last executing test programs: 28m2.656262854s ago: executing program 2 (id=339): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="24200400858d0000400012800e00010069703665727370616e0000002c00028008001500857d000004001200060018000700"], 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 27m58.872963605s ago: executing program 2 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 27m57.50152978s ago: executing program 2 (id=354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 27m42.958439717s ago: executing program 2 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x8, 0x6011, r3, 0xffffffffffffc000) 27m41.421529375s ago: executing program 2 (id=422): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "000000fd80"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xd8}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x1, 0x2, 0xc8, @vifc_lcl_ifindex, @private=0xa010100}, 0x10) 27m37.797240889s ago: executing program 2 (id=434): socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 27m22.605689538s ago: executing program 32 (id=434): socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 3m0.412264071s ago: executing program 0 (id=4227): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001478800000000000000070082", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$can_raw(r7, &(0x7f0000000100), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1}, {0x1, 0x0, 0x1}}], 0x8) 3m0.007026544s ago: executing program 0 (id=4229): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf03d}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000005580)="b9c973acad96fc274d605b6ea5083e90f7854520a3d82c106c2af8caf9b5e405cc034349655ac1b02043573da783b7abbfb914c18faaa9f22793be794e48473a883838d23d387aa105d1935058122b84e197b38365433fb37bb8749ee0d3f510c764131b4218a46cd7c2d3c99ef99d5442a6472f74c677c431784c317607750b0f88b7575faf59a9f3d0cc346d0b5a7dd8949753cf51cb7b70eb86bd53a19b0661b0ec33ad3b24e8bd3ddfe2546ebd4ea346", 0xb2}, {0x0}], 0x2, 0x0, 0x0, 0x8011}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x160) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffc8, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 2m58.952171906s ago: executing program 0 (id=4234): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)='H', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1000b3060000e9ff83000000070000007f00000100000000171e2c497b9e"], 0x10, 0x8000000}, 0x840) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m57.980431876s ago: executing program 0 (id=4236): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{0x0}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) 2m54.424138738s ago: executing program 0 (id=4254): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000280)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x40402, 0x1) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x2d) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="2d6e65745f636c73202b6e65ffff636c73202d6e6574202d68756765746c62202d6e65745f636c73"], 0x43) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(r5, r5, 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x8004, &(0x7f0000000580)=ANY=[@ANYRESDEC=r5, @ANYBLOB=',rootcontext=unconfined_u,fowner<', @ANYRESDEC, @ANYBLOB="2c0cec2a83f000"]) semget(0x0, 0x2, 0x120) sendmmsg(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x400) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 2m53.943614077s ago: executing program 0 (id=4247): syz_open_dev$evdev(0x0, 0x0, 0x2100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x80811501, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64], 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)=ANY=[@ANYBLOB="380000000308f90000000000000000000300002006000240060000001400048008000140000000c038369f40200007ff05000300ff"], 0x38}, 0x1, 0x0, 0x0, 0xc8c0}, 0x4040010) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2c) 2m37.372855134s ago: executing program 33 (id=4247): syz_open_dev$evdev(0x0, 0x0, 0x2100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x80811501, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64], 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)=ANY=[@ANYBLOB="380000000308f90000000000000000000300002006000240060000001400048008000140000000c038369f40200007ff05000300ff"], 0x38}, 0x1, 0x0, 0x0, 0xc8c0}, 0x4040010) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2c) 2m36.527458668s ago: executing program 4 (id=4291): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0xb, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000240)=@raw={0xfe, 0x6, "00fcffffff00"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) 2m32.528420652s ago: executing program 4 (id=4297): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010027bd7000000000000a00004000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:cron_spool_t:s0\x00', 0x22, 0x1) sendmmsg(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket(0x18, 0x1, 0x0) r5 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) timerfd_create(0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000180)={0x2c, 0xa}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000001c0)=0x36149, 0x4) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x9, 0x10001, 0x4, 0x8, 0x6, 0x6a2c, 0xa, 0xffff}, 0x0, 0x0) io_uring_enter(r5, 0x2315, 0x5739, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2m30.649879824s ago: executing program 4 (id=4301): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000280)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x40402, 0x1) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x2d) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="2d6e65745f636c73202b6e65ffff636c73202d6e6574202d68756765746c62202d6e65745f636c73"], 0x43) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(r4, r4, 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x8004, &(0x7f0000000580)=ANY=[@ANYRESDEC=r4, @ANYBLOB=',rootcontext=unconfined_u,fowner<', @ANYRESDEC, @ANYBLOB="2c0cec2a83f000"]) semget(0x0, 0x2, 0x120) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x400) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 2m29.969667118s ago: executing program 4 (id=4303): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0x56, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x138}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc175", 0x62}, {&(0x7f0000000580)}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m29.553155685s ago: executing program 4 (id=4305): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000280)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x40402, 0x1) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x2d) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="2d6e65745f636c73202b6e65ffff636c73202d6e6574202d68756765746c62202d6e65745f636c73"], 0x43) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(r5, r5, 0x0) semget(0x0, 0x2, 0x120) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x400) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 2m29.033823081s ago: executing program 4 (id=4306): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$sg(0x0, 0x40000000000003, 0x402902) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000440)=0xf) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) getsockopt$sock_int(r4, 0x1, 0x24, 0x0, &(0x7f0000000180)) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x64000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007400000000108001640"], 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x4048000) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) 2m12.821164028s ago: executing program 34 (id=4306): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$sg(0x0, 0x40000000000003, 0x402902) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000440)=0xf) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) getsockopt$sock_int(r4, 0x1, 0x24, 0x0, &(0x7f0000000180)) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x64000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007400000000108001640"], 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x4048000) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) 13.303586315s ago: executing program 1 (id=4633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7ffffffc, 0xfff}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000240)="14000000140005b7ffcc", 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0xe6eedc45313651a9, 0x94, 0x1}, 0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000100)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 13.044211554s ago: executing program 3 (id=4634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) 12.163023532s ago: executing program 1 (id=4637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4000000000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80080, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", 0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r3, r7, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 10.642856291s ago: executing program 6 (id=4643): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000080)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1614}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) 9.59782412s ago: executing program 3 (id=4644): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x4, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000c40)='encrypted\x00', 0x0, &(0x7f0000000cc0)='[,\v]@+\x00', 0x0) add_key(&(0x7f0000000f80)='encrypted\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a600000001d0a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x20000084) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x24, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 9.594640263s ago: executing program 6 (id=4645): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc00000000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$evdev(0x0, 0x2, 0x20000) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_NMI(r5, 0xae9a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x1, 0x3, 0x20, "ae7a3b9e3669f8a7190933ef8a5a4b6d148fec0aec6e377a75f89d0614b851bd", 0x30385056}) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, 0x0) 9.529155956s ago: executing program 5 (id=4646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x9) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, 0x0, 0x80) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) 8.687842675s ago: executing program 3 (id=4647): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2", 0x1a}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.522242971s ago: executing program 6 (id=4648): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c36"], 0x28}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 8.521295866s ago: executing program 1 (id=4649): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 8.499387736s ago: executing program 7 (id=4650): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022c23031"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r6, 0xbc7ae000) sendmsg$NFT_BATCH(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000a0900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b000100746172676574000048000280080002400000000230000300b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360"], 0x114}}, 0x0) 8.397003368s ago: executing program 5 (id=4651): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002bbd70000e001000540000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x2007) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1684, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) socket$kcm(0xa, 0x3, 0x87) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120011000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 8.396522766s ago: executing program 3 (id=4652): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000a3a000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x8040) 6.052092939s ago: executing program 6 (id=4653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000030000000400000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0xe, 0x8, 0x0, 0x9, 0x2000000000000000, 0xfffffe0000000001, 0xfa15, 0xfffdffff}, 0x0) r3 = syz_io_uring_setup(0x750, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000b80)={0x5, 0x0, 0x2008, 0x2000007, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mremap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683d", 0x1f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22ffe6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r6], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x9}}, @fwd={0x7}]}, {0x0, [0x61, 0x71, 0x61, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/174, 0x55, 0xae, 0x1, 0x88a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r7, 0x0, 0x4, 0x3}, 0x50) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"1b4f1a59a9be35e8c11ef87e413d94cf520833949160593561e114fb09b8a485"}) ptrace$poke(0x4, r8, &(0x7f0000002040), 0x8000400000000006) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) 6.051445376s ago: executing program 3 (id=4654): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) 5.833765766s ago: executing program 7 (id=4655): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000440)={r6}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x22004804}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_pidfd_open(r0, 0x0) r10 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r10) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.045942311s ago: executing program 7 (id=4656): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000080)}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1614}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) 4.337714043s ago: executing program 5 (id=4657): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xfffffffffffffff0, 0x0, 0x4, 0x68ab, 0xfffffffffffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.312032741s ago: executing program 1 (id=4658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000100)=0x8) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1803081e29126ae010541105a5ffff00000000ffffffcfe1712cb7a97a4e000000003f1fff2e14a81483fa9cf3ed56bd4829da0167a54d75a3ab86c63a783e9ac7bfe29c80814569b324639ba392027d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6, 0xffffffffffffffff}) close_range(r3, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 4.253781731s ago: executing program 6 (id=4659): socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) accept$unix(r2, &(0x7f00000001c0), &(0x7f00000002c0)=0x6e) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x3e, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) 4.071977629s ago: executing program 1 (id=4660): mkdirat(0xffffffffffffffff, 0x0, 0x120) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x40) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 2.46707146s ago: executing program 1 (id=4661): r0 = fsopen(&(0x7f0000000280)='virtiofs\x00', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) bind$alg(r2, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000240)) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) 2.46667449s ago: executing program 7 (id=4662): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x9) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, 0x0, 0x80) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) 2.395120556s ago: executing program 5 (id=4663): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[], 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x6f0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48}) chroot(&(0x7f00000001c0)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x4170010, r2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) getpid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80000001, 0x5, 0x0, 0x100, 0x25, 0x21100e6, r8}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000640)={'veth1_to_bond\x00', &(0x7f0000000180)=@ethtool_test={0x1a, 0xc, 0x1, 0x5, [0x2, 0x8, 0x3, 0xaf0, 0x2]}}) 2.234019812s ago: executing program 3 (id=4664): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff05) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(r8, &(0x7f0000000040)='cgroup\x00') syz_fuse_handle_req(r9, &(0x7f0000000ac0)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x3, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) 1.137941263s ago: executing program 5 (id=4665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00'}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x2c) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1.137558455s ago: executing program 7 (id=4666): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4a21, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xe1}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000810) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="6f73780e2f295ec252bb00d1b5bdd6a200"]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x6e2a, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) 79.203401ms ago: executing program 6 (id=4667): socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4050) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0xc4a9, 0x0, 0xa}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000340)=""/114, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xb00, 0x0) 73.010264ms ago: executing program 5 (id=4668): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x100, 0x60b924, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x5, 0xb}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20000091) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000280)='./file2\x00') bind$netlink(r0, &(0x7f0000000000)={0x10, 0x2000, 0x25dfdc01, 0x80000000}, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd}, @enum, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x47, 0x4}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r5, 0x540b, 0x2) 0s ago: executing program 7 (id=4669): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r4, 0x0, 0x0, 0x1001ed) fallocate(r4, 0x3, 0xf00, 0x10000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000440)={{0x3, 0x0, 0x2, 0x10000, 'syz1\x00', 0x95}, 0x3, 0x1, 0x5, r0, 0x3, 0x5, 'syz1\x00', &(0x7f0000000180)=['/dev/sg#\x00', '^\x00', '\\\x00'], 0xd}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0585609, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d0000000400000004000000a800000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000500"/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) kernel console output (not intermixed with test programs): /syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1346.253938][T20016] x_tables: duplicate entry at hook 2 [ 1346.590130][T20014] pim6reg: entered allmulticast mode [ 1346.620113][ T5932] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1346.804858][ T5932] usb 5-1: device descriptor read/64, error -71 [ 1346.872891][T20010] pim6reg: left allmulticast mode [ 1347.129753][ T5932] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1347.300124][ T5932] usb 5-1: device descriptor read/64, error -71 [ 1347.690311][ T5932] usb usb5-port1: attempt power cycle [ 1347.799364][T20048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3489'. [ 1348.593945][ T5932] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1348.672429][ T5932] usb 5-1: device descriptor read/8, error -71 [ 1349.777637][T20067] netlink: 'syz.0.3494': attribute type 4 has an invalid length. [ 1351.598676][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3499'. [ 1351.874393][T20095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3501'. [ 1352.055195][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1353.300020][T20107] batman_adv: batadv0: Adding interface: gretap1 [ 1353.306770][T20107] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.332905][T20107] batman_adv: batadv0: Interface activated: gretap1 [ 1354.777661][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3509'. [ 1355.268766][T20131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1355.369464][T20138] openvswitch: netlink: Message has 4 unknown bytes. [ 1357.765919][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3516'. [ 1358.530571][T20164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3520'. [ 1358.543045][T20164] overlayfs: missing 'lowerdir' [ 1362.561516][T20193] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1365.382341][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1365.382358][ T30] audit: type=1326 audit(2000002320.774:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1365.454410][ T30] audit: type=1326 audit(2000002320.774:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1365.494625][ T30] audit: type=1326 audit(2000002320.774:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1365.878555][ T30] audit: type=1326 audit(2000002320.774:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1365.930080][ T30] audit: type=1326 audit(2000002320.774:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1366.014916][ T30] audit: type=1326 audit(2000002320.774:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1366.092117][ T30] audit: type=1326 audit(2000002320.774:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1366.715614][ T30] audit: type=1326 audit(2000002320.785:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1366.792046][ T30] audit: type=1326 audit(2000002320.785:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1366.821834][ T30] audit: type=1326 audit(2000002320.785:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20224 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1367.699816][T20260] geneve2: entered promiscuous mode [ 1367.707555][T20260] geneve2: entered allmulticast mode [ 1368.985489][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3543'. [ 1369.072636][T20271] netlink: 'syz.5.3544': attribute type 4 has an invalid length. [ 1369.406738][T20279] No such timeout policy "syz1" [ 1369.437092][T20279] No control pipe specified [ 1369.444551][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 1370.670488][T20289] batadv0 speed is unknown, defaulting to 1000 [ 1371.163110][T20289] lo speed is unknown, defaulting to 1000 [ 1373.094956][T20307] rdma_op ffff88803634d1f0 conn xmit_rdma 0000000000000000 [ 1374.773704][T20326] netlink: 'syz.3.3556': attribute type 4 has an invalid length. [ 1374.932146][T20330] vcan0: tx drop: invalid sa for name 0x0100000000000000 [ 1375.016683][T20331] siw: device registration error -23 [ 1375.821633][T20342] netlink: 'syz.3.3562': attribute type 4 has an invalid length. [ 1379.255837][T20370] tmpfs: Bad value for 'mpol' [ 1379.560894][T20372] futex_wake_op: syz.5.3568 tries to shift op by 144; fix this program [ 1379.661975][T20378] netlink: 'syz.0.3571': attribute type 4 has an invalid length. [ 1379.962559][T20383] netlink: 436 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1379.995173][T20383] netlink: 436 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1380.874691][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1380.874931][ T30] audit: type=1400 audit(2000002593.430:1505): avc: denied { watch_sb } for pid=20397 comm="syz.1.3577" path="/716/file0" dev="tmpfs" ino=3786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1380.947129][T20403] batadv0 speed is unknown, defaulting to 1000 [ 1381.381443][ T5877] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1382.508733][T20403] lo speed is unknown, defaulting to 1000 [ 1382.633595][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 1383.000663][ T5877] usb 1-1: config 0 has no interfaces? [ 1383.053662][ T5877] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1383.071510][ T5877] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1383.089555][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1383.118922][ T5877] usb 1-1: Manufacturer: syz [ 1383.135383][ T5877] usb 1-1: config 0 descriptor?? [ 1383.595200][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3585'. [ 1383.851913][ T5877] usb 1-1: USB disconnect, device number 39 [ 1385.889948][T20453] vivid-007: disconnect [ 1386.446083][T20450] vivid-007: reconnect [ 1386.547846][T20455] batadv0 speed is unknown, defaulting to 1000 [ 1386.703553][T20455] lo speed is unknown, defaulting to 1000 [ 1388.180620][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3594'. [ 1388.594605][T20481] kAFS: unable to lookup cell '' [ 1388.600531][T20481] kAFS: unable to lookup cell '(,c' [ 1388.663060][T20482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3597'. [ 1389.009956][ T5877] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1389.214125][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 1389.240792][ T5877] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1389.364989][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.448314][ T5877] usb 5-1: config 0 descriptor?? [ 1389.668253][ T5877] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1390.578160][ T5877] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1391.050201][ T5877] dib0700: firmware download failed at 7 with -22 [ 1391.874101][T20498] tipc: Enabling of bearer rejected, failed to enable media [ 1392.071166][ T5877] usb 5-1: USB disconnect, device number 35 [ 1392.471710][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1392.662877][T20515] netlink: 'syz.0.3605': attribute type 4 has an invalid length. [ 1393.848841][T20519] overlayfs: failed to clone lowerpath [ 1393.895702][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3606'. [ 1393.906080][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3606'. [ 1394.743456][T20539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3602'. [ 1395.335946][T20542] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 1395.354633][T20542] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 1398.787911][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1400.835261][ T30] audit: type=1400 audit(2000002614.373:1506): avc: denied { getopt } for pid=20594 comm="syz.1.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1400.908924][T20603] overlayfs: failed to clone lowerpath [ 1402.055020][ T30] audit: type=1400 audit(2000002615.664:1507): avc: denied { getopt } for pid=20609 comm="syz.1.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1403.316141][T20622] ip6gretap0: entered promiscuous mode [ 1403.322307][T20622] vlan2: entered promiscuous mode [ 1403.386709][T20623] netlink: 'syz.5.3631': attribute type 3 has an invalid length. [ 1403.394997][T20623] netlink: 'syz.5.3631': attribute type 3 has an invalid length. [ 1405.361158][T20659] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1405.390802][T20659] team0: Port device batadv1 added [ 1406.683492][T20680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1408.104865][T20699] 9p: Could not find request transport: tcp*por0000000004e22 [ 1408.296342][T20703] geneve4: entered promiscuous mode [ 1408.719620][T20703] geneve4: entered allmulticast mode [ 1411.191995][T20734] ptrace attach of "./syz-executor exec"[5808] was attempted by ""[20734] [ 1412.190062][T20749] /dev/nullb0: Can't lookup blockdev [ 1412.566820][ T30] audit: type=1400 audit(2000003394.319:1508): avc: denied { mounton } for pid=20745 comm="syz.5.3658" path="/615/file0" dev="tmpfs" ino=3297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1412.641110][T20744] kAFS: unable to lookup cell '' [ 1412.703965][T20753] kAFS: unable to lookup cell '(,c' [ 1414.819821][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1415.434137][T20780] hub 9-0:1.0: USB hub found [ 1415.440083][T20780] hub 9-0:1.0: 1 port detected [ 1418.370366][T20809] netlink: 'syz.4.3669': attribute type 4 has an invalid length. [ 1420.647849][T20814] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 1420.660236][T20814] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 1425.322245][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3685'. [ 1425.468907][T20879] netlink: 'syz.5.3686': attribute type 21 has an invalid length. [ 1426.115434][T20883] netlink: 'syz.3.3688': attribute type 4 has an invalid length. [ 1427.307841][T20901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1428.038280][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3695'. [ 1428.531559][ T5877] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1428.910195][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1428.929219][ T5877] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1428.973925][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1429.029305][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1429.064215][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1429.089419][ T5877] usb 5-1: Product: syz [ 1429.114526][ T5877] usb 5-1: Manufacturer: syz [ 1429.130332][ T5877] usb 5-1: SerialNumber: syz [ 1429.312068][T20927] netlink: 'syz.1.3699': attribute type 4 has an invalid length. [ 1429.560668][T20929] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 1430.293771][ T5877] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1430.308287][ T5877] usb 5-1: USB disconnect, device number 36 [ 1430.388356][ T5877] usblp0: removed [ 1430.909134][T20953] netlink: 'syz.3.3703': attribute type 10 has an invalid length. [ 1430.967638][T20954] netlink: 'syz.3.3703': attribute type 10 has an invalid length. [ 1431.035572][T20953] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1431.049951][T20953] team0: Port device netdevsim0 added [ 1431.147750][T20954] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1431.462293][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1431.946686][T20954] team0: Port device netdevsim0 removed [ 1431.985360][T20954] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1431.996257][T20954] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 1432.629770][T20967] netem: incorrect ge model size [ 1432.635314][T20967] netem: change failed [ 1435.562090][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3715'. [ 1438.501451][T21034] pimreg: entered allmulticast mode [ 1440.020951][T21051] geneve2: entered promiscuous mode [ 1440.026246][T21051] geneve2: entered allmulticast mode [ 1443.870089][T14662] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1444.249526][T14662] usb 5-1: Using ep0 maxpacket: 8 [ 1444.265570][T14662] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1444.283991][T14662] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.296510][T14662] usb 5-1: config 0 has no interface number 0 [ 1444.302690][T14662] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1444.314070][T14662] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1444.334945][T14662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.356488][T14662] usb 5-1: config 0 descriptor?? [ 1444.375095][T14662] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1444.649204][ T30] audit: type=1400 audit(2000003428.389:1509): avc: denied { read } for pid=21079 comm="syz.4.3735" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1444.955460][ T30] audit: type=1400 audit(2000003428.421:1510): avc: denied { open } for pid=21079 comm="syz.4.3735" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1444.957940][T14662] usb 5-1: USB disconnect, device number 37 [ 1447.119129][T21126] netlink: 'syz.4.3742': attribute type 4 has an invalid length. [ 1451.444513][T21183] netlink: 'syz.1.3754': attribute type 4 has an invalid length. [ 1452.334403][T21190] binder: 21185:21190 ioctl c0306201 200000000040 returned -22 [ 1453.823349][T21211] xt_socket: unknown flags 0x4 [ 1454.622612][T21217] netlink: 'syz.0.3762': attribute type 4 has an invalid length. [ 1455.134765][T21222] trusted_key: encrypted_key: master key parameter 'use>:}@^/!-{' is invalid [ 1455.155147][T21222] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1456.469597][T21226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3765'. [ 1456.547451][T21228] netlink: 'syz.5.3764': attribute type 1 has an invalid length. [ 1456.676017][T21228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1457.383571][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1459.057895][T21267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3772'. [ 1459.375007][T21271] team0: Port device team_slave_0 removed [ 1461.700540][ T30] audit: type=1400 audit(2000003446.301:1511): avc: denied { lock } for pid=21297 comm="syz.0.3782" path="socket:[67555]" dev="sockfs" ino=67555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1463.255942][T21309] 9pnet_virtio: no channels available for device syz [ 1464.216743][T21314] batman_adv: batadv0: Adding interface: gretap2 [ 1464.223450][T21314] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.249800][T21314] batman_adv: batadv0: Interface activated: gretap2 [ 1465.649567][ T30] audit: type=1400 audit(2000003450.437:1512): avc: denied { map } for pid=21319 comm="syz.0.3788" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1465.765340][ T30] audit: type=1400 audit(2000003450.437:1513): avc: denied { execute } for pid=21319 comm="syz.0.3788" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1465.970461][T21332] tipc: Enabling of bearer rejected, failed to enable media [ 1466.222340][T14662] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1466.295246][T21339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3793'. [ 1466.394123][T14662] usb 5-1: Using ep0 maxpacket: 32 [ 1466.635011][T14662] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1466.653546][T14662] usb 5-1: config 0 has no interface number 0 [ 1466.678199][T14662] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1466.700644][T14662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.721684][T14662] usb 5-1: Product: syz [ 1466.731399][T14662] usb 5-1: Manufacturer: syz [ 1466.741209][T14662] usb 5-1: SerialNumber: syz [ 1466.766882][T14662] usb 5-1: config 0 descriptor?? [ 1466.787526][T14662] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1466.992634][T14662] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1467.056968][T14662] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1467.879014][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1467.888753][T14662] usb 5-1: USB disconnect, device number 38 [ 1467.932519][T14662] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1467.967427][T14662] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1467.999316][T14662] quatech2 5-1:0.51: device disconnected [ 1468.502185][T21368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3798'. [ 1469.422038][T21371] netlink: 'syz.0.3797': attribute type 10 has an invalid length. [ 1469.453102][T21371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.468347][T21371] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1469.478049][T14662] batadv0 speed is unknown, defaulting to 1000 [ 1469.498367][T14662] syz1: Port: 1 Link ACTIVE [ 1469.525889][T21371] netlink: 'syz.0.3797': attribute type 10 has an invalid length. [ 1469.534409][T21371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3797'. [ 1469.544015][T21371] batadv0: entered promiscuous mode [ 1469.549282][T21371] batadv0: entered allmulticast mode [ 1469.588136][T21371] bond0: (slave batadv0): Releasing backup interface [ 1469.607795][T21371] bridge0: port 5(batadv0) entered blocking state [ 1469.615341][T21371] bridge0: port 5(batadv0) entered disabled state [ 1469.639394][T21096] batadv0 speed is unknown, defaulting to 1000 [ 1469.647235][T21096] syz1: Port: 1 Link DOWN [ 1469.690505][ T5877] batadv0 speed is unknown, defaulting to 1000 [ 1469.876792][ T8394] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1469.887171][ T8394] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1470.096745][ T5874] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1470.589919][ T5874] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1470.607121][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.655501][ T5874] usb 5-1: config 0 has no interfaces? [ 1470.670791][ T5874] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1470.706587][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.890486][ T5874] usb 5-1: config 0 descriptor?? [ 1471.147385][T21398] lo: Caught tx_queue_len zero misconfig [ 1471.831044][ T5874] usb 5-1: USB disconnect, device number 39 [ 1472.861691][T21409] ceph: No mds server is up or the cluster is laggy [ 1472.874337][ T5877] libceph: connect (1)[c::]:6789 error -13 [ 1473.084644][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 1473.296804][T21416] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1473.761476][T21424] batadv0 speed is unknown, defaulting to 1000 [ 1474.271180][T21424] lo speed is unknown, defaulting to 1000 [ 1475.865311][T21442] batadv0 speed is unknown, defaulting to 1000 [ 1476.928862][T21442] lo speed is unknown, defaulting to 1000 [ 1478.241727][T21459] netem: incorrect ge model size [ 1478.248465][T21459] netem: change failed [ 1479.701698][T21473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3822'. [ 1480.151921][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 1480.160999][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'. [ 1480.170097][T21480] netlink: 'syz.0.3823': attribute type 13 has an invalid length. [ 1480.178129][T21480] netlink: 'syz.0.3823': attribute type 12 has an invalid length. [ 1480.508137][ T5874] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1480.680844][ T5874] usb 5-1: device descriptor read/64, error -71 [ 1480.968166][T21487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1481.033637][ T5874] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1481.176142][ T5874] usb 5-1: device descriptor read/64, error -71 [ 1481.280913][ T5874] usb usb5-port1: attempt power cycle [ 1481.632827][ T5874] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1481.763171][ T5874] usb 5-1: device descriptor read/8, error -71 [ 1482.051258][ T5874] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1482.146158][ T5874] usb 5-1: device descriptor read/8, error -71 [ 1483.255676][T21523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3835'. [ 1483.518330][T21529] batadv0 speed is unknown, defaulting to 1000 [ 1484.310518][ T5874] usb usb5-port1: unable to enumerate USB device [ 1484.867364][T21529] lo speed is unknown, defaulting to 1000 [ 1485.644522][T21543] xt_TCPMSS: Only works on TCP SYN packets [ 1486.831712][T21546] openvswitch: netlink: IP tunnel dst address not specified [ 1488.976773][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'. [ 1489.131695][T21568] team1: entered promiscuous mode [ 1489.152194][T21568] team1: entered allmulticast mode [ 1489.174499][T21568] 8021q: adding VLAN 0 to HW filter on device team1 [ 1490.260349][ T5874] libceph: connect (1)[c::]:6789 error -13 [ 1490.295054][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 1490.430136][T21573] ceph: No mds server is up or the cluster is laggy [ 1490.479672][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1491.488360][T21594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3860'. [ 1492.861908][T21618] xt_socket: unknown flags 0x4c [ 1493.489752][T21622] kAFS: unparsable volume name [ 1493.545391][T21620] netlink: 584 bytes leftover after parsing attributes in process `syz.4.3854'. [ 1493.557936][T21620] /dev/nullb0: Can't open blockdev [ 1498.120856][T21668] netlink: 'syz.0.3865': attribute type 4 has an invalid length. [ 1498.433478][T21675] openvswitch: netlink: IP tunnel dst address not specified [ 1499.102978][T21687] netlink: 182 bytes leftover after parsing attributes in process `syz.1.3867'. [ 1499.983903][T21691] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3868'. [ 1502.968699][T21704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1503.146633][T21703] tipc: Enabled bearer , priority 10 [ 1503.253988][T21714] erofs (device nbd0): cannot find valid erofs superblock [ 1503.272459][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1503.706379][ T30] audit: type=1400 audit(2000003490.376:1514): avc: denied { setattr } for pid=21711 comm="syz.3.3875" name="NETLINK" dev="sockfs" ino=69955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1504.092092][ T5874] tipc: Node number set to 919611023 [ 1505.137264][T21733] netlink: 'syz.5.3880': attribute type 4 has an invalid length. [ 1505.225045][T21734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.422282][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3883'. [ 1508.014345][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1508.149828][T21787] netlink: 'syz.3.3889': attribute type 4 has an invalid length. [ 1510.594724][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1510.829181][T21817] netlink: 'syz.0.3896': attribute type 4 has an invalid length. [ 1511.419013][ T30] audit: type=1400 audit(2000003498.387:1515): avc: denied { bind } for pid=21826 comm="syz.4.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1511.449071][ T30] audit: type=1400 audit(2000003498.387:1516): avc: denied { accept } for pid=21826 comm="syz.4.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1512.642908][T21840] netlink: 'syz.5.3906': attribute type 7 has an invalid length. [ 1512.651361][T21840] netlink: 'syz.5.3906': attribute type 8 has an invalid length. [ 1512.928368][T21841] openvswitch: netlink: IP tunnel dst address not specified [ 1512.938304][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3902'. [ 1512.949811][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3902'. [ 1512.967640][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3902'. [ 1515.603956][T21851] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.825499][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1515.964603][T21851] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.179102][T21851] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.447297][T21851] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.543943][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3911'. [ 1516.640196][ T1642] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.750187][T21851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.388080][ T5877] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1517.904561][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 1517.922102][ T5877] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1517.997349][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.016374][ T5877] usb 1-1: config 0 has no interface number 0 [ 1518.029319][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1518.038759][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.055402][ T5877] usb 1-1: Product: syz [ 1518.059652][ T5877] usb 1-1: Manufacturer: syz [ 1518.073429][ T5877] usb 1-1: SerialNumber: syz [ 1518.080249][ T5877] usb 1-1: config 0 descriptor?? [ 1518.097028][ T5877] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1518.111551][ T5877] uvcvideo 1-1:0.105: No valid video chain found. [ 1518.647880][ T5874] usb 1-1: USB disconnect, device number 40 [ 1519.120218][T21900] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3921'. [ 1520.930113][T21933] siw: device registration error -23 [ 1521.356095][ T30] audit: type=1400 audit(2000003508.529:1517): avc: denied { accept } for pid=21928 comm="syz.3.3928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1523.794589][ T5874] libceph: connect (1)[c::]:6789 error -13 [ 1523.846230][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 1523.855038][ T5932] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1523.961024][T21964] ceph: No mds server is up or the cluster is laggy [ 1524.083383][T21973] /dev/nullb0: Can't open blockdev [ 1524.444312][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 1524.478229][ T5932] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1525.004559][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.015376][ T5932] usb 1-1: config 0 has no interface number 0 [ 1525.023720][ T5932] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1525.035391][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.044284][ T5932] usb 1-1: Product: syz [ 1525.048865][ T5932] usb 1-1: Manufacturer: syz [ 1525.053517][ T5932] usb 1-1: SerialNumber: syz [ 1525.219831][ T5932] usb 1-1: config 0 descriptor?? [ 1525.241582][ T5932] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1525.251199][ T5932] uvcvideo 1-1:0.105: No valid video chain found. [ 1525.553162][T21977] Process accounting resumed [ 1525.685210][ T5932] usb 1-1: USB disconnect, device number 41 [ 1525.753265][ T30] audit: type=1326 audit(2000003513.527:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1525.836720][ T30] audit: type=1326 audit(2000003513.527:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1526.142913][ T30] audit: type=1326 audit(2000003513.538:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1526.253306][T21995] use of bytesused == 0 is deprecated and will be removed in the future, [ 1526.262019][T21995] use the actual size instead. [ 1526.449592][ T30] audit: type=1326 audit(2000003513.548:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1526.651138][ T30] audit: type=1326 audit(2000003513.548:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1527.684555][T22007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=22007 comm=syz.3.3945 [ 1527.722261][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3945'. [ 1528.491918][ T30] audit: type=1326 audit(2000003513.590:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1528.977000][ T5877] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1529.360103][ T30] audit: type=1326 audit(2000003513.611:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1529.388720][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 1529.398189][ T30] audit: type=1326 audit(2000003513.611:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1529.436561][ T30] audit: type=1326 audit(2000003513.611:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1529.502636][ T5877] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1529.532355][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.566695][ T5877] usb 1-1: config 0 has no interface number 0 [ 1529.571792][ T30] audit: type=1326 audit(2000003513.611:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1529.588124][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1529.619481][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.637452][ T5877] usb 1-1: Product: syz [ 1529.645820][ T5877] usb 1-1: Manufacturer: syz [ 1529.665922][ T5877] usb 1-1: SerialNumber: syz [ 1529.734223][ T30] audit: type=1326 audit(2000003513.611:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1529.758475][ T30] audit: type=1326 audit(2000003513.611:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.1.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1529.851684][ T5877] usb 1-1: config 0 descriptor?? [ 1529.888711][T22022] netlink: 'syz.1.3950': attribute type 7 has an invalid length. [ 1529.896603][T22022] netlink: 'syz.1.3950': attribute type 8 has an invalid length. [ 1530.291153][ T5877] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1530.325580][ T5877] uvcvideo 1-1:0.105: No valid video chain found. [ 1530.442512][ T5874] usb 1-1: USB disconnect, device number 42 [ 1532.591899][T22039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1535.886191][T22074] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1535.927493][T22074] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1536.298688][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1536.308660][T22086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1536.319332][T22086] netlink: 'syz.4.3961': attribute type 6 has an invalid length. [ 1536.454159][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1536.464878][T22086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1536.475829][T22086] netlink: 'syz.4.3961': attribute type 6 has an invalid length. [ 1536.742354][ T5874] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1537.323211][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 1537.356596][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1537.405892][ T5874] usb 1-1: config 8 has an invalid interface number: 79 but max is 0 [ 1537.436666][ T5874] usb 1-1: config 8 has no interface number 0 [ 1537.460114][ T5874] usb 1-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1537.607464][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3964'. [ 1537.802325][ T5874] usb 1-1: config 8 interface 79 has no altsetting 0 [ 1537.838813][ T5874] usb 1-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 1537.850509][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.860143][ T5874] usb 1-1: Product: syz [ 1537.864399][ T5874] usb 1-1: Manufacturer: syz [ 1537.884584][ T5874] usb 1-1: SerialNumber: syz [ 1538.108204][T22104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 1538.461220][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1538.461254][ T30] audit: type=1400 audit(2000003526.840:1557): avc: denied { lock } for pid=22105 comm="syz.4.3967" path="socket:[70573]" dev="sockfs" ino=70573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1539.006306][T22112] kAFS: unable to lookup cell '' [ 1539.017742][T22113] kAFS: unable to lookup cell '(,c' [ 1539.930670][ T5874] usb 1-1: bad CDC descriptors [ 1540.004083][ T5874] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1540.371906][ T5874] snd-usb-audio 1-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 1540.457064][ T5874] usb 1-1: USB disconnect, device number 43 [ 1540.504127][T22090] udevd[22090]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1542.450959][ T30] audit: type=1400 audit(2000003530.851:1558): avc: denied { ioctl } for pid=22137 comm="syz.3.3975" path="socket:[70627]" dev="sockfs" ino=70627 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1542.859764][T22146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1544.990531][T22159] overlayfs: failed to clone lowerpath [ 1545.038643][T22160] xt_socket: unknown flags 0x4 [ 1545.434087][ T30] audit: type=1400 audit(2000003533.643:1559): avc: denied { read } for pid=22153 comm="syz.3.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1545.843114][T22165] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1547.693256][T22179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'. [ 1551.286995][ T30] audit: type=1400 audit(2000003540.342:1560): avc: denied { relabelfrom } for pid=22207 comm="syz.0.3993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1551.425022][ T30] audit: type=1400 audit(2000003540.342:1561): avc: denied { relabelto } for pid=22207 comm="syz.0.3993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1553.135484][T22237] netlink: 'syz.5.3999': attribute type 4 has an invalid length. [ 1553.386670][T22244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'. [ 1553.933908][T22248] /dev/nullb0: Can't open blockdev [ 1554.918489][ T30] audit: type=1326 audit(2000003544.132:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1555.237438][ T30] audit: type=1326 audit(2000003544.132:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1555.287801][ T30] audit: type=1326 audit(2000003544.132:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1555.336152][ T30] audit: type=1326 audit(2000003544.153:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1555.503163][ T30] audit: type=1326 audit(2000003544.153:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1555.677547][ T30] audit: type=1326 audit(2000003544.195:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1555.797798][ T30] audit: type=1326 audit(2000003544.195:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1556.047472][ T30] audit: type=1326 audit(2000003544.206:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1556.091643][ T30] audit: type=1326 audit(2000003544.258:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1556.206047][ T30] audit: type=1326 audit(2000003544.258:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1556.329756][ T30] audit: type=1326 audit(2000003544.258:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1556.389203][ T30] audit: type=1326 audit(2000003544.258:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1556.444338][ T30] audit: type=1326 audit(2000003544.269:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec479c629 code=0x7ffc0000 [ 1556.971836][T12549] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1557.005631][T22281] netlink: 'syz.5.4010': attribute type 3 has an invalid length. [ 1557.043267][T22281] overlayfs: failed to clone lowerpath [ 1557.111762][T22282] overlayfs: failed to clone lowerpath [ 1557.827465][T22291] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4015'. [ 1558.618577][T22304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4016'. [ 1558.627722][T22304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4016'. [ 1558.645666][T22304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4016'. [ 1558.654812][T22304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4016'. [ 1558.754259][T22304] batadv0 speed is unknown, defaulting to 1000 [ 1559.060410][ T30] audit: type=1326 audit(2000003548.101:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22297 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1559.250712][T22304] lo speed is unknown, defaulting to 1000 [ 1559.327744][ T30] audit: type=1326 audit(2000003548.111:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22297 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1559.420751][ T30] audit: type=1326 audit(2000003548.111:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22297 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1559.477689][ T30] audit: type=1326 audit(2000003548.111:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22297 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1559.502089][ T30] audit: type=1326 audit(2000003548.111:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22297 comm="syz.5.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1559.630469][T22312] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[22312] [ 1559.780934][T22314] netlink: 'syz.4.4018': attribute type 4 has an invalid length. [ 1560.185978][T22318] batadv_slave_0: entered promiscuous mode [ 1560.648790][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4020'. [ 1561.316175][ T5932] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1561.738874][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 1561.763349][ T5932] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1561.781898][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.792243][ T5932] usb 1-1: config 0 has no interface number 0 [ 1561.802159][ T5932] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1561.858122][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.866214][ T5932] usb 1-1: Product: syz [ 1561.875901][ T5932] usb 1-1: Manufacturer: syz [ 1561.880731][ T5932] usb 1-1: SerialNumber: syz [ 1562.895077][ T5932] usb 1-1: config 0 descriptor?? [ 1563.040948][ T5932] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1563.048479][ T5932] uvcvideo 1-1:0.105: No valid video chain found. [ 1563.187017][ T5932] usb 1-1: USB disconnect, device number 44 [ 1563.619019][T22362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=22362 comm=syz.1.4028 [ 1564.914193][T22376] overlayfs: failed to resolve './file0': -2 [ 1564.983475][T22375] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1567.811327][ T5874] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1567.885585][T22413] tipc: Enabling of bearer rejected, already enabled [ 1568.459288][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 1568.465981][ T5874] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1568.475849][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.488083][ T5874] usb 1-1: config 0 has no interface number 0 [ 1568.506555][ T5874] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1568.518093][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.542167][ T5874] usb 1-1: Product: syz [ 1568.567740][ T5874] usb 1-1: Manufacturer: syz [ 1568.573310][ T5874] usb 1-1: SerialNumber: syz [ 1568.580139][ T5874] usb 1-1: config 0 descriptor?? [ 1568.663090][ T5874] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1568.681886][ T5874] uvcvideo 1-1:0.105: No valid video chain found. [ 1568.694083][T22419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4043'. [ 1568.793588][T22419] tipc: Bearer : already 2 bearers with priority 10 [ 1568.862580][ T5874] usb 1-1: USB disconnect, device number 45 [ 1568.877549][T22419] tipc: Bearer : trying with adjusted priority [ 1569.211703][T22419] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1569.223766][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1569.223777][ T30] audit: type=1326 audit(2000003559.104:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1569.555022][ T30] audit: type=1326 audit(2000003559.104:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1569.649009][ T30] audit: type=1326 audit(2000003559.104:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1570.610953][ T30] audit: type=1326 audit(2000003559.104:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1570.765306][ T30] audit: type=1326 audit(2000003559.104:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1571.011368][ T30] audit: type=1326 audit(2000003559.104:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1571.093522][ T30] audit: type=1326 audit(2000003559.104:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1571.145798][T22448] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 1571.178885][ T30] audit: type=1326 audit(2000003559.104:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1571.319437][ T30] audit: type=1326 audit(2000003559.104:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1571.343760][ T30] audit: type=1326 audit(2000003559.104:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1573.041958][T22478] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1574.383804][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1574.917057][T22494] openvswitch: netlink: EtherType 0 is less than min 600 [ 1574.946908][T22494] /dev/nullb0: Can't lookup blockdev [ 1575.082106][T22494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4058'. [ 1575.235778][T22498] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4059'. [ 1575.454875][T22504] tipc: Enabling of bearer rejected, already enabled [ 1576.463601][T22511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4061'. [ 1576.648938][T22513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1576.860310][T22520] netlink: 'syz.0.4063': attribute type 10 has an invalid length. [ 1577.367841][T22526] netlink: 'syz.1.4066': attribute type 10 has an invalid length. [ 1577.376023][T22526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4066'. [ 1577.386548][T22526] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1577.890513][T22533] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1577.910920][T22538] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4067'. [ 1578.364506][T22542] batadv0 speed is unknown, defaulting to 1000 [ 1578.851621][T22542] lo speed is unknown, defaulting to 1000 [ 1579.585204][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1579.981689][T22550] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1582.394609][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1582.394623][ T30] audit: type=1400 audit(2000003572.574:1638): avc: denied { mounton } for pid=22570 comm="syz.1.4077" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1584.831810][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4084'. [ 1585.210757][T22601] nbd0: detected capacity change from 0 to 63 [ 1585.608300][T22615] netlink: 'syz.3.4087': attribute type 2 has an invalid length. [ 1585.746909][T19362] block nbd0: Receive control failed (result -104) [ 1586.262217][ T5932] libceph: connect (1)[c::]:6789 error -13 [ 1586.278853][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 1586.422412][T22619] ceph: No mds server is up or the cluster is laggy [ 1586.615439][T22633] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4092'. [ 1586.816235][T22633] netlink: 'syz.5.4092': attribute type 10 has an invalid length. [ 1586.830902][T22633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.839025][T22633] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1587.112771][T22633] netlink: 'syz.5.4092': attribute type 10 has an invalid length. [ 1587.121040][T22633] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4092'. [ 1587.130380][T22633] batadv0: entered promiscuous mode [ 1587.135568][T22633] batadv0: entered allmulticast mode [ 1587.165336][T22633] bond0: (slave batadv0): Releasing backup interface [ 1587.301526][T22633] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1587.567235][T22646] netlink: 'syz.1.4095': attribute type 4 has an invalid length. [ 1587.801278][T22652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4096'. [ 1588.508917][T22661] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1588.539365][T22661] overlayfs: failed to clone upperpath [ 1588.546742][ T5932] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1588.870913][T22662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1589.047082][T22662] overlayfs: missing 'lowerdir' [ 1589.164769][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 1589.187205][ T5932] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1589.212239][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.245846][ T5932] usb 1-1: config 0 has no interface number 0 [ 1589.425368][ T5932] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1589.460812][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.479382][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1589.507533][ T5932] usb 1-1: Product: syz [ 1589.519314][ T5932] usb 1-1: Manufacturer: syz [ 1589.543067][ T5932] usb 1-1: SerialNumber: syz [ 1589.578556][ T5932] usb 1-1: config 0 descriptor?? [ 1589.618228][ T5932] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1589.652601][ T5932] uvcvideo 1-1:0.105: No valid video chain found. [ 1589.692643][ T24] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1589.723550][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.752656][ T24] usb 5-1: config 0 has no interface number 0 [ 1589.783830][ T30] audit: type=1400 audit(2000003580.764:1639): avc: denied { connect } for pid=22673 comm="syz.3.4102" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1589.818620][T22674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4102'. [ 1589.835420][ T5874] usb 1-1: USB disconnect, device number 46 [ 1589.844109][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1589.863036][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.927502][ T24] usb 5-1: Product: syz [ 1589.945004][ T24] usb 5-1: Manufacturer: syz [ 1590.035526][ T24] usb 5-1: SerialNumber: syz [ 1590.065976][ T24] usb 5-1: config 0 descriptor?? [ 1590.386785][T22680] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1591.075679][T22686] batadv0 speed is unknown, defaulting to 1000 [ 1591.466913][T22686] lo speed is unknown, defaulting to 1000 [ 1591.970368][T22693] SET target dimension over the limit! [ 1592.878015][ T30] audit: type=1400 audit(2000003582.839:1640): avc: denied { name_bind } for pid=22691 comm="syz.0.4106" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1593.499567][ T24] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1593.531278][ T24] uvcvideo 5-1:0.64: No valid video chain found. [ 1593.572526][ T24] usb 5-1: USB disconnect, device number 44 [ 1594.342719][T22706] batman_adv: batadv0: Interface deactivated: gretap1 [ 1594.418410][ T889] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.441825][ T889] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.486607][ T889] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.666090][ T889] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.682595][T22710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1596.080965][T22721] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1597.924932][T22735] Cannot find del_set index 0 as target [ 1598.729080][T22746] 9p: Unknown Cache mode or invalid value loGe [ 1599.324227][T22750] netlink: 'syz.0.4121': attribute type 4 has an invalid length. [ 1599.954917][T22760] netlink: 'syz.4.4118': attribute type 8 has an invalid length. [ 1600.671610][T22764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'. [ 1601.050801][T22776] netlink: 'syz.1.4126': attribute type 12 has an invalid length. [ 1601.059422][T22776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4126'. [ 1603.243027][T22803] netlink: 'syz.5.4131': attribute type 1 has an invalid length. [ 1604.380428][T22813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1604.816404][T22818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4136'. [ 1604.827974][T22818] kernel profiling enabled (shift: 63) [ 1604.833990][T22818] profiling shift: 63 too large [ 1605.229129][T22824] netlink: 'syz.4.4137': attribute type 4 has an invalid length. [ 1605.573684][ T30] audit: type=1400 audit(2000003595.570:1641): avc: denied { mount } for pid=22825 comm="syz.5.4139" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1606.322542][ T30] audit: type=1400 audit(2000003595.579:1642): avc: denied { search } for pid=22825 comm="syz.5.4139" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1606.457432][T22835] tipc: Resetting bearer [ 1606.463420][T22835] tipc: Resetting bearer [ 1606.484575][T22835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.605816][ T30] audit: type=1400 audit(2000003595.579:1643): avc: denied { search } for pid=22825 comm="syz.5.4139" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1606.855430][ T30] audit: type=1400 audit(2000003595.579:1644): avc: denied { read open } for pid=22825 comm="syz.5.4139" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1606.877708][T22835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1607.347286][T22851] netlink: 'syz.4.4143': attribute type 4 has an invalid length. [ 1611.047939][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'. [ 1611.240515][T22890] netlink: 'syz.0.4153': attribute type 4 has an invalid length. [ 1612.884387][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4155'. [ 1612.894318][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 1614.225357][T22921] netlink: 'syz.1.4158': attribute type 4 has an invalid length. [ 1614.359206][T22925] netlink: 'syz.4.4160': attribute type 4 has an invalid length. [ 1615.836753][T22937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1616.748881][ T30] audit: type=1400 audit(2000003606.037:1645): avc: denied { write } for pid=22943 comm="syz.3.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1616.894197][ T6507] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 30 seconds [ 1616.909927][ T6507] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 30 seconds [ 1616.922343][ T6507] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 30 seconds [ 1616.933708][ T6507] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 30 seconds [ 1617.287568][T14662] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1617.458871][T14662] usb 1-1: Using ep0 maxpacket: 16 [ 1617.617894][T14662] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1617.645042][T14662] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.692345][T14662] usb 1-1: config 0 has no interface number 0 [ 1617.701873][T14662] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1617.715595][T14662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.767470][T14662] usb 1-1: Product: syz [ 1617.772479][T14662] usb 1-1: Manufacturer: syz [ 1617.779044][T14662] usb 1-1: SerialNumber: syz [ 1617.800817][T14662] usb 1-1: config 0 descriptor?? [ 1617.816477][T14662] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1617.824532][T14662] uvcvideo 1-1:0.105: No valid video chain found. [ 1618.042360][T14662] usb 1-1: USB disconnect, device number 47 [ 1618.315551][T22967] netlink: 'syz.1.4171': attribute type 10 has an invalid length. [ 1618.574527][T22971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1623.547539][T23001] netlink: 'syz.1.4179': attribute type 4 has an invalid length. [ 1624.500144][T14662] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1624.813411][T14662] usb 5-1: Using ep0 maxpacket: 16 [ 1624.829703][T14662] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1624.851427][T23009] netlink: 'syz.0.4181': attribute type 2 has an invalid length. [ 1624.859562][T23009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1624.963270][T14662] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.018843][T14662] usb 5-1: config 0 has no interface number 0 [ 1625.039637][T14662] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1625.049368][T14662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.057356][T14662] usb 5-1: Product: syz [ 1625.166538][T14662] usb 5-1: Manufacturer: syz [ 1625.171170][T14662] usb 5-1: SerialNumber: syz [ 1625.187862][T14662] usb 5-1: config 0 descriptor?? [ 1625.226984][T14662] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1625.734509][T14662] uvcvideo 5-1:0.105: No valid video chain found. [ 1625.746114][T14662] usb 5-1: USB disconnect, device number 45 [ 1626.253366][ T30] audit: type=1400 audit(2000003614.923:1646): avc: denied { map } for pid=23031 comm="syz.3.4189" path="socket:[75194]" dev="sockfs" ino=75194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1626.299465][ T30] audit: type=1400 audit(2000003614.923:1647): avc: denied { read accept } for pid=23031 comm="syz.3.4189" path="socket:[75194]" dev="sockfs" ino=75194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1626.911186][T23037] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4189'. [ 1627.065080][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.074498][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.083154][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.091736][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.099961][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.129617][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.791802][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.901244][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.911218][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.924855][T23037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.937551][T23059] futex_wake_op: syz.0.4194 tries to shift op by 32; fix this program [ 1628.522740][ T30] audit: type=1326 audit(2000003617.009:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed79c629 code=0x7ffc0000 [ 1628.547124][ T30] audit: type=1326 audit(2000003617.009:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed79c629 code=0x7ffc0000 [ 1628.619793][ T30] audit: type=1326 audit(2000003617.009:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fed79c629 code=0x7ffc0000 [ 1628.652478][ T30] audit: type=1326 audit(2000003617.009:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed79c629 code=0x7ffc0000 [ 1629.493428][ T30] audit: type=1326 audit(2000003617.009:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed79c629 code=0x7ffc0000 [ 1629.536638][T23065] netlink: 'syz.0.4194': attribute type 4 has an invalid length. [ 1629.666074][T23065] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4194'. [ 1629.675981][T23071] netlink: 'syz.5.4197': attribute type 4 has an invalid length. [ 1629.686719][ T30] audit: type=1326 audit(2000003617.009:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9fed79c629 code=0x7ffc0000 [ 1629.713005][T23080] netlink: 'syz.1.4199': attribute type 10 has an invalid length. [ 1630.215973][ T30] audit: type=1326 audit(2000003617.009:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed79c629 code=0x7ffc0000 [ 1630.283273][ T30] audit: type=1326 audit(2000003617.009:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23066 comm="syz.4.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed79c629 code=0x7ffc0000 [ 1630.344000][T23082] delete_channel: no stack [ 1631.762328][T14662] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1631.922814][T14662] usb 5-1: Using ep0 maxpacket: 16 [ 1631.944697][T14662] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1631.955903][T14662] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.973822][T14662] usb 5-1: config 0 has no interface number 0 [ 1631.983448][T14662] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1632.006136][T23097] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4205'. [ 1632.031829][T14662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.042182][T14662] usb 5-1: Product: syz [ 1632.051898][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4204'. [ 1632.064918][T23097] unsupported nlmsg_type 40 [ 1632.069894][T14662] usb 5-1: Manufacturer: syz [ 1632.380031][T14662] usb 5-1: SerialNumber: syz [ 1632.395168][T14662] usb 5-1: config 0 descriptor?? [ 1632.409193][T14662] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1632.423881][T14662] uvcvideo 5-1:0.105: No valid video chain found. [ 1632.665308][T14662] usb 5-1: USB disconnect, device number 46 [ 1632.797454][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4207'. [ 1635.129162][T23149] netlink: 'syz.3.4215': attribute type 4 has an invalid length. [ 1635.237970][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4217'. [ 1636.009104][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4218'. [ 1638.615901][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1641.004270][T23183] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1642.382675][T23199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1642.431097][T23199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1643.130153][T23211] vlan0: entered promiscuous mode [ 1643.848653][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4231'. [ 1644.588124][T23226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4228'. [ 1645.465127][T23246] batadv0 speed is unknown, defaulting to 1000 [ 1645.932254][T23246] lo speed is unknown, defaulting to 1000 [ 1645.978312][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1645.978327][ T30] audit: type=1326 audit(2000003632.808:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1646.033129][ T30] audit: type=1326 audit(2000003632.808:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1646.060522][ T30] audit: type=1326 audit(2000003632.808:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1646.085106][ T30] audit: type=1326 audit(2000003632.808:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1646.173280][ T30] audit: type=1326 audit(2000003632.818:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1646.215175][ T30] audit: type=1326 audit(2000003632.818:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1646.268970][ T30] audit: type=1326 audit(2000003632.818:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1646.681983][ T30] audit: type=1326 audit(2000003632.818:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1646.781748][T23259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4237'. [ 1646.993481][ T30] audit: type=1326 audit(2000003632.818:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1647.053424][ T30] audit: type=1326 audit(2000003632.827:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.3.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940659c629 code=0x7ffc0000 [ 1648.655198][T23280] netlink: 'syz.5.4244': attribute type 10 has an invalid length. [ 1648.679272][T23280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.692935][T23280] bond0: (slave team0): Enslaving as an active interface with an up link [ 1649.081649][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4247'. [ 1649.528911][ T6507] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 60 seconds [ 1649.539810][ T6507] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 60 seconds [ 1649.551309][ T6507] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 60 seconds [ 1649.562514][ T6507] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 60 seconds [ 1650.845758][T23302] overlayfs: failed to clone lowerpath [ 1653.255268][T23315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4252'. [ 1656.237984][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4260'. [ 1656.392915][T23348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4259'. [ 1656.402262][T23348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4259'. [ 1656.530088][ T5177] udevd[5177]: worker [22598] /devices/virtual/block/nbd0 is taking a long time [ 1659.395994][T23388] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1659.422591][T23388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1660.431274][T23396] netlink: 'syz.3.4269': attribute type 16 has an invalid length. [ 1663.469923][T23426] /dev/nullb0: Can't open blockdev [ 1664.101443][T23429] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4281'. [ 1665.837971][T22608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1665.865065][T23454] batadv0 speed is unknown, defaulting to 1000 [ 1665.999580][T22608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1666.009557][T22608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1666.019541][T22608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1666.028654][T22608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1666.048212][T19362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1666.055665][T19362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1666.064592][T19362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1666.081074][T19362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1666.090970][T19362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1666.129057][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1666.129073][ T30] audit: type=1400 audit(2000003652.227:1700): avc: denied { mounton } for pid=23455 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1668.340326][T19362] Bluetooth: hci1: command tx timeout [ 1668.776950][T23455] batadv0 speed is unknown, defaulting to 1000 [ 1669.256658][T23454] lo speed is unknown, defaulting to 1000 [ 1670.004457][T23455] lo speed is unknown, defaulting to 1000 [ 1670.370401][T23504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4297'. [ 1670.505589][ T30] audit: type=1400 audit(2000003656.315:1701): avc: denied { read } for pid=23500 comm="syz.4.4297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1670.533681][T19362] Bluetooth: hci1: command tx timeout [ 1671.845173][T23527] netlink: 'syz.5.4300': attribute type 4 has an invalid length. [ 1672.098239][T23455] chnl_net:caif_netlink_parms(): no params data found [ 1672.717709][T19362] Bluetooth: hci1: command tx timeout [ 1672.757240][T23455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.823701][T23455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.877765][T23455] bridge_slave_0: entered allmulticast mode [ 1672.918144][T23455] bridge_slave_0: entered promiscuous mode [ 1672.935089][T23455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.967137][T23455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.010520][T23455] bridge_slave_1: entered allmulticast mode [ 1673.025297][T23455] bridge_slave_1: entered promiscuous mode [ 1673.076786][T23455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.096823][T23455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.597399][T23455] team0: Port device team_slave_0 added [ 1673.702973][T23455] team0: Port device team_slave_1 added [ 1673.849224][T23546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4299'. [ 1673.861275][T23560] tipc: Trying to set illegal importance in message [ 1674.412186][T23455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.420736][T23455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.450451][T23455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.464658][T23455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.519332][T23455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.834306][T23455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.920971][T23455] hsr_slave_0: entered promiscuous mode [ 1674.933432][T23455] hsr_slave_1: entered promiscuous mode [ 1674.939742][T23455] debugfs: 'hsr0' already exists in 'hsr' [ 1674.945597][T19362] Bluetooth: hci1: command tx timeout [ 1674.991495][T23455] Cannot create hsr debugfs directory [ 1675.724892][T23455] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1676.224878][T23455] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1676.239721][T23455] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1676.262412][T23455] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1676.541422][T23455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.597045][T23455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.642958][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.650131][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.675249][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.682467][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.772812][T23455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1676.791169][T23455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1677.373504][T23455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1677.710518][T23613] netlink: 'syz.1.4313': attribute type 4 has an invalid length. [ 1678.534157][T23620] SET target dimension over the limit! [ 1679.101169][T23455] veth0_vlan: entered promiscuous mode [ 1679.123864][T23455] veth1_vlan: entered promiscuous mode [ 1679.179904][T23455] veth0_macvtap: entered promiscuous mode [ 1679.210899][T23455] veth1_macvtap: entered promiscuous mode [ 1679.240715][T23455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.268064][T23455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.305468][ T1642] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.323522][ T1642] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.343507][ T1642] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.371222][ T1642] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.486609][T17233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.504230][T17233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.531711][T17233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.541027][T17233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.573079][ T30] audit: type=1400 audit(2000003664.799:1702): avc: denied { mounton } for pid=23455 comm="syz-executor" path="/root/syzkaller.EshdFN/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1679.632739][ T30] audit: type=1400 audit(2000003664.799:1703): avc: denied { mounton } for pid=23455 comm="syz-executor" path="/root/syzkaller.EshdFN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=77690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1679.715615][ T30] audit: type=1400 audit(2000003664.855:1704): avc: denied { mounton } for pid=23455 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1679.766487][ T30] audit: type=1400 audit(2000003664.855:1705): avc: denied { mounton } for pid=23455 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1679.838239][T23633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1680.136788][ T5932] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1680.322894][ T5932] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1680.352030][ T5932] usb 7-1: config 0 has no interface number 0 [ 1680.375696][ T5932] usb 7-1: config 0 interface 184 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1680.410479][ T5932] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1680.436435][ T5932] usb 7-1: New USB device found, idVendor=0f1e, idProduct=04b8, bcdDevice=ee.64 [ 1680.447802][ T5932] usb 7-1: New USB device strings: Mfr=255, Product=2, SerialNumber=3 [ 1680.499912][ T5932] usb 7-1: Product: syz [ 1680.522370][ T5932] usb 7-1: Manufacturer: syz [ 1680.536493][ T5932] usb 7-1: SerialNumber: syz [ 1680.631384][ T5932] usb 7-1: config 0 descriptor?? [ 1681.269810][T23656] batadv0 speed is unknown, defaulting to 1000 [ 1681.732405][T23656] lo speed is unknown, defaulting to 1000 [ 1681.930549][ T6507] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 90 seconds [ 1681.943028][ T6507] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 90 seconds [ 1681.957844][ T6507] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 90 seconds [ 1681.970137][ T6507] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 90 seconds [ 1682.493315][T23666] batman_adv: batadv0: Adding interface: macvtap1 [ 1682.499893][T23666] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.525772][T23666] batman_adv: batadv0: Interface activated: macvtap1 [ 1682.646916][T23670] netlink: 'syz.3.4324': attribute type 4 has an invalid length. [ 1682.988548][T23669] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4325'. [ 1684.107503][ T5874] usb 7-1: USB disconnect, device number 2 [ 1684.383688][T23684] netlink: 'syz.5.4329': attribute type 4 has an invalid length. [ 1684.620693][T23686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1686.726217][T23701] overlayfs: failed to clone lowerpath [ 1686.734890][T23701] overlayfs: failed to clone lowerpath [ 1686.870533][T23711] sctp: [Deprecated]: syz.6.4337 (pid 23711) Use of int in maxseg socket option. [ 1686.870533][T23711] Use struct sctp_assoc_value instead [ 1687.501100][T23717] netlink: 'syz.3.4339': attribute type 4 has an invalid length. [ 1687.922180][T23719] netlink: 'syz.1.4338': attribute type 4 has an invalid length. [ 1689.985297][T23733] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1690.328199][T23734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4343'. [ 1690.408857][T22608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1690.423401][T22608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1690.436538][T22608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1690.468750][T22608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1690.481485][T22608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1690.539998][T23735] batadv0 speed is unknown, defaulting to 1000 [ 1691.733739][T23755] netlink: 'syz.6.4350': attribute type 4 has an invalid length. [ 1692.071007][T23735] lo speed is unknown, defaulting to 1000 [ 1692.848677][T19362] Bluetooth: hci6: command tx timeout [ 1693.229428][T23765] batadv0 speed is unknown, defaulting to 1000 [ 1694.210060][T23735] chnl_net:caif_netlink_parms(): no params data found [ 1694.299187][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4353'. [ 1694.339145][T23735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.346761][T23735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.353941][T23735] bridge_slave_0: entered allmulticast mode [ 1694.364015][T23735] bridge_slave_0: entered promiscuous mode [ 1694.372305][T23735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.380792][T23735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.390793][T23735] bridge_slave_1: entered allmulticast mode [ 1694.398829][T23735] bridge_slave_1: entered promiscuous mode [ 1694.420712][T23735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.433136][T23735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.516858][T23735] team0: Port device team_slave_0 added [ 1694.523790][T23735] team0: Port device team_slave_1 added [ 1694.542542][T23735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.569617][T23735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.632781][T23735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.651410][T23735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.659302][T23735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.749439][T23735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.069049][T19362] Bluetooth: hci6: command tx timeout [ 1695.903848][T23787] tipc: Resetting bearer [ 1695.981618][T23787] net_ratelimit: 52 callbacks suppressed [ 1695.981624][T23787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1696.124598][T23796] xt_TCPMSS: Only works on TCP SYN packets [ 1696.966521][T23735] hsr_slave_0: entered promiscuous mode [ 1697.172458][T23735] hsr_slave_1: entered promiscuous mode [ 1697.189564][T23735] debugfs: 'hsr0' already exists in 'hsr' [ 1697.208561][T23735] Cannot create hsr debugfs directory [ 1697.263416][T19362] Bluetooth: hci6: command tx timeout [ 1697.304901][T23796] sit1: entered allmulticast mode [ 1697.930863][T23765] lo speed is unknown, defaulting to 1000 [ 1697.999151][T23810] netlink: 'syz.6.4360': attribute type 4 has an invalid length. [ 1698.071519][T23735] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1698.086208][T23735] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1698.121130][T23735] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1698.160498][T23735] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1698.388840][T23735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.425842][T23735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.475644][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.482751][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.558936][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.566037][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.826225][ T30] audit: type=1400 audit(2000003682.759:1706): avc: denied { connect } for pid=23819 comm="syz.5.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1698.868132][ T30] audit: type=1400 audit(2000003682.843:1707): avc: denied { mount } for pid=23824 comm="syz.3.4364" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1698.932333][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1699.050459][T23828] nbd: socks must be embedded in a SOCK_ITEM attr [ 1699.336083][T22963] udevd[22963]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1699.393202][T23735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.497831][T19362] Bluetooth: hci6: command tx timeout [ 1699.739581][T23840] netlink: 'syz.1.4365': attribute type 4 has an invalid length. [ 1700.197267][T23735] veth0_vlan: entered promiscuous mode [ 1700.227394][T23735] veth1_vlan: entered promiscuous mode [ 1700.331523][T23735] veth0_macvtap: entered promiscuous mode [ 1700.353322][T23735] veth1_macvtap: entered promiscuous mode [ 1700.402118][T23735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.429588][T23735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.461578][ T128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.483651][ T128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.505803][ T128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.536539][ T128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.661704][ T6364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.669713][ T6364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.838613][T17233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.967755][T17233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.494644][ T24] libceph: connect (1)[c::]:6789 error -13 [ 1701.519357][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1702.257765][T23860] ceph: No mds server is up or the cluster is laggy [ 1702.283800][ T24] libceph: connect (1)[c::]:6789 error -13 [ 1702.295099][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1703.777698][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1705.327298][T23904] netlink: 'syz.6.4379': attribute type 4 has an invalid length. [ 1706.562028][T23916] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1706.995490][T23928] fuse: Bad value for 'fd' [ 1708.418786][ T889] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.468857][T23940] 9p: Could not find request transport: tcp*por0000000004e22 [ 1708.588713][ T889] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.709314][ T889] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.909220][ T889] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.937874][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1708.964130][T22608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1708.974512][T22608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1708.989458][T22608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1709.393418][T22608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1709.401134][T22608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1709.451391][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1709.458065][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.486923][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1709.519083][ T9] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1709.532162][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.552920][T23952] batadv0 speed is unknown, defaulting to 1000 [ 1709.585259][ T9] usb 7-1: config 0 descriptor?? [ 1709.593498][ T889] bridge_slave_1: left allmulticast mode [ 1709.620761][ T889] bridge_slave_1: left promiscuous mode [ 1709.645565][ T889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.828294][ T889] bridge_slave_0: left allmulticast mode [ 1709.861039][ T889] bridge_slave_0: left promiscuous mode [ 1709.882619][ T889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.557205][ T9] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1710.988932][ T889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.032258][ T889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1711.208291][ T889] bond0 (unregistering): Released all slaves [ 1711.715505][T19362] Bluetooth: hci6: command tx timeout [ 1711.758144][ T5877] usb 7-1: USB disconnect, device number 3 [ 1712.867346][T23990] netlink: 'syz.3.4400': attribute type 4 has an invalid length. [ 1713.216092][T23996] SET target dimension over the limit! [ 1713.962892][T19362] Bluetooth: hci6: command tx timeout [ 1714.015300][T23952] lo speed is unknown, defaulting to 1000 [ 1714.667490][ T6507] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 120 seconds [ 1714.678299][ T6507] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 120 seconds [ 1715.062909][T24006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4404'. [ 1715.072488][T24006] netlink: 'syz.5.4404': attribute type 5 has an invalid length. [ 1715.080344][T24006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4404'. [ 1715.282883][ T6507] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 120 seconds [ 1715.295787][ T6507] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 120 seconds [ 1715.724819][T24006] geneve4: entered promiscuous mode [ 1715.732621][T24006] geneve4: entered allmulticast mode [ 1715.767690][ T8394] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1715.930282][ T8394] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1715.963229][ T8394] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1716.019866][ T8394] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1716.190797][T19362] Bluetooth: hci6: command tx timeout [ 1716.932208][ T30] audit: type=1326 audit(2000003699.736:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24030 comm="syz.1.4411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42f4b9c629 code=0x0 [ 1717.235583][T24040] xt_connbytes: Forcing CT accounting to be enabled [ 1717.242642][T24040] set match dimension is over the limit! [ 1717.574761][ T889] hsr_slave_0: left promiscuous mode [ 1717.594531][ T889] hsr_slave_1: left promiscuous mode [ 1717.610006][ T889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.637555][ T889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.915453][ T889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.923415][ T889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1718.072332][ T889] veth1_macvtap: left promiscuous mode [ 1718.078302][ T889] veth0_macvtap: left promiscuous mode [ 1718.083805][ T889] veth1_vlan: left promiscuous mode [ 1718.090314][ T889] veth0_vlan: left promiscuous mode [ 1718.415100][T19362] Bluetooth: hci6: command tx timeout [ 1718.648669][T24064] netlink: 'syz.1.4415': attribute type 4 has an invalid length. [ 1719.184683][T24072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4416'. [ 1719.235957][ T889] team0 (unregistering): Port device team_slave_1 removed [ 1719.319214][ T889] team0 (unregistering): Port device team_slave_0 removed [ 1720.445535][T23952] chnl_net:caif_netlink_parms(): no params data found [ 1721.227384][T24101] CIFS mount error: No usable UNC path provided in device string! [ 1721.227384][T24101] [ 1721.237537][T24101] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1721.627566][T23952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.634916][T23952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.651990][T23952] bridge_slave_0: entered allmulticast mode [ 1721.683902][T23952] bridge_slave_0: entered promiscuous mode [ 1721.716199][T23952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.743926][T23952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.772503][T23952] bridge_slave_1: entered allmulticast mode [ 1721.877107][T23952] bridge_slave_1: entered promiscuous mode [ 1721.961099][T23952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.005314][T23952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.370355][T23952] team0: Port device team_slave_0 added [ 1722.384703][T23952] team0: Port device team_slave_1 added [ 1722.551004][T23952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.568759][T23952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.185387][T23952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.198097][T23952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.205729][T23952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.325993][T23952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.546266][T23952] hsr_slave_0: entered promiscuous mode [ 1723.574471][T23952] hsr_slave_1: entered promiscuous mode [ 1723.590832][T23952] debugfs: 'hsr0' already exists in 'hsr' [ 1723.616381][T23952] Cannot create hsr debugfs directory [ 1723.628142][ T5932] Process accounting resumed [ 1723.809094][T24152] netlink: 'syz.6.4431': attribute type 4 has an invalid length. [ 1725.503831][T23952] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1725.528381][T23952] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1725.576568][T23952] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1725.674673][T24181] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4437'. [ 1725.750765][T23952] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1727.155093][T24190] batadv0 speed is unknown, defaulting to 1000 [ 1727.309487][T24190] lo speed is unknown, defaulting to 1000 [ 1727.337735][T24194] batadv0 speed is unknown, defaulting to 1000 [ 1727.490373][T24194] lo speed is unknown, defaulting to 1000 [ 1728.163644][T24211] netlink: 'syz.3.4440': attribute type 4 has an invalid length. [ 1728.325502][T23952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.502900][T24217] batadv_slave_0: entered promiscuous mode [ 1728.665295][T23952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1728.712566][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.719674][ T889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1728.777908][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.785026][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.064217][ T30] audit: type=1326 audit(2000003711.064:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24218 comm="syz.6.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1729.416895][ T30] audit: type=1326 audit(2000003711.064:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24218 comm="syz.6.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1729.524552][ T30] audit: type=1326 audit(2000003711.073:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24218 comm="syz.6.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1729.589555][ T30] audit: type=1326 audit(2000003711.588:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24218 comm="syz.6.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1729.639000][ T30] audit: type=1326 audit(2000003711.588:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24218 comm="syz.6.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1729.702098][T24226] batadv0 speed is unknown, defaulting to 1000 [ 1729.854661][T24226] lo speed is unknown, defaulting to 1000 [ 1731.566829][T23952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1732.125943][T24288] netlink: 'syz.3.4449': attribute type 4 has an invalid length. [ 1732.983189][T24300] batadv0 speed is unknown, defaulting to 1000 [ 1733.425067][T23952] veth0_vlan: entered promiscuous mode [ 1733.523233][T23952] veth1_vlan: entered promiscuous mode [ 1733.653386][T23952] veth0_macvtap: entered promiscuous mode [ 1733.667479][T23952] veth1_macvtap: entered promiscuous mode [ 1733.690494][T23952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1733.714484][T23952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.042130][ T64] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.088338][ T64] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.230655][ T64] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.003465][ T64] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.408470][T24300] lo speed is unknown, defaulting to 1000 [ 1738.163389][T24347] batadv0 speed is unknown, defaulting to 1000 [ 1738.318552][T24347] lo speed is unknown, defaulting to 1000 [ 1738.487773][T24350] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1738.615221][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.623074][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.919259][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.939813][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.027434][T24375] set match dimension is over the limit! [ 1741.624168][T21096] IPVS: starting estimator thread 0... [ 1741.718202][T19362] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1741.758662][T24401] IPVS: using max 46 ests per chain, 110400 per kthread [ 1743.478125][T19362] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1744.459025][T19362] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1744.818836][T24440] overlayfs: failed to clone upperpath [ 1745.784324][ T30] audit: type=1400 audit(2000003726.722:1714): avc: denied { execute } for pid=24438 comm="syz.6.4474" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1747.395774][ T6507] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 150 seconds [ 1747.406618][ T6507] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 150 seconds [ 1747.426226][ T6507] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 150 seconds [ 1747.483225][ T6507] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 150 seconds [ 1747.646239][T24464] batadv0 speed is unknown, defaulting to 1000 [ 1747.913241][T24464] lo speed is unknown, defaulting to 1000 [ 1747.964835][T24469] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1749.897493][T19362] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1750.374282][T24447] batadv0 speed is unknown, defaulting to 1000 [ 1750.941681][T24503] 9pnet_virtio: no channels available for device ./bus [ 1752.677020][T24515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4489'. [ 1754.492432][T24447] lo speed is unknown, defaulting to 1000 [ 1754.519040][T19362] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1754.649904][T24538] netlink: 'syz.5.4493': attribute type 1 has an invalid length. [ 1754.676780][ T30] audit: type=1326 audit(2000003734.963:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.5.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1754.743625][T24538] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1754.789793][T24538] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4493'. [ 1754.873089][T24543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4495'. [ 1754.960955][ T30] audit: type=1326 audit(2000003734.963:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.5.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1754.995531][ T30] audit: type=1326 audit(2000003734.963:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.5.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1755.021605][ T30] audit: type=1326 audit(2000003734.963:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.5.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1758.406972][T24573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1758.452339][T24578] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4503'. [ 1759.097038][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1759.267218][T24596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4507'. [ 1759.946608][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1759.958522][ T30] audit: type=1400 audit(2000003739.977:1719): avc: denied { write } for pid=24579 comm="syz.1.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1759.983999][ T24] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1759.994329][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.048882][ T24] usb 8-1: Product: syz [ 1760.143637][ T24] usb 8-1: Manufacturer: syz [ 1760.674384][ T24] usb 8-1: SerialNumber: syz [ 1760.706705][ T24] usb 8-1: config 0 descriptor?? [ 1760.729466][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1760.739783][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 1760.739783][ T24] [ 1760.751593][ T24] usb 8-1: selecting invalid altsetting 3 [ 1760.762528][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1760.762528][ T24] [ 1760.779699][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 1760.803330][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1760.827604][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1760.851026][ T24] usb 8-1: media controller created [ 1760.874843][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 1760.890183][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1760.955459][T24578] dvb-usb: bulk message failed: -22 (7/0) [ 1760.976912][T24578] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1761.083271][ T24] dvb-usb: MAC address reading failed. [ 1761.260106][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1763.127002][T24629] batadv0 speed is unknown, defaulting to 1000 [ 1763.491332][T24629] lo speed is unknown, defaulting to 1000 [ 1763.540790][ T24] DVB: Unable to find symbol stb0899_attach() [ 1763.585215][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1765.311492][ T30] audit: type=1400 audit(2000003744.345:1720): avc: denied { ioctl } for pid=24641 comm="syz.6.4529" path="socket:[81821]" dev="sockfs" ino=81821 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1765.405069][ T24] rc_core: IR keymap rc-tt-1500 not found [ 1765.493169][ T24] Registered IR keymap rc-empty [ 1765.521134][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1765.706924][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input17 [ 1765.736871][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 1765.743846][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 1765.743846][ T24] [ 1766.233071][T19362] Bluetooth: hci6: Unknown advertising packet type: 0x73 [ 1766.233142][T19362] Bluetooth: hci6: Malformed LE Event: 0x0d [ 1766.248840][ T5877] dvb-usb: bulk message failed: -22 (4/0) [ 1766.257313][ T5877] dvb-usb: error -22 while querying for an remote control event. [ 1766.269338][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1766.326318][ T24] usb 8-1: USB disconnect, device number 2 [ 1766.676564][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1766.744287][ T30] audit: type=1400 audit(2000003746.338:1721): avc: denied { map } for pid=24668 comm="syz.7.4525" path="socket:[82584]" dev="sockfs" ino=82584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1766.834028][T24671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4525'. [ 1766.887114][ T30] audit: type=1400 audit(2000003746.347:1722): avc: denied { read } for pid=24668 comm="syz.7.4525" path="socket:[82584]" dev="sockfs" ino=82584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1767.867250][T24676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4526'. [ 1767.892691][T24676] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4526'. [ 1767.939433][T24676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4526'. [ 1768.591733][T24678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4526'. [ 1768.780193][T19362] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1769.417856][T24692] syz.3.4530 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1769.448501][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1769.559844][T24692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4530'. [ 1772.648308][T24724] xt_connbytes: Forcing CT accounting to be enabled [ 1772.655439][T24724] set match dimension is over the limit! [ 1772.763141][T14662] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1772.931885][T14662] usb 7-1: Using ep0 maxpacket: 16 [ 1773.021693][T14662] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1773.030543][T14662] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.053686][T14662] usb 7-1: config 0 has no interface number 0 [ 1773.496301][T14662] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1773.505421][T14662] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.521334][T14662] usb 7-1: Product: syz [ 1773.527345][T14662] usb 7-1: Manufacturer: syz [ 1773.535691][T14662] usb 7-1: SerialNumber: syz [ 1773.546587][T14662] usb 7-1: config 0 descriptor?? [ 1773.566269][T14662] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1773.578294][T14662] uvcvideo 7-1:0.105: No valid video chain found. [ 1773.834323][T14662] usb 7-1: USB disconnect, device number 4 [ 1776.138922][T24759] bond0: left allmulticast mode [ 1777.049766][T24771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4545'. [ 1777.485518][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4546'. [ 1778.747240][T24792] batadv_slave_0: entered promiscuous mode [ 1779.547348][T24782] batadv_slave_0: left promiscuous mode [ 1780.307767][ T6507] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 180 seconds [ 1780.318702][ T6507] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 180 seconds [ 1780.329751][ T6507] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 180 seconds [ 1780.343852][ T6507] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 180 seconds [ 1780.512107][T24800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4555'. [ 1780.912445][ T30] audit: type=1326 audit(2000003759.583:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.7.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c4d9c629 code=0x7ffc0000 [ 1781.763882][T24806] batadv0 speed is unknown, defaulting to 1000 [ 1781.817895][ T30] audit: type=1326 audit(2000003759.583:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.7.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c4d9c629 code=0x7ffc0000 [ 1781.841592][ T30] audit: type=1326 audit(2000003759.592:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24802 comm="syz.7.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff6c4d9c629 code=0x7ffc0000 [ 1782.095491][T24806] lo speed is unknown, defaulting to 1000 [ 1782.297247][T24808] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1782.467820][ T30] audit: type=1400 audit(2000003761.042:1726): avc: denied { getopt } for pid=24816 comm="syz.6.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1783.850360][T24835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4560'. [ 1784.189730][T24838] netlink: 'syz.7.4559': attribute type 4 has an invalid length. [ 1785.084241][T24859] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1789.665898][T19362] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1789.751153][T24907] netlink: 'syz.7.4583': attribute type 4 has an invalid length. [ 1792.449999][T24936] FAT-fs (loop7): unable to read boot sector [ 1792.779371][T24944] openvswitch: netlink: Flow key attr not present in new flow. [ 1794.540020][ T30] audit: type=1326 audit(2000003772.333:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24957 comm="syz.6.4595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1794.676360][ T30] audit: type=1326 audit(2000003772.333:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24957 comm="syz.6.4595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1794.826936][T24968] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1794.848898][T24964] netlink: 'syz.6.4595': attribute type 1 has an invalid length. [ 1794.860281][T24964] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4595'. [ 1795.247240][ T30] audit: type=1326 audit(2000003772.333:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24957 comm="syz.6.4595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1795.388029][ T30] audit: type=1326 audit(2000003772.333:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24957 comm="syz.6.4595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1795.656489][ T30] audit: type=1326 audit(2000003772.342:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24957 comm="syz.6.4595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1795.869529][ T30] audit: type=1326 audit(2000003772.342:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24957 comm="syz.6.4595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5bbc19c629 code=0x7ffc0000 [ 1797.132504][T22608] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1799.247168][T22608] Bluetooth: hci1: command 0x0406 tx timeout [ 1799.653878][T25049] ./file0: Can't lookup blockdev [ 1799.765240][ T5874] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1799.948664][ T30] audit: type=1400 audit(2000003777.402:1733): avc: denied { lock } for pid=25050 comm="syz.5.4611" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=84167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1799.974045][ T5874] usb 8-1: device descriptor read/64, error -71 [ 1800.295948][ T5874] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1800.431930][T19362] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1800.599158][ T5874] usb 8-1: device descriptor read/64, error -71 [ 1801.004154][ T5874] usb usb8-port1: attempt power cycle [ 1801.835044][ T5874] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1801.862307][ T5874] usb 8-1: device descriptor read/8, error -71 [ 1801.946435][T25077] netlink: 'syz.5.4617': attribute type 4 has an invalid length. [ 1801.987184][ T30] audit: type=1326 audit(2000003779.311:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.1.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1802.013569][ T30] audit: type=1326 audit(2000003779.311:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.1.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1802.182372][ T30] audit: type=1326 audit(2000003779.498:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.1.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f42f4b9c629 code=0x7ffc0000 [ 1802.225331][ T5874] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1802.466759][T25078] netlink: 'syz.1.4614': attribute type 1 has an invalid length. [ 1802.539441][T25087] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4619'. [ 1802.902444][ T5874] usb 8-1: device not accepting address 6, error -71 [ 1802.910673][ T5874] usb usb8-port1: unable to enumerate USB device [ 1803.066826][T25085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1803.095765][ T30] audit: type=1400 audit(2000003780.349:1737): avc: denied { append } for pid=25081 comm="syz.6.4618" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1803.469746][T25078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1804.001890][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4620'. [ 1804.012793][T25095] bridge_slave_1: left allmulticast mode [ 1804.018479][T25095] bridge_slave_1: left promiscuous mode [ 1804.034864][T25095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.416416][T25095] bridge_slave_0: left allmulticast mode [ 1804.422275][T25095] bridge_slave_0: left promiscuous mode [ 1804.444865][T25095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.552938][T25103] netlink: 'syz.1.4623': attribute type 10 has an invalid length. [ 1805.577323][ T30] audit: type=1400 audit(2000003782.098:1738): avc: denied { create } for pid=25102 comm="syz.5.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1805.738213][ T30] audit: type=1400 audit(2000003782.098:1739): avc: denied { write } for pid=25102 comm="syz.5.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1805.788404][T25112] batadv0 speed is unknown, defaulting to 1000 [ 1805.942530][T25112] lo speed is unknown, defaulting to 1000 [ 1806.015357][ T30] audit: type=1326 audit(2000003782.107:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.5.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1806.040996][ T30] audit: type=1326 audit(2000003782.107:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.5.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1806.118334][ T30] audit: type=1326 audit(2000003782.107:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.5.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1806.178149][ T30] audit: type=1326 audit(2000003782.107:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.5.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1806.239067][ T30] audit: type=1326 audit(2000003782.107:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.5.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1806.410286][ T30] audit: type=1326 audit(2000003782.107:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.5.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1806.450325][ T30] audit: type=1326 audit(2000003782.117:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.5.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1806.586426][ T30] audit: type=1326 audit(2000003782.117:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25102 comm="syz.5.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57d9c629 code=0x7ffc0000 [ 1806.843956][T25124] overlayfs: failed to clone upperpath [ 1807.120329][T25126] FAT-fs (loop15): unable to read boot sector [ 1808.251695][T25136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25136 comm=syz.1.4629 [ 1810.078577][T25163] netlink: 'syz.7.4632': attribute type 1 has an invalid length. [ 1810.147345][T25165] netlink: 'syz.3.4634': attribute type 4 has an invalid length. [ 1810.178506][T25163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1810.179474][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4632'. [ 1810.678526][T25173] openvswitch: netlink: IP tunnel TTL not specified. [ 1811.837213][T25181] netlink: 'syz.5.4640': attribute type 24 has an invalid length. [ 1812.626220][ T6507] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 210 seconds [ 1812.637030][ T6507] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 210 seconds [ 1812.929103][ T6507] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 210 seconds [ 1812.979562][ T6507] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 210 seconds [ 1813.300103][T25200] netlink: 'syz.3.4644': attribute type 4 has an invalid length. [ 1815.544172][T25224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4648'. [ 1816.190120][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4650'. [ 1816.919209][T25244] netlink: 'syz.3.4654': attribute type 4 has an invalid length. [ 1819.063455][ T5874] Process accounting resumed [ 1822.306615][T25300] batadv0 speed is unknown, defaulting to 1000 [ 1822.468828][T25300] lo speed is unknown, defaulting to 1000 [ 1823.508828][ T31] INFO: task syz.0.4247:23287 blocked for more than 144 seconds. [ 1823.516734][ T31] Tainted: G L syzkaller #0 [ 1823.525418][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1823.615427][ T31] task:syz.0.4247 state:D stack:27832 pid:23287 tgid:23282 ppid:5810 task_flags:0x400140 flags:0x00080002 [ 1823.652417][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1823.652436][ T30] audit: type=1400 audit(2000003799.543:1766): avc: denied { write } for pid=5787 comm="syz-executor" path="pipe:[5223]" dev="pipefs" ino=5223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1823.808057][ T31] Call Trace: [ 1823.812368][ T31] [ 1824.383016][ T31] __schedule+0xfee/0x60e0 [ 1824.417216][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1824.422236][ T31] ? __pfx___schedule+0x10/0x10 [ 1824.427100][ T31] ? find_held_lock+0x2b/0x80 [ 1824.557943][ T31] ? schedule+0x2bf/0x390 [ 1824.562335][ T31] schedule+0xdd/0x390 [ 1824.566417][ T31] schedule_preempt_disabled+0x13/0x30 [ 1824.706037][ T31] __mutex_lock+0xc9a/0x1b90 [ 1824.711053][ T31] ? bdev_open+0xa2/0xe40 [ 1824.715404][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1824.802339][ T31] ? bd_prepare_to_claim+0x1e0/0x280 [ 1824.807675][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1824.856119][ T31] ? file_init_path+0x48e/0x670 [ 1824.861024][ T31] ? bdev_open+0xa2/0xe40 [ 1824.865536][ T31] bdev_open+0xa2/0xe40 [ 1824.888180][ T31] ? iput+0x3a/0x40 [ 1824.892040][ T31] bdev_file_open_by_dev+0x179/0x210 [ 1824.897331][ T31] setup_bdev_super+0x385/0x730 [ 1824.948163][ T31] get_tree_bdev_flags+0x363/0x620 [ 1824.958598][ T31] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 1824.985928][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1824.992049][ T31] ? cap_capable+0x107/0x460 [ 1825.037893][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1825.043449][ T31] ? security_capable+0x80/0x260 [ 1825.069729][ T31] vfs_get_tree+0x92/0x320 [ 1825.074165][ T31] path_mount+0x7d0/0x23d0 [ 1825.078596][ T31] ? __pfx_path_mount+0x10/0x10 [ 1825.102599][ T31] ? irqentry_exit+0x180/0x670 [ 1825.107386][ T31] ? __x64_sys_mount+0x206/0x310 [ 1825.144246][ T31] ? __x64_sys_mount+0x293/0x310 [ 1825.149568][ T31] __x64_sys_mount+0x293/0x310 [ 1825.154317][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1825.159670][ T31] do_syscall_64+0x106/0xf80 [ 1825.165996][ T31] ? clear_bhb_loop+0x40/0x90 [ 1825.178481][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.184364][ T31] RIP: 0033:0x7faec479c629 [ 1825.188789][ T31] RSP: 002b:00007faec5683028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1825.197195][ T31] RAX: ffffffffffffffda RBX: 00007faec4a16180 RCX: 00007faec479c629 [ 1825.205191][ T31] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 1825.213355][ T31] RBP: 00007faec4832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1825.221523][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.229501][ T31] R13: 00007faec4a16218 R14: 00007faec4a16180 R15: 00007ffc2efb1868 [ 1825.237658][ T31] [ 1825.240831][ T31] [ 1825.240831][ T31] Showing all locks held in the system: [ 1825.448075][ T31] 1 lock held by khungtaskd/31: [ 1825.452958][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1825.475523][ T31] 2 locks held by getty/5563: [ 1825.548838][ T31] #0: ffff8880337d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1825.563570][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1825.594637][ T31] 3 locks held by kworker/1:7/5932: [ 1825.599866][ T31] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1825.664822][ T31] #1: ffffc9000401fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1825.721481][ T31] #2: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1825.731566][ T31] 1 lock held by syz.5.1059/10084: [ 1825.775344][ T31] #0: ffffffff9060f1a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1825.784331][ T31] 5 locks held by kworker/u8:14/21746: [ 1825.849881][ T31] #0: ffff88801cac9148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1825.890843][ T31] #1: ffffc90004ef7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1825.901333][ T31] #2: ffffffff905f68b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1825.914382][ T31] #3: ffffffff9060f1a8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc60 [ 1825.925592][ T31] #4: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1825.939138][ T31] 1 lock held by udevd/22598: [ 1825.943825][ T31] #0: ffff88802784c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1825.956494][ T31] 2 locks held by syz.0.4247/23287: [ 1825.961723][ T31] #0: ffff88803736a0e0 (&type->s_umount_key#97/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1825.971893][ T31] #1: ffff88802784c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1825.981298][ T31] 1 lock held by syz.3.4664/25291: [ 1825.986406][ T31] #0: ffffffff9060f1a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1825.995453][ T31] 4 locks held by syz.6.4667/25308: [ 1826.000696][ T31] #0: ffff88805150cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1826.010479][ T31] #1: ffff88805150c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1826.020154][ T31] #2: ffffffff908a7128 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1826.030656][ T31] #3: ffff888034f8daf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 1826.040050][ T31] [ 1826.048300][ T31] ============================================= [ 1826.048300][ T31] [ 1826.069227][ T31] NMI backtrace for cpu 1 [ 1826.069243][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.069265][ T31] Tainted: [L]=SOFTLOCKUP [ 1826.069270][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1826.069280][ T31] Call Trace: [ 1826.069284][ T31] [ 1826.069290][ T31] dump_stack_lvl+0x100/0x190 [ 1826.069318][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1826.069336][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1826.069369][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1826.069393][ T31] sys_info+0x141/0x190 [ 1826.069409][ T31] watchdog+0xd25/0x1050 [ 1826.069437][ T31] ? __pfx_watchdog+0x10/0x10 [ 1826.069458][ T31] ? __kthread_parkme+0x18c/0x230 [ 1826.069484][ T31] ? kthread+0x13a/0x450 [ 1826.069498][ T31] ? __pfx_watchdog+0x10/0x10 [ 1826.069517][ T31] kthread+0x370/0x450 [ 1826.069531][ T31] ? __pfx_kthread+0x10/0x10 [ 1826.069558][ T31] ret_from_fork+0x754/0xd80 [ 1826.069576][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1826.069595][ T31] ? __switch_to+0x7b4/0x1120 [ 1826.069614][ T31] ? __pfx_kthread+0x10/0x10 [ 1826.069642][ T31] ret_from_fork_asm+0x1a/0x30 [ 1826.069674][ T31] [ 1826.069680][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1826.195880][ C0] NMI backtrace for cpu 0 [ 1826.195901][ C0] CPU: 0 UID: 0 PID: 6364 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.195922][ C0] Tainted: [L]=SOFTLOCKUP [ 1826.195927][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1826.195936][ C0] Workqueue: bond2 bond_alb_monitor (bond1) [ 1826.195958][ C0] RIP: 0010:strnlen+0x4e/0x80 [ 1826.195973][ C0] Code: 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 80 38 00 <75> d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 89 c7 48 [ 1826.195986][ C0] RSP: 0018:ffffc9000cdbfc20 EFLAGS: 00000002 [ 1826.195996][ C0] RAX: ffff888051ce0978 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1826.196005][ C0] RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffff888051ce0978 [ 1826.196014][ C0] RBP: ffff888051ce0998 R08: 0000000000000000 R09: fffffbfff36836dc [ 1826.196022][ C0] R10: ffffffff9b41b6e3 R11: 0000000000000000 R12: ffff888051ce0978 [ 1826.196031][ C0] R13: ffff88801ba8304c R14: ffff888051ce0978 R15: ffff888036365e80 [ 1826.196040][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 1826.196053][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1826.196062][ C0] CR2: 0000200000227030 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1826.196071][ C0] Call Trace: [ 1826.196077][ C0] [ 1826.196084][ C0] process_one_work+0x515/0x1920 [ 1826.196104][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1826.196120][ C0] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1826.196134][ C0] worker_thread+0x5da/0xe40 [ 1826.196150][ C0] ? kthread+0x13a/0x450 [ 1826.196161][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1826.196173][ C0] kthread+0x370/0x450 [ 1826.196184][ C0] ? __pfx_kthread+0x10/0x10 [ 1826.196204][ C0] ret_from_fork+0x754/0xd80 [ 1826.196218][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1826.196231][ C0] ? __switch_to+0x7b4/0x1120 [ 1826.196246][ C0] ? __pfx_kthread+0x10/0x10 [ 1826.196265][ C0] ret_from_fork_asm+0x1a/0x30 [ 1826.196287][ C0] [ 1826.409297][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1826.416163][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.426817][ T31] Tainted: [L]=SOFTLOCKUP [ 1826.431117][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1826.441155][ T31] Call Trace: [ 1826.444423][ T31] [ 1826.447330][ T31] dump_stack_lvl+0x100/0x190 [ 1826.451989][ T31] vpanic+0x552/0x970 [ 1826.455941][ T31] ? __pfx_vpanic+0x10/0x10 [ 1826.460415][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1826.466552][ T31] panic+0xd1/0xe0 [ 1826.470253][ T31] ? __pfx_panic+0x10/0x10 [ 1826.474657][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1826.480796][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1826.486943][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1826.493080][ T31] ? watchdog.cold+0x198/0x1ca [ 1826.497823][ T31] ? watchdog+0xd35/0x1050 [ 1826.502236][ T31] watchdog.cold+0x1a9/0x1ca [ 1826.506817][ T31] ? __pfx_watchdog+0x10/0x10 [ 1826.511476][ T31] ? __kthread_parkme+0x18c/0x230 [ 1826.516493][ T31] ? kthread+0x13a/0x450 [ 1826.520712][ T31] ? __pfx_watchdog+0x10/0x10 [ 1826.525369][ T31] kthread+0x370/0x450 [ 1826.529415][ T31] ? __pfx_kthread+0x10/0x10 [ 1826.533997][ T31] ret_from_fork+0x754/0xd80 [ 1826.538574][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1826.543663][ T31] ? __switch_to+0x7b4/0x1120 [ 1826.548323][ T31] ? __pfx_kthread+0x10/0x10 [ 1826.552899][ T31] ret_from_fork_asm+0x1a/0x30 [ 1826.557651][ T31] [ 1826.560921][ T31] Kernel Offset: disabled [ 1826.565217][ T31] Rebooting in 86400 seconds..