32feb7c4676f333b117133515dd337c53f7662b89a5067afed2bc36fee25093722f28b635d2c789189eb2c7599ff4bde07052c14875177d55ab8c45d9405419db5f794aa890254fb59573648407f5a48a6700d7b573e3d89cfa562c65c29705da7073b49f4a1945025f6288ffe19bfb42fcb415432edf7cfd7c1815aa0f0785dc97913fa2862081f4c1e32902f31eb065c409aac529c7734e96aff71ae4aed23379d564f9f4c92269f532b359de0c94d48c04904c38093fb06e25e2a3fcf54ce3a286b7ab6fa2f15b7e159b077bbac31478283c81702bd8e9daee6db0da88455fffd3161e929ec4e49a3989f74a3d05303962155feb9f65c9f9b0bde1f497555f034f5a01ae0db0d63034b79aef36c63e9407d23b0cb51b36d854c1a37944eb911c4423df8f9bf9fee898bd2c538727c1b32f4247dfdd5bec6b394d45ae0db9445725f679c4c1c3aa1b05a7cfe0497333f4f823046f39f5874a8cbc06456df93a24f152365c61826c5a108e7bea6a1beccfcf58cf7823e9a55e5c2c42cef10f6332fe449ac6980f45eda849cd4ae12f7033abfdd23dc1dc1a909fd875d2e052eaf217b724f884286f60a3c16922ebf35496e979becaa19cd517b987607bb957d2b21f6005f33aaede989a8c9643bae9bfd031e6019daf92c7731c5a9b7cbcf33a1c2d2cad45b060dfe428fef9effdf696fbbef3a8ab4f3456d58549e81d25af5b63340837cdba0e8640cc547e3b024945a77764f97e37884ba393fe7131d3f12ee583aa361a566fb827d42f5cbd0ede9b049aa2fd4b4201794b6c44df457764443d6158c99a00ecf3770e56efc484ccd8380e5e8eb52a68f9f532a020e83dec931f613e99f7a2fb1c9a8fa29949c1b1e0a0507b073cc7605518811f60dc7ddc4b0586052b86f13c786815b5bc477cd18fb5f436c9b233edaad223719a2154cc8ef97e448df77d87719e0513e07b777ab9ebc9cd2b18d11122c59d09840028b673d85b78b3d81fa3fc47a0a9790c670c4496d7529ed560382af6be448b9dc99771410fe47c322f9464aa9c2f4dba2d22b733b6e24674c90ef78fdb43d3a8b221606c50a8f871ddb9299988df17f4a20a2b50038030410d6a6cbc3370517387f5ebdc5f12d49c7f8306513e9b7a2bf4f8694712151a51f3403a969584f9e4f25ece7e1aa9359c10269ba2c5538f0c4aa7adb652c144690fdae6b424f05b8729d3d017920ffc8c65f0a92eacdd8f57ae6c809af19c4b5f12d9d3615c331bee3562de34c4300a9326c648edd5bd62f7f43f8f6a57cdd508e2eda7a1a56b53ca00c138a5ac7e0b9b75ee08b079e361d39488b1771c72a3c7fcf4c1fe4a0b694e64a19fbb4e00199c9b3d7b434418e3ee2c158633212ae0e7c1c5024863f3686a1bda3f32eb622926d4b615c3407b8f6ccd49cb2d4ee2123e1e4a24f48311f23e0d0824defadbeadaad387f9b413476cf9c16b849d61f739a0ea2c0d320e94ad14c84cc4ac009737aefdc02f738c9b41c6d37c62dc260b0743f370622bbda18372f3f148663cf5adac2c32463858f64e7db894a8d61c34484c076fc10ecad70b4aba61ae1be8a9f0e67962ba318a32b6dc06f7b478c8b8e2414a1943d2d2e0f6358cd42043527b691becaf1a780b8e02abcc06768e7b18b4ca4a001b532a4f2da6c487cf0c32167e5e5d654a608953fd896d8f937043b2326046fd33b50aadb9fc037a822b5b67a46b3098f5190e3453b004541f036553ce10cf055fc52a4e551ba671b0c385ca1e2144a2d27fe203ae54b9b802369a5145d148f983944daace4394c333961dcd98fb58fd82a18638d79a8c6f3feac25e4bbfbcffe1c94d534af860fef13c289f7933dfaea618c99f5b1ed811b93ad5edee3a31ad2b14bc4678da3ee88d6023ea2d008a3e1a241f9843569e672cb78ba4423e9ba530fa7693827093bf5ab365a35124dea0084f004a212bed7061e61fecb9c68d4525f237a26a353bc4bda5a51280db72b02d2d8a75a046bb20464195f89b9d1f951972c8a9de2898b3e82021d5d9b733042d718b1b14d8219fecfb2079a77c0cc9a8996541c59bc66e09b46f0c78916ad9e8008eff27a0c40d299bef1058d10966aeb94bcc17a9dde8a162040f863b755ee2ba9c5ace98149c172ca1d5584dfcbfbd29341fa3ba684413ca175408a4b1d30022cb6be316cfab35fbc05a4c684878e222581b1e21b487241feb5c28ff96703322588b360b"}]}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x4, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) 3.258980356s ago: executing program 6 (id=13342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180400000000000400"/21], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001600040026bd7000fbdbdf25165c11560a0088ff", @ANYRES32=0x0], 0x18}}, 0x20040800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0x2, 0x1, 0x0, 0x0, "054cded48f95b7b5"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xbab3fa9a080f6fe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', r5, 0x700, 0x80, 0x8, 0x3, {{0x1c, 0x4, 0x2, 0x39, 0x70, 0x67, 0x0, 0x81, 0x2f, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x0, [{@multicast1, 0x7}, {@remote, 0x8}]}, @end, @lsrr={0x83, 0x7, 0x22, [@dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x58, 0xe, "bbbdcfa499d5263f9a7c751a"}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x1, 0x9, "41036f3f9f679e"}, {0x7, 0x4, "b8fc"}, {0x6, 0xe, "45b9ab6716f268cd7350d268"}]}, @rr={0x7, 0xf, 0xb2, [@loopback, @remote, @multicast2]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000070000008c00000001"], 0x50) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r12, &(0x7f0000000000), 0xd) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000180)=0x2) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xc1, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8}]}, 0x98}}, 0x24044094) close_range(r7, 0xffffffffffffffff, 0x0) 3.049881984s ago: executing program 9 (id=13343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={r4, 0x0, 0x81a, 0x0, 0x476, 0x9}, 0x14) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x11, 0x2}, @cond=[{0x1ff, 0x5388, 0x10, 0x800, 0xc7, 0x7}, {0x2, 0x5, 0x8, 0x4a, 0x6, 0x7}]}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x3, @loopback, 0xe}}, 0x0, 0x0, 0x23, 0x0, "1076f642044a7642b890d33c95b592266c5b98fb1940a035fbe1b3871b76f661bdb5b2a94edb6f73eab47debd38b6d889a8c986b33eb49ff05ffffffffffff00"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.193787442s ago: executing program 6 (id=13344): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x28) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000a80)={0x0, 0x1000, 0x8f, 0x2, 0x17, "f04f138c13ff45a25b494e404b7d3367f7031b"}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000340)={0x569, 0x1000, 0x49c35, 0x2, 0x6d}) connect$llc(r1, &(0x7f0000000a40)={0x1a, 0x0, 0xa, 0x8, 0x0, 0x4d, @local}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma,port=0e0000000000004']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$can_j1939(r3, &(0x7f0000000a00)={&(0x7f0000000380)=@alg, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/224, 0xe0}, {&(0x7f0000000480)=""/157, 0x9d}], 0x2}, 0x121a0) socket(0x11, 0x80805, 0x401) socket(0x18, 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) 2.098787591s ago: executing program 6 (id=13345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRES8=r1, @ANYBLOB="410b148abc3a3211b7c2d8abe575dd6433c72e9ccaac6c7df90318d7da47221d04122940ba112de48004575a8e5fc8f6453891ed8ee23ceb33dd7fd4137e310623328b8ae6c442845547c7f7277d427704c16aa02658fb09652332a8c625e599b0fb1773639f2ce050f57b97ffb2b77119443592c6a06517afd0639846c915378d831deb071abe897b4763fc3f1f3548ff25d1f8a98fa2a1a3e67342e8"], 0x60}}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000000020d0000052406000105240000000d240f01fffffffffeff00000206241a00000009058103000200000d0904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x12, 0x7, 0x10, 0x10, 0x13, 0x10, 0xd, 0x6f2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x10, &(0x7f0000000100)='barrier') syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x1) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x5e, 0x3, 0xe5d}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) sendmmsg$inet(r6, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b40)="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", 0x23c}, {&(0x7f0000000400)="47a020a6b84218ddf822efdab30f31d2115aa21e1c0a9143c61fe8cf0eb91c114cdb5abcabb387e76231b8fd4cce67a5e49796b3a45052626ba5880f", 0x3c}, {&(0x7f0000000800)}], 0x3}}], 0x1, 0xa010) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{0xfffffffffffffffe, 0xffffffffffffffff}]}) mprotect(&(0x7f0000050000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x1000) 2.096248995s ago: executing program 2 (id=13346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r0}, 0x10) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x7fffffff, 0x7fff, 0x22}}, 0x200382) fcntl$setsig(r1, 0xa, 0x35) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0x17, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xb) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x9, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x67}, {0x0, 0x9, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x4}, {0xf, 0x0, 0x54, 0x3}, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc000054}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="ffff"], 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0xf6, 0x72, 0x20000}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.910303145s ago: executing program 4 (id=13347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syslog(0x2, &(0x7f0000000100)=""/243, 0xfffffffffffffff7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r4 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r4, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9259}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8044) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x42}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.866049376s ago: executing program 4 (id=13348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005117995640d8133700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x3, 0xff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400000005000000bf09000000000000650901000000000066000000ffffff80180100002020702500000000002020207b9a00fe00000000050000000000000037010000f8ffffffb702000008000000b703000000000000560000000600922ca53d000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000005c0)={0x396, 0x0, '\x00', 0x0, &(0x7f0000000580)}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r5, &(0x7f0000000740)=""/109, 0x44) write$nci(r5, &(0x7f0000000100)=ANY=[], 0x4) setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x82, 0x1, 0x100}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)='\t', 0x1}, {&(0x7f00000002c0)="eb", 0x1}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800) 1.629162791s ago: executing program 3 (id=13349): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfe, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 1.068562497s ago: executing program 9 (id=13350): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffa}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f3288") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) 867.639231ms ago: executing program 4 (id=13351): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 650.680959ms ago: executing program 2 (id=13352): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x400, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) bind$packet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) userfaultfd(0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000200)="0c0cd5c37139a6f443f31c353df8a157eca74370fa4cebe7db56d9521dc5", 0x1e}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) io_uring_setup(0x2f10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) io_uring_enter(r1, 0x847be, 0xdbff, 0x46, 0x0, 0x0) 563.546337ms ago: executing program 2 (id=13353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801003a9741fb99763b990000000000000007010000f8ffffffb7020000080000ff070000000000000085000000a800000095"], &(0x7f000001b000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x92) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) utimensat(0xffffffffffffffff, &(0x7f000001b040)='./file0\x00', 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600000000030000400000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r5, 0x0, 0x4}, 0x18) 0s ago: executing program 9 (id=13354): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c0000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d63a0148456b523cad2c3f6c"], 0x258) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = openat$comedi(0xffffff9c, &(0x7f0000000500)='/dev/comedi0\x00', 0xa400, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="e5c053751f52addf0b519e02f8fa88e924112a1d3cbe008aa884a4d29b133c5f2ada1c14e7d002f03fa6a579adc7a7eedf88964b062bbbfc8c36c2a43470595586a6f42050e1c8bfab34cc757ec8336ca985964d0687cfdc74d397dfdf2ec91a0a6eb9e30eed2ed967287ab2d44c096aa5f12007c5bcb5005a406fa1a0366f0b6e258b22419552e2cb778167ef01d031006060305dc9cb0babf8881fe2f26afb6097e2", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf25110000000800060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af21beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb013, 0x5, 0x0, 0x4, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0xffff, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x0, 0xb0c4, 0xc, 0xc, 0x400002, 0x2]}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1d, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000804450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09", @ANYRES8=r3, @ANYRES16=r3, @ANYRES64, @ANYRES64=r4], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8010000}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): ] overlayfs: failed to clone upperpath [ 2351.103712][T11754] usb 10-1: Using ep0 maxpacket: 32 [ 2351.110346][T11754] usb 10-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 2351.120770][T11754] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2351.129607][T11754] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2351.156987][T11754] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.165703][T11754] usb 10-1: Product: syz [ 2351.170704][T11754] usb 10-1: Manufacturer: syz [ 2351.175499][T11754] usb 10-1: SerialNumber: syz [ 2351.183207][T12977] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2351.509631][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2352.550698][T11754] usb 10-1: USB disconnect, device number 2 [ 2352.621965][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2353.733187][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2354.251919][T13009] wg1: entered promiscuous mode [ 2354.257339][T13009] wg1: entered allmulticast mode [ 2354.340967][T13013] overlayfs: failed to clone upperpath [ 2354.499785][T13015] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2354.582623][T13018] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2354.591512][T13018] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2354.603737][T13018] overlayfs: missing 'lowerdir' [ 2354.845335][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2354.942382][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12109'. [ 2355.956715][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2356.883449][T13039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12114'. [ 2357.068852][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2358.181075][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2358.718157][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12117'. [ 2359.090030][T13052] xt_connbytes: Forcing CT accounting to be enabled [ 2359.293281][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2359.333903][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2359.333918][ T30] audit: type=1326 audit(2217.075:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2359.372972][T13067] xt_policy: neither incoming nor outgoing policy selected [ 2359.380472][ T30] audit: type=1326 audit(2217.075:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2359.380523][ T30] audit: type=1326 audit(2217.103:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2359.380592][ T30] audit: type=1326 audit(2217.103:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2359.869194][ T30] audit: type=1326 audit(2217.113:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2359.892639][ T30] audit: type=1326 audit(2217.113:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2359.915731][ T30] audit: type=1326 audit(2217.113:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2359.938923][ T30] audit: type=1326 audit(2217.113:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2360.012138][ T30] audit: type=1326 audit(2217.113:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2360.035766][ T30] audit: type=1326 audit(2217.113:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.3.12121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f716358df10 code=0x7ffc0000 [ 2360.270398][T13077] netlink: 'syz.4.12122': attribute type 12 has an invalid length. [ 2360.405159][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2361.516000][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2362.627326][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2363.739693][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2363.861904][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2363.870035][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2364.724691][T13123] netlink: 'syz.6.12134': attribute type 1 has an invalid length. [ 2364.850905][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2365.112537][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2365.112550][ T30] audit: type=1400 audit(2222.482:4623): avc: denied { wake_alarm } for pid=13128 comm="syz.9.12137" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2365.963326][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2367.074433][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2367.570706][T13155] trusted_key: encrypted_key: hex blob is missing [ 2367.837380][T13170] MTD: Couldn't look up '/dev/nullb0': -15 [ 2367.843406][T13170] /dev/nullb0: Can't lookup blockdev [ 2368.197294][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2368.430939][T13167] overlayfs: failed to clone upperpath [ 2369.014435][T13179] wg1: entered promiscuous mode [ 2369.019330][T13179] wg1: entered allmulticast mode [ 2369.309473][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2369.506970][ T9595] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2369.640470][ T30] audit: type=1400 audit(2226.711:4624): avc: denied { ioctl } for pid=13186 comm="syz.2.12151" path="socket:[149693]" dev="sockfs" ino=149693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2369.716456][T13187] batadv_slave_1: entered promiscuous mode [ 2369.918875][ T30] audit: type=1326 audit(2226.972:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.2.12151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1adf18f6c9 code=0x0 [ 2370.410073][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2370.443449][T13202] batadv_slave_1: left promiscuous mode [ 2371.521504][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2371.982288][T13220] netlink: 165 bytes leftover after parsing attributes in process `syz.9.12158'. [ 2372.633677][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2373.005956][T13229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12161'. [ 2373.062138][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12161'. [ 2373.741732][T13240] Cannot find set identified by id 0 to match [ 2373.744999][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2373.762523][T13240] overlayfs: failed to clone lowerpath [ 2373.818645][T13242] overlayfs: failed to clone lowerpath [ 2374.212229][ T30] audit: type=1400 audit(2230.995:4626): avc: denied { read } for pid=13245 comm="syz.9.12165" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2374.561952][T13244] wg1: entered promiscuous mode [ 2374.567751][T13244] wg1: entered allmulticast mode [ 2374.582764][T13252] Process accounting resumed [ 2374.654476][T13260] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2374.857168][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2375.621382][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12176'. [ 2375.645339][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12176'. [ 2375.658456][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12176'. [ 2375.670671][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12176'. [ 2375.683362][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12176'. [ 2375.968561][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2376.024810][ T30] audit: type=1326 audit(2232.697:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13283 comm="syz.4.12178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd321f8f6c9 code=0x0 [ 2376.133689][T13292] netlink: 'syz.2.12177': attribute type 1 has an invalid length. [ 2376.480074][T13292] bond11: entered promiscuous mode [ 2376.491536][T13292] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2377.080728][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2377.522346][T13309] SELinux: Context system_u:object is not valid (left unmapped). [ 2377.534604][ T30] audit: type=1400 audit(2234.101:4628): avc: denied { relabelto } for pid=13304 comm="syz.9.12181" name="cgroup.procs" dev="cgroup" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 2377.595240][ T30] audit: type=1400 audit(2234.138:4629): avc: denied { associate } for pid=13304 comm="syz.9.12181" name="cgroup.procs" dev="cgroup" ino=990 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 2378.192739][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2378.195496][ T1322] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2378.904319][ T30] audit: type=1400 audit(2235.008:4630): avc: denied { connect } for pid=13327 comm="syz.9.12185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2379.144975][ T30] audit: type=1400 audit(2235.616:4631): avc: denied { bind } for pid=13283 comm="syz.4.12178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2379.304471][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2379.321073][T13318] lo speed is unknown, defaulting to 1000 [ 2379.415780][T13318] speed is unknown, defaulting to 1000 [ 2380.415711][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2380.468337][T13318] lo speed is unknown, defaulting to 1000 [ 2380.483429][ T30] audit: type=1326 audit(2236.860:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13344 comm="syz.3.12189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f716358f6c9 code=0x0 [ 2381.538272][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2382.179655][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12191'. [ 2382.639191][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2383.052097][ T30] audit: type=1400 audit(2239.245:4633): avc: denied { create } for pid=13369 comm="syz.4.12196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2383.762119][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2384.814312][ T30] audit: type=1400 audit(2240.911:4634): avc: denied { ioctl } for pid=13393 comm="syz.6.12202" path="socket:[150013]" dev="sockfs" ino=150013 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2384.862716][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2385.294218][T13401] netlink: 'syz.4.12200': attribute type 10 has an invalid length. [ 2385.324641][T13401] veth1_vlan: entered allmulticast mode [ 2385.440240][T13401] veth1_vlan: left promiscuous mode [ 2385.450956][T13401] team0: Device veth1_vlan failed to register rx_handler [ 2385.975078][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2386.379844][ T30] audit: type=1400 audit(2241.687:4635): avc: denied { execute_no_trans } for pid=13398 comm="syz.9.12203" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=150680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2387.056950][T13422] MTD: Couldn't look up '/dev/nullb0': -15 [ 2387.062923][T13422] /dev/nullb0: Can't lookup blockdev [ 2387.096989][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2388.178969][T13436] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12210'. [ 2388.207560][T13436] libceph: resolve '0..' (ret=-3): failed [ 2388.208990][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2389.320505][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2390.432506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2391.488652][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 2391.533381][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2392.140876][T13475] overlayfs: missing 'workdir' [ 2392.645506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2393.743820][T13493] overlayfs: failed to clone upperpath [ 2393.756881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2393.948152][T13498] overlayfs: failed to clone upperpath [ 2393.978613][ T30] audit: type=1400 audit(2249.489:4636): avc: denied { read } for pid=13494 comm="syz.6.12226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2394.869100][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2395.980389][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2397.092796][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2397.457836][ T30] audit: type=1400 audit(2252.744:4637): avc: denied { bind } for pid=13532 comm="syz.4.12234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2397.756559][T13542] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2397.818156][T13539] 9pnet: Could not find request transport: vdma [ 2397.844699][T13546] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12236'. [ 2397.855218][ T30] audit: type=1400 audit(2253.109:4638): avc: denied { accept } for pid=13538 comm="syz.6.12236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2398.203961][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2399.141526][T13573] overlayfs: failed to clone upperpath [ 2399.188197][ T30] audit: type=1400 audit(2254.353:4639): avc: denied { name_bind } for pid=13560 comm="syz.4.12241" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 2399.316919][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2399.486336][T13580] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12242'. [ 2400.427536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2401.281263][T13593] overlayfs: failed to clone upperpath [ 2401.539636][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2401.555027][ T30] audit: type=1400 audit(2256.551:4640): avc: denied { getopt } for pid=13601 comm="syz.9.12248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2402.036618][ T30] audit: type=1400 audit(2257.028:4641): avc: denied { read } for pid=13606 comm="syz.6.12249" path="socket:[151089]" dev="sockfs" ino=151089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2402.651015][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2403.763264][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2403.787393][ T9556] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2403.948088][T13629] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2403.978974][T13631] overlayfs: missing 'lowerdir' [ 2404.874822][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2405.399899][T13648] overlayfs: failed to clone upperpath [ 2405.987114][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2407.098099][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2407.673267][T13673] overlayfs: failed to clone upperpath [ 2408.210351][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2409.332788][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2410.007109][T13700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2410.342070][ T30] audit: type=1326 audit(2264.792:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2410.433852][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2410.497639][ T30] audit: type=1326 audit(2264.792:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2410.520667][ C1] vkms_vblank_simulate: vblank timer overrun [ 2410.556742][ T30] audit: type=1326 audit(2264.867:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2410.603792][ T30] audit: type=1326 audit(2264.914:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2410.626815][ C1] vkms_vblank_simulate: vblank timer overrun [ 2410.796692][ T30] audit: type=1326 audit(2264.914:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2410.853941][ T30] audit: type=1326 audit(2264.914:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2410.881923][ T30] audit: type=1326 audit(2264.914:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2410.908564][ T30] audit: type=1326 audit(2264.914:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2410.932697][ C1] vkms_vblank_simulate: vblank timer overrun [ 2410.986330][ T30] audit: type=1326 audit(2264.914:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2411.009794][ T30] audit: type=1326 audit(2264.914:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13708 comm="syz.3.12271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2411.545565][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2412.629444][T21943] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2412.657608][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2412.669490][T13731] overlayfs: failed to clone upperpath [ 2413.769335][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2414.891912][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2415.992415][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2417.104508][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2417.546000][T13796] sp0: Synchronizing with TNC [ 2418.026043][T13796] sp0: Found TNC [ 2418.215833][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2418.632815][T13802] overlayfs: failed to clone lowerpath [ 2418.731525][T13803] C: renamed from team_slave_0 [ 2419.328348][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2419.842659][T13803] netlink: 'syz.4.12291': attribute type 1 has an invalid length. [ 2419.850486][T13803] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12291'. [ 2419.859647][T13803] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2420.156505][T13810] overlayfs: missing 'workdir' [ 2420.208134][T13807] netlink: 'syz.3.12292': attribute type 4 has an invalid length. [ 2420.269375][T13185] lo speed is unknown, defaulting to 1000 [ 2420.278900][T13185] syz1: Port: 1 Link DOWN [ 2420.692195][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12294'. [ 2420.871412][T13821] lo speed is unknown, defaulting to 1000 [ 2420.882888][T13821] speed is unknown, defaulting to 1000 [ 2421.141841][T13821] lo speed is unknown, defaulting to 1000 [ 2423.189253][T13847] MTD: Couldn't look up '/dev/nullb0': -15 [ 2423.402251][T13847] /dev/nullb0: Can't lookup blockdev [ 2423.771823][T13867] overlayfs: missing 'workdir' [ 2424.065881][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12312'. [ 2424.162744][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12312'. [ 2425.677375][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 2425.677391][ T30] audit: type=1400 audit(2279.133:4692): avc: denied { mount } for pid=13893 comm="syz.4.12317" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2425.992819][T13897] overlayfs: failed to clone upperpath [ 2426.699532][T13913] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2428.842898][T13954] overlayfs: failed to clone upperpath [ 2429.548133][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2429.555973][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2430.241899][T13963] xt_hashlimit: size too large, truncated to 1048576 [ 2431.036862][T13977] netlink: 'syz.9.12336': attribute type 13 has an invalid length. [ 2432.300525][T13989] Invalid ELF header magic: != ELF [ 2432.391428][ T1182] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2432.585240][ T1182] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2432.600998][ T1182] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2432.661271][ T1182] usb 10-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 2432.674935][ T1182] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2432.714735][ T1182] usb 10-1: config 0 descriptor?? [ 2434.821337][ T1182] usbhid 10-1:0.0: can't add hid device: -71 [ 2434.827412][ T1182] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2435.225379][ T1182] usb 10-1: USB disconnect, device number 3 [ 2436.287119][T14025] overlayfs: failed to clone upperpath [ 2436.386884][T14027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12348'. [ 2436.404565][T14027] libceph: resolve '0..' (ret=-3): failed [ 2437.716738][ T8310] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2440.760931][T14054] delete_channel: no stack [ 2441.964927][T13185] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 2442.606093][T14099] Cannot find set identified by id 0 to match [ 2442.618771][T14100] overlayfs: failed to clone upperpath [ 2442.721442][T13185] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2442.730745][T13185] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.740267][T13185] usb 10-1: Product: syz [ 2442.753506][T13185] usb 10-1: Manufacturer: syz [ 2442.759226][T13185] usb 10-1: SerialNumber: syz [ 2442.765464][T13185] usb 10-1: config 0 descriptor?? [ 2443.517733][T14108] netlink: 'syz.2.12370': attribute type 13 has an invalid length. [ 2443.595823][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12373'. [ 2443.873007][T13185] airspy 10-1:0.0: usb_control_msg() failed -110 request 09 [ 2444.157034][T14117] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12374'. [ 2444.185063][T13185] airspy 10-1:0.0: Could not detect board [ 2444.232543][T13185] airspy 10-1:0.0: probe with driver airspy failed with error -110 [ 2444.242425][T13185] usb 10-1: USB disconnect, device number 4 [ 2444.424294][T14134] 9pnet: Could not find request transport: vdma [ 2444.432862][T14134] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12377'. [ 2444.495352][T14108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2445.138348][T14144] Invalid ELF header magic: != ELF [ 2445.158916][ T30] audit: type=1400 audit(2297.346:4693): avc: denied { module_load } for pid=14143 comm="syz.4.12379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2446.763409][ T9556] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2448.683431][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12386'. [ 2449.912947][T14181] geneve2: entered promiscuous mode [ 2449.946715][T14181] geneve2: entered allmulticast mode [ 2450.149398][T14185] MTD: Couldn't look up '/dev/nullb0': -15 [ 2450.260186][T14185] /dev/nullb0: Can't lookup blockdev [ 2450.621753][ T30] audit: type=1400 audit(2302.472:4694): avc: denied { map } for pid=14190 comm="syz.6.12390" path="socket:[152909]" dev="sockfs" ino=152909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2450.708235][ T30] audit: type=1400 audit(2302.538:4695): avc: denied { read accept } for pid=14190 comm="syz.6.12390" path="socket:[152909]" dev="sockfs" ino=152909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2450.714682][T14192] netlink: 'syz.6.12390': attribute type 2 has an invalid length. [ 2450.750989][T14192] Invalid source name [ 2450.754991][T14192] UBIFS error (pid: 14192): cannot open "./file0", error -22 [ 2450.798072][ T30] audit: type=1400 audit(2302.594:4696): avc: denied { mounton } for pid=14190 comm="syz.6.12390" path="/1697/file0" dev="tmpfs" ino=9183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2452.206263][ T5823] Bluetooth: hci2: command 0x0405 tx timeout [ 2452.221049][ T30] audit: type=1400 audit(2303.782:4697): avc: denied { ioctl } for pid=14203 comm="syz.3.12394" path="socket:[152943]" dev="sockfs" ino=152943 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2453.480936][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12398'. [ 2454.085784][T14217] delete_channel: no stack [ 2454.501204][T14242] overlayfs: failed to clone upperpath [ 2454.723229][ T30] audit: type=1400 audit(2306.317:4698): avc: denied { recv } for pid=14222 comm="syz.9.12399" saddr=10.128.0.169 src=35388 daddr=10.128.0.66 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2455.026888][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12404'. [ 2455.576475][T14253] MTD: Couldn't look up '/dev/nullb0': -15 [ 2455.639632][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12405'. [ 2456.037087][T14253] /dev/nullb0: Can't lookup blockdev [ 2457.718156][T14277] sp0: Synchronizing with TNC [ 2459.727405][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12416'. [ 2460.896732][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12419'. [ 2461.186004][T14322] netlink: 'syz.4.12420': attribute type 1 has an invalid length. [ 2461.273582][T14322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12420'. [ 2461.300806][T14322] macvlan2: entered promiscuous mode [ 2461.308433][T14322] macvlan2: entered allmulticast mode [ 2461.314736][T14322] bond14: entered promiscuous mode [ 2461.332792][T14322] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2461.346279][T14322] bond14: left promiscuous mode [ 2461.838070][ T30] audit: type=1326 audit(2312.968:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2461.890199][ T9556] Bluetooth: hci5: Frame reassembly failed (-84) [ 2461.930525][ T30] audit: type=1326 audit(2312.968:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.009866][ T30] audit: type=1326 audit(2312.996:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.070380][ T30] audit: type=1326 audit(2312.996:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.129320][ T30] audit: type=1326 audit(2312.996:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.182729][ T30] audit: type=1326 audit(2313.005:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.218259][ T30] audit: type=1326 audit(2313.005:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.250068][ T30] audit: type=1326 audit(2313.005:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.280300][ T30] audit: type=1326 audit(2313.005:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.334512][ T30] audit: type=1326 audit(2313.005:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.9.12422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2462.429438][T14336] overlayfs: failed to clone upperpath [ 2464.089365][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 2464.089390][ T3431] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2464.444977][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12429'. [ 2464.756540][T14370] overlayfs: failed to clone lowerpath [ 2464.848258][T14371] C: renamed from team_slave_0 [ 2465.365234][T14371] netlink: 'syz.6.12430': attribute type 1 has an invalid length. [ 2465.373117][T14371] netlink: 152 bytes leftover after parsing attributes in process `syz.6.12430'. [ 2465.383526][T14371] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2467.580352][T14401] overlayfs: failed to clone upperpath [ 2468.803076][T14419] fuse: Unknown parameter '000000000000000000157270x0000000000000006' [ 2468.901715][T14419] lo speed is unknown, defaulting to 1000 [ 2468.915364][T14419] speed is unknown, defaulting to 1000 [ 2469.282070][T14419] lo speed is unknown, defaulting to 1000 [ 2470.043028][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12444'. [ 2470.084726][T14433] macvlan2: entered allmulticast mode [ 2470.090516][T14433] veth1_vlan: entered allmulticast mode [ 2470.568986][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2470.569001][ T30] audit: type=1326 audit(2321.134:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf18f6c9 code=0x7ffc0000 [ 2470.704478][ T30] audit: type=1326 audit(2321.218:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf18f6c9 code=0x7ffc0000 [ 2470.918118][T11754] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2470.927742][ T30] audit: type=1326 audit(2321.462:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1adf18df10 code=0x7ffc0000 [ 2470.958762][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12435'. [ 2470.969829][ T30] audit: type=1326 audit(2321.499:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf18f6c9 code=0x7ffc0000 [ 2471.003661][T14422] openvswitch: netlink: Flow key attr not present in new flow. [ 2471.014025][ T30] audit: type=1326 audit(2321.499:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf18f6c9 code=0x7ffc0000 [ 2471.042806][ T30] audit: type=1326 audit(2321.499:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1adf18f6c9 code=0x7ffc0000 [ 2471.066247][ T30] audit: type=1326 audit(2321.499:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf18f6c9 code=0x7ffc0000 [ 2471.093891][ T30] audit: type=1326 audit(2321.499:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf18f6c9 code=0x7ffc0000 [ 2471.134671][ T30] audit: type=1326 audit(2321.499:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1adf18df10 code=0x7ffc0000 [ 2471.159619][ T30] audit: type=1326 audit(2321.499:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.2.12435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1adf18f6c9 code=0x7ffc0000 [ 2471.183768][T11754] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 2471.197810][T11754] usb 10-1: config 0 has no interface number 0 [ 2471.282983][T11754] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2471.292529][T11754] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2471.300592][T11754] usb 10-1: Product: syz [ 2471.305507][T11754] usb 10-1: Manufacturer: syz [ 2471.310255][T11754] usb 10-1: SerialNumber: syz [ 2471.318525][T11754] usb 10-1: config 0 descriptor?? [ 2471.358372][T11754] yurex 10-1:0.50: Could not find endpoints [ 2471.841655][T13185] usb 10-1: USB disconnect, device number 5 [ 2471.922963][ T8310] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2475.546722][ T5823] Bluetooth: hci2: command 0x0405 tx timeout [ 2475.905348][T14495] SET target dimension over the limit! [ 2476.444857][T14506] openvswitch: netlink: Duplicate key (type 1). [ 2476.758048][T14509] siw: device registration error -23 [ 2476.870120][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2476.870135][ T30] audit: type=1400 audit(2327.028:4771): avc: denied { append } for pid=14510 comm="syz.9.12465" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2476.899952][ C0] vkms_vblank_simulate: vblank timer overrun [ 2477.167058][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12464'. [ 2477.189003][T14515] loop6: detected capacity change from 0 to 524288000 [ 2477.240017][T14517] bridge10: port 1(veth9) entered blocking state [ 2477.247235][T14517] bridge10: port 1(veth9) entered disabled state [ 2477.253671][T14517] veth9: entered allmulticast mode [ 2477.260001][T14517] veth9: entered promiscuous mode [ 2477.300784][T14513] vlan2: entered allmulticast mode [ 2477.305894][T14513] hsr_slave_1: entered allmulticast mode [ 2477.354761][T14517] bridge10: port 2(veth11) entered blocking state [ 2477.361334][T14517] bridge10: port 2(veth11) entered disabled state [ 2477.368183][T14517] veth11: entered allmulticast mode [ 2477.412309][T14517] veth11: entered promiscuous mode [ 2477.436279][T14526] overlayfs: failed to clone upperpath [ 2477.583402][ T5424] IPVS: starting estimator thread 0... [ 2477.589945][T14531] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2477.686735][T14532] IPVS: using max 45 ests per chain, 108000 per kthread [ 2478.729551][T14540] sp0: Synchronizing with TNC [ 2479.416098][T14540] sp0: Found TNC [ 2480.368337][T14554] /dev/nullb0: Can't lookup blockdev [ 2481.268411][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12473'. [ 2481.958198][T14579] sp0: Synchronizing with TNC [ 2481.991184][T14579] sp0: Found TNC [ 2482.069773][T14580] lo speed is unknown, defaulting to 1000 [ 2482.077822][T14580] speed is unknown, defaulting to 1000 [ 2482.880803][ T9556] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2483.813003][T14580] lo speed is unknown, defaulting to 1000 [ 2484.051108][T14611] xt_NFQUEUE: number of total queues is 0 [ 2484.455426][ T30] audit: type=1326 audit(2334.128:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2484.487223][ T30] audit: type=1326 audit(2334.137:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2484.516273][ T30] audit: type=1326 audit(2334.137:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2484.547601][ T30] audit: type=1326 audit(2334.137:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2484.582929][ T30] audit: type=1326 audit(2334.137:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2484.614840][ T30] audit: type=1326 audit(2334.137:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2484.723113][T14628] sp0: Synchronizing with TNC [ 2484.750370][T14628] sp0: Found TNC [ 2484.758293][ T30] audit: type=1326 audit(2334.137:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2484.788467][ T30] audit: type=1326 audit(2334.137:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93ab58df10 code=0x7ffc0000 [ 2484.847838][ T30] audit: type=1326 audit(2334.137:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2484.897318][ T30] audit: type=1326 audit(2334.137:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.6.12490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2485.640072][T14636] sp0: Synchronizing with TNC [ 2485.663064][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12493'. [ 2485.854753][T14636] sp0: Found TNC [ 2486.498190][T14647] lo speed is unknown, defaulting to 1000 [ 2486.513057][T14647] speed is unknown, defaulting to 1000 [ 2486.744545][T14647] lo speed is unknown, defaulting to 1000 [ 2486.903630][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12496'. [ 2487.864347][T14665] xt_hashlimit: size too large, truncated to 1048576 [ 2490.190205][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2490.190218][ T30] audit: type=1400 audit(2339.478:4787): avc: denied { map } for pid=14680 comm="syz.6.12505" path="socket:[154030]" dev="sockfs" ino=154030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2490.225243][ T30] audit: type=1400 audit(2339.478:4788): avc: denied { read } for pid=14680 comm="syz.6.12505" path="socket:[154030]" dev="sockfs" ino=154030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2490.928848][T14701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2490.951783][T14712] overlayfs: failed to clone upperpath [ 2493.062471][ T30] audit: type=1400 audit(2341.808:4789): avc: denied { connect } for pid=14730 comm="syz.3.12515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2495.301439][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2495.307745][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2495.341514][T14762] Invalid ELF header magic: != ELF [ 2495.446136][T14763] fuse: Unknown parameter '000000000000000000006250x0000000000000007' [ 2495.553587][T14763] lo speed is unknown, defaulting to 1000 [ 2495.567402][T14763] speed is unknown, defaulting to 1000 [ 2495.892792][T14763] lo speed is unknown, defaulting to 1000 [ 2495.946791][ T30] audit: type=1326 audit(2344.876:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2495.996520][ T30] audit: type=1326 audit(2344.876:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2496.052002][ T30] audit: type=1326 audit(2344.876:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2496.136413][ T30] audit: type=1326 audit(2344.876:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2496.161246][ T30] audit: type=1326 audit(2344.876:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2496.209167][ T30] audit: type=1326 audit(2344.876:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2496.266499][ T30] audit: type=1326 audit(2344.876:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2496.293284][ T30] audit: type=1326 audit(2344.876:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2496.417488][ T30] audit: type=1326 audit(2344.876:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2496.877654][ T30] audit: type=1326 audit(2344.876:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2498.642254][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12530'. [ 2498.662968][T14800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12530'. [ 2498.672436][T14800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12530'. [ 2499.494808][T14812] netlink: 'syz.3.12529': attribute type 21 has an invalid length. [ 2499.526362][T14812] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12529'. [ 2499.547078][T14812] netlink: 'syz.3.12529': attribute type 5 has an invalid length. [ 2499.573788][T14812] netlink: 'syz.3.12529': attribute type 6 has an invalid length. [ 2499.631053][T14812] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12529'. [ 2500.713100][T14828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2501.014361][T14840] fuse: Unknown parameter 'fd0x000000000000000500000000000000000000' [ 2501.612391][T12931] libceph: connect (1)[c::]:6789 error -101 [ 2501.624423][T12931] libceph: mon0 (1)[c::]:6789 connect error [ 2501.701507][T14839] ceph: No mds server is up or the cluster is laggy [ 2501.867178][T14843] 9pnet_fd: Insufficient options for proto=fd [ 2502.710424][T14858] /dev/nullb0: Can't lookup blockdev [ 2502.973688][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2502.973723][ T30] audit: type=1400 audit(2351.069:4814): avc: denied { create } for pid=14850 comm="syz.9.12542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2503.117442][T14856] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2503.223527][ T30] audit: type=1400 audit(2351.069:4815): avc: denied { bind } for pid=14850 comm="syz.9.12542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2503.486528][T14866] overlayfs: missing 'lowerdir' [ 2503.490623][ T30] audit: type=1400 audit(2351.929:4816): avc: denied { getopt } for pid=14860 comm="syz.9.12543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2506.163262][ T1322] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2506.359965][ T30] audit: type=1400 audit(2354.614:4817): avc: denied { setopt } for pid=14891 comm="syz.9.12552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2506.471597][ T30] audit: type=1400 audit(2354.614:4818): avc: denied { bind } for pid=14891 comm="syz.9.12552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2506.500711][ T30] audit: type=1400 audit(2354.614:4819): avc: denied { write } for pid=14891 comm="syz.9.12552" path="socket:[154277]" dev="sockfs" ino=154277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2507.167036][ T30] audit: type=1326 audit(2355.362:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.9.12555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2507.650489][T21949] Bluetooth: hci5: Frame reassembly failed (-84) [ 2507.692548][ T30] audit: type=1326 audit(2355.400:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.9.12555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2507.790744][ T30] audit: type=1326 audit(2355.400:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.9.12555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2507.847285][ T30] audit: type=1326 audit(2355.400:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.9.12555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2508.333235][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2508.333277][ T30] audit: type=1400 audit(2356.372:4850): avc: denied { write } for pid=14917 comm="syz.4.12557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2509.328217][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12559'. [ 2509.383438][ T3431] Bluetooth: hci5: command 0x1003 tx timeout [ 2509.409562][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2510.923656][T14948] netlink: 'syz.3.12563': attribute type 20 has an invalid length. [ 2510.932641][T14948] IPv6: NLM_F_CREATE should be specified when creating new route [ 2511.008018][T14949] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2511.147645][T14935] virtio-fs: tag not found [ 2512.950595][T14966] bridge0: port 3(team0) entered blocking state [ 2512.957328][T14966] bridge0: port 3(team0) entered disabled state [ 2512.965070][T14966] team0: entered allmulticast mode [ 2512.970206][T14966] team_slave_0: entered allmulticast mode [ 2512.977092][T14966] team_slave_1: entered allmulticast mode [ 2512.985831][T14966] team0: entered promiscuous mode [ 2512.990885][T14966] team_slave_0: entered promiscuous mode [ 2512.997444][T14966] team_slave_1: entered promiscuous mode [ 2513.006492][T14966] bridge0: port 3(team0) entered blocking state [ 2513.012803][T14966] bridge0: port 3(team0) entered forwarding state [ 2514.070437][T14982] MTD: Couldn't look up '/dev/nullb0': -15 [ 2514.276420][T14982] /dev/nullb0: Can't lookup blockdev [ 2514.498681][ T30] audit: type=1400 audit(2362.219:4851): avc: denied { read write } for pid=14977 comm="syz.9.12573" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2514.560878][ T30] audit: type=1400 audit(2362.219:4852): avc: denied { open } for pid=14977 comm="syz.9.12573" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2517.122073][ T1322] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2518.316186][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12584'. [ 2518.325631][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12584'. [ 2518.341453][T15031] netlink: 'syz.9.12584': attribute type 21 has an invalid length. [ 2518.349339][T15031] netlink: 128 bytes leftover after parsing attributes in process `syz.9.12584'. [ 2518.358907][T15031] netlink: 'syz.9.12584': attribute type 5 has an invalid length. [ 2518.367928][T15031] netlink: 'syz.9.12584': attribute type 6 has an invalid length. [ 2518.376714][T15031] netlink: 3 bytes leftover after parsing attributes in process `syz.9.12584'. [ 2518.771549][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12585'. [ 2519.036405][T15043] fuse: Unknown parameter '000000000000000000131340x0000000000000004' [ 2519.054908][T15043] lo speed is unknown, defaulting to 1000 [ 2519.061315][T15043] speed is unknown, defaulting to 1000 [ 2519.137663][T15043] lo speed is unknown, defaulting to 1000 [ 2519.408140][ T30] audit: type=1400 audit(2366.812:4853): avc: denied { accept } for pid=15051 comm="syz.4.12589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2520.133033][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12592'. [ 2520.245453][T15067] lo speed is unknown, defaulting to 1000 [ 2520.257644][T15067] speed is unknown, defaulting to 1000 [ 2521.091401][T15067] lo speed is unknown, defaulting to 1000 [ 2521.394886][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056669000: rx timeout, send abort [ 2521.718642][ T30] audit: type=1400 audit(2368.982:4854): avc: denied { read } for pid=5165 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2521.746958][ T30] audit: type=1400 audit(2368.982:4855): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2521.807628][ T30] audit: type=1400 audit(2368.982:4856): avc: denied { append } for pid=5165 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2521.877643][ T30] audit: type=1400 audit(2368.982:4857): avc: denied { open } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2521.910213][ T30] audit: type=1400 audit(2368.982:4858): avc: denied { getattr } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2521.937688][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056669000: abort rx timeout. Force session deactivation [ 2522.556834][T15083] netlink: 'syz.4.12596': attribute type 2 has an invalid length. [ 2522.566813][T15083] netlink: 'syz.4.12596': attribute type 2 has an invalid length. [ 2522.575541][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12596'. [ 2523.126282][T15077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2523.255295][ T30] audit: type=1400 audit(2370.414:4859): avc: denied { write } for pid=15074 comm="syz.9.12595" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2523.301535][ T30] audit: type=1326 audit(2370.423:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15088 comm="syz.4.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2523.834789][ T30] audit: type=1326 audit(2370.423:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15088 comm="syz.4.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2523.870076][ T30] audit: type=1326 audit(2370.993:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15088 comm="syz.4.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2523.949201][ T30] audit: type=1326 audit(2370.993:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15088 comm="syz.4.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2525.025939][T15111] lo speed is unknown, defaulting to 1000 [ 2525.061024][T15111] speed is unknown, defaulting to 1000 [ 2525.310496][T15112] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2525.598424][T15111] lo speed is unknown, defaulting to 1000 [ 2526.082383][T15118] bridge0: entered promiscuous mode [ 2526.087659][T15118] bridge0: entered allmulticast mode [ 2528.323951][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12608'. [ 2528.361952][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12608'. [ 2530.496176][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2530.496187][ T30] audit: type=1400 audit(2377.195:4869): avc: denied { getopt } for pid=15180 comm="syz.2.12618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2531.664265][T15190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2531.671486][T15190] IPv6: NLM_F_CREATE should be set when creating new route [ 2531.678667][T15190] IPv6: NLM_F_CREATE should be set when creating new route [ 2531.685860][T15190] IPv6: NLM_F_CREATE should be set when creating new route [ 2532.092673][T15198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12624'. [ 2532.102105][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12624'. [ 2532.160726][T15200] FAT-fs (loop7): unable to read boot sector [ 2532.167136][ T30] audit: type=1400 audit(2378.748:4870): avc: denied { mounton } for pid=15196 comm="syz.3.12624" path="/2203/file0" dev="tmpfs" ino=11899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2532.189984][ C0] vkms_vblank_simulate: vblank timer overrun [ 2535.409040][T15235] netlink: 'syz.3.12631': attribute type 39 has an invalid length. [ 2535.438833][T15234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2535.614699][T15238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15238 comm=syz.3.12631 [ 2536.074332][ T5424] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 2536.626140][ T5424] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2536.657481][ T5424] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2536.690369][ T5424] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2536.720237][ T5424] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2536.739453][ T5424] usb 10-1: SerialNumber: syz [ 2537.560627][T15264] trusted_key: encrypted_key: insufficient parameters specified [ 2537.596963][T15264] trusted_key: encrypted_key: insufficient parameters specified [ 2537.994192][ T30] audit: type=1800 audit(2384.193:4871): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.12637" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 errno=0 [ 2539.905536][T12931] usb 10-1: USB disconnect, device number 6 [ 2539.948407][ T30] audit: type=1400 audit(2386.035:4872): avc: denied { read write } for pid=15296 comm="syz.9.12647" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2540.040908][ T30] audit: type=1400 audit(2386.035:4873): avc: denied { open } for pid=15296 comm="syz.9.12647" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2540.076060][ T30] audit: type=1400 audit(2386.054:4874): avc: denied { ioctl } for pid=15296 comm="syz.9.12647" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2540.171059][T15303] overlayfs: failed to clone upperpath [ 2540.340581][ T9256] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2541.080345][T15303] overlayfs: failed to resolve './file1': -2 [ 2542.248889][ T30] audit: type=1400 audit(2388.168:4875): avc: denied { name_bind } for pid=15317 comm="syz.4.12651" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2542.282687][ T30] audit: type=1400 audit(2388.168:4876): avc: denied { setopt } for pid=15317 comm="syz.4.12651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2545.326311][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12659'. [ 2545.335558][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12659'. [ 2546.050240][T15372] openvswitch: netlink: Message has 4 unknown bytes. [ 2546.081924][T15372] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 2546.409007][T15373] hub 9-0:1.0: USB hub found [ 2546.415237][T15373] hub 9-0:1.0: 1 port detected [ 2546.432704][ T30] audit: type=1400 audit(2391.788:4877): avc: denied { relabelto } for pid=15363 comm="syz.2.12661" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=13921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="/sbin/dhclient" [ 2546.484428][ T30] audit: type=1400 audit(2391.788:4878): avc: denied { associate } for pid=15363 comm="syz.2.12661" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=13921 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/sbin/dhclient" [ 2546.679448][T12931] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 2546.926307][T12931] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 2546.934885][T12931] usb 10-1: config 0 has no interface number 0 [ 2546.944427][T12931] usb 10-1: config 0 interface 2 has no altsetting 0 [ 2546.954402][T12931] usb 10-1: New USB device found, idVendor=19d2, idProduct=ff71, bcdDevice=e5.22 [ 2546.965092][ T30] audit: type=1400 audit(2392.593:4879): avc: denied { rmdir } for pid=5818 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=13921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="/sbin/dhclient" [ 2547.005440][T12931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2547.015864][T12931] usb 10-1: Product: syz [ 2547.020150][T12931] usb 10-1: Manufacturer: syz [ 2547.026706][T12931] usb 10-1: SerialNumber: syz [ 2547.043393][T12931] usb 10-1: config 0 descriptor?? [ 2547.271295][T12931] option 10-1:0.2: GSM modem (1-port) converter detected [ 2548.256589][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12669'. [ 2548.265952][T15392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12669'. [ 2548.408689][T15395] siw: device registration error -23 [ 2549.186483][T15402] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 2549.271528][T12931] usb 10-1: USB disconnect, device number 7 [ 2549.278296][T12931] option 10-1:0.2: device disconnected [ 2550.246235][T15407] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2550.481881][T15421] lo speed is unknown, defaulting to 1000 [ 2550.494151][T15421] speed is unknown, defaulting to 1000 [ 2550.987926][T15421] lo speed is unknown, defaulting to 1000 [ 2551.287078][ T2961] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2551.903345][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2551.914757][T15431] sp0: Synchronizing with TNC [ 2551.932914][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2551.960723][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2551.975812][T15436] sp0: Found TNC [ 2551.983813][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2552.006279][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2552.030995][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2552.044049][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2552.052136][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2552.066141][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2552.074788][T15433] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2552.411193][T15445] MTD: Couldn't look up '/dev/nullb0': -15 [ 2552.417329][T15445] /dev/nullb0: Can't lookup blockdev [ 2552.588227][ T30] audit: type=1400 audit(2397.850:4880): avc: denied { write } for pid=15439 comm="syz.3.12679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2553.270418][T15455] sp0: Synchronizing with TNC [ 2553.521918][T15456] sp0: Found TNC [ 2554.715720][T15477] sp0: Synchronizing with TNC [ 2554.733361][T15477] sp0: Found TNC [ 2557.104188][T15512] wg1: entered promiscuous mode [ 2557.109043][T15512] wg1: entered allmulticast mode [ 2558.746648][T15531] overlayfs: failed to clone upperpath [ 2560.878530][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2560.885042][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2562.655898][T15579] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2563.165815][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12711'. [ 2563.504404][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12715'. [ 2563.515367][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12715'. [ 2563.524836][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12715'. [ 2563.616455][T15596] random: crng reseeded on system resumption [ 2563.623987][ T30] audit: type=1400 audit(2408.171:4881): avc: denied { write } for pid=15590 comm="syz.9.12713" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2563.661660][T15596] Restarting kernel threads ... [ 2563.666996][T15596] Done restarting kernel threads. [ 2563.672151][ T30] audit: type=1400 audit(2408.171:4882): avc: denied { open } for pid=15590 comm="syz.9.12713" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2563.713037][ T30] audit: type=1400 audit(2408.218:4883): avc: denied { ioctl } for pid=15590 comm="syz.9.12713" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2564.086630][T15579] xt_nfacct: accounting object `syz1' does not exist [ 2565.251000][T15618] sp0: Synchronizing with TNC [ 2565.330005][T15621] sp0: Found TNC [ 2565.865591][T15631] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2567.368300][T15640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2567.650452][T15651] sp0: Synchronizing with TNC [ 2567.665081][T15651] sp0: Found TNC [ 2567.679754][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12727'. [ 2567.777091][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12726'. [ 2567.790600][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12726'. [ 2569.156221][T15667] MTD: Couldn't look up '/dev/nullb0': -15 [ 2569.167665][T15667] /dev/nullb0: Can't lookup blockdev [ 2569.492822][ T30] audit: type=1400 audit(2413.660:4884): avc: denied { create } for pid=15658 comm="syz.6.12729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2569.515701][T15671] could not allocate digest TFM handle cryptd(blake2b-160) [ 2570.000656][T15686] MTD: Couldn't look up '/dev/nullb0': -15 [ 2570.028181][T15686] /dev/nullb0: Can't lookup blockdev [ 2570.332427][T15692] siw: device registration error -23 [ 2571.326636][T15706] bridge11: entered promiscuous mode [ 2571.332386][T15706] bridge11: entered allmulticast mode [ 2572.020347][T15711] netlink: 148 bytes leftover after parsing attributes in process `syz.4.12740'. [ 2573.653404][ T30] audit: type=1400 audit(2417.550:4885): avc: denied { connect } for pid=15716 comm="syz.6.12743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2574.888017][T15731] MTD: Couldn't look up '/dev/nullb0': -15 [ 2574.903859][T15731] /dev/nullb0: Can't lookup blockdev [ 2575.037254][ T30] audit: type=1400 audit(2418.859:4886): avc: denied { connect } for pid=15732 comm="syz.6.12747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2575.212318][T15744] lo speed is unknown, defaulting to 1000 [ 2575.219548][T15744] speed is unknown, defaulting to 1000 [ 2575.293801][T15744] lo speed is unknown, defaulting to 1000 [ 2575.945215][ T8310] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2576.853491][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12753'. [ 2576.862912][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12753'. [ 2581.405002][T15806] MTD: Couldn't look up '/dev/nullb0': -15 [ 2581.416254][T15806] /dev/nullb0: Can't lookup blockdev [ 2581.904711][T15820] sp0: Synchronizing with TNC [ 2582.455037][T15820] sp0: Found TNC [ 2583.145338][T15837] overlayfs: failed to clone upperpath [ 2583.329143][T15841] tipc: Resetting bearer [ 2583.463781][T15841] tipc: Resetting bearer [ 2584.549463][ T30] audit: type=1400 audit(2427.743:4887): avc: denied { ioctl } for pid=15859 comm="syz.9.12775" path="socket:[158308]" dev="sockfs" ino=158308 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2584.917683][ T30] audit: type=1400 audit(2427.780:4888): avc: denied { connect } for pid=15859 comm="syz.9.12775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2584.935142][T15857] MTD: Couldn't look up '/dev/nullb0': -15 [ 2585.088747][T15857] /dev/nullb0: Can't lookup blockdev [ 2585.200421][T15870] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 2585.693540][T15873] macvtap0: entered allmulticast mode [ 2585.699130][T15873] veth0_macvtap: entered allmulticast mode [ 2586.869301][ T30] audit: type=1400 audit(2429.912:4889): avc: denied { write } for pid=15876 comm="syz.2.12779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2587.462059][T15893] overlayfs: failed to clone upperpath [ 2587.754965][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12786'. [ 2588.327849][T15901] validate_nla: 1 callbacks suppressed [ 2588.327883][T15901] netlink: 'syz.9.12787': attribute type 1 has an invalid length. [ 2588.589830][T15901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2588.604479][T15900] bond1: (slave geneve2): making interface the new active one [ 2588.613655][T15900] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2589.860107][T15918] MTD: Couldn't look up '/dev/nullb0': -15 [ 2589.922429][T15918] /dev/nullb0: Can't lookup blockdev [ 2590.200324][T15929] ptrace attach of "./syz-executor exec"[5807] was attempted by " \x09\x09\x1bD\x09\x098S\x0d=\x0720l\x09\x0a\x0a\x0a3aK$\x0d[\x0a~R xpR<\x1b\x1b[1\x07\x0d\x07J\x096;x\x0da X\x07\x22r'gW¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 u'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻ /AnV\x1b1bBk~}$Qd[\x0cavi1N/pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?|ea\x0c !SR /ugy\x09PpA`B\x0cVdy!Mۈ2Э{F5_`Πw [ 2592.198469][T15960] lo speed is unknown, defaulting to 1000 [ 2592.326853][T15960] speed is unknown, defaulting to 1000 [ 2592.757503][T15960] lo speed is unknown, defaulting to 1000 [ 2592.926291][T15969] Invalid ELF header magic: != ELF [ 2594.412596][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12807'. [ 2597.780080][ T30] audit: type=1804 audit(2440.114:4890): pid=16009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.12813" name="file0" dev="tmpfs" ino=9681 res=1 errno=0 [ 2598.765385][T16023] sp0: Synchronizing with TNC [ 2598.801078][T16023] sp0: Found TNC [ 2600.072153][ T30] audit: type=1800 audit(2442.265:4891): pid=16038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.12819" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 2600.432481][T16057] tipc: Disabling bearer [ 2600.796376][ T30] audit: type=1326 audit(2442.938:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16059 comm="syz.6.12828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2600.916815][ T30] audit: type=1326 audit(2442.938:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16059 comm="syz.6.12828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2600.940642][ T30] audit: type=1326 audit(2442.966:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16059 comm="syz.6.12828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2601.103059][T16063] /dev/nullb0: Can't lookup blockdev [ 2601.447218][ T5424] libceph: connect (1)[c::]:6789 error -101 [ 2601.457749][ T5424] libceph: mon0 (1)[c::]:6789 connect error [ 2601.463894][ T30] audit: type=1326 audit(2442.966:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16059 comm="syz.6.12828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2601.487301][ T30] audit: type=1326 audit(2442.966:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16059 comm="syz.6.12828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2601.510613][ T30] audit: type=1326 audit(2442.966:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16059 comm="syz.6.12828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2601.569605][ T30] audit: type=1326 audit(2442.966:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16059 comm="syz.6.12828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2601.624412][ T30] audit: type=1326 audit(2442.966:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16059 comm="syz.6.12828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab58f6c9 code=0x7ffc0000 [ 2601.667107][T16062] ceph: No mds server is up or the cluster is laggy [ 2604.617522][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2604.617537][ T30] audit: type=1400 audit(2446.510:4925): avc: denied { bind } for pid=16103 comm="syz.6.12840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2605.955492][T16131] /dev/nullb0: Can't lookup blockdev [ 2606.305375][T13185] libceph: connect (1)[c::]:6789 error -101 [ 2606.314149][T13185] libceph: mon0 (1)[c::]:6789 connect error [ 2606.548546][T16129] ceph: No mds server is up or the cluster is laggy [ 2607.193292][T12931] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2607.557015][T12931] usb 10-1: device descriptor read/64, error -71 [ 2607.812998][T12931] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2608.058775][T16150] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12850'. [ 2608.333464][ T30] audit: type=1400 audit(2449.652:4926): avc: denied { accept } for pid=16146 comm="syz.6.12850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2608.390972][T12931] usb 10-1: device descriptor read/64, error -71 [ 2608.515422][T12931] usb usb10-port1: attempt power cycle [ 2609.256685][T12931] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2609.358664][T12931] usb 10-1: device descriptor read/8, error -71 [ 2612.585462][T16194] MTD: Couldn't look up '/dev/nullb0': -15 [ 2612.591311][T16194] /dev/nullb0: Can't lookup blockdev [ 2613.029862][T16208] tmpfs: Bad value for 'huge' [ 2613.287644][T16216] netlink: 'syz.4.12865': attribute type 2 has an invalid length. [ 2613.792997][ T30] audit: type=1400 audit(2454.739:4927): avc: denied { read write } for pid=16213 comm="syz.9.12866" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2613.829575][ T30] audit: type=1400 audit(2454.739:4928): avc: denied { open } for pid=16213 comm="syz.9.12866" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2614.518893][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12867'. [ 2614.527904][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12867'. [ 2614.542181][T16225] netlink: 'syz.4.12867': attribute type 21 has an invalid length. [ 2614.550286][T16225] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12867'. [ 2614.559457][T16225] netlink: 'syz.4.12867': attribute type 5 has an invalid length. [ 2615.027547][T16225] netlink: 'syz.4.12867': attribute type 6 has an invalid length. [ 2615.038229][T16225] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12867'. [ 2616.155384][ T30] audit: type=1400 audit(2457.301:4929): avc: denied { ioctl } for pid=16236 comm="syz.4.12870" path="socket:[160033]" dev="sockfs" ino=160033 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2617.510574][T16259] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2617.628206][T16260] lo speed is unknown, defaulting to 1000 [ 2617.635813][T16260] speed is unknown, defaulting to 1000 [ 2617.778353][T16259] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 2617.782621][T16260] lo speed is unknown, defaulting to 1000 [ 2617.789433][T16259] overlayfs: failed to look up (tracing) for ino (-66) [ 2617.803700][ T30] audit: type=1400 audit(2458.798:4930): avc: denied { getopt } for pid=16255 comm="syz.9.12874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2618.321286][ T30] audit: type=1400 audit(2459.284:4931): avc: denied { unmount } for pid=12846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2618.384112][T16267] MTD: Couldn't look up '/dev/nullb0': -15 [ 2618.390104][T16267] /dev/nullb0: Can't lookup blockdev [ 2619.990191][ T30] audit: type=1326 audit(2460.873:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2620.013219][ C0] vkms_vblank_simulate: vblank timer overrun [ 2620.358956][ T30] audit: type=1326 audit(2460.873:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2620.471468][ T30] audit: type=1326 audit(2460.873:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2620.706657][T16297] fuse: Bad value for 'fd' [ 2621.106983][ T30] audit: type=1326 audit(2460.873:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2621.230162][ T30] audit: type=1326 audit(2460.873:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2621.255833][ T30] audit: type=1326 audit(2460.873:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2621.281929][ T30] audit: type=1326 audit(2460.873:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2621.309163][ T30] audit: type=1326 audit(2460.873:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2621.406779][ T30] audit: type=1326 audit(2460.873:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2621.438899][ T30] audit: type=1326 audit(2460.873:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.4.12879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd321f8f6c9 code=0x7ffc0000 [ 2623.610968][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12892'. [ 2623.679185][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12892'. [ 2623.681160][T16331] netlink: 'syz.3.12892': attribute type 21 has an invalid length. [ 2623.706823][T16331] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12892'. [ 2623.717649][T16332] netlink: 'syz.6.12888': attribute type 12 has an invalid length. [ 2623.727535][T16331] netlink: 'syz.3.12892': attribute type 5 has an invalid length. [ 2623.735419][T16331] netlink: 'syz.3.12892': attribute type 6 has an invalid length. [ 2623.757829][T16331] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12892'. [ 2624.439460][T16346] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12896'. [ 2625.623830][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 2625.623844][ T30] audit: type=1400 audit(2466.157:5014): avc: denied { create } for pid=16356 comm="syz.9.12900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2625.675957][T16359] netlink: 32 bytes leftover after parsing attributes in process `syz.9.12900'. [ 2625.685434][ T30] audit: type=1400 audit(2466.194:5015): avc: denied { map } for pid=16356 comm="syz.9.12900" path="/proc/770/net/ip_tables_names" dev="proc" ino=4026534678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2625.694844][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12900'. [ 2625.719259][T16359] netlink: 'syz.9.12900': attribute type 30 has an invalid length. [ 2625.743908][T32113] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2625.757691][T32113] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2625.801703][ T2961] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2625.812854][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12898'. [ 2625.822161][ T2961] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2625.890285][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12898'. [ 2625.899430][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12898'. [ 2626.572903][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2626.579218][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2627.132079][T16379] sp0: Synchronizing with TNC [ 2627.181772][T16379] sp0: Found TNC [ 2627.884014][ T30] audit: type=1400 audit(2468.261:5016): avc: denied { accept } for pid=16385 comm="syz.3.12907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2628.050599][T16391] siw: device registration error -23 [ 2628.482807][T16399] lo speed is unknown, defaulting to 1000 [ 2628.496445][T16399] speed is unknown, defaulting to 1000 [ 2628.836754][T16399] lo speed is unknown, defaulting to 1000 [ 2630.889799][T16432] siw: device registration error -23 [ 2631.042435][T16434] sp0: Synchronizing with TNC [ 2631.336000][T16445] __nla_validate_parse: 2 callbacks suppressed [ 2631.342587][T16445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12919'. [ 2631.395189][T16446] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2631.732295][T16431] tipc: Resetting bearer [ 2632.711938][T16444] pim6reg: entered allmulticast mode [ 2633.757152][ T30] audit: type=1400 audit(2473.740:5017): avc: denied { mount } for pid=16481 comm="syz.9.12935" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2636.222034][T16523] overlayfs: failed to clone upperpath [ 2636.371323][ T30] audit: type=1400 audit(2476.209:5018): avc: denied { map } for pid=16520 comm="syz.4.12944" path="/2731/file0" dev="tmpfs" ino=14698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2636.413755][ T30] audit: type=1400 audit(2476.209:5019): avc: denied { execute } for pid=16520 comm="syz.4.12944" path="/2731/file0" dev="tmpfs" ino=14698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2636.457314][T16526] overlayfs: overlapping lowerdir path [ 2636.707752][T16530] sp0: Synchronizing with TNC [ 2636.771110][T16530] sp0: Found TNC [ 2637.937133][T16542] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2638.001040][ T30] audit: type=1400 audit(2477.724:5020): avc: denied { ioctl } for pid=16543 comm="syz.4.12951" path="socket:[160560]" dev="sockfs" ino=160560 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2638.290564][T16551] overlayfs: failed to clone upperpath [ 2638.315594][ T30] audit: type=1400 audit(2477.986:5021): avc: denied { mount } for pid=16543 comm="syz.4.12951" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2639.778812][T16568] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12955'. [ 2641.932063][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12960'. [ 2642.216873][T16601] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12963'. [ 2642.526116][ T30] audit: type=1400 audit(2481.829:5022): avc: denied { read } for pid=16597 comm="syz.9.12963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2642.602032][ T30] audit: type=1400 audit(2482.035:5023): avc: denied { getopt } for pid=16603 comm="syz.4.12964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2644.660000][ T30] audit: type=1400 audit(2483.957:5024): avc: denied { read write } for pid=16625 comm="syz.9.12970" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2644.914670][ T30] audit: type=1400 audit(2483.957:5025): avc: denied { open } for pid=16625 comm="syz.9.12970" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2644.977002][ T30] audit: type=1400 audit(2484.256:5026): avc: denied { ioctl } for pid=16625 comm="syz.9.12970" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2645.001676][ C0] vkms_vblank_simulate: vblank timer overrun [ 2645.543969][T16653] /dev/nullb0: Can't lookup blockdev [ 2645.622940][ T5424] libceph: connect (1)[c::]:6789 error -101 [ 2645.632279][ T5424] libceph: mon0 (1)[c::]:6789 connect error [ 2645.927134][ T5424] libceph: connect (1)[c::]:6789 error -101 [ 2645.933193][ T5424] libceph: mon0 (1)[c::]:6789 connect error [ 2646.129280][T16650] ceph: No mds server is up or the cluster is laggy [ 2647.078729][ T1182] libceph: connect (1)[c::]:6789 error -101 [ 2647.085764][ T1182] libceph: mon0 (1)[c::]:6789 connect error [ 2647.092472][ T1182] libceph: connect (1)[c::]:6789 error -101 [ 2647.098572][ T1182] libceph: mon0 (1)[c::]:6789 connect error [ 2647.127044][T16674] ceph: No mds server is up or the cluster is laggy [ 2648.919034][T13185] libceph: connect (1)[c::]:6789 error -101 [ 2649.005322][T13185] libceph: mon0 (1)[c::]:6789 connect error [ 2649.166171][T16698] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12989'. [ 2649.259889][T16705] ceph: No mds server is up or the cluster is laggy [ 2649.358524][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12994'. [ 2650.458369][ T30] audit: type=1400 audit(2489.371:5027): avc: denied { unmount } for pid=12846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2652.535520][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13003'. [ 2653.473720][ T30] audit: type=1400 audit(2492.195:5028): avc: denied { connect } for pid=16760 comm="syz.3.13004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2653.505332][ T30] audit: type=1400 audit(2492.214:5029): avc: denied { bind } for pid=16760 comm="syz.3.13004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2656.037217][ T30] audit: type=1400 audit(2494.234:5030): avc: denied { mount } for pid=16795 comm="syz.4.13013" name="/" dev="rpc_pipefs" ino=161957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2657.536985][T16814] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13016'. [ 2657.768153][T16815] lo speed is unknown, defaulting to 1000 [ 2657.774580][T16815] speed is unknown, defaulting to 1000 [ 2657.858381][T16815] lo speed is unknown, defaulting to 1000 [ 2657.987783][T16798] IPv6: NLM_F_CREATE should be specified when creating new route [ 2657.995772][T16798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2658.003002][T16798] IPv6: NLM_F_CREATE should be set when creating new route [ 2661.232062][ T30] audit: type=1400 audit(2499.452:5031): avc: denied { write } for pid=16858 comm="syz.9.13027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2662.779194][T16879] loop6: detected capacity change from 0 to 524288000 [ 2662.965303][T16881] vlan2: entered allmulticast mode [ 2663.241466][T16882] loop6: detected capacity change from 524288000 to 524287951 [ 2664.635637][T16897] sp0: Synchronizing with TNC [ 2664.786257][T16897] sp0: Found TNC [ 2666.778052][ T30] audit: type=1326 audit(2504.632:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2666.811566][ T30] audit: type=1326 audit(2504.669:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2666.946272][ T30] audit: type=1326 audit(2504.669:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2666.978393][ T30] audit: type=1326 audit(2504.669:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2667.001812][ T30] audit: type=1326 audit(2504.669:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2667.025695][ T30] audit: type=1326 audit(2504.669:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2667.049073][ T30] audit: type=1326 audit(2504.669:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2667.176342][ T30] audit: type=1326 audit(2504.669:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2667.206278][ T30] audit: type=1326 audit(2504.669:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2667.239945][ T30] audit: type=1326 audit(2504.669:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16924 comm="syz.9.13044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362fb8f6c9 code=0x7ffc0000 [ 2670.886338][T16974] lo speed is unknown, defaulting to 1000 [ 2670.900063][T16974] speed is unknown, defaulting to 1000 [ 2671.291074][T16974] lo speed is unknown, defaulting to 1000 [ 2671.600218][T16980] No control pipe specified [ 2672.671936][T16991] sp0: Synchronizing with TNC [ 2672.698561][T16990] sp0: Found TNC [ 2673.030999][T17012] netlink: 'syz.4.13061': attribute type 12 has an invalid length. [ 2674.678205][T17035] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13067'. [ 2674.978570][T17044] siw: device registration error -23 [ 2675.164081][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2675.164098][ T30] audit: type=1326 audit(2512.468:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2675.611584][ T30] audit: type=1326 audit(2512.468:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2675.728179][ T30] audit: type=1326 audit(2512.478:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2675.756838][ T30] audit: type=1326 audit(2512.478:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2675.819292][ T30] audit: type=1326 audit(2512.478:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2675.881143][ T30] audit: type=1326 audit(2512.478:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2675.905283][ T30] audit: type=1326 audit(2512.478:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2675.929652][ T30] audit: type=1326 audit(2512.478:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2676.094512][ T30] audit: type=1326 audit(2512.478:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2676.134738][ T30] audit: type=1326 audit(2512.478:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.3.13069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2676.464485][T17065] overlayfs: failed to clone lowerpath [ 2677.877657][T17075] fuse: Unknown parameter 'fd0x0000000000000005' [ 2677.890625][T13185] libceph: connect (1)[c::]:6789 error -101 [ 2677.897209][T13185] libceph: mon0 (1)[c::]:6789 connect error [ 2677.946220][T17075] ceph: No mds server is up or the cluster is laggy [ 2678.388989][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13078'. [ 2678.832004][T13185] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2679.148426][T13185] usb 10-1: Using ep0 maxpacket: 32 [ 2679.179129][T13185] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 2679.728573][T12931] libceph: connect (1)[c::]:6789 error -101 [ 2679.730706][T13185] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2679.745837][T13185] usb 10-1: Product: syz [ 2679.750406][T13185] usb 10-1: Manufacturer: syz [ 2679.755601][T13185] usb 10-1: SerialNumber: syz [ 2679.762175][T13185] usb 10-1: config 0 descriptor?? [ 2679.802639][T12931] libceph: mon0 (1)[c::]:6789 connect error [ 2679.945225][T17101] ceph: No mds server is up or the cluster is laggy [ 2680.055301][T13185] snd-usb-6fire 10-1:0.0: unknown device firmware state received from device: [ 2680.082490][T13185] 00 00 00 00 00 00 00 00 [ 2680.091832][T13185] snd-usb-6fire 10-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 2680.572793][T17112] fuse: Bad value for 'fd' [ 2680.752294][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2680.752327][ T30] audit: type=1400 audit(2517.705:5116): avc: denied { setopt } for pid=17108 comm="syz.6.13085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2681.747766][T17140] vlan0: entered allmulticast mode [ 2681.773876][T17140] hsr_slave_1: entered allmulticast mode [ 2682.822443][T17149] overlayfs: failed to clone upperpath [ 2683.248496][T12931] usb 10-1: USB disconnect, device number 12 [ 2683.258439][ T30] audit: type=1400 audit(2520.052:5117): avc: denied { unmount } for pid=12846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2683.673244][ T30] audit: type=1400 audit(2520.314:5118): avc: denied { connect } for pid=17151 comm="syz.9.13092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2684.732350][ T30] audit: type=1400 audit(2520.314:5119): avc: denied { read } for pid=17151 comm="syz.9.13092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2685.164977][ T30] audit: type=1400 audit(2521.838:5120): avc: denied { listen } for pid=17156 comm="syz.6.13093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2685.186713][ T30] audit: type=1400 audit(2521.857:5121): avc: denied { ioctl } for pid=17156 comm="syz.6.13093" path="socket:[161539]" dev="sockfs" ino=161539 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2686.091609][T17182] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2686.098745][T17182] /dev/nullb0: Can't open blockdev [ 2686.900288][T17187] netlink: 'syz.4.13100': attribute type 12 has an invalid length. [ 2687.359979][T17194] bridge0: port 1(team0) entered blocking state [ 2687.366538][T17194] bridge0: port 1(team0) entered disabled state [ 2687.372888][T17194] team0: entered allmulticast mode [ 2687.378016][T17194] C: entered allmulticast mode [ 2687.382748][T17194] team_slave_1: entered allmulticast mode [ 2687.389326][T17194] team0: left allmulticast mode [ 2687.394147][T17194] C: left allmulticast mode [ 2687.398678][T17194] team_slave_1: left allmulticast mode [ 2688.900107][T17214] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13103'. [ 2688.918774][T17214] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13103'. [ 2689.011530][T17214] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2689.069372][T17214] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2689.443894][T17214] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2689.454488][T17214] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2689.725547][T17214] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2689.737867][T17214] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2689.970402][T17214] team0: Port device netdevsim0 removed [ 2689.983476][T17214] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2690.008683][T17214] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2690.853737][T21943] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2690.861920][T21943] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 2690.871947][T21943] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2690.880185][T21943] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 2690.888497][T21943] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2690.896770][T21943] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 2691.311806][T21943] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.320048][T21943] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 2691.487829][T17225] lo speed is unknown, defaulting to 1000 [ 2691.496487][T17225] speed is unknown, defaulting to 1000 [ 2692.381671][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2692.388284][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2692.442000][T17225] lo speed is unknown, defaulting to 1000 [ 2693.529226][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13123'. [ 2693.547945][ T30] audit: type=1400 audit(2529.581:5122): avc: denied { mount } for pid=17272 comm="syz.3.13122" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2693.570625][T17281] libceph: resolve '0..' (ret=-3): failed [ 2696.206267][T17306] siw: device registration error -23 [ 2699.276774][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13135'. [ 2699.294012][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13135'. [ 2699.429728][T11754] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2700.434933][T11754] usb 10-1: Using ep0 maxpacket: 8 [ 2700.442811][T11754] usb 10-1: config 0 has no interfaces? [ 2700.509646][T11754] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2700.526881][T11754] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2700.536706][T11754] usb 10-1: config 0 descriptor?? [ 2700.832051][ T5424] usb 10-1: USB disconnect, device number 13 [ 2700.844599][T17358] overlayfs: failed to clone upperpath [ 2700.935260][T17360] MTD: Couldn't look up '/dev/nullb0': -15 [ 2700.941656][T17360] /dev/nullb0: Can't lookup blockdev [ 2700.969831][T17363] siw: device registration error -23 [ 2702.671778][T17376] veth0_to_team: entered promiscuous mode [ 2702.677568][T17376] veth0_to_team: entered allmulticast mode [ 2703.256824][T17387] netlink: 'syz.4.13151': attribute type 20 has an invalid length. [ 2704.389479][ T30] audit: type=1400 audit(2539.801:5123): avc: denied { write } for pid=17402 comm="syz.4.13156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2704.579915][T17412] netlink: 52 bytes leftover after parsing attributes in process `syz.9.13158'. [ 2704.882694][ T5424] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2705.101975][ T5424] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2705.114983][ T5424] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2705.210910][T17424] /dev/nullb0: Can't lookup blockdev [ 2705.510395][T13185] libceph: connect (1)[c::]:6789 error -101 [ 2705.521130][T13185] libceph: mon0 (1)[c::]:6789 connect error [ 2705.535167][ T5424] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2705.566484][ T5424] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2705.593322][ T5424] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2705.603855][ T5424] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2705.612333][ T5424] usb 10-1: Product: syz [ 2705.622017][ T5424] usb 10-1: Manufacturer: syz [ 2705.632648][ T5424] usb 10-1: SerialNumber: syz [ 2705.822205][T17422] ceph: No mds server is up or the cluster is laggy [ 2705.885419][T13185] libceph: connect (1)[c::]:6789 error -101 [ 2705.891639][T13185] libceph: mon0 (1)[c::]:6789 connect error [ 2706.045352][ T30] audit: type=1326 audit(2541.353:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2706.129704][ T30] audit: type=1326 audit(2541.381:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2706.154130][ T30] audit: type=1326 audit(2541.381:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2706.198649][ T30] audit: type=1326 audit(2541.381:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2706.229220][ T30] audit: type=1326 audit(2541.381:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2706.301473][ T30] audit: type=1326 audit(2541.381:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2706.432866][ T30] audit: type=1326 audit(2541.381:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2706.459113][T17436] Invalid ELF header magic: != ELF [ 2707.023309][ T30] audit: type=1326 audit(2541.381:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2707.056782][ T30] audit: type=1326 audit(2541.381:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17429 comm="syz.3.13162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716358f6c9 code=0x7ffc0000 [ 2707.091015][T17410] batman_adv: batadv0: Adding interface: gretap1 [ 2707.098001][T17410] batman_adv: batadv0: Interface activated: gretap1 [ 2707.170570][T17410] lo speed is unknown, defaulting to 1000 [ 2707.177138][T17410] speed is unknown, defaulting to 1000 [ 2707.381651][T17410] lo speed is unknown, defaulting to 1000 [ 2708.335639][T17461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13167'. [ 2708.956077][T17465] netlink: 164 bytes leftover after parsing attributes in process `syz.9.13168'. [ 2709.011486][T17465] bridge_slave_1: left allmulticast mode [ 2709.017205][T17465] bridge_slave_1: left promiscuous mode [ 2709.024166][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 2709.546702][T17465] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2709.742105][ T5424] cdc_ncm 10-1:1.0: bind() failure [ 2709.752642][ T5424] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2709.827056][ T5424] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2709.845630][ T5424] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 2709.888290][ T5424] usb 10-1: USB disconnect, device number 14 [ 2710.052680][T17477] sp0: Synchronizing with TNC [ 2710.071423][T17477] sp0: Found TNC [ 2711.317410][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2711.317426][ T30] audit: type=1400 audit(2546.281:5157): avc: denied { getopt } for pid=17489 comm="syz.3.13176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2711.495448][T17494] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 2711.501978][T17494] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2711.509802][T17494] vhci_hcd vhci_hcd.0: Device attached [ 2711.813942][T11754] usb 52-1: SetAddress Request (2) to port 0 [ 2711.824510][T11754] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2712.047375][T17496] vhci_hcd: connection closed [ 2712.064242][T21943] vhci_hcd: stop threads [ 2712.252570][T21943] vhci_hcd: release socket [ 2712.266802][T21943] vhci_hcd: disconnect device [ 2712.774493][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13181'. [ 2714.322399][T17547] netlink: 108 bytes leftover after parsing attributes in process `syz.6.13191'. [ 2714.334752][T17547] netlink: 108 bytes leftover after parsing attributes in process `syz.6.13191'. [ 2714.881097][T17542] MTD: Couldn't look up '/dev/nullb0': -15 [ 2715.055341][T17542] /dev/nullb0: Can't lookup blockdev [ 2715.383443][T17554] batadv_slave_0: entered promiscuous mode [ 2715.763772][T17559] netlink: 80 bytes leftover after parsing attributes in process `syz.9.13196'. [ 2715.773162][T17559] netlink: 44 bytes leftover after parsing attributes in process `syz.9.13196'. [ 2716.376403][T17573] xt_cgroup: invalid path, errno=-2 [ 2716.702830][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13199'. [ 2716.739856][T17588] 9pnet_fd: Insufficient options for proto=fd [ 2716.827986][ T30] audit: type=1400 audit(2551.368:5158): avc: denied { read } for pid=17583 comm="syz.6.13201" path="socket:[164252]" dev="sockfs" ino=164252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2717.128524][T17583] delete_channel: no stack [ 2717.508738][T17596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13203'. [ 2718.160085][T11754] usb 52-1: device descriptor read/8, error -110 [ 2718.700378][T11754] usb usb52-port1: attempt power cycle [ 2718.711392][T17608] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2719.777435][T11754] usb usb52-port1: unable to enumerate USB device [ 2720.117548][T17630] netlink: 80 bytes leftover after parsing attributes in process `syz.9.13210'. [ 2720.164421][T17630] netlink: 44 bytes leftover after parsing attributes in process `syz.9.13210'. [ 2721.198089][T17644] netlink: 'syz.4.13211': attribute type 7 has an invalid length. [ 2722.094208][ T30] audit: type=1400 audit(2556.362:5159): avc: denied { mount } for pid=17648 comm="syz.9.13216" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2722.990571][T17666] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13218'. [ 2723.010575][T17666] batman_adv: batadv0: Adding interface: gretap1 [ 2723.020965][T17666] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 2723.041969][T17666] batman_adv: batadv0: Interface activated: gretap1 [ 2723.104367][T17666] lo speed is unknown, defaulting to 1000 [ 2723.114462][T17666] speed is unknown, defaulting to 1000 [ 2723.628932][T17666] lo speed is unknown, defaulting to 1000 [ 2724.905036][T17694] netlink: 'syz.9.13224': attribute type 1 has an invalid length. [ 2724.912990][T17694] netlink: 228 bytes leftover after parsing attributes in process `syz.9.13224'. [ 2725.530388][T17703] overlayfs: failed to clone upperpath [ 2726.913615][T17706] tipc: Started in network mode [ 2726.918739][T17706] tipc: Node identity 10001, cluster identity 4711 [ 2726.925501][T17706] tipc: Node number set to 65537 [ 2729.189587][T17736] netlink: 'syz.4.13236': attribute type 12 has an invalid length. [ 2729.201479][T17729] fuse: Bad value for 'fd' [ 2729.698043][T17745] sp0: Synchronizing with TNC [ 2729.736895][T17741] netlink: 179592 bytes leftover after parsing attributes in process `syz.6.13238'. [ 2729.760367][T17745] sp0: Found TNC [ 2730.107010][ T30] audit: type=1400 audit(2563.852:5160): avc: denied { setopt } for pid=17747 comm="syz.6.13241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2731.377678][T17772] misc userio: Begin command sent, but we're already running [ 2736.244429][T17808] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 2736.251046][T17808] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2736.292418][T17808] vhci_hcd vhci_hcd.0: Device attached [ 2736.314748][T17810] vhci_hcd: connection closed [ 2736.324112][T21943] vhci_hcd: stop threads [ 2736.333013][T21943] vhci_hcd: release socket [ 2736.337994][T21943] vhci_hcd: disconnect device [ 2736.699895][T17820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2737.082221][ T30] audit: type=1400 audit(2570.379:5161): avc: denied { create } for pid=17818 comm="syz.6.13256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2739.138826][T17842] No control pipe specified [ 2739.767663][T17586] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2739.995969][T17586] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2740.005241][T17586] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.013711][T17586] usb 10-1: Product: syz [ 2740.056201][T17586] usb 10-1: Manufacturer: syz [ 2740.060952][T17586] usb 10-1: SerialNumber: syz [ 2740.102491][T17586] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2740.157715][T11754] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2740.277279][T17862] overlayfs: failed to clone upperpath [ 2741.161457][ T30] audit: type=1400 audit(2574.194:5162): avc: denied { create } for pid=17873 comm="syz.3.13267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 2741.299737][T11754] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 2741.318962][T11754] ath9k_htc: Failed to initialize the device [ 2741.352336][T17878] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13268'. [ 2741.355546][T11754] usb 10-1: ath9k_htc: USB layer deinitialized [ 2741.362721][ T5424] libceph: connect (1)[c::]:6789 error -101 [ 2741.510305][T17874] ceph: No mds server is up or the cluster is laggy [ 2741.518250][ T5424] libceph: mon0 (1)[c::]:6789 connect error [ 2742.574104][T11754] usb 10-1: USB disconnect, device number 15 [ 2744.711879][T17919] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13279'. [ 2745.091312][ T30] audit: type=1400 audit(2577.832:5163): avc: denied { ioctl } for pid=17921 comm="syz.4.13280" path="socket:[165901]" dev="sockfs" ino=165901 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2745.688088][T17921] delete_channel: no stack [ 2749.337561][T17980] lo speed is unknown, defaulting to 1000 [ 2750.269082][T17980] speed is unknown, defaulting to 1000 [ 2750.425902][T17980] lo speed is unknown, defaulting to 1000 [ 2750.891762][T18004] fuse: Bad value for 'fd' [ 2751.928909][T18009] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 2752.168761][T18003] block device autoloading is deprecated and will be removed. [ 2752.231035][T18003] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13297'. [ 2755.523699][ T3431] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 2755.537371][ T3431] CPU: 0 UID: 0 PID: 3431 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 2755.537402][ T3431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2755.537415][ T3431] Workqueue: hci2 hci_rx_work [ 2755.537436][ T3431] Call Trace: [ 2755.537443][ T3431] [ 2755.537451][ T3431] dump_stack_lvl+0x16c/0x1f0 [ 2755.537484][ T3431] sysfs_warn_dup+0x7f/0xa0 [ 2755.537512][ T3431] sysfs_create_dir_ns+0x24b/0x2b0 [ 2755.537536][ T3431] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2755.537559][ T3431] ? find_held_lock+0x2b/0x80 [ 2755.537587][ T3431] ? do_raw_spin_unlock+0x172/0x230 [ 2755.537610][ T3431] kobject_add_internal+0x2c4/0x9b0 [ 2755.537636][ T3431] kobject_add+0x16e/0x240 [ 2755.537656][ T3431] ? __pfx_kobject_add+0x10/0x10 [ 2755.537678][ T3431] ? do_raw_spin_unlock+0x172/0x230 [ 2755.537700][ T3431] ? kobject_put+0xab/0x5a0 [ 2755.537727][ T3431] device_add+0x288/0x1aa0 [ 2755.537751][ T3431] ? __pfx_dev_set_name+0x10/0x10 [ 2755.537777][ T3431] ? __pfx_device_add+0x10/0x10 [ 2755.537800][ T3431] ? mgmt_send_event_skb+0x2fb/0x460 [ 2755.537841][ T3431] hci_conn_add_sysfs+0x17e/0x230 [ 2755.537860][ T3431] le_conn_complete_evt+0x1260/0x2150 [ 2755.537895][ T3431] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2755.537920][ T3431] ? hci_event_packet+0x459/0x11c0 [ 2755.537950][ T3431] hci_le_conn_complete_evt+0x23c/0x370 [ 2755.537982][ T3431] hci_le_meta_evt+0x357/0x5e0 [ 2755.538009][ T3431] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2755.538039][ T3431] hci_event_packet+0x685/0x11c0 [ 2755.538063][ T3431] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2755.538092][ T3431] ? __pfx_hci_event_packet+0x10/0x10 [ 2755.538121][ T3431] ? kcov_remote_start+0x3c9/0x6d0 [ 2755.538144][ T3431] ? lockdep_hardirqs_on+0x7c/0x110 [ 2755.538169][ T3431] hci_rx_work+0x2c5/0x16b0 [ 2755.538187][ T3431] ? rcu_is_watching+0x12/0xc0 [ 2755.538216][ T3431] process_one_work+0x9cf/0x1b70 [ 2755.538249][ T3431] ? __pfx_process_one_work+0x10/0x10 [ 2755.538278][ T3431] ? assign_work+0x1a0/0x250 [ 2755.538300][ T3431] worker_thread+0x6c8/0xf10 [ 2755.538333][ T3431] ? __pfx_worker_thread+0x10/0x10 [ 2755.538354][ T3431] kthread+0x3c5/0x780 [ 2755.538373][ T3431] ? __pfx_kthread+0x10/0x10 [ 2755.538393][ T3431] ? rcu_is_watching+0x12/0xc0 [ 2755.538416][ T3431] ? __pfx_kthread+0x10/0x10 [ 2755.538436][ T3431] ret_from_fork+0x675/0x7d0 [ 2755.538452][ T3431] ? __pfx_kthread+0x10/0x10 [ 2755.538470][ T3431] ret_from_fork_asm+0x1a/0x30 [ 2755.538511][ T3431] [ 2755.538535][ T3431] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2755.802031][ T3431] Bluetooth: hci2: failed to register connection device [ 2756.705585][ T30] audit: type=1400 audit(2588.726:5164): avc: denied { getopt } for pid=18055 comm="syz.9.13311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2757.149336][ T30] audit: type=1400 audit(2588.857:5165): avc: denied { read } for pid=18055 comm="syz.9.13311" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2757.203527][ T30] audit: type=1400 audit(2588.857:5166): avc: denied { open } for pid=18055 comm="syz.9.13311" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2757.703501][T18069] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13313'. [ 2758.158458][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2758.164819][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2758.171769][T18047] Bluetooth: hci2: command 0x0405 tx timeout [ 2760.544228][T18091] netlink: 'syz.6.13318': attribute type 21 has an invalid length. [ 2760.553428][T18091] netlink: 128 bytes leftover after parsing attributes in process `syz.6.13318'. [ 2760.577025][T18091] netlink: 'syz.6.13318': attribute type 4 has an invalid length. [ 2760.585704][T18091] netlink: 3 bytes leftover after parsing attributes in process `syz.6.13318'. [ 2760.676187][T18091] batadv2: entered promiscuous mode [ 2760.682876][T18091] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2761.769563][T18114] netlink: 'syz.4.13325': attribute type 1 has an invalid length. [ 2762.164134][T18114] bond15: entered promiscuous mode [ 2762.169454][T18114] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2763.887511][T18138] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13331'. [ 2763.947685][T18130] netlink: 36 bytes leftover after parsing attributes in process `syz.9.13322'. [ 2764.126948][T18138] lo speed is unknown, defaulting to 1000 [ 2764.251988][T18138] speed is unknown, defaulting to 1000 [ 2765.108091][T18138] lo speed is unknown, defaulting to 1000 [ 2765.250506][ T5823] Bluetooth: hci2: command 0x0405 tx timeout [ 2765.265720][T18156] netlink: 'syz.4.13333': attribute type 12 has an invalid length. [ 2766.406893][ T30] audit: type=1400 audit(2597.796:5167): avc: denied { read } for pid=18160 comm="syz.3.13334" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2767.809630][ T30] audit: type=1400 audit(2599.115:5168): avc: denied { write } for pid=18170 comm="syz.4.13338" path="socket:[165715]" dev="sockfs" ino=165715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2769.289350][ T30] audit: type=1400 audit(2600.499:5169): avc: denied { write } for pid=18199 comm="syz.6.13342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2769.320388][T18202] trusted_key: encrypted_key: insufficient parameters specified [ 2769.334100][T18202] trusted_key: encrypted_key: insufficient parameters specified [ 2769.354606][ T30] audit: type=1400 audit(2600.527:5170): avc: denied { append } for pid=18196 comm="syz.9.13343" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2769.870009][T18215] dns_resolver: Unsupported content type (152) [ 2772.245939][T18246] comedi comedi0: c6xdigio: I/O port conflict (0xb013,3) [ 2772.256185][T18246] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000025: 0000 [#1] SMP KASAN NOPTI [ 2772.268250][T18246] KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f] [ 2772.276653][T18246] CPU: 0 UID: 0 PID: 18246 Comm: syz.9.13354 Not tainted syzkaller #0 PREEMPT(full) [ 2772.286098][T18246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2772.296225][T18246] RIP: 0010:kernfs_root+0x67/0x2a0 [ 2772.301347][T18246] Code: 89 c6 e8 fc e2 57 ff 58 85 db 0f 85 b7 00 00 00 e8 ae e7 57 ff 48 8d 7d 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1a 02 00 00 48 8b 5d 30 e8 f6 95 fb 08 31 ff 41 [ 2772.320946][T18246] RSP: 0018:ffffc9000e18f910 EFLAGS: 00010203 [ 2772.327003][T18246] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc90014a43000 [ 2772.334959][T18246] RDX: 0000000000000025 RSI: ffffffff82650122 RDI: 000000000000012c [ 2772.342917][T18246] RBP: 00000000000000fc R08: 0000000000000001 R09: 0000000000000000 [ 2772.350873][T18246] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1e6a80 [ 2772.358909][T18246] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88814c587800 [ 2772.366855][T18246] FS: 00007f36309ad6c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 2772.375766][T18246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2772.382332][T18246] CR2: 0000000000000000 CR3: 0000000029190000 CR4: 00000000003526f0 [ 2772.390302][T18246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2772.398253][T18246] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2772.406202][T18246] Call Trace: [ 2772.409461][T18246] [ 2772.412379][T18246] kernfs_remove_by_name_ns+0x2e/0x110 [ 2772.417817][T18246] driver_remove_file+0x4a/0x60 [ 2772.422652][T18246] bus_remove_driver+0x224/0x2c0 [ 2772.427575][T18246] driver_unregister+0x76/0xb0 [ 2772.432324][T18246] comedi_device_detach_locked+0x12f/0xa50 [ 2772.438114][T18246] comedi_device_detach+0x67/0xb0 [ 2772.443119][T18246] comedi_device_attach+0x43d/0x900 [ 2772.448300][T18246] do_devconfig_ioctl+0x1b1/0x710 [ 2772.453313][T18246] ? __mutex_lock+0x1c5/0x1060 [ 2772.458056][T18246] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 2772.463589][T18246] ? rcu_is_watching+0x12/0xc0 [ 2772.468337][T18246] ? finish_task_switch.isra.0+0x221/0xc10 [ 2772.474130][T18246] comedi_unlocked_ioctl+0x165d/0x2f00 [ 2772.479572][T18246] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2772.485360][T18246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2772.491236][T18246] ? do_vfs_ioctl+0x128/0x14f0 [ 2772.495985][T18246] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2772.500992][T18246] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2772.507823][T18246] ? rcu_is_watching+0x12/0xc0 [ 2772.512571][T18246] ? selinux_file_ioctl+0x180/0x270 [ 2772.517751][T18246] ? selinux_file_ioctl+0xb4/0x270 [ 2772.522844][T18246] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2772.528628][T18246] __x64_sys_ioctl+0x18e/0x210 [ 2772.533379][T18246] do_syscall_64+0xcd/0xfa0 [ 2772.537863][T18246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2772.543744][T18246] RIP: 0033:0x7f362fb8f6c9 [ 2772.548137][T18246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2772.567721][T18246] RSP: 002b:00007f36309ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2772.576113][T18246] RAX: ffffffffffffffda RBX: 00007f362fde6180 RCX: 00007f362fb8f6c9 [ 2772.584060][T18246] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000008 [ 2772.592009][T18246] RBP: 00007f362fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2772.599957][T18246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2772.607906][T18246] R13: 00007f362fde6218 R14: 00007f362fde6180 R15: 00007fffe63e3fd8 [ 2772.615861][T18246] [ 2772.618858][T18246] Modules linked in: [ 2772.623921][T18246] ---[ end trace 0000000000000000 ]--- [ 2772.629804][T18246] RIP: 0010:kernfs_root+0x67/0x2a0 [ 2772.634926][T18246] Code: 89 c6 e8 fc e2 57 ff 58 85 db 0f 85 b7 00 00 00 e8 ae e7 57 ff 48 8d 7d 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1a 02 00 00 48 8b 5d 30 e8 f6 95 fb 08 31 ff 41 [ 2772.654915][T18246] RSP: 0018:ffffc9000e18f910 EFLAGS: 00010203 [ 2772.660965][T18246] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc90014a43000 [ 2772.668930][T18246] RDX: 0000000000000025 RSI: ffffffff82650122 RDI: 000000000000012c [ 2772.676898][T18246] RBP: 00000000000000fc R08: 0000000000000001 R09: 0000000000000000 [ 2772.685227][T18246] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1e6a80 [ 2772.693181][T18246] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88814c587800 [ 2772.701151][T18246] FS: 00007f36309ad6c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 2772.710077][T18246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2772.717006][T18246] CR2: 0000000000000000 CR3: 0000000029190000 CR4: 00000000003526f0 [ 2772.724955][T18246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2772.732917][T18246] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2772.740902][T18246] Kernel panic - not syncing: Fatal exception [ 2772.747151][T18246] Kernel Offset: disabled [ 2772.751447][T18246] Rebooting in 86400 seconds..