last executing test programs: 22.292429432s ago: executing program 2 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x446, &(0x7f00000006c0)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @gre={{0x21, 0x4, 0x3, 0x20, 0x438, 0x65, 0x0, 0x9, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0x17, 0x73, [@multicast1, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback]}, @cipso={0x86, 0x3b, 0x3, [{0x7, 0xc, "1a5536b1856a8bc8d8fd"}, {0x7, 0x6, "cb7ffa75"}, {0x7, 0x10, "511e10818665cca2b9c08e0e3bc3"}, {0x7, 0xa, "43525f4b0caafb08"}, {0x5, 0x9, "969b48b2fb85ee"}]}, @timestamp={0x44, 0xc, 0x70, 0x0, 0x7, [0x8001, 0x5a50]}, @generic={0x88, 0x10, "990d295974200ef0cdd952982432"}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xfa, 0x0, [0xe], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "2a4b1cd1fa6eedf694a719b08d082c9f44fce9ed91e3127c9832b8826c550eec4809873b6619c5274ca654d2fd056440101e8820b064d02f249da2f6cdad7824ee224ed79b5d51c87ee03d65c4b762f50b2e1e91064a885d37af932a2a45e0b21546466ba803bc85cdc3af01537577a90aea9339530757f65111c2cfb3200aa2632a699633cb25a1c7bfe35322e590c166625b201f00180e95a468a0c67392490772cd527f0955c02175642512a14459b08be69f"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x8, 0xe, 0x1], "7083dd3972b4715447429cf48d7ae3ed7ec2233cf97b2d522a1249440cd1f079a6fa3ba80ce3f8fa75ee25de404377f9b095813f2426cff9dd8120e1acc17216484d43e2c51263ece4199f105c39cce41c0a055f6b15f1f61b7a7f6860691777083f6b5d4b7e9d13f2f21e429d7f7acfc443eaa0c65d4a494afd469f45961c40c5a302fb885d7fc34a02b9173cca1cf3a77d5e837aefe9e65c1ebc7a1343d740936dd19bdecd2675e06dd2817c9b69ee94db7de47bdfa4dd67120c4f69342f29828e2934a016b11777cb2a1b8df0223e10d769eb6d68a4b583"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x9, 0x3, 0x0, 0x3, 0x5}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0x8, 0x0, 0x0, 0x2, 0x4, 0xff}, 0x2, {0x28, 0x401, 0x1, 0x9, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x0, "3c395ef4f795647e6f877a86870432b5b30c93f8054aa33ff18a6e926e6862747632b90c755e9ab270ea616817afb39996a2a10d0ccb77a1fe1326b7aed6b9faf6b63271563c6b0a05839a7e3e5958941e42329f247a44ade2a004bc1a52650ba1821ed5728ae037fa71b70bcb87d456a814de7c76cedac13649ab8228899835a09a0192cffb64df714669d92fc4329353643339a39f188b4a610addd808079df18b02a8878b041589db9aae9151101c73ae9a1919a88071aa115f1ae833de754b10a4ae53d4001940e4174dbd014f7e3e0e4a44b734f12994ad307b61ca8f49c4"}}}}}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0xc8, 0x7}}}, 0x8) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='source', &(0x7f0000000200)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x200002) ioperm(0x7, 0x80, 0x2) 20.697866285s ago: executing program 3 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x578410eb) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) syz_clone(0x800500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) 19.922604816s ago: executing program 2 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) pipe(&(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffc}, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaa1b1f0c4f614edfd42f08d2aaaaaaaadf00007a9e7767ffb4e2a900000000069078ac1e0001ac1408118907a2ffffffff8606504d06774ccc828b70f060cbf4b05b45283487f4c2bbd9b55f87c4a711526d00"/94, @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 19.190057011s ago: executing program 4 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r6 = getpgrp(r0) sched_setscheduler(r6, 0x6, &(0x7f0000000180)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0702000000000000000001000000100008800c00278008000600ee0040002c000480050003000100000005000300010000000500030001000000050003004c000000050003000500000008"], 0x60}}, 0x880) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x6, r12, 0xcccccccc}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r10, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r10, 0x5437, 0x0) 19.11027679s ago: executing program 3 (id=39): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x20040054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000001040)=""/4096, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}, {0x17, 0x7c, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x14, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000480)=@ready={0x0, 0x0, 0x8, "aa5c1d51", {0x1, 0x3f, 0x8d, 0x6, 0x7f}}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000003, 0x1, &(0x7f00000013c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlink(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.628425469s ago: executing program 2 (id=40): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r5, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(r6, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffffff9, 0xc, 0x20107, 0xff, 0x1, 0xffff}, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090600e80000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000019977301b78a4b6ecdd2e4d5a5ee23294591782024ee1c9fc9d8d7ba630adc292679ec256ad64ee9aaa9f37e7b84c4266745180743269557311afb98fc8c3f1ecdf3441"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="1807000000000000000000000000000085100000020000002090000000000000950000d1dc0005009500000000000000575f175b2bf29dbc7391d5827d58c62f23f638d074192597f1c34d61ca372364dca117c5e35917951bd3891cedad24ce4a49d419af0e63d7db125d19e34513728c35a3f1ae05605c0210578d31767e37f9c930d91d02ddfa4e9ccf252fe28902fd4b23324e1523f6923ede23988c48d35ba0c871eaa34ad72657b8c546fcc72338c36445db8c62e5675792ae717b55de1e97ab6c97f2125774e6443deb74c5a0d8662be536c59c133670df4242326fc1ed246fcc61ab959307ac16d0668024ccc054ae4f69c6"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101602, 0x0) getpriority(0x2, r7) 17.518832897s ago: executing program 0 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r6 = getpgrp(r0) sched_setscheduler(r6, 0x6, &(0x7f0000000180)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0702000000000000000001000000100008800c00278008000600ee0040002c000480050003000100000005000300010000000500030001000000050003004c000000050003000500000008"], 0x60}}, 0x880) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6, r12, 0xcccccccc}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r10, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r10, 0x5437, 0x0) 17.50443247s ago: executing program 4 (id=42): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)}}], 0x1, 0x24040890) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340), 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 16.432409421s ago: executing program 0 (id=44): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x0) 15.774496662s ago: executing program 1 (id=45): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000940)="4474e7ef5d6485ec1019baa265673a9ea7e549aab0ebe87910b76df2e48f8b4485505d241bb0d7d37707286dde7961d6f1a65e8f70465ebb18ba39e86c2461e5b4f8576f7567713bea3a73169b1b80f885727be9c0f5a34e49fa0560461365bdf95ecd0fced76f23cdc4588d54049df4a23ee67a2472ac9ff169096588cbfa507f307920f88a72b310a099c985fac8d70077789d2aaec38e2f732faaee2872772c125aebdce01b7e68ef897863592541782576a8b40c1190", 0xb8}, {&(0x7f0000000580)="c1e2be025c69572f4a113c73a62fc2cf6ba484c9e3a8be7bc2e6a47b", 0x1c}, {&(0x7f0000000a00)="13b045369656e223e7a2e891d0a02bf35e53545eaaab7b9365dea7c72b1e27208567a022ae85a477800903b56229c6dd375cc8534f7fff192cc5c244b270bab0ca92314c49130fbc1932fe0b4b3d94a5a7e269a4ef44fb11b129c70fcdf345ffd6355edf90d5441f6ee97f45ff233d5c5b65f69fd041773b56d126ed35081a12f014246d1983cea2321b9af3209da3d05e9fdab46531083943d99d9e5f8fabb799b2c164dd9145ff3e2e3bcd0ab1da41ea68a852571cb759a2a343cb04344c3698a5d8d21859d3711981debf70680d62f108d94592cd2e7c944bb76cd2d4ab07c8279163404e5efd11be927411425c", 0xef}, {&(0x7f0000000b00)="8fa417262f8ba8b8dfdebfbb7ec5f6825ac7c15f67ef5a6d32c1e1a0ca110e31b2e640cf4aca9b7208ec32fd740349e27fd2920790183ccab88e5d3c841ee49e2eb4e8c50bac27160ddd13b30a315342e579dcbb94be24b203d685", 0x5b}, {&(0x7f0000001480)="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", 0x452}], 0x5}}], 0x2, 0x4000010) open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x1ce) syz_init_net_socket$x25(0x9, 0x5, 0x0) 15.567123828s ago: executing program 4 (id=46): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306010001000000002a7f0887020000008324"], 0x0}, 0x0) sendmsg(r4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000001100)) bind$inet6(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r7, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x4) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) shutdown(0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xf, 0xfff2}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x5f, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="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", 0xfc0}], 0x2, 0x8, 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x29, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0xfffffffd, 0x0, {0xa, 0x5, 0x0, 0x0, {0x0, 0x5e22, [0x0, 0xffffffff, 0xfffffffe], [0x0, 0x0, 0xfffffffd], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) 15.09652523s ago: executing program 0 (id=47): socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b70800001cda00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xb}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) io_uring_enter(r3, 0x47ba, 0x3e80, 0xa, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 14.994741251s ago: executing program 3 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x446, &(0x7f00000006c0)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @gre={{0x21, 0x4, 0x3, 0x20, 0x438, 0x65, 0x0, 0x9, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0x17, 0x73, [@multicast1, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback]}, @cipso={0x86, 0x3b, 0x3, [{0x7, 0xc, "1a5536b1856a8bc8d8fd"}, {0x7, 0x6, "cb7ffa75"}, {0x7, 0x10, "511e10818665cca2b9c08e0e3bc3"}, {0x7, 0xa, "43525f4b0caafb08"}, {0x5, 0x9, "969b48b2fb85ee"}]}, @timestamp={0x44, 0xc, 0x70, 0x0, 0x7, [0x8001, 0x5a50]}, @generic={0x88, 0x10, "990d295974200ef0cdd952982432"}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xfa, 0x0, [0xe], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "2a4b1cd1fa6eedf694a719b08d082c9f44fce9ed91e3127c9832b8826c550eec4809873b6619c5274ca654d2fd056440101e8820b064d02f249da2f6cdad7824ee224ed79b5d51c87ee03d65c4b762f50b2e1e91064a885d37af932a2a45e0b21546466ba803bc85cdc3af01537577a90aea9339530757f65111c2cfb3200aa2632a699633cb25a1c7bfe35322e590c166625b201f00180e95a468a0c67392490772cd527f0955c02175642512a14459b08be69f"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x8, 0xe, 0x1], "7083dd3972b4715447429cf48d7ae3ed7ec2233cf97b2d522a1249440cd1f079a6fa3ba80ce3f8fa75ee25de404377f9b095813f2426cff9dd8120e1acc17216484d43e2c51263ece4199f105c39cce41c0a055f6b15f1f61b7a7f6860691777083f6b5d4b7e9d13f2f21e429d7f7acfc443eaa0c65d4a494afd469f45961c40c5a302fb885d7fc34a02b9173cca1cf3a77d5e837aefe9e65c1ebc7a1343d740936dd19bdecd2675e06dd2817c9b69ee94db7de47bdfa4dd67120c4f69342f29828e2934a016b11777cb2a1b8df0223e10d769eb6d68a4b583"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x9, 0x3, 0x0, 0x3, 0x5}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0x8, 0x0, 0x0, 0x2, 0x4, 0xff}, 0x2, {0x28, 0x401, 0x1, 0x9, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x0, "3c395ef4f795647e6f877a86870432b5b30c93f8054aa33ff18a6e926e6862747632b90c755e9ab270ea616817afb39996a2a10d0ccb77a1fe1326b7aed6b9faf6b63271563c6b0a05839a7e3e5958941e42329f247a44ade2a004bc1a52650ba1821ed5728ae037fa71b70bcb87d456a814de7c76cedac13649ab8228899835a09a0192cffb64df714669d92fc4329353643339a39f188b4a610addd808079df18b02a8878b041589db9aae9151101c73ae9a1919a88071aa115f1ae833de754b10a4ae53d4001940e4174dbd014f7e3e0e4a44b734f12994ad307b61ca8f49c4"}}}}}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0xc8, 0x7}}}, 0x8) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='source', &(0x7f0000000200)='ceph\x00', 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x200002) ioperm(0x7, 0x80, 0x2) 14.819466992s ago: executing program 1 (id=49): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r5, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(r6, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffffff9, 0xc, 0x20107, 0xff, 0x1, 0xffff}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090600e80000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000019977301b78a4b6ecdd2e4d5a5ee23294591782024ee1c9fc9d8d7ba630adc292679ec256ad64ee9aaa9f37e7b84c4266745180743269557311afb98fc8c3f1ecdf3441"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="1807000000000000000000000000000085100000020000002090000000000000950000d1dc0005009500000000000000575f175b2bf29dbc7391d5827d58c62f23f638d074192597f1c34d61ca372364dca117c5e35917951bd3891cedad24ce4a49d419af0e63d7db125d19e34513728c35a3f1ae05605c0210578d31767e37f9c930d91d02ddfa4e9ccf252fe28902fd4b23324e1523f6923ede23988c48d35ba0c871eaa34ad72657b8c546fcc72338c36445db8c62e5675792ae717b55de1e97ab6c97f2125774e6443deb74c5a0d8662be536c59c133670df4242326fc1ed246fcc61ab959307ac16d0668024ccc054ae4f69c6"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101602, 0x0) getpriority(0x2, r7) 12.520756594s ago: executing program 1 (id=50): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r5, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(r6, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffffff9, 0xc, 0x20107, 0xff, 0x1, 0xffff}, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090600e80000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000019977301b78a4b6ecdd2e4d5a5ee23294591782024ee1c9fc9d8d7ba630adc292679ec256ad64ee9aaa9f37e7b84c4266745180743269557311afb98fc8c3f1ecdf3441"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="1807000000000000000000000000000085100000020000002090000000000000950000d1dc0005009500000000000000575f175b2bf29dbc7391d5827d58c62f23f638d074192597f1c34d61ca372364dca117c5e35917951bd3891cedad24ce4a49d419af0e63d7db125d19e34513728c35a3f1ae05605c0210578d31767e37f9c930d91d02ddfa4e9ccf252fe28902fd4b23324e1523f6923ede23988c48d35ba0c871eaa34ad72657b8c546fcc72338c36445db8c62e5675792ae717b55de1e97ab6c97f2125774e6443deb74c5a0d8662be536c59c133670df4242326fc1ed246fcc61ab959307ac16d0668024ccc054ae4f69c6"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101602, 0x0) getpriority(0x2, r7) 11.607880503s ago: executing program 0 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x180, 0x102, 0x20}, 0x18) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) memfd_create(0x0, 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x10004, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x2, @mcast1, 0x8000000}, {0x2, 0xdff9, 0xbfc, @remote, 0x3}, r5, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x3, r5, 0x0, 0x0, 0x1}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) openat$cgroup(r8, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 11.508764112s ago: executing program 3 (id=52): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xed9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1800, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) sendto$rxrpc(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x7, {0xa, 0x4e23, 0xe34, @local, 0x9}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) 11.443994821s ago: executing program 2 (id=53): getrusage(0xfffffffffffffffe, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500194003"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)=0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) pselect6(0x40, &(0x7f00000000c0)={0x10000, 0x9, 0x3, 0x6, 0x3, 0x5, 0x1, 0xc1c}, &(0x7f0000000140)={0xfffffffffffffffd, 0x8000000000000000, 0x1, 0x3, 0x5, 0x1e040, 0x8, 0x1}, &(0x7f00000001c0)={0x80000000, 0xc8c2, 0x9, 0x2, 0x3ff, 0x1, 0x100000001, 0xb8}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x1b8d]}, 0x8}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = epoll_create1(0x80000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, &(0x7f00000000c0)) timer_create(0x3, &(0x7f0000000440)={0x0, 0x26, 0x2, @tid=r5}, &(0x7f0000000f00)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000140)={0xa0000001}) epoll_wait(r8, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001900010029bd7000fedbdf25fe800000000000000000000000000017ff0100000000000000000000000000010000000000000000020000000000000051f8ebef35168b4e44a9e374dca40db9eecd187c1d971663a5a26bcbddb886b1fe98b143d21001e0284ade15e1d69103710b0ecd953aec7102b019037f6d173552513c453cdb0909891e669ded0d933969155869aee97b05cd450b3ece14b476e111885f988f9aa43b411a95ea5bf612a32ef0d05f442e51d4a15e409ed169cb64bfe50e9a73ca654733da288c29482f204859a1ca743d051d6a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000030000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000000080000000000000600000000000000000000000000000000000000000000000100020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaa1974f1fc515f543fc1e49258aaaaaaaaaaaaaaaa0b080049000038908eac34141fe0000002890704ffffffff8606000000010000000000000000007b02a0993cb3ef140b512fa77540c805af37acfc285b753682bc223c93029fb93e9a19fe66abcf24775cceb2d68c73dbdc7da2b48cd0f7239c9226e147a41d2a9cda971eb1b0ee6b9058c196f3f436af3c0cb74caf4c814ec25002d995849949a784bfbb72ea0f096858e9ea2947f15652c43ea95954", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141000, 0x80) write$char_usb(r9, &(0x7f0000000300)="fa9393beb69c3f88c5cd4717cfadd86b7a7cd66bbb39e2c4065e461f80ac0e6d37be233d0a76fa94dbf194c1732c45a61c0843f1878f0c18a5ce73475318d6e8761e1e1a6f40b9feeabdf81910b898dc3c446c87c3b1ad14c4db60872ecb53351f50b41e807b98b5f911c053fc8915158d61be7b92738f27d78c0d7eac3b13d2a1ee769c7397e85e4dec8affd6cbfecd6bddf03a06d4e1454f96bbcd8b607aa47ec15ae2cf642dad3c68659ae1cf3870de6e2e7862add484ef9a15633cb940deede9e3763da5538ead75a00f2d4891a9aabda374f9d529e2a7498586a92ae0ce46cdc1f68b7fbf875cb018b513505aaba795c549", 0xf4) 11.162432487s ago: executing program 1 (id=54): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007fff0000000000009aca239ef4e95e3872e8ca4f07773f18fe20d32e3cc107c93bee1384b0e42e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f00000004c0)='io\x00') r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x1000, 0x10001, 0x1000, 0x2, 0x0, [{0x4, 0x8, 0xff, '\x00', 0xf3}, {0x5, 0x9, 0x9, '\x00', 0x3}, {0x8, 0xa9, 0x4, '\x00', 0x7f}, {0xf0, 0x85, 0x2, '\x00', 0x2}, {0x1, 0x6, 0x0, '\x00', 0x6}, {0x9, 0x4, 0xb, '\x00', 0x1}, {0x7, 0x3, 0x7c, '\x00', 0x2}, {0x2, 0x4, 0x4, '\x00', 0x7}, {0x1, 0x0, 0x5, '\x00', 0x2}, {0x0, 0x9, 0x10, '\x00', 0x8}, {0x4, 0xf, 0x8, '\x00', 0x5}, {0xd4, 0x8, 0x2c, '\x00', 0x3}, {0x3, 0x3, 0xc7, '\x00', 0x1}, {0x8, 0x8, 0x6, '\x00', 0x7}, {0xd, 0x10, 0x9, '\x00', 0x6d}, {0x6, 0x4b, 0x7, '\x00', 0xa}, {0x8, 0x9, 0x1, '\x00', 0x6}, {0x3, 0x4, 0x3, '\x00', 0x7}, {0x7f, 0x9e, 0xdc, '\x00', 0x10}, {0x10, 0x1, 0x8, '\x00', 0x3b}, {0x7, 0xc, 0x76, '\x00', 0x8}, {0x80, 0x6, 0x62, '\x00', 0x6}, {0x2, 0x1, 0x5, '\x00', 0x4}, {0x9, 0x8, 0x8, '\x00', 0x2}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f0000000040)=""/8, 0x8}], 0x2, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000580)=""/202, 0xca}, {&(0x7f0000000780)=""/166, 0xa6}], 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) rt_sigsuspend(0x0, 0x0) 9.441938518s ago: executing program 4 (id=55): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r5, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(r6, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffffff9, 0xc, 0x20107, 0xff, 0x1, 0xffff}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090600e80000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000019977301b78a4b6ecdd2e4d5a5ee23294591782024ee1c9fc9d8d7ba630adc292679ec256ad64ee9aaa9f37e7b84c4266745180743269557311afb98fc8c3f1ecdf3441"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="1807000000000000000000000000000085100000020000002090000000000000950000d1dc0005009500000000000000575f175b2bf29dbc7391d5827d58c62f23f638d074192597f1c34d61ca372364dca117c5e35917951bd3891cedad24ce4a49d419af0e63d7db125d19e34513728c35a3f1ae05605c0210578d31767e37f9c930d91d02ddfa4e9ccf252fe28902fd4b23324e1523f6923ede23988c48d35ba0c871eaa34ad72657b8c546fcc72338c36445db8c62e5675792ae717b55de1e97ab6c97f2125774e6443deb74c5a0d8662be536c59c133670df4242326fc1ed246fcc61ab959307ac16d0668024ccc054ae4f69c6"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101602, 0x0) getpriority(0x2, r7) 9.373498145s ago: executing program 2 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = mq_open(&(0x7f0000000480)='\x1b\x00 \x00\x00\xf7\\P\xc1\xde.\x952\xfe\xe69\xe3\xb5&b.\x05\xdd\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x96, &(0x7f0000000440)={0x2000000000002000, 0x3, 0x56, 0x10000006}) mq_timedsend(r5, 0x0, 0x0, 0x200000000000a, 0x0) mq_timedreceive(r5, &(0x7f0000000500)=""/176, 0xb0, 0x200000000007, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x65, 0x0, &(0x7f0000000100)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') lseek(r8, 0x7ff, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000300)={[{0x8, 0x3, 0x2, 0x9, 0xc, 0x9, 0xd, 0xd, 0x81, 0xe, 0x1, 0x7f, 0x2}, {0x100, 0x3, 0x64, 0x8, 0xed, 0x3, 0x4, 0x9, 0x3, 0x1, 0x69, 0x30, 0x9}, {0x9, 0x9, 0x6, 0xec, 0x2, 0x2b, 0x8, 0x8, 0x1, 0x1, 0xd, 0x5, 0x8}]}) openat$cgroup_ro(r8, &(0x7f00000002c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000040)={0x80, "fd1316ff0bc8f2019d107c24bbfa8e400ca23d849d13e8ac917f754748a948a4dc0d2c8043ff408aa7ab5103e50f6830bf995a5eba0343bbfd819c654556af9b49df9a250c39832f26efedb09432e8d6cd991b1355861d78e9e24a0afba5328b8d82bc3106e26f8bc40bbe74cb472337e7caa1e115e5e0c2431b133a41d6a773"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d0000000080211000001080211000c00505050505050"], 0x3c}}, 0x10) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$TIOCEXCL(r6, 0x540c) ioctl$IOMMU_VFIO_IOAS$SET(r11, 0x3b88, &(0x7f0000000100)={0xc, r12}) fdatasync(r2) 9.370338811s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r6 = getpgrp(r0) sched_setscheduler(r6, 0x6, &(0x7f0000000180)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0702000000000000000001000000100008800c00278008000600ee0040002c000480050003000100000005000300010000000500030001000000050003004c000000050003000500000008"], 0x60}}, 0x880) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x6, r12, 0xcccccccc}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r10, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r10, 0x5437, 0x0) 5.887866558s ago: executing program 2 (id=58): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)}}], 0x1, 0x24040890) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340), 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 5.87189919s ago: executing program 4 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r6 = getpgrp(r0) sched_setscheduler(r6, 0x6, &(0x7f0000000180)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0702000000000000000001000000100008800c00278008000600ee0040002c000480050003000100000005000300010000000500030001000000050003004c000000050003000500000008"], 0x60}}, 0x880) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x6, r12, 0xcccccccc}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r10, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r10, 0x5437, 0x0) 4.306270947s ago: executing program 0 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000001baaaaaaaaaabbaaaaaaaaaabb080045090077972f4d17e3ea7b78ac1e0101e00000010900000000000000"], 0x2e) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3940400a}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x32000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdaa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060103000034e400000000000000060900020073797a310000000005000400020000000c99b4d1cda5b20ec7d680080008400069702c706f727400000000050005000200000005000100070000000000000000000000000000002855b9c185ee74d061dd25358499"], 0x58}}, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000001e80)=[{0x0, 0x1002}]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000c27be38a0cce5d596019bbff075cec876a46511765bf72b6d3085829dedd630172d3aea266b96d9cb6f781d2e5ee0d9c3b33aaa2c7f69a64542f3f2d6ed1b05897d006dc510063395eddaae3bd45d70ecb4a22b0682f8f85ab55c242a80fbfbda6fee11a1a951f1d895ccb5a567a1d79bde562a9301d24bc033a7e32dbbfc8cbe548d1928d2f9b609643eed775c9365ca405bfbc10c799cf7046f532d0d0"], 0x1c}}, 0x4080) 4.304690131s ago: executing program 1 (id=61): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) write(r1, &(0x7f00000002c0)="cb48a537", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0x16, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(r1, &(0x7f0000000f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = getpgid(r5) waitid(0x0, r6, &(0x7f0000000140), 0x8, &(0x7f00000001c0)) r7 = socket$inet6(0xa, 0x3, 0xff) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000f40)={0x4, 0x2, '\x00', [@ra={0x5, 0x2, 0xa}, @ra={0x5, 0x2, 0x5000}, @pad1, @pad1, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r8, 0x0, 0x3, 0x1}}, 0x20) 4.146182716s ago: executing program 4 (id=62): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 4.132452295s ago: executing program 3 (id=63): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x10008, 0x5}, {}]}}) flock(r1, 0x1780f9c373410dea) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0xb503027b9be4497e) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0xb) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xffffffffffffffab}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000f758f9f31f00019078c5fc272c7e3b97ec030490781200183f2500000000680000000100007f0000017f14000100186371ae9b1c03"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.720077068s ago: executing program 1 (id=64): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r3}}, 0x48) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000003c0)={0x9, 0x5, 0x4, {0x2, @win={{0x5, 0x10000, 0xfffffffb}, 0x1, 0x7, &(0x7f00000001c0)={{0xd09, 0x4, 0x5, 0x3}}, 0x400, &(0x7f0000000200)="fb0ef6cb9b9b9c524e0a24857007cc3d8756404cb330229f942ddd588e6cd2c9171d818f6c7e2189749f3a", 0x6}}, 0x6}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xb}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x800) 0s ago: executing program 3 (id=65): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000940)="4474e7ef5d6485ec1019baa265673a9ea7e549aab0ebe87910b76df2e48f8b4485505d241bb0d7d37707286dde7961d6f1a65e8f70465ebb18ba39e86c2461e5b4f8576f7567713bea3a73169b1b80f885727be9c0f5a34e49fa0560461365bdf95ecd0fced76f23cdc4588d54049df4a23ee67a2472ac9ff169096588cbfa507f307920f88a72b310a099c985fac8d70077789d2aaec38e2f732faaee2872772c125aebdce01b7e68ef897863592541782576a8b40c1190", 0xb8}, {&(0x7f0000000580)="c1e2be025c69572f4a113c73a62fc2cf6ba484c9e3a8be7bc2e6a47b", 0x1c}, {&(0x7f0000000a00)="13b045369656e223e7a2e891d0a02bf35e53545eaaab7b9365dea7c72b1e27208567a022ae85a477800903b56229c6dd375cc8534f7fff192cc5c244b270bab0ca92314c49130fbc1932fe0b4b3d94a5a7e269a4ef44fb11b129c70fcdf345ffd6355edf90d5441f6ee97f45ff233d5c5b65f69fd041773b56d126ed35081a12f014246d1983cea2321b9af3209da3d05e9fdab46531083943d99d9e5f8fabb799b2c164dd9145ff3e2e3bcd0ab1da41ea68a852571cb759a2a343cb04344c3698a5d8d21859d3711981debf70680d62f108d94592cd2e7c944bb76cd2d4ab07c8279163404e5efd11be927411425c", 0xef}, {&(0x7f0000000b00)="8fa417262f8ba8b8dfdebfbb7ec5f6825ac7c15f67ef5a6d32c1e1a0ca110e31b2e640cf4aca9b7208ec32fd740349e27fd2920790183ccab88e5d3c841ee49e2eb4e8c50bac27160ddd13b30a315342e579dcbb94be24b203d685", 0x5b}, {&(0x7f0000001480)="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", 0x452}], 0x5}}], 0x2, 0x4000010) open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x1ce) syz_init_net_socket$x25(0x9, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 56.846466][ T30] audit: type=1400 audit(1761193890.967:62): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.869836][ T30] audit: type=1400 audit(1761193890.987:63): avc: denied { mount } for pid=5795 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.872856][ T5795] cgroup: Unknown subsys name 'net' [ 56.899404][ T30] audit: type=1400 audit(1761193891.017:64): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.037755][ T5795] cgroup: Unknown subsys name 'cpuset' [ 57.045514][ T5795] cgroup: Unknown subsys name 'rlimit' [ 57.170454][ T30] audit: type=1400 audit(1761193891.287:65): avc: denied { setattr } for pid=5795 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.202116][ T30] audit: type=1400 audit(1761193891.287:66): avc: denied { create } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.229775][ T30] audit: type=1400 audit(1761193891.287:67): avc: denied { write } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.250206][ T30] audit: type=1400 audit(1761193891.287:68): avc: denied { read } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.272695][ T30] audit: type=1400 audit(1761193891.287:69): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.297521][ T30] audit: type=1400 audit(1761193891.287:70): avc: denied { mount } for pid=5795 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.318577][ T5797] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.320747][ T30] audit: type=1400 audit(1761193891.347:71): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.274314][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.410902][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.419269][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.421348][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.427346][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.442484][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.443429][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.457075][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.461405][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.464755][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.472480][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.480021][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.492850][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.493209][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.500683][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.508162][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.516345][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.522452][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.529688][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.540877][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.545170][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.548551][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.563726][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.578190][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.585808][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.596950][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.974132][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 61.064104][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 61.084428][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 61.151700][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 61.212425][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 61.273775][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.281602][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.289030][ T5810] bridge_slave_0: entered allmulticast mode [ 61.295958][ T5810] bridge_slave_0: entered promiscuous mode [ 61.331751][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.339040][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.346247][ T5810] bridge_slave_1: entered allmulticast mode [ 61.352894][ T5810] bridge_slave_1: entered promiscuous mode [ 61.362928][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.370699][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.377880][ T5806] bridge_slave_0: entered allmulticast mode [ 61.384513][ T5806] bridge_slave_0: entered promiscuous mode [ 61.398099][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.405239][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.412320][ T5819] bridge_slave_0: entered allmulticast mode [ 61.419207][ T5819] bridge_slave_0: entered promiscuous mode [ 61.436600][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.443695][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.451004][ T5806] bridge_slave_1: entered allmulticast mode [ 61.457789][ T5806] bridge_slave_1: entered promiscuous mode [ 61.471713][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.478900][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.486041][ T5819] bridge_slave_1: entered allmulticast mode [ 61.492636][ T5819] bridge_slave_1: entered promiscuous mode [ 61.538542][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.563969][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.571702][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.579047][ T5811] bridge_slave_0: entered allmulticast mode [ 61.585682][ T5811] bridge_slave_0: entered promiscuous mode [ 61.600980][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.610379][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.617566][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.624671][ T5805] bridge_slave_0: entered allmulticast mode [ 61.631497][ T5805] bridge_slave_0: entered promiscuous mode [ 61.640208][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.651629][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.660795][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.668230][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.675509][ T5811] bridge_slave_1: entered allmulticast mode [ 61.682069][ T5811] bridge_slave_1: entered promiscuous mode [ 61.690149][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.706420][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.713544][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.720836][ T5805] bridge_slave_1: entered allmulticast mode [ 61.727638][ T5805] bridge_slave_1: entered promiscuous mode [ 61.760425][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.791863][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.802603][ T5806] team0: Port device team_slave_0 added [ 61.824596][ T5810] team0: Port device team_slave_0 added [ 61.831986][ T5810] team0: Port device team_slave_1 added [ 61.839298][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.849558][ T5806] team0: Port device team_slave_1 added [ 61.857146][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.875132][ T5819] team0: Port device team_slave_0 added [ 61.917544][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.927788][ T5819] team0: Port device team_slave_1 added [ 61.944094][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.951335][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.977282][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.989813][ T5805] team0: Port device team_slave_0 added [ 62.022856][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.029862][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.055761][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.067525][ T5805] team0: Port device team_slave_1 added [ 62.078982][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.086190][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.112270][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.131294][ T5811] team0: Port device team_slave_0 added [ 62.139061][ T5811] team0: Port device team_slave_1 added [ 62.161176][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.168170][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.195054][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.211654][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.218821][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.244735][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.263754][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.270784][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.296680][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.308796][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.315954][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.341853][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.367100][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.374057][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.400366][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.416838][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.423782][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.449885][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.487783][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.494741][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.520964][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.535825][ T5810] hsr_slave_0: entered promiscuous mode [ 62.541903][ T5810] hsr_slave_1: entered promiscuous mode [ 62.575334][ T5821] Bluetooth: hci1: command tx timeout [ 62.576221][ T5806] hsr_slave_0: entered promiscuous mode [ 62.580947][ T5821] Bluetooth: hci4: command tx timeout [ 62.587182][ T5806] hsr_slave_1: entered promiscuous mode [ 62.598226][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 62.603984][ T5806] Cannot create hsr debugfs directory [ 62.644415][ T5819] hsr_slave_0: entered promiscuous mode [ 62.650847][ T5819] hsr_slave_1: entered promiscuous mode [ 62.656845][ T5812] Bluetooth: hci3: command tx timeout [ 62.656851][ T5133] Bluetooth: hci2: command tx timeout [ 62.657455][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 62.663032][ T5821] Bluetooth: hci0: command tx timeout [ 62.668424][ T5819] Cannot create hsr debugfs directory [ 62.727772][ T5805] hsr_slave_0: entered promiscuous mode [ 62.733779][ T5805] hsr_slave_1: entered promiscuous mode [ 62.740063][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 62.745836][ T5805] Cannot create hsr debugfs directory [ 62.789680][ T5811] hsr_slave_0: entered promiscuous mode [ 62.796222][ T5811] hsr_slave_1: entered promiscuous mode [ 62.802074][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 62.807820][ T5811] Cannot create hsr debugfs directory [ 63.095842][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.107041][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.117170][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.132983][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.179492][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.198594][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.218726][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.228393][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.266696][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.279285][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.293118][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.302557][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.389563][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.404223][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.418394][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.429359][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.487277][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.513188][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.524644][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.534233][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.553873][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.588571][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.609748][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.625107][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.649321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.656546][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.666500][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.673592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.685765][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.692914][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.706510][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.736574][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.745827][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.752897][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.787793][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.794925][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.811927][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.819049][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.858392][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.873968][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.926124][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 63.926138][ T30] audit: type=1400 audit(1761193898.047:86): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.958354][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.007401][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.014520][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.028814][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.036006][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.099269][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.162543][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.176309][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.218164][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.225304][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.237730][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.244897][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.303552][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.328430][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.343149][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.400277][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.472380][ T5810] veth0_vlan: entered promiscuous mode [ 64.482192][ T5819] veth0_vlan: entered promiscuous mode [ 64.493790][ T5810] veth1_vlan: entered promiscuous mode [ 64.513720][ T5819] veth1_vlan: entered promiscuous mode [ 64.584594][ T5810] veth0_macvtap: entered promiscuous mode [ 64.599869][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.613446][ T5819] veth0_macvtap: entered promiscuous mode [ 64.638755][ T5819] veth1_macvtap: entered promiscuous mode [ 64.650802][ T5810] veth1_macvtap: entered promiscuous mode [ 64.665926][ T5821] Bluetooth: hci4: command tx timeout [ 64.665932][ T5812] Bluetooth: hci1: command tx timeout [ 64.708697][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.719194][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.731069][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.738908][ T5821] Bluetooth: hci2: command tx timeout [ 64.745339][ T5821] Bluetooth: hci0: command tx timeout [ 64.750746][ T5821] Bluetooth: hci3: command tx timeout [ 64.761250][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.789729][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.817191][ T3667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.827563][ T3667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.846407][ T3667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.862247][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.871824][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.884374][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.899620][ T5811] veth0_vlan: entered promiscuous mode [ 64.907748][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.917005][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.932640][ T5805] veth0_vlan: entered promiscuous mode [ 64.945642][ T5811] veth1_vlan: entered promiscuous mode [ 64.963983][ T5805] veth1_vlan: entered promiscuous mode [ 65.047282][ T5805] veth0_macvtap: entered promiscuous mode [ 65.078908][ T5806] veth0_vlan: entered promiscuous mode [ 65.098614][ T3667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.109005][ T3667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.117438][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.126798][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.138972][ T5805] veth1_macvtap: entered promiscuous mode [ 65.164498][ T5811] veth0_macvtap: entered promiscuous mode [ 65.199839][ T5806] veth1_vlan: entered promiscuous mode [ 65.208020][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.208196][ T5811] veth1_macvtap: entered promiscuous mode [ 65.222380][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.230893][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.252961][ T30] audit: type=1400 audit(1761193899.367:87): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.cEz3MI/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.266986][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.279290][ T30] audit: type=1400 audit(1761193899.367:88): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.311474][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.317337][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.327531][ T30] audit: type=1400 audit(1761193899.367:89): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.cEz3MI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.337138][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.362020][ T30] audit: type=1400 audit(1761193899.407:90): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.385299][ T30] audit: type=1400 audit(1761193899.407:91): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.cEz3MI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.426426][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.427614][ T30] audit: type=1400 audit(1761193899.417:92): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.cEz3MI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.463522][ T30] audit: type=1400 audit(1761193899.427:93): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.465260][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.498210][ T30] audit: type=1400 audit(1761193899.447:94): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.498251][ T30] audit: type=1400 audit(1761193899.447:95): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="gadgetfs" ino=8269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.555577][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.566492][ T5806] veth0_macvtap: entered promiscuous mode [ 65.604938][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.618721][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.646285][ T5806] veth1_macvtap: entered promiscuous mode [ 65.659425][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.668684][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.685724][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.694723][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.759676][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.774513][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.784307][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.913234][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.943994][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.368648][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.389984][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.404106][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.414484][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.451086][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.461631][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.496690][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.506451][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.545960][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.555365][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.597533][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.684576][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.735601][ T5812] Bluetooth: hci1: command tx timeout [ 66.736117][ T5821] Bluetooth: hci4: command tx timeout [ 66.809214][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.818279][ T5821] Bluetooth: hci3: command tx timeout [ 66.823718][ T5821] Bluetooth: hci0: command tx timeout [ 66.830090][ T5821] Bluetooth: hci2: command tx timeout [ 66.837682][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.978678][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 67.077786][ T5938] input: syz0 as /devices/virtual/input/input5 [ 67.645140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 67.653353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 67.746855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.755714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.763866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.054835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 68.165054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.174325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.183468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.464285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.565198][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.965855][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 68.965873][ T30] audit: type=1400 audit(1761193902.897:134): avc: denied { create } for pid=5949 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.036618][ T5812] Bluetooth: hci1: command tx timeout [ 69.042032][ T5812] Bluetooth: hci4: command tx timeout [ 69.050225][ T5812] Bluetooth: hci2: command tx timeout [ 69.056042][ T5812] Bluetooth: hci0: command tx timeout [ 69.061464][ T5812] Bluetooth: hci3: command tx timeout [ 69.128728][ T30] audit: type=1400 audit(1761193902.897:135): avc: denied { setopt } for pid=5949 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.170521][ T30] audit: type=1400 audit(1761193903.057:136): avc: denied { create } for pid=5940 comm="syz.1.7" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.208224][ T30] audit: type=1400 audit(1761193903.057:137): avc: denied { ioctl } for pid=5940 comm="syz.1.7" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8646 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.233798][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.262642][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 69.303517][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 69.328191][ T30] audit: type=1400 audit(1761193903.157:138): avc: denied { setopt } for pid=5940 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.379459][ T30] audit: type=1400 audit(1761193903.207:139): avc: denied { allowed } for pid=5940 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.398456][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.442841][ T30] audit: type=1400 audit(1761193903.207:140): avc: denied { name_bind } for pid=5940 comm="syz.1.7" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 69.528475][ T30] audit: type=1400 audit(1761193903.207:141): avc: denied { node_bind } for pid=5940 comm="syz.1.7" saddr=::ffff:172.20.20.11 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 69.551081][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.566280][ T30] audit: type=1400 audit(1761193903.227:142): avc: denied { create } for pid=5949 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.593805][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 69.601508][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 70.052049][ T30] audit: type=1400 audit(1761193903.237:143): avc: denied { bind } for pid=5949 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.126201][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 70.132583][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 70.159845][ T5943] ceph: No mds server is up or the cluster is laggy [ 70.980004][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.986621][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.331583][ T5986] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10'. [ 71.362472][ T5972] kvm: kvm [5970]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffff [ 71.391906][ T5972] tipc: Enabling of bearer rejected, failed to enable media [ 71.616341][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 71.622391][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 71.910500][ T5982] ceph: No mds server is up or the cluster is laggy [ 71.925219][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 71.931366][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 72.731380][ T5989] comedi comedi0: reset error (fatal) [ 72.773557][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16'. [ 72.876009][ T6002] nbd: socks must be embedded in a SOCK_ITEM attr [ 72.955093][ T5871] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.579933][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 73.609105][ T5871] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 73.666402][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.712233][ T5871] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 73.782335][ T5871] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.811690][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.105840][ T5807] udevd[5807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 74.114926][ T5871] usb 2-1: Product: 媲鏲ꒀ㴠㲄䛩蒕冬ᶧ꯯铍뤃㘸껔훢友⇅ᎄ㥈⍊鈴ㆎߚ慳檷᷃ᣅϞ䫄蹰꺒蛘㙢⊃␵ᨂ諝䃰拓藵뷤芵ꩭ䏶 [ 74.151255][ T5871] usb 2-1: Manufacturer: 鞛덂ⴳ夵裐ㆊ㶱⽪诇翘掑쮘觞⼨䫛꣗枼恏麹폦﮼ᾰ媑㿙寄∧썔쇐묣鬁걳ᷰ䖷ྑ㎙殎剨䝲ᣴ㧩⒘↉⚦麁庢ﺀ븱白兼厷얭ꐀᑫ荧봚퍯怞⥳蝼ꦔ㾛埃Ɑϕ椾鄨Ք厺ᚘ㓁嵜学䂊⯈鴖ˊ톇嚵弳딣蛪馯 [ 74.526069][ T5871] usb 2-1: SerialNumber: 삓썲঳贬ᓮ禱酮쫪鿁眡쒛嵟蔅㯗㮛岺݇㯿䱼惛燛跫䒅퇤줺殟뿓節閁ʡੴ㓨潩훓氿悞믨玆ႅࡴ뛃姰⚇邤﫼受竢殡憙룓鑃훻┴瀰鏞㺝镪ᇼ좖넢䞾ࢄ퍃緒冸Ძ隌莝껞⦟蔆坞ἦ᜚棻校퇇솙 [ 74.655024][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 74.973666][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 74.973705][ T30] audit: type=1400 audit(1761193908.737:164): avc: denied { map } for pid=6017 comm="syz.4.19" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.311852][ T30] audit: type=1400 audit(1761193908.737:165): avc: denied { read write } for pid=6017 comm="syz.4.19" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.338439][ T30] audit: type=1400 audit(1761193908.897:166): avc: denied { ioctl } for pid=6017 comm="syz.4.19" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.379180][ T30] audit: type=1400 audit(1761193909.237:167): avc: denied { unlink } for pid=5819 comm="syz-executor" name="file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.414127][ T5871] cdc_ncm 2-1:1.0: bind() failure [ 75.432001][ T6014] ceph: No mds server is up or the cluster is laggy [ 75.439063][ T79] libceph: connect (1)[c::]:6789 error -101 [ 75.445469][ T79] libceph: mon0 (1)[c::]:6789 connect error [ 75.451290][ T5871] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 75.466714][ T30] audit: type=1400 audit(1761193909.527:168): avc: denied { create } for pid=6022 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.494923][ T30] audit: type=1400 audit(1761193909.557:169): avc: denied { ioctl } for pid=6022 comm="syz.2.20" path="socket:[8179]" dev="sockfs" ino=8179 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.524882][ T30] audit: type=1400 audit(1761193909.607:170): avc: denied { read write } for pid=6030 comm="syz.1.21" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.630394][ T5871] cdc_ncm 2-1:1.1: bind() failure [ 75.658890][ T5871] usb 2-1: USB disconnect, device number 2 [ 75.669550][ T30] audit: type=1400 audit(1761193909.607:171): avc: denied { open } for pid=6030 comm="syz.1.21" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.692708][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.807052][ T30] audit: type=1400 audit(1761193909.667:172): avc: denied { connect } for pid=6022 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 76.440804][ T30] audit: type=1400 audit(1761193909.677:173): avc: denied { read } for pid=6022 comm="syz.2.20" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.516490][ T24] cfg80211: failed to load regulatory.db [ 77.596314][ T6049] overlayfs: failed to resolve './file1/file0': -2 [ 82.546008][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 82.552099][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 82.720340][ T6088] overlayfs: missing 'lowerdir' [ 82.905896][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 82.905932][ T30] audit: type=1400 audit(1761193917.027:185): avc: denied { read } for pid=6079 comm="syz.0.30" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.946115][ T30] audit: type=1400 audit(1761193917.027:186): avc: denied { open } for pid=6079 comm="syz.0.30" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.946295][ T30] audit: type=1400 audit(1761193917.037:187): avc: denied { ioctl } for pid=6079 comm="syz.0.30" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 83.048507][ T30] audit: type=1400 audit(1761193917.167:188): avc: denied { ioctl } for pid=6081 comm="syz.4.31" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.155806][ T30] audit: type=1400 audit(1761193917.167:189): avc: denied { ioctl } for pid=6081 comm="syz.4.31" path="socket:[9264]" dev="sockfs" ino=9264 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.608057][ T6082] ceph: No mds server is up or the cluster is laggy [ 83.620950][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 83.638681][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 84.668728][ T30] audit: type=1400 audit(1761193918.787:190): avc: denied { create } for pid=6102 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.187990][ T30] audit: type=1400 audit(1761193919.197:191): avc: denied { setopt } for pid=6097 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.214387][ T30] audit: type=1400 audit(1761193919.197:192): avc: denied { bind } for pid=6097 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.239476][ T30] audit: type=1400 audit(1761193919.197:193): avc: denied { name_bind } for pid=6097 comm="syz.3.35" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.279213][ T30] audit: type=1400 audit(1761193919.197:194): avc: denied { node_bind } for pid=6097 comm="syz.3.35" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 86.481722][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 87.485171][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 88.411534][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 88.411546][ T30] audit: type=1400 audit(1761193922.527:199): avc: denied { create } for pid=6140 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.476451][ T30] audit: type=1400 audit(1761193922.587:200): avc: denied { connect } for pid=6140 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.496341][ T30] audit: type=1400 audit(1761193922.597:201): avc: denied { bind } for pid=6140 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.549526][ T30] audit: type=1400 audit(1761193922.597:202): avc: denied { read } for pid=6140 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.569062][ T30] audit: type=1400 audit(1761193922.667:203): avc: denied { write } for pid=6140 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.907392][ T30] audit: type=1400 audit(1761193922.937:204): avc: denied { ioctl } for pid=6146 comm="syz.1.45" path="socket:[9324]" dev="sockfs" ino=9324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.041114][ T6149] process 'syz.1.45' launched './file2' with NULL argv: empty string added [ 89.409659][ T30] audit: type=1400 audit(1761193923.157:205): avc: denied { execute } for pid=6146 comm="syz.1.45" name="file2" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.435496][ T30] audit: type=1400 audit(1761193923.177:206): avc: denied { execute_no_trans } for pid=6146 comm="syz.1.45" path="/7/file2" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.459829][ T30] audit: type=1400 audit(1761193923.187:207): avc: denied { write } for pid=6146 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.636608][ T30] audit: type=1400 audit(1761193923.727:208): avc: denied { search } for pid=5477 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.044232][ T5878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.936748][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 91.962993][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.019602][ T5956] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.041670][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.051503][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.091037][ T5878] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.119915][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.145547][ T24] libceph: connect (1)[c::]:6789 error -101 [ 92.158372][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 92.162444][ T5878] usb 5-1: config 0 descriptor?? [ 92.248210][ T5956] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 92.257513][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.373261][ T5956] usb 1-1: config 0 descriptor?? [ 92.837270][ T24] libceph: connect (1)[c::]:6789 error -101 [ 92.843446][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 92.873242][ T6167] ceph: No mds server is up or the cluster is laggy [ 92.895677][ T5956] usb 1-1: string descriptor 0 read error: -71 [ 92.964244][ T5956] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 93.076509][ T5956] usb 1-1: USB disconnect, device number 2 [ 93.440805][ T5878] usbhid 5-1:0.0: can't add hid device: -71 [ 93.455194][ T5878] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 93.458368][ T6193] netdevsim netdevsim0: Direct firmware load for . [ 93.458368][ T6193] failed with error -2 [ 93.481311][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 93.481326][ T30] audit: type=1400 audit(1761193927.597:224): avc: denied { remove_name } for pid=6192 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=2145 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.523559][ T5878] usb 5-1: USB disconnect, device number 2 [ 93.568029][ T6193] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 93.568029][ T6193] [ 94.777923][ T30] audit: type=1400 audit(1761193927.597:225): avc: denied { unlink } for pid=6192 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=2145 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.781732][ T6207] Zero length message leads to an empty skb [ 94.820407][ T30] audit: type=1400 audit(1761193927.687:226): avc: denied { firmware_load } for pid=6184 comm="syz.0.51" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 94.854001][ T30] audit: type=1400 audit(1761193927.827:227): avc: denied { read write } for pid=6187 comm="syz.3.52" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.989687][ T30] audit: type=1400 audit(1761193929.087:228): avc: denied { ioctl } for pid=6184 comm="syz.0.51" path="socket:[9384]" dev="sockfs" ino=9384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.060233][ T6200] gfs2: gfs2 mount does not exist [ 95.204884][ T30] audit: type=1400 audit(1761193929.177:229): avc: denied { mounton } for pid=6199 comm="syz.1.54" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.304901][ T6216] sp0: Synchronizing with TNC [ 95.349453][ T30] audit: type=1400 audit(1761193929.407:230): avc: denied { ioctl } for pid=6212 comm="syz.2.56" path="socket:[9025]" dev="sockfs" ino=9025 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.577714][ T30] audit: type=1400 audit(1761193929.417:231): avc: denied { ioctl } for pid=6212 comm="syz.2.56" path="socket:[9029]" dev="sockfs" ino=9029 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.555063][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 98.591776][ T6223] sp0: Synchronizing with TNC [ 99.035152][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 100.543157][ T6254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.60'. [ 100.788742][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'. [ 100.830492][ T6256] syz.3.63(6256): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 106.574781][ C0] sched: DL replenish lagged too much [ 213.014743][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 213.021725][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4309/1:b..l [ 213.029824][ C1] rcu: (detected by 1, t=10502 jiffies, g=8577, q=1163662 ncpus=2) [ 213.037798][ C1] task:kworker/u8:7 state:R running task stack:24488 pid:4309 tgid:4309 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 213.051941][ C1] Workqueue: 0x0 (events_unbound) [ 213.057076][ C1] Call Trace: [ 213.060348][ C1] [ 213.063288][ C1] __schedule+0x1190/0x5de0 [ 213.067796][ C1] ? __lock_acquire+0x622/0x1c90 [ 213.072735][ C1] ? __lock_acquire+0x622/0x1c90 [ 213.077682][ C1] ? __pfx___schedule+0x10/0x10 [ 213.082544][ C1] ? __lock_acquire+0x622/0x1c90 [ 213.087524][ C1] ? mark_held_locks+0x49/0x80 [ 213.092297][ C1] preempt_schedule_irq+0x51/0x90 [ 213.097327][ C1] irqentry_exit+0x36/0x90 [ 213.101742][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.107718][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 213.112908][ C1] Code: 65 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 0a e9 0e 0f 82 74 02 00 00 8b 35 aa 3a e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 65 08 12 0f 85 c7 02 00 00 48 83 c4 [ 213.132514][ C1] RSP: 0000:ffffc9000e4e7808 EFLAGS: 00000206 [ 213.138583][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 0000000064d03623 [ 213.146549][ C1] RDX: 0000000000000000 RSI: ffffffff8da047c8 RDI: ffffffff8bf06cc0 [ 213.154602][ C1] RBP: 0000000000000002 R08: d51b234a217475a7 R09: 0000000000000000 [ 213.162569][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 213.170530][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.178507][ C1] unwind_next_frame+0xd1/0x20a0 [ 213.183446][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 213.188559][ C1] ? __unwind_start+0x574/0x7f0 [ 213.193402][ C1] ? get_stack_info_noinstr+0x18/0x120 [ 213.198860][ C1] __unwind_start+0x45f/0x7f0 [ 213.203536][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 213.209696][ C1] arch_stack_walk+0x73/0x100 [ 213.214374][ C1] ? __unwind_start+0x574/0x7f0 [ 213.219219][ C1] stack_trace_save+0x8e/0xc0 [ 213.223870][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 213.229222][ C1] ? __lock_acquire+0x622/0x1c90 [ 213.234163][ C1] save_stack+0x160/0x1f0 [ 213.238496][ C1] ? __pfx_save_stack+0x10/0x10 [ 213.243355][ C1] ? page_ext_put+0x3e/0xd0 [ 213.247859][ C1] __reset_page_owner+0x84/0x1a0 [ 213.252787][ C1] __free_frozen_pages+0x7df/0x1160 [ 213.257991][ C1] qlist_free_all+0x4d/0x120 [ 213.262572][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 213.268021][ C1] __kasan_kmalloc+0x8a/0xb0 [ 213.272599][ C1] create_worker+0x10f/0x7e0 [ 213.277190][ C1] ? __pfx_create_worker+0x10/0x10 [ 213.282305][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 213.287325][ C1] ? find_held_lock+0x2b/0x80 [ 213.292004][ C1] ? rcu_is_watching+0x12/0xc0 [ 213.296767][ C1] worker_thread+0x9dd/0xf10 [ 213.301360][ C1] ? __pfx_worker_thread+0x10/0x10 [ 213.306463][ C1] kthread+0x3c5/0x780 [ 213.310531][ C1] ? __pfx_kthread+0x10/0x10 [ 213.315115][ C1] ? rcu_is_watching+0x12/0xc0 [ 213.319867][ C1] ? __pfx_kthread+0x10/0x10 [ 213.324429][ C1] ret_from_fork+0x675/0x7d0 [ 213.328991][ C1] ? __pfx_kthread+0x10/0x10 [ 213.333570][ C1] ret_from_fork_asm+0x1a/0x30 [ 213.338346][ C1] [ 213.341352][ C1] rcu: rcu_preempt kthread starved for 10432 jiffies! g8577 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 213.352445][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 213.362422][ C1] rcu: RCU grace-period kthread stack dump: [ 213.368294][ C1] task:rcu_preempt state:R running task stack:28584 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 213.381842][ C1] Call Trace: [ 213.385123][ C1] [ 213.388049][ C1] __schedule+0x1190/0x5de0 [ 213.392570][ C1] ? __lock_acquire+0x622/0x1c90 [ 213.397518][ C1] ? __pfx___schedule+0x10/0x10 [ 213.402389][ C1] ? find_held_lock+0x2b/0x80 [ 213.407066][ C1] ? schedule+0x2d7/0x3a0 [ 213.411398][ C1] schedule+0xe7/0x3a0 [ 213.415464][ C1] schedule_timeout+0x123/0x290 [ 213.420334][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 213.425686][ C1] ? __pfx_process_timeout+0x10/0x10 [ 213.430979][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.436792][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 213.442260][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 213.447017][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 213.452295][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.457500][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 213.462436][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 213.467284][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 213.473098][ C1] rcu_gp_kthread+0x26d/0x380 [ 213.477762][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 213.482952][ C1] ? rcu_is_watching+0x12/0xc0 [ 213.487714][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.492915][ C1] ? __kthread_parkme+0x19e/0x250 [ 213.497940][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 213.503131][ C1] kthread+0x3c5/0x780 [ 213.507195][ C1] ? __pfx_kthread+0x10/0x10 [ 213.511779][ C1] ? rcu_is_watching+0x12/0xc0 [ 213.516541][ C1] ? __pfx_kthread+0x10/0x10 [ 213.521121][ C1] ret_from_fork+0x675/0x7d0 [ 213.525688][ C1] ? __pfx_kthread+0x10/0x10 [ 213.530271][ C1] ret_from_fork_asm+0x1a/0x30 [ 213.535047][ C1] [ 213.538058][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 213.544365][ C1] Sending NMI from CPU 1 to CPUs 0: [ 213.549569][ C0] NMI backtrace for cpu 0 [ 213.549579][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 213.549594][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.549602][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 213.549618][ C0] Code: 0f c1 05 c8 ac 08 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 dd 6a 08 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 213.549642][ C0] RSP: 0018:ffffc90000006b98 EFLAGS: 00000206 [ 213.549654][ C0] RAX: cd8ffd4f55f82200 RBX: ffffffff8e3c4460 RCX: ffffc90000006ba4 [ 213.549664][ C0] RDX: 0000000000000003 RSI: ffffffff8da047c8 RDI: ffffffff8bf06cc0 [ 213.549673][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 213.549681][ C0] R10: 0000000000000000 R11: 00000000000834f4 R12: ffffffff816c1914 [ 213.549690][ C0] R13: 0000000000000202 R14: ffffffff8e097a00 R15: 0000000000000004 [ 213.549699][ C0] FS: 0000000000000000(0000) GS:ffff888124a0b000(0000) knlGS:0000000000000000 [ 213.549714][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.549723][ C0] CR2: 000000110c34e50f CR3: 000000005bf9d000 CR4: 00000000003526f0 [ 213.549731][ C0] Call Trace: [ 213.549736][ C0] [ 213.549743][ C0] unwind_next_frame+0x3f9/0x20a0 [ 213.549760][ C0] ? __napi_poll.constprop.0+0xba/0x550 [ 213.549778][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 213.549798][ C0] arch_stack_walk+0x94/0x100 [ 213.549814][ C0] ? net_rx_action+0x97f/0xef0 [ 213.549829][ C0] stack_trace_save+0x8e/0xc0 [ 213.549847][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 213.549864][ C0] ? arch_stack_walk+0x94/0x100 [ 213.549879][ C0] kasan_save_stack+0x33/0x60 [ 213.549893][ C0] ? kasan_save_stack+0x33/0x60 [ 213.549905][ C0] ? kasan_save_track+0x14/0x30 [ 213.549917][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 213.549929][ C0] ? ref_tracker_alloc+0x18e/0x5b0 [ 213.549945][ C0] ? dst_init+0xda/0x580 [ 213.549958][ C0] ? dst_alloc+0xbb/0x1a0 [ 213.549971][ C0] ? rt_dst_alloc+0x35/0x3a0 [ 213.549990][ C0] ? ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 213.550006][ C0] ? ip_route_output_key_hash+0x10f/0x2b0 [ 213.550020][ C0] ? ip_route_output_flow+0x27/0x150 [ 213.550034][ C0] ? ip_route_me_harder+0x560/0x1370 [ 213.550054][ C0] ? synproxy_send_tcp.isra.0+0x352/0x6a0 [ 213.550072][ C0] ? synproxy_send_client_synack+0x6f6/0x8f0 [ 213.550089][ C0] ? nft_synproxy_do_eval+0xa63/0xd80 [ 213.550102][ C0] ? nft_do_chain+0x2e9/0x1920 [ 213.550120][ C0] ? nft_do_chain_inet+0x18a/0x340 [ 213.550138][ C0] ? nf_hook_slow+0xbe/0x200 [ 213.550153][ C0] ? nf_hook.constprop.0+0x424/0x750 [ 213.550169][ C0] ? ip_local_deliver+0x169/0x1f0 [ 213.550184][ C0] ? ip_rcv+0x2e0/0x600 [ 213.550198][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 213.550212][ C0] ? __netif_receive_skb+0x1d/0x160 [ 213.550225][ C0] ? process_backlog+0x439/0x15e0 [ 213.550239][ C0] ? __napi_poll.constprop.0+0xba/0x550 [ 213.550264][ C0] kasan_save_track+0x14/0x30 [ 213.550276][ C0] __kasan_kmalloc+0xaa/0xb0 [ 213.550290][ C0] ref_tracker_alloc+0x18e/0x5b0 [ 213.550307][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 213.550327][ C0] ? rcu_is_watching+0x12/0xc0 [ 213.550345][ C0] ? trace_kmem_cache_alloc+0x28/0xc0 [ 213.550361][ C0] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 213.550381][ C0] dst_init+0xda/0x580 [ 213.550395][ C0] dst_alloc+0xbb/0x1a0 [ 213.550411][ C0] rt_dst_alloc+0x35/0x3a0 [ 213.550429][ C0] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 213.550449][ C0] ip_route_output_key_hash+0x10f/0x2b0 [ 213.550464][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 213.550481][ C0] ? lock_acquire+0x179/0x350 [ 213.550494][ C0] ? find_held_lock+0x2b/0x80 [ 213.550511][ C0] ip_route_output_flow+0x27/0x150 [ 213.550527][ C0] ip_route_me_harder+0x560/0x1370 [ 213.550547][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 213.550565][ C0] ? trace_kmem_cache_alloc+0x28/0xc0 [ 213.550586][ C0] ? __pfx_cookie_hash+0x10/0x10 [ 213.550602][ C0] synproxy_send_tcp.isra.0+0x352/0x6a0 [ 213.550621][ C0] synproxy_send_client_synack+0x6f6/0x8f0 [ 213.550647][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 213.550666][ C0] ? nft_redir_init+0x228/0x2f0 [ 213.550686][ C0] nft_synproxy_do_eval+0xa63/0xd80 [ 213.550701][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 213.550716][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 213.550730][ C0] ? find_held_lock+0x2b/0x80 [ 213.550747][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 213.550761][ C0] nft_do_chain+0x2e9/0x1920 [ 213.550783][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 213.550802][ C0] ? ipt_do_table+0xd48/0x1ae0 [ 213.550817][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.550838][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.550857][ C0] ? ipt_do_table+0xd48/0x1ae0 [ 213.550877][ C0] nft_do_chain_inet+0x18a/0x340 [ 213.550896][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 213.550916][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 213.550931][ C0] ? nf_nat_ipv4_local_in+0x181/0x720 [ 213.550948][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 213.550966][ C0] nf_hook_slow+0xbe/0x200 [ 213.550982][ C0] nf_hook.constprop.0+0x424/0x750 [ 213.550998][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 213.551016][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 213.551032][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 213.551050][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 213.551070][ C0] ip_local_deliver+0x169/0x1f0 [ 213.551087][ C0] ip_rcv+0x2e0/0x600 [ 213.551103][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 213.551118][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 213.551133][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 213.551149][ C0] ? lock_acquire+0x179/0x350 [ 213.551164][ C0] ? process_backlog+0x3e7/0x15e0 [ 213.551178][ C0] __netif_receive_skb+0x1d/0x160 [ 213.551193][ C0] process_backlog+0x439/0x15e0 [ 213.551211][ C0] __napi_poll.constprop.0+0xba/0x550 [ 213.551226][ C0] ? skb_defer_free_flush+0x149/0x280 [ 213.551257][ C0] net_rx_action+0x97f/0xef0 [ 213.551273][ C0] ? find_held_lock+0x2b/0x80 [ 213.551290][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 213.551306][ C0] ? sched_balance_domains+0x283/0xee0 [ 213.551332][ C0] handle_softirqs+0x219/0x8e0 [ 213.551351][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 213.551369][ C0] __irq_exit_rcu+0x109/0x170 [ 213.551384][ C0] irq_exit_rcu+0x9/0x30 [ 213.551400][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 213.551418][ C0] [ 213.551422][ C0] [ 213.551427][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.551442][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 213.551460][ C0] Code: 17 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 e5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 213.551471][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 213.551481][ C0] RAX: 00000000013aac0f RBX: 0000000000000000 RCX: ffffffff8b6042a9 [ 213.551490][ C0] RDX: 0000000000000000 RSI: ffffffff8da2a184 RDI: ffffffff8bf06cc0 [ 213.551498][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 213.551507][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 213.551515][ C0] R13: ffffffff8e097a00 R14: ffffffff9081f4d0 R15: 0000000000000000 [ 213.551526][ C0] ? ct_kernel_exit+0x139/0x190 [ 213.551547][ C0] default_idle+0x13/0x20 [ 213.551560][ C0] default_idle_call+0x6c/0xb0 [ 213.551573][ C0] do_idle+0x38d/0x500 [ 213.551590][ C0] ? __pfx_do_idle+0x10/0x10 [ 213.551606][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 213.551629][ C0] cpu_startup_entry+0x4f/0x60 [ 213.551645][ C0] rest_init+0x16b/0x2b0 [ 213.551659][ C0] ? acpi_subsystem_init+0x133/0x180 [ 213.551675][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 213.551693][ C0] start_kernel+0x3f6/0x4e0 [ 213.551709][ C0] x86_64_start_reservations+0x18/0x30 [ 213.551724][ C0] x86_64_start_kernel+0x130/0x190 [ 213.551740][ C0] common_startup_64+0x13e/0x148 [ 213.551761][ C0] [ 217.452238][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.469842][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.569513][ T5182] udevd[5182]: worker [5807] /devices/virtual/block/loop3 is taking a long time [ 219.612406][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 219.663504][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 219.681926][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 220.056815][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 220.062897][ T51] Bluetooth: hci1: command 0x0406 tx timeout