last executing test programs: 11m35.770647976s ago: executing program 3 (id=1069): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) close(r1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x3}, @local, 0x0, 0x9, 0xffffffffffffff7e, 0x7ffffffffffffff, 0x6, 0x6, 0x7f}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000a2000/0x4000)=nil, &(0x7f00004fc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x51}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) 11m30.201689834s ago: executing program 3 (id=1077): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) tgkill(r1, r1, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x664c, &(0x7f0000000580)={0x0, 0xdcd5, 0x1880, 0x8000002}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 11m27.486711291s ago: executing program 3 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000300)={0x28, 0x0, r4, r6, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) gettid() ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) close(r7) 11m25.495003345s ago: executing program 3 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000300)={0x28, 0x0, r4, r6, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) close(r7) 11m23.484994744s ago: executing program 3 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000300)={0x28, 0x0, r4, r6, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) gettid() ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) close(r7) 11m21.626939126s ago: executing program 3 (id=1092): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x4, 0x0, 0x0, 0x0, "978e8676a8cfd89c"}, 0x10}}, 0x20008081) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x1000000000ee, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}, {&(0x7f0000000000)="b806ca06b2da5866651c", 0xa}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 11m4.747348669s ago: executing program 32 (id=1092): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x4, 0x0, 0x0, 0x0, "978e8676a8cfd89c"}, 0x10}}, 0x20008081) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x5) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x1000000000ee, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}, {&(0x7f0000000000)="b806ca06b2da5866651c", 0xa}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 3m0.523008303s ago: executing program 4 (id=2034): socket$inet6(0xa, 0x6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x20000044) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101282, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x163881) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004440)={0x20, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@any, 0xffffffff}, @local, 0x0, 0x6, 0x7ffe, 0x800000000000001, 0x6, 0x9, 0x7f}) sendmsg$NFT_BATCH(r0, 0x0, 0x20049809) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m58.457358967s ago: executing program 4 (id=2037): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) iopl(0x3) syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x109301) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000800"/16], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='contention_end\x00', r3}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000000c0)) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040023bd70000200000044000000080003007d2cd11bc5fea5b07c1f3343ff8459d26e5b928cd86f9ea3fe4916b879632e2fdb5cd70a9fdfb37eaaa144ef4ea365272ac314fae552b93a3f543908138fd7bd270db0166e2e663162309c44ba9d6ea86eb1e0888d14d693a51a4a621c7eb10fc373fd09e7d3c5a2ceff28fadac05f8659cb204b906b10b1a91d", @ANYRES32=0x0, @ANYBLOB="0c00238008000b00d30a0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4480) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) process_mrelease(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) 2m57.506260085s ago: executing program 4 (id=2041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) 2m54.259079068s ago: executing program 4 (id=2047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) semget(0x1, 0x0, 0x4cc) 2m51.692874001s ago: executing program 1 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) semget(0x1, 0x0, 0x4cc) 2m51.14442989s ago: executing program 4 (id=2055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) semget(0x1, 0x0, 0x4cc) 2m49.265072932s ago: executing program 4 (id=2060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) 2m49.162080801s ago: executing program 1 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r1, &(0x7f0000003080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x2404c0c5) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x6, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x0, 0x0, 0x200}], "000420"}, @datasec={0x0, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x5, 0x400}, {0x5, 0x9, 0x5}, {0x2, 0x5, 0x1}, {0x5, 0xfffffffe, 0xfffffffb}, {0x3, 0xfffffffd, 0x101}, {0x3, 0x4b97, 0x8}], "d5"}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f00000002c0)=0x5) ftruncate(r7, 0x2007ffd) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000a3) 2m46.550032836s ago: executing program 1 (id=2065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, 0x0, 0x4e) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8a", 0x74}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m45.200316019s ago: executing program 1 (id=2067): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) r3 = fanotify_init(0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = dup2(r4, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) mount$nfs4(&(0x7f0000000100)='(+-)\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000000, &(0x7f0000000600)=ANY=[@ANYBLOB="7b800541eeceb22b757453d7fbdf2c1ec5b52e93189a8456f2cde3d318642711bc74803aa0c66dc3a4bd0c0a3c19d61c87ba856575789eacb36c628e8f5b68adf783219829042bb24d9f01757eaf02be3f547fbafcabaf1fbf1438c6988b7d8c7acb67d17b81eaa7ce039edb4f6d11250624a0c797dc0ee3cd56df30972574ff8dd69a1dff2bccbfdfd6f4679c3cfe5e3179cf9fdf744a4cec5897f9dd8c4d8a9c3126b8f300cf597cbb7abb912edd18ddc408dc3bb46ba2914342da896d1452d14da684db4bba177cb31fcba716c41dc7b72829f58651ef1950760bbdba5703bf122982d565713f7f8e2a0b2d728774fcd72629ef18987a58c4867ad34a80d2af979231aaab24681f1e57a681de18a59f22f36bde"]) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x5b) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r11) 2m44.377613238s ago: executing program 1 (id=2069): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) gettid() 2m43.080923917s ago: executing program 1 (id=2071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) semget(0x1, 0x0, 0x4cc) 2m32.662220837s ago: executing program 33 (id=2060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) 2m26.973333364s ago: executing program 34 (id=2071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) semget(0x1, 0x0, 0x4cc) 2m19.005652645s ago: executing program 6 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) semget(0x1, 0x0, 0x4cc) 2m2.685954086s ago: executing program 35 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) semget(0x1, 0x0, 0x4cc) 23.498657027s ago: executing program 0 (id=2386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$netlink(0x10, 0x3, 0x0) 21.077680122s ago: executing program 0 (id=2392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$netlink(0x10, 0x3, 0x0) 17.909438687s ago: executing program 7 (id=2401): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "e0f493"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc1485544, &(0x7f00000001c0)) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000002200), 0x10) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3272078b089b34373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d316d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3527138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aad66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) r8 = socket$kcm(0xa, 0x2, 0x88) r9 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 17.781087001s ago: executing program 0 (id=2402): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) tgkill(r1, r1, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x664c, &(0x7f0000000580)={0x0, 0xdcd5, 0x1880, 0x8000002}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 16.948893805s ago: executing program 7 (id=2404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xb) r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) semget(0x1, 0x0, 0x4cc) 16.71566181s ago: executing program 0 (id=2405): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r7, 0x0, 0x28) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="09dea4afb76288fa135537845f3188b4cb061c94084050d4", 0x18}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1}, 0x1}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)={0x44, 0xb, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6b}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c841}, 0x4000000) 15.073540478s ago: executing program 7 (id=2409): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) io_setup(0x4082, &(0x7f0000000380)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() setrlimit(0xa, &(0x7f0000000300)={0xb5b4, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000800)=0xc) setresuid(0x0, r6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b00300001800000329bd7000fddbdf2518000000040025000c00a18008005000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="75000580cd4e8050c3d55d750b1b58899ff6725bcf55900047df83a708ed377c97c4171ec427a83042bb9833a742e6b532823ef57b68b93eb9e4cf5aec7722c4af6870f99327c6ac9d3771570094bd709b3ca9f46f041ea890b41cb02f5451a99888dee45dfb0d3d9b678bcbda1c56dbbb6dd9dbf200000014007c00fe8000000000000000000000000000bb00"], 0x3b0}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0) timerfd_create(0x0, 0x80000) r7 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000200)) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x3a7c, &(0x7f0000000140)={0x0, 0x9ccd, 0x2000, 0x3, 0x3e2}, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1002943, &(0x7f0000000040)={0x0, 0x1fffffe, 0x10, 0x900000, 0x246, 0x0, r8}, &(0x7f0000001480), &(0x7f00000000c0)) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff2}, {0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x100000000000000, 0x0, 0xaa6bcb446f30dd89}, 0x4000080) 11.820813745s ago: executing program 5 (id=2418): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7ff, 0x20300) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x5) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, r8, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x9, 0xc, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 10.481691398s ago: executing program 5 (id=2420): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0x3b13) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10.090541183s ago: executing program 7 (id=2422): timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x84080, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000129000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, 0x0) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0xca59, 0x1}, &(0x7f00000001c0)=0x1, &(0x7f0000000600)=0x70, 0x1, 0x4, 0x3, 0x2587, 0x20, 0x469c}}], 0x58}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x109002) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {r8, r9+60000000}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x20004000) 9.003563891s ago: executing program 8 (id=2423): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x1) tkill(r3, 0xb) mkdirat(0xffffffffffffffff, 0x0, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000200)="3f0336082608123a160097ca0000f09210d7c2290f0086fd1378c9167c643c6198872bbfe465ebc0e9ad89b8ac5dcaaeaf21dca98d", 0x16, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1]) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361"]) umount2(&(0x7f0000000040)='./file0\x00', 0xa) 8.961616615s ago: executing program 5 (id=2424): prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$P9_RMKNOD(r0, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x1, 0x4, 0x6}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000d80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x84}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r7, 0x0, 0xb) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r9, 0x0, 0x80, 0x2) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r10, 0xc0d05604, &(0x7f00000002c0)={0x6, @win={{0x2, 0xb13e, 0xffffffe8, 0x4}, 0x8, 0x200, 0x0, 0xffffffff, 0x0, 0x1}}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 7.668476529s ago: executing program 5 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.374263009s ago: executing program 8 (id=2426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x40) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x88002, 0x0) pwritev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'wlan0\x00'}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000100)={0x1, 0x1000000, {0x100000a, 0x10000008, 0x9, 0x64}}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000005680), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioperm(0x0, 0x2, 0x2) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000005880)={&(0x7f00000056c0)={0x50, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x10) 7.196441332s ago: executing program 2 (id=2427): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) gettid() 6.6853584s ago: executing program 7 (id=2428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xd5, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a8d43b93eb45f45b6c96c92bd6eb5e3b3673c663699ca844dc045ca"}}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xb) r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f00000005c0)={"dc042fa03dce518f41d4d27b568e1f88", 0x0, 0x0, {0x4ecda616, 0x6}, {0xfffffffffffffffd, 0x4}, 0x4, [0x8e2, 0x7, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x9, 0x14, 0x8, 0xffffffffffffa09b, 0x400, 0x5, 0x9, 0x2]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) semget(0x1, 0x0, 0x4cc) 6.461355681s ago: executing program 5 (id=2429): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x6a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) ioperm(0x0, 0x6, 0x8000000000004) io_destroy(0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={r6, r9}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000180)={r8, r9, 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x800c000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.031753345s ago: executing program 2 (id=2430): set_mempolicy(0x8006, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000400)="e16be95ee5ae76c877325aa5cb07cb0537649d9685caf180340665cff2cf8a5109592210b42c3e936ced50a19707e88978d265eb5ba6600eca1909d0f11b2ce8f2e6f1252606711e0ccfa0df1faa560366f64dbf9cca0afad6b48cbba2410e3dbcb7bc1dccb02cc09a38", &(0x7f0000000500)=""/150}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@noxattr}, {@dfltuid}], [], 0x6b}}) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) 6.012999119s ago: executing program 8 (id=2431): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f00000000c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0xc0182103, 0x20000000) 4.853479888s ago: executing program 8 (id=2432): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x5411, &(0x7f0000000100)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x42, 0x0) fcntl$lock(r5, 0x7, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000340), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01064c1, &(0x7f0000001ac0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 4.434143545s ago: executing program 2 (id=2433): userfaultfd(0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000300)=""/132, 0x84) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) r8 = timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r8, &(0x7f0000000240)=""/178, 0xb2) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 3.651294706s ago: executing program 5 (id=2434): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0x3b13) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 3.580212991s ago: executing program 8 (id=2435): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) futex_waitv(&(0x7f0000001700)=[{0x7, &(0x7f00000001c0), 0x82}, {0x7, &(0x7f0000000200)=0x66, 0x82}, {0x10000, 0x0}, {0x5, &(0x7f00000002c0)=0x2, 0x82}, {0xffff, 0x0, 0x2}, {0xe1b, 0x0, 0x2}, {0x9, &(0x7f0000000400)=0x9, 0x2}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x9, &(0x7f00000004c0)=0x69b, 0x82}, {0x0, &(0x7f0000000500)=0x2, 0x2}, {0x78e55cfd, &(0x7f00000005c0)=0x1, 0x82}, {0x4, 0x0, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x2, 0x2}, {0xd55e, &(0x7f0000000740)=0xc, 0x82}, {0x5, 0x0}, {0xf61b, 0x0, 0x82}, {0x80000001, &(0x7f0000000800)=0xb, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x82}, {0xffffffff, 0x0, 0x82}, {0xb, 0x0, 0x82}, {0x7, 0x0, 0x2}], 0x15, 0x0, &(0x7f0000001f40), 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000080)) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000380)=0x7fffffff, 0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010000000000080008800400078008000200010000002c000480050003000000000005000300000000eb04"], 0x58}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty, 0xfffffffc}, 0x1c) 2.557942668s ago: executing program 2 (id=2436): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x184}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r3, &(0x7f00003e8000/0x1000)=nil, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x400) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) unshare(0x62040200) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x48, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000280)="ae8d413e9b15", 0x0, 0x4, 0x10027, 0x0, 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000440)=['\xbb\xf6x\x06\x00\x17\xd6\xb7b\x94\'\x00\x00\x00\x00\x91\xdf\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x11\x00\x00\xeez\xbd\x8f;5)\x00\b\x10H\xf0\xf9\x93\xe1\xe8y0-B\xed\xe6&\x95\x8f\n\x1e#\xa7\xd6i\x96\xdd\xaf\xd9\x91\xb5\xfd\n\x1a\xc1\x96\x8ea\rMj\xc2\x02\xceE\xc9\x81x\xd2\xc7\xfbp'], 0x58}) 2.556754718s ago: executing program 0 (id=2437): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mkdir(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x48c0) add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000300), 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) 964.557631ms ago: executing program 7 (id=2438): chdir(&(0x7f0000000540)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x20, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x23, 0x5, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4, 0x8, 0x6, '\x00', 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x7b, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2, 0x37, 0x6, 0x19, 0x3, 0x64, 0x2, 0x106, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) 942.543836ms ago: executing program 0 (id=2439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x103200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000300)={0x28, 0x0, r4, r6, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) gettid() r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) close(r7) 816.776619ms ago: executing program 2 (id=2440): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) timer_delete(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffdb, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000180)=""/82, 0x52, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000440), 0x80) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000480)=@alg, 0x80, &(0x7f0000000900)}, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x47900) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 669.025394ms ago: executing program 2 (id=2441): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic}) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000700)={{0x7, 0x0, 0x400000, 0x0, 'syz1\x00', 0x1}, 0x0, [0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x204, 0x7ff, 0x2, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0xffffff81, 0x0, 0x1, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9e, 0x80000020, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x400, 0x0, 0x6]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='block_plug\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000001c0)=0x299c, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @private=0xa010100}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000100)=0x38, 0x4) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x20}, 0x14) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x130}, 0x1, 0x0, 0x0, 0x88090}, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) 0s ago: executing program 8 (id=2442): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0x3b13) dup3(0xffffffffffffffff, r5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) kernel console output (not intermixed with test programs): iled, block=512, location=512 [ 1010.844634][ T29] audit: type=1400 audit(2000000553.560:890): avc: denied { open } for pid=15088 comm="syz.0.1967" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1010.885814][ T5814] usb 5-1: SerialNumber: syz [ 1010.905919][ T5814] usb 5-1: config 0 descriptor?? [ 1011.090277][T15100] syz.1.1964: attempt to access beyond end of device [ 1011.090277][T15100] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1011.427967][T15073] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1011.573913][ T29] audit: type=1400 audit(2000000554.851:891): avc: denied { setopt } for pid=15081 comm="syz.4.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1011.594219][T15104] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1011.869797][T15073] UDF-fs: Scanning with blocksize 2048 failed [ 1011.997445][ T5814] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 1012.007478][ T5814] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 1012.045249][T15073] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1012.056228][ T5814] usb 5-1: USB disconnect, device number 13 [ 1012.067011][T15073] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1012.210605][T15109] overlayfs: failed to clone upperpath [ 1012.420266][ T29] audit: type=1400 audit(2000000555.421:892): avc: denied { mount } for pid=15105 comm="syz.2.1970" name="/" dev="ramfs" ino=38688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1012.592305][T15073] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1012.636067][T15073] UDF-fs: Scanning with blocksize 4096 failed [ 1012.643436][T15073] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1012.650217][ T29] audit: type=1400 audit(2000000555.534:893): avc: denied { create } for pid=15105 comm="syz.2.1970" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1013.253731][ T29] audit: type=1400 audit(2000000556.422:894): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file1" dev="tmpfs" ino=2256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1013.863592][ T29] audit: type=1326 audit(2000000556.946:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.1.1974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdee7585d29 code=0x0 [ 1014.269097][ T29] audit: type=1400 audit(2000000557.077:896): avc: denied { create } for pid=15125 comm="syz.1.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1014.360629][ T29] audit: type=1400 audit(2000000557.077:897): avc: denied { getopt } for pid=15125 comm="syz.1.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1014.621102][ T29] audit: type=1400 audit(2000000557.713:898): avc: denied { read write } for pid=15138 comm="syz.5.1978" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1014.706493][ T29] audit: type=1400 audit(2000000557.713:899): avc: denied { open } for pid=15138 comm="syz.5.1978" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1015.710164][ T29] audit: type=1400 audit(2000000558.733:900): avc: denied { create } for pid=15131 comm="syz.4.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1016.056707][ T29] audit: type=1400 audit(2000000558.761:901): avc: denied { write } for pid=15131 comm="syz.4.1977" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1016.165933][ T29] audit: type=1400 audit(2000000558.761:902): avc: denied { open } for pid=15131 comm="syz.4.1977" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1016.243491][ T29] audit: type=1400 audit(2000000559.135:903): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1016.352727][T15162] fuse: Bad value for 'fd' [ 1016.466360][T15162] syz.4.1983 (15162): drop_caches: 2 [ 1016.472851][T15162] syz.4.1983 (15162): drop_caches: 2 [ 1017.518477][T15162] syz.4.1983 (15162): drop_caches: 2 [ 1017.522743][T15171] vxcan3: entered promiscuous mode [ 1017.524478][T15162] syz.4.1983 (15162): drop_caches: 2 [ 1017.529033][T15171] vxcan3: entered allmulticast mode [ 1018.568787][T15184] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1018.584191][T15184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1018.593412][T15184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1018.953668][T15184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1018.967911][T15184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1018.985900][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1018.985915][ T29] audit: type=1400 audit(2000000561.791:918): avc: denied { name_bind } for pid=15183 comm="syz.1.1989" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1020.220183][T15178] fuse: Bad value for 'fd' [ 1021.064563][ T29] audit: type=1400 audit(2000000563.344:919): avc: denied { listen } for pid=15201 comm="syz.5.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1021.141648][T15207] block device autoloading is deprecated and will be removed. [ 1021.150976][T15207] bio_check_eod: 3 callbacks suppressed [ 1021.150991][T15207] syz.5.1993: attempt to access beyond end of device [ 1021.150991][T15207] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1021.594362][T15204] fuse: Bad value for 'fd' [ 1021.692394][T15224] wlan1 speed is unknown, defaulting to 1000 [ 1021.733464][T15224] lo speed is unknown, defaulting to 1000 [ 1021.959150][T15233] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1021.968439][T15233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1021.977694][T15233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1021.987402][T15233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1021.997864][T15233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1022.704223][ T29] audit: type=1400 audit(2000000565.271:920): avc: denied { open } for pid=15237 comm="syz.1.1999" path="/dev/ttyq7" dev="devtmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1022.732299][T15204] nbd4: detected capacity change from 0 to 22 [ 1022.868612][T15212] blk_print_req_error: 24 callbacks suppressed [ 1022.868629][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1022.886273][T15227] block nbd4: shutting down sockets [ 1023.512095][ T29] audit: type=1400 audit(2000000565.935:921): avc: denied { create } for pid=15237 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1023.554102][T15212] buffer_io_error: 24 callbacks suppressed [ 1023.554116][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1023.724677][ T29] audit: type=1400 audit(2000000566.094:922): avc: denied { ioctl } for pid=15240 comm="syz.5.2000" path="socket:[38966]" dev="sockfs" ino=38966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1023.846885][ T29] audit: type=1400 audit(2000000566.337:923): avc: denied { bind } for pid=15240 comm="syz.5.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1024.076310][ T29] audit: type=1400 audit(2000000566.337:924): avc: denied { name_bind } for pid=15240 comm="syz.5.2000" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1024.230693][ T44] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1024.240162][ T44] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1024.249959][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1024.331481][ T29] audit: type=1400 audit(2000000566.337:925): avc: denied { node_bind } for pid=15240 comm="syz.5.2000" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1024.353900][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1024.386411][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1024.441835][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1024.468443][ T29] audit: type=1400 audit(2000000566.347:926): avc: denied { write } for pid=15240 comm="syz.5.2000" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1024.493067][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1024.590607][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1024.909162][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1024.945411][T15248] wlan1 speed is unknown, defaulting to 1000 [ 1024.950641][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1025.133876][T15264] net_ratelimit: 3 callbacks suppressed [ 1025.133893][T15264] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1025.148829][T15264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1025.432242][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1025.490649][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1025.511286][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1025.520342][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1025.528167][T15212] ldm_validate_partition_table(): Disk read failed. [ 1025.534861][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1025.543968][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1025.551841][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1025.596674][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1025.607864][T15212] Dev nbd4: unable to read RDB block 0 [ 1025.613561][T15212] nbd4: unable to read partition table [ 1025.631204][T15212] nbd4: partition table beyond EOD, truncated [ 1025.710461][T15212] ldm_validate_partition_table(): Disk read failed. [ 1025.725295][T15212] Dev nbd4: unable to read RDB block 0 [ 1025.730994][T15212] nbd4: unable to read partition table [ 1025.759487][T15212] nbd4: partition table beyond EOD, truncated [ 1026.508522][T15274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2006'. [ 1026.559532][T15274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2006'. [ 1026.571573][T15274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2006'. [ 1026.581425][T15274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2006'. [ 1026.683399][ T29] audit: type=1400 audit(2000000568.985:927): avc: denied { connect } for pid=15267 comm="syz.2.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1026.713100][ T29] audit: type=1400 audit(2000000568.985:928): avc: denied { name_connect } for pid=15267 comm="syz.2.2005" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1026.932609][T15279] tipc: Enabling of bearer rejected, already enabled [ 1026.941893][T15248] lo speed is unknown, defaulting to 1000 [ 1028.776654][T15283] fuse: Bad value for 'fd' [ 1029.784176][ T29] audit: type=1326 audit(2000000571.894:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15308 comm="syz.4.2014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05da185d29 code=0x0 [ 1030.221829][ T5816] block nbd0: Receive control failed (result -32) [ 1030.409392][T15322] wlan1 speed is unknown, defaulting to 1000 [ 1030.599136][T15322] lo speed is unknown, defaulting to 1000 [ 1032.013647][T15285] nbd0: detected capacity change from 0 to 22 [ 1032.043469][T15329] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1032.080647][T15212] block nbd0: Dead connection, failed to find a fallback [ 1032.089863][T15212] block nbd0: shutting down sockets [ 1032.097234][T15212] blk_print_req_error: 25 callbacks suppressed [ 1032.097248][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.117427][T15212] buffer_io_error: 25 callbacks suppressed [ 1032.117441][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.137754][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.148126][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.170002][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.210975][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2018'. [ 1032.238687][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.279134][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2018'. [ 1032.371130][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.404939][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.488200][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2018'. [ 1032.516142][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.551363][ T29] audit: type=1400 audit(2000000574.475:930): avc: denied { read } for pid=15339 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.680722][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2018'. [ 1032.717380][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.764885][ T29] audit: type=1400 audit(2000000574.475:931): avc: denied { open } for pid=15339 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.790598][ T29] audit: type=1400 audit(2000000574.513:932): avc: denied { getattr } for pid=15339 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.834860][ T29] audit: type=1400 audit(2000000574.681:933): avc: denied { read append } for pid=15340 comm="syz.5.2021" name="sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1032.859200][ T44] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.859281][ T44] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.859417][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.859438][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.859511][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.859530][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.859567][T15212] ldm_validate_partition_table(): Disk read failed. [ 1032.859626][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1032.859647][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1032.975589][ T5816] Bluetooth: hci5: unexpected event for opcode 0x0c47 [ 1033.047177][ T29] audit: type=1400 audit(2000000574.681:934): avc: denied { ioctl open } for pid=15340 comm="syz.5.2021" path="/dev/sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1033.062497][T15212] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.148638][T15212] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1033.639500][ T29] audit: type=1400 audit(2000000574.709:935): avc: denied { create } for pid=15340 comm="syz.5.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1033.664489][T15212] Dev nbd0: unable to read RDB block 0 [ 1033.724966][T15212] nbd0: unable to read partition table [ 1033.752657][T15212] nbd0: partition table beyond EOD, truncated [ 1033.784428][ T29] audit: type=1400 audit(2000000574.822:936): avc: denied { write } for pid=15340 comm="syz.5.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1033.859492][ T29] audit: type=1400 audit(2000000574.943:937): avc: denied { listen } for pid=15340 comm="syz.5.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1033.937435][ T29] audit: type=1400 audit(2000000574.999:938): avc: denied { write } for pid=15340 comm="syz.5.2021" name="sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1034.163826][ T29] audit: type=1400 audit(2000000575.607:939): avc: denied { write } for pid=15332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.400696][T15212] ldm_validate_partition_table(): Disk read failed. [ 1034.410002][T15212] Dev nbd0: unable to read RDB block 0 [ 1034.643180][T15212] nbd0: unable to read partition table [ 1034.823074][T15212] nbd0: partition table beyond EOD, truncated [ 1036.819253][T15406] wlan1 speed is unknown, defaulting to 1000 [ 1036.861749][T15406] lo speed is unknown, defaulting to 1000 [ 1037.135969][T15411] fuse: Bad value for 'fd' [ 1037.388526][ T5816] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1037.398566][ T5816] Bluetooth: hci5: Injecting HCI hardware error event [ 1037.746348][T13396] Bluetooth: hci5: hardware error 0x00 [ 1038.073330][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1038.073689][ T29] audit: type=1400 audit(2000000579.620:947): avc: denied { create } for pid=15422 comm="syz.4.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1039.036890][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1039.186589][T15427] nbd1: detected capacity change from 0 to 22 [ 1039.213135][T15411] block nbd1: shutting down sockets [ 1039.218958][T15212] blk_print_req_error: 25 callbacks suppressed [ 1039.218972][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1039.294478][T15212] buffer_io_error: 25 callbacks suppressed [ 1039.294492][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1039.313419][T15431] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1039.351804][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1039.361487][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1039.824973][ T29] audit: type=1400 audit(2000000581.220:948): avc: denied { write } for pid=15434 comm="syz.0.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1039.943611][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1039.946264][T15440] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2032'. [ 1039.972860][T13396] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1040.068232][T15440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2032'. [ 1040.070404][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1040.089640][T15440] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2032'. [ 1040.103744][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1040.112222][T15440] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2032'. [ 1040.130809][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1040.156653][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1040.418592][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1040.486214][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1040.526275][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1040.571095][ T29] audit: type=1400 audit(2000000581.968:949): avc: denied { create } for pid=15448 comm="syz.5.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1040.619457][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1040.864950][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1040.959646][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1040.971931][ T29] audit: type=1400 audit(2000000582.361:950): avc: denied { create } for pid=15448 comm="syz.5.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1040.993695][T15449] netlink: 'syz.5.2038': attribute type 10 has an invalid length. [ 1041.033182][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1041.049779][T15449] batman_adv: batadv0: Adding interface: team0 [ 1041.056240][T15449] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.081960][T15449] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1041.095397][T15456] fuse: Bad value for 'fd' [ 1041.103289][T15451] netlink: 'syz.5.2038': attribute type 10 has an invalid length. [ 1041.113127][T15451] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2038'. [ 1041.122492][ T29] audit: type=1400 audit(2000000582.511:951): avc: denied { bind } for pid=15448 comm="syz.5.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1041.142294][T15212] ldm_validate_partition_table(): Disk read failed. [ 1041.151325][T15451] team0: entered promiscuous mode [ 1041.156786][T15451] team_slave_0: entered promiscuous mode [ 1041.215148][T15451] team_slave_1: entered promiscuous mode [ 1041.911116][T15451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.928950][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1041.942152][T15451] batman_adv: batadv0: Interface activated: team0 [ 1041.949093][ T29] audit: type=1400 audit(2000000582.585:952): avc: denied { append } for pid=15448 comm="syz.5.2038" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1041.977120][T15451] batman_adv: batadv0: Interface deactivated: team0 [ 1041.983802][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1041.988521][ T29] audit: type=1400 audit(2000000582.585:953): avc: denied { map } for pid=15448 comm="syz.5.2038" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1042.020602][T15451] batman_adv: batadv0: Removing interface: team0 [ 1042.026138][T15212] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1042.587237][ T29] audit: type=1400 audit(2000000582.585:954): avc: denied { write execute } for pid=15448 comm="syz.5.2038" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1042.618214][T15451] bridge0: port 3(team0) entered blocking state [ 1042.625075][T15451] bridge0: port 3(team0) entered disabled state [ 1042.632342][T15212] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1042.634456][ T29] audit: type=1400 audit(2000000583.268:955): avc: denied { create } for pid=15460 comm="syz.2.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1042.662328][ T29] audit: type=1400 audit(2000000583.399:956): avc: denied { create } for pid=15460 comm="syz.2.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1042.684665][T15451] team0: entered allmulticast mode [ 1042.689787][T15451] team_slave_0: entered allmulticast mode [ 1042.699075][T15212] Dev nbd1: unable to read RDB block 0 [ 1042.705778][T15451] team_slave_1: entered allmulticast mode [ 1042.711964][T15212] nbd1: unable to read partition table [ 1042.804597][T15451] bridge0: port 3(team0) entered blocking state [ 1042.810946][T15451] bridge0: port 3(team0) entered forwarding state [ 1042.818209][T15212] nbd1: partition table beyond EOD, truncated [ 1042.824723][T15454] nbd4: detected capacity change from 0 to 22 [ 1042.854499][T15459] block nbd4: shutting down sockets [ 1042.885513][T15212] ldm_validate_partition_table(): Disk read failed. [ 1042.896761][T15212] Dev nbd1: unable to read RDB block 0 [ 1042.904825][T15212] nbd1: unable to read partition table [ 1042.947687][T15212] nbd1: partition table beyond EOD, truncated [ 1043.001702][T15468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2040'. [ 1043.492172][T15213] ldm_validate_partition_table(): Disk read failed. [ 1043.504409][T15213] Dev nbd4: unable to read RDB block 0 [ 1043.510204][T15213] nbd4: unable to read partition table [ 1043.521560][T15213] nbd4: partition table beyond EOD, truncated [ 1043.533117][T15213] ldm_validate_partition_table(): Disk read failed. [ 1043.560136][T15213] Dev nbd4: unable to read RDB block 0 [ 1044.100049][T15213] nbd4: unable to read partition table [ 1044.233587][T15213] nbd4: partition table beyond EOD, truncated [ 1045.080417][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1045.080434][ T29] audit: type=1400 audit(2000000586.056:958): avc: denied { setopt } for pid=15475 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1045.147834][T15479] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1045.166258][ T29] audit: type=1400 audit(2000000586.196:959): avc: denied { write } for pid=15475 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1045.182460][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2046'. [ 1045.355969][T15488] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1045.378088][T15484] wlan1 speed is unknown, defaulting to 1000 [ 1045.436189][T15484] lo speed is unknown, defaulting to 1000 [ 1045.565770][T15479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2046'. [ 1045.636467][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2046'. [ 1045.646679][T15486] fuse: Bad value for 'fd' [ 1045.651276][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2046'. [ 1046.028479][T15482] nbd4: detected capacity change from 0 to 22 [ 1046.076695][T15486] block nbd4: shutting down sockets [ 1046.100810][ C0] blk_print_req_error: 60 callbacks suppressed [ 1046.100830][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.116161][ C0] buffer_io_error: 60 callbacks suppressed [ 1046.116174][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.136792][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.154582][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.164430][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.173797][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.181909][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.200458][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.234631][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.277490][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.310811][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.337005][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.355750][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.377175][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.408398][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.429207][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.457217][T15507] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1046.478309][T15212] ldm_validate_partition_table(): Disk read failed. [ 1046.485048][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.508728][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.528684][T15212] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1046.547750][T15212] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1046.564661][T15508] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1046.571188][T15212] Dev nbd4: unable to read RDB block 0 [ 1046.580010][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1046.586123][T15212] nbd4: unable to read partition table [ 1046.589869][T15508] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1046.606263][T15508] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2052'. [ 1046.664211][T15212] nbd4: partition table beyond EOD, truncated [ 1046.786279][T15212] ldm_validate_partition_table(): Disk read failed. [ 1046.793195][T15212] Dev nbd4: unable to read RDB block 0 [ 1046.799506][T15212] nbd4: unable to read partition table [ 1046.805170][T15212] nbd4: partition table beyond EOD, truncated [ 1047.435286][T15519] fuse: Bad value for 'fd' [ 1047.620500][T15525] fuse: Bad value for 'fd' [ 1047.703072][ T29] audit: type=1400 audit(2000000588.656:960): avc: denied { getopt } for pid=15521 comm="syz.5.2056" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1047.808134][T15527] can0: slcan on ptm0. [ 1048.860064][T15519] nbd4: detected capacity change from 0 to 22 [ 1048.882304][T15524] block nbd4: shutting down sockets [ 1048.903946][T15212] ldm_validate_partition_table(): Disk read failed. [ 1048.924491][T15521] can0 (unregistered): slcan off ptm0. [ 1049.027759][T15212] Dev nbd4: unable to read RDB block 0 [ 1049.035827][T15212] nbd4: unable to read partition table [ 1049.172455][T15517] nbd1: detected capacity change from 0 to 22 [ 1049.183752][T15212] nbd4: partition table beyond EOD, truncated [ 1049.200172][T15212] ldm_validate_partition_table(): Disk read failed. [ 1049.207813][T15525] block nbd1: shutting down sockets [ 1049.210001][T15212] Dev nbd4: unable to read RDB block 0 [ 1049.216720][T15536] ldm_validate_partition_table(): Disk read failed. [ 1049.225793][T15212] nbd4: unable to read partition table [ 1049.231546][T15212] nbd4: partition table beyond EOD, truncated [ 1049.286544][T15536] Dev nbd1: unable to read RDB block 0 [ 1049.311103][T15536] nbd1: unable to read partition table [ 1049.335334][T15536] nbd1: partition table beyond EOD, truncated [ 1049.354407][T15548] fuse: Bad value for 'fd' [ 1049.968561][T15536] ldm_validate_partition_table(): Disk read failed. [ 1050.000139][T15536] Dev nbd1: unable to read RDB block 0 [ 1050.027560][T15536] nbd1: unable to read partition table [ 1050.033261][T15536] nbd1: partition table beyond EOD, truncated [ 1051.942364][T15548] nbd4: detected capacity change from 0 to 22 [ 1052.238512][T13396] block nbd4: Receive control failed (result -104) [ 1052.443200][ T29] audit: type=1400 audit(2000000593.062:961): avc: denied { ioctl } for pid=15581 comm="syz.1.2065" path="socket:[39539]" dev="sockfs" ino=39539 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1052.841791][ T29] audit: type=1400 audit(2000000593.081:962): avc: denied { read } for pid=15581 comm="syz.1.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1053.152043][T15605] fuse: Bad value for 'fd' [ 1053.436963][T15611] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1053.445614][T15611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1053.458337][T15611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1053.467413][T15611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1053.476362][T15611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1054.830018][T15601] nbd5: detected capacity change from 0 to 22 [ 1054.938786][T15595] block nbd5: shutting down sockets [ 1054.949845][ C1] blk_print_req_error: 95 callbacks suppressed [ 1054.949862][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1054.965090][ C1] buffer_io_error: 95 callbacks suppressed [ 1054.965098][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1054.979090][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1054.988227][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1054.999960][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1055.009269][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1055.017346][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1055.026531][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1055.038761][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1055.047887][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1055.443860][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1055.467635][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1055.477774][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1055.487457][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1055.504518][T15626] fuse: Bad value for 'fd' [ 1055.533336][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1055.542954][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1055.550751][T15212] ldm_validate_partition_table(): Disk read failed. [ 1055.558072][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1055.568380][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1055.577201][T15212] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1055.591687][T15212] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1055.605976][T15212] Dev nbd5: unable to read RDB block 0 [ 1055.611625][T15212] nbd5: unable to read partition table [ 1055.618459][T15212] nbd5: partition table beyond EOD, truncated [ 1055.639518][T15212] ldm_validate_partition_table(): Disk read failed. [ 1055.661181][T15212] Dev nbd5: unable to read RDB block 0 [ 1055.676563][T15632] fuse: Bad value for 'fd' [ 1055.680773][T15212] nbd5: unable to read partition table [ 1055.688107][T15212] nbd5: partition table beyond EOD, truncated [ 1055.704058][T15626] nbd1: detected capacity change from 0 to 22 [ 1055.785744][T15637] fuse: Bad value for 'fd' [ 1055.872858][T15632] nbd5: detected capacity change from 0 to 22 [ 1055.886759][T15633] block nbd5: shutting down sockets [ 1055.901904][T15213] ldm_validate_partition_table(): Disk read failed. [ 1055.909057][T15213] Dev nbd5: unable to read RDB block 0 [ 1055.914642][T15213] nbd5: unable to read partition table [ 1056.548933][T13396] block nbd1: Receive control failed (result -104) [ 1056.564322][T15213] nbd5: partition table beyond EOD, truncated [ 1056.576096][T15213] ldm_validate_partition_table(): Disk read failed. [ 1056.583443][T15213] Dev nbd5: unable to read RDB block 0 [ 1056.589636][T15213] nbd5: unable to read partition table [ 1056.595289][T15213] nbd5: partition table beyond EOD, truncated [ 1056.603777][T15643] ldm_validate_partition_table(): Disk read failed. [ 1056.611897][T15643] Dev nbd5: unable to read RDB block 0 [ 1056.617556][T15643] nbd5: unable to read partition table [ 1056.623558][T15643] nbd5: partition table beyond EOD, truncated [ 1057.758860][T15657] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1057.830537][T15658] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2078'. [ 1057.844624][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2078'. [ 1057.854592][ T29] audit: type=1400 audit(2000000598.160:963): avc: denied { write } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.856228][T15658] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2078'. [ 1057.908428][ T29] audit: type=1400 audit(2000000598.160:964): avc: denied { remove_name } for pid=5170 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.912088][T15658] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2078'. [ 1057.963292][ T29] audit: type=1400 audit(2000000598.160:965): avc: denied { rename } for pid=5170 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1058.101720][ T29] audit: type=1400 audit(2000000598.160:966): avc: denied { add_name } for pid=5170 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.208983][ T29] audit: type=1400 audit(2000000598.160:967): avc: denied { unlink } for pid=5170 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1058.244598][ T29] audit: type=1400 audit(2000000598.160:968): avc: denied { create } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1058.367600][ T29] audit: type=1400 audit(2000000598.253:969): avc: denied { setopt } for pid=15654 comm="syz.0.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1058.409346][ T29] audit: type=1400 audit(2000000598.281:970): avc: denied { sqpoll } for pid=15654 comm="syz.0.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1059.686481][T15675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2080'. [ 1060.859650][T15687] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2083'. [ 1061.305030][T15686] fuse: Bad value for 'fd' [ 1061.374644][T15691] fuse: Bad value for 'fd' [ 1061.439344][T15694] fuse: Bad value for 'fd' [ 1063.555367][T15717] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1063.768620][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2091'. [ 1063.790932][T15720] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2091'. [ 1063.800127][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2091'. [ 1063.813864][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2091'. [ 1064.673702][T15731] fuse: Bad value for 'fd' [ 1064.785889][T15734] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2094'. [ 1067.157768][ T29] audit: type=1400 audit(2000000606.756:971): avc: denied { getopt } for pid=15743 comm="syz.5.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1067.902573][ T29] audit: type=1400 audit(2000000607.551:972): avc: denied { setopt } for pid=15756 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1067.944451][ T29] audit: type=1400 audit(2000000607.579:973): avc: denied { bind } for pid=15756 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1068.068008][ T29] audit: type=1400 audit(2000000607.701:974): avc: denied { ioctl } for pid=15758 comm="syz-executor" path="socket:[40395]" dev="sockfs" ino=40395 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1068.190926][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1068.263706][ T29] audit: type=1400 audit(2000000607.841:975): avc: denied { write } for pid=15756 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1068.293219][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1068.304116][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1068.313977][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1068.324421][ T5816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1068.333563][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1068.391600][ T29] audit: type=1400 audit(2000000608.000:976): avc: denied { mounton } for pid=15758 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1068.508333][T15758] wlan1 speed is unknown, defaulting to 1000 [ 1068.619338][T15758] lo speed is unknown, defaulting to 1000 [ 1068.814909][T15768] netlink: 'syz.5.2102': attribute type 8 has an invalid length. [ 1068.823353][T15768] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2102'. [ 1069.408537][ T29] audit: type=1400 audit(2000000608.430:977): avc: denied { create } for pid=15762 comm="syz.5.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1070.633400][ T5816] Bluetooth: hci4: command tx timeout [ 1071.227070][T15784] fuse: Bad value for 'fd' [ 1071.250427][T15758] chnl_net:caif_netlink_parms(): no params data found [ 1071.418298][T15758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.425406][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.443637][T15758] bridge_slave_0: entered allmulticast mode [ 1071.451313][T15758] bridge_slave_0: entered promiscuous mode [ 1071.461630][T15758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.566388][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.573680][T15758] bridge_slave_1: entered allmulticast mode [ 1071.669821][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2107'. [ 1072.087786][T15758] bridge_slave_1: entered promiscuous mode [ 1072.111973][T15791] nbd5: detected capacity change from 0 to 22 [ 1072.143928][T15758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.157763][T15758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.172817][T15799] fuse: Bad value for 'fd' [ 1072.233252][T15758] team0: Port device team_slave_0 added [ 1072.257435][T15758] team0: Port device team_slave_1 added [ 1072.300715][T15758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.320116][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.361323][T15758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.396987][T15758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.429631][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.619581][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1072.637727][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1072.650537][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1072.662926][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1072.678491][ T5828] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1072.686937][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1072.817664][ T5828] Bluetooth: hci4: command tx timeout [ 1072.822576][T15758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.889031][T15758] hsr_slave_0: entered promiscuous mode [ 1072.897469][T15758] hsr_slave_1: entered promiscuous mode [ 1072.904078][T15758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.911626][T15758] Cannot create hsr debugfs directory [ 1072.917201][T15804] wlan1 speed is unknown, defaulting to 1000 [ 1073.092652][T15758] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1073.109997][T15758] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1073.124043][T15758] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1073.143514][T15758] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1073.158575][T15804] lo speed is unknown, defaulting to 1000 [ 1073.210701][T15758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.277263][ T29] audit: type=1326 audit(2000000612.574:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.0.2111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4ebb85d29 code=0x0 [ 1073.482348][T15758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.696488][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.703574][T12316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.737993][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.745126][T12316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.762984][T15816] fuse: Bad value for 'fd' [ 1073.890480][T15758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1073.977771][T15758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1074.053571][ T29] audit: type=1400 audit(2000000613.285:979): avc: denied { sys_module } for pid=15758 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1074.224201][T15758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.233829][T15791] block nbd5: shutting down sockets [ 1074.250825][ C0] blk_print_req_error: 75 callbacks suppressed [ 1074.250841][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.266127][ C0] buffer_io_error: 75 callbacks suppressed [ 1074.266140][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.415278][ T10] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.425044][ T10] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.433988][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.463046][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.503975][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.533998][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.544706][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.575857][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.603395][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.612534][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.622409][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.631943][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.639982][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.649672][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.658569][T15763] ldm_validate_partition_table(): Disk read failed. [ 1074.665257][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.675492][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.684085][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1074.693793][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1074.705330][T15763] Dev nbd5: unable to read RDB block 0 [ 1074.711608][T15763] nbd5: unable to read partition table [ 1074.717932][T15763] nbd5: partition table beyond EOD, truncated [ 1074.722815][T15804] chnl_net:caif_netlink_parms(): no params data found [ 1074.768699][T15763] ldm_validate_partition_table(): Disk read failed. [ 1074.825599][T15763] Dev nbd5: unable to read RDB block 0 [ 1074.834270][T15763] nbd5: unable to read partition table [ 1074.846757][T15763] nbd5: partition table beyond EOD, truncated [ 1074.859597][ T5816] Bluetooth: hci6: command tx timeout [ 1074.909955][T15844] block device autoloading is deprecated and will be removed. [ 1075.036858][ T5816] Bluetooth: hci4: command tx timeout [ 1075.399218][T15758] veth0_vlan: entered promiscuous mode [ 1075.469853][T15804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.477011][T15804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.495198][T15804] bridge_slave_0: entered allmulticast mode [ 1075.512522][T15804] bridge_slave_0: entered promiscuous mode [ 1075.531807][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1075.538561][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1075.556771][T15804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.565262][T15804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.572454][T15804] bridge_slave_1: entered allmulticast mode [ 1075.582721][T15804] bridge_slave_1: entered promiscuous mode [ 1075.625390][T15851] ceph: No mds server is up or the cluster is laggy [ 1075.764056][T15758] veth1_vlan: entered promiscuous mode [ 1075.765562][T15856] 9pnet_virtio: no channels available for device syz [ 1075.832031][ T29] audit: type=1400 audit(2000000614.894:980): avc: denied { setopt } for pid=15850 comm="syz.5.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1075.832854][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1076.031768][ T29] audit: type=1400 audit(2000000614.903:981): avc: denied { write } for pid=15850 comm="syz.5.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1076.061864][T15804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.071195][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1076.096850][T15804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.134456][T15758] veth0_macvtap: entered promiscuous mode [ 1076.253875][T15758] veth1_macvtap: entered promiscuous mode [ 1076.290697][T15804] team0: Port device team_slave_0 added [ 1076.302730][T15804] team0: Port device team_slave_1 added [ 1076.378350][T15804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.388513][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.437514][T15804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.461564][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.484411][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.494274][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.580058][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.590438][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.601209][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.611352][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.622078][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.634527][T15758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.643065][T15804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.652133][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.682291][T15804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.695403][T15861] fuse: Bad value for 'fd' [ 1076.749563][T15804] hsr_slave_0: entered promiscuous mode [ 1076.757798][T15804] hsr_slave_1: entered promiscuous mode [ 1076.766166][T15804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1076.775328][T15804] Cannot create hsr debugfs directory [ 1076.780996][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.793784][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.807608][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.818975][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.829055][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.839883][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.849885][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.860542][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.871539][T15758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.902817][T15758] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.916262][T15758] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.929427][T15758] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.939851][T15758] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.114828][ T5816] Bluetooth: hci6: command tx timeout [ 1077.254507][ T5816] Bluetooth: hci4: command tx timeout [ 1077.856223][ T29] audit: type=1326 audit(2000000616.868:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15871 comm="syz.2.2121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe576b85d29 code=0x0 [ 1078.303500][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.323019][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.461424][T11523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.491571][T11523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.501050][T15804] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1079.174382][ T29] audit: type=1400 audit(2000000618.093:983): avc: denied { mounton } for pid=15758 comm="syz-executor" path="/root/syzkaller.660m6E/syz-tmp" dev="sda1" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1079.246220][ T29] audit: type=1400 audit(2000000618.093:984): avc: denied { mount } for pid=15758 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1079.282665][T15804] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1079.314926][ T5816] Bluetooth: hci6: command tx timeout [ 1079.339210][T15804] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1079.392676][ T29] audit: type=1400 audit(2000000618.121:985): avc: denied { mount } for pid=15758 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1079.485766][T15804] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1079.489515][ T29] audit: type=1400 audit(2000000618.121:986): avc: denied { mounton } for pid=15758 comm="syz-executor" path="/root/syzkaller.660m6E/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1079.521103][ T29] audit: type=1400 audit(2000000618.121:987): avc: denied { mounton } for pid=15758 comm="syz-executor" path="/root/syzkaller.660m6E/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1079.549394][ T29] audit: type=1400 audit(2000000618.131:988): avc: denied { unmount } for pid=15758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1079.569724][ T29] audit: type=1400 audit(2000000618.196:989): avc: denied { mounton } for pid=15758 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1079.593868][ T29] audit: type=1400 audit(2000000618.196:990): avc: denied { mount } for pid=15758 comm="syz-executor" name="/" dev="gadgetfs" ino=6901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1079.680291][ T29] audit: type=1400 audit(2000000618.196:991): avc: denied { mount } for pid=15758 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1079.751181][T15891] fuse: Bad value for 'fd' [ 1079.767909][ T29] audit: type=1400 audit(2000000618.196:992): avc: denied { mounton } for pid=15758 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1079.777227][T15804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.915282][T15804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.939414][T15891] nbd6: detected capacity change from 0 to 22 [ 1079.949209][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.956348][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.978481][T15804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1080.000539][T15804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1080.014068][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.021168][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.123645][T15804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.544033][ T5816] block nbd6: Receive control failed (result -104) [ 1081.077963][T15804] veth0_vlan: entered promiscuous mode [ 1081.111148][T15804] veth1_vlan: entered promiscuous mode [ 1081.219728][T15915] syz.0.2124: attempt to access beyond end of device [ 1081.219728][T15915] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1081.365022][T15804] veth0_macvtap: entered promiscuous mode [ 1081.398495][T15804] veth1_macvtap: entered promiscuous mode [ 1081.419359][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.438580][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.473550][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.513937][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.530120][ T5816] Bluetooth: hci6: command tx timeout [ 1081.573579][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.621659][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.633194][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.651311][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.662847][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.675586][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.687694][T15804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.704918][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.718678][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.730991][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.743459][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.772974][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.787554][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.139787][T15922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2128'. [ 1082.165720][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.187369][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.208388][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.230288][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.254515][T15804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.295898][T15804] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.305131][T15804] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.321422][T15804] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.335418][T15804] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.428340][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.438294][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.528492][T15925] fuse: Bad value for 'fd' [ 1082.540653][T12316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.553009][T12316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.696736][T15927] fuse: Bad value for 'fd' [ 1083.298594][T15937] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1083.369483][T15940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2131'. [ 1083.391635][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2131'. [ 1083.419153][T15940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2131'. [ 1083.485310][T15940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2131'. [ 1084.173513][ T44] block nbd4: Possible stuck request ffff88803497fc00: control (read@0,4096B). Runtime 30 seconds [ 1084.772007][T15927] block nbd0: shutting down sockets [ 1084.897192][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1084.897206][ T29] audit: type=1400 audit(2000000623.444:997): avc: denied { bind } for pid=15949 comm="syz.5.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1085.636878][T15949] delete_channel: no stack [ 1086.162247][T15963] syz.5.2136: attempt to access beyond end of device [ 1086.162247][T15963] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1086.666022][ T29] audit: type=1326 audit(2000000625.099:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.7.2139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c385d29 code=0x0 [ 1087.703349][T15988] fuse: Bad value for 'fd' [ 1087.791379][T15991] fuse: Bad value for 'fd' [ 1088.219545][T16000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2140'. [ 1088.564924][ T44] block nbd1: Possible stuck request ffff888026000c40: control (read@0,4096B). Runtime 30 seconds [ 1088.598229][T16001] block nbd5: shutting down sockets [ 1091.608277][ T29] audit: type=1400 audit(2000000629.645:999): avc: denied { connect } for pid=16008 comm="syz.7.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1092.687132][ T29] audit: type=1326 audit(2000000630.730:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.7.2152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c385d29 code=0x0 [ 1092.888637][T16043] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1092.964636][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2154'. [ 1092.985063][T16044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2154'. [ 1093.018712][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2154'. [ 1093.048530][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2154'. [ 1093.532736][T16052] fuse: Bad value for 'fd' [ 1095.354387][T16073] atomic_op ffff888058a42998 conn xmit_atomic 0000000000000000 [ 1096.269738][ T5828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1096.292568][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1096.303382][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1096.314155][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1096.322850][ T5828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1096.332858][ T5828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1096.409588][T16076] wlan1 speed is unknown, defaulting to 1000 [ 1096.697748][ T29] audit: type=1326 audit(2000000634.481:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.5.2162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284e985d29 code=0x0 [ 1096.895644][T16076] lo speed is unknown, defaulting to 1000 [ 1097.898923][ T29] audit: type=1326 audit(2000000635.604:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.5.2164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284e985d29 code=0x0 [ 1098.553366][ T5828] Bluetooth: hci7: command tx timeout [ 1098.602584][ T29] audit: type=1326 audit(2000000636.268:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.5.2167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284e985d29 code=0x0 [ 1098.638704][T16076] chnl_net:caif_netlink_parms(): no params data found [ 1098.896639][T16076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.909610][T16076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.947155][T16076] bridge_slave_0: entered allmulticast mode [ 1098.957574][T16076] bridge_slave_0: entered promiscuous mode [ 1098.991381][T16111] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2168'. [ 1099.009151][T16076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.019197][T16076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.028207][T16076] bridge_slave_1: entered allmulticast mode [ 1099.048429][T16076] bridge_slave_1: entered promiscuous mode [ 1099.391479][T16100] fuse: Bad value for 'fd' [ 1099.425334][T16076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.452377][T16076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.515574][T16076] team0: Port device team_slave_0 added [ 1099.525421][T16076] team0: Port device team_slave_1 added [ 1099.803012][T16076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.868886][ T29] audit: type=1400 audit(2000000637.456:1004): avc: denied { read write } for pid=16114 comm="syz.5.2169" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1099.910888][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.910969][T16076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.940245][T16076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.963276][T16118] binder: 16114:16118 ioctl 400c620e 200001c0 returned -22 [ 1100.046917][ T29] audit: type=1400 audit(2000000637.456:1005): avc: denied { open } for pid=16114 comm="syz.5.2169" path="/dev/binderfs/binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1100.062691][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.095529][ T29] audit: type=1400 audit(2000000637.540:1006): avc: denied { ioctl } for pid=16114 comm="syz.5.2169" path="/dev/binderfs/binder0" dev="binder" ino=15 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1100.276742][ T29] audit: type=1400 audit(2000000637.549:1007): avc: denied { ioctl } for pid=16114 comm="syz.5.2169" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1100.330078][T16076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.431136][ T29] audit: type=1400 audit(2000000637.578:1008): avc: denied { create } for pid=16114 comm="syz.5.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1100.476296][T16110] block nbd0: shutting down sockets [ 1100.492822][ T29] audit: type=1400 audit(2000000637.596:1009): avc: denied { connect } for pid=16114 comm="syz.5.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1100.561160][T16126] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1100.584083][T16126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2172'. [ 1100.602750][T16126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2172'. [ 1100.622933][T16126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2172'. [ 1100.625111][T16076] hsr_slave_0: entered promiscuous mode [ 1100.644155][T16126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2172'. [ 1100.657436][T16076] hsr_slave_1: entered promiscuous mode [ 1100.670810][T16076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1100.690999][T16076] Cannot create hsr debugfs directory [ 1100.773363][ T5828] Bluetooth: hci7: command tx timeout [ 1102.010584][ T29] audit: type=1326 audit(2000000639.458:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.2.2174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe576b85d29 code=0x0 [ 1102.570298][T16076] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1102.668911][T16076] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1102.682431][T16076] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1102.728036][T16076] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1103.417668][ T5828] Bluetooth: hci7: command tx timeout [ 1103.553518][ T29] audit: type=1326 audit(2000000640.898:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16149 comm="syz.2.2177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe576b85d29 code=0x0 [ 1103.975295][T16076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.048692][T16076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.083622][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.090764][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.120182][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.127303][T12247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.165225][T16076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1104.200950][T16076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.316207][T16162] fuse: Bad value for 'fd' [ 1104.492287][T16076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.502344][T16169] syz.7.2181 (16169): drop_caches: 2 [ 1104.505219][T16162] syz.7.2181 (16162): drop_caches: 2 [ 1104.525368][T16169] syz.7.2181 (16169): drop_caches: 2 [ 1104.527243][T16162] syz.7.2181 (16162): drop_caches: 2 [ 1104.626459][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1105.227628][T16076] veth0_vlan: entered promiscuous mode [ 1105.280253][T16076] veth1_vlan: entered promiscuous mode [ 1105.368693][ T29] audit: type=1326 audit(2000000642.591:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16174 comm="syz.0.2178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4ebb85d29 code=0x0 [ 1105.389998][T16076] veth0_macvtap: entered promiscuous mode [ 1105.676149][ T5828] Bluetooth: hci7: command tx timeout [ 1105.723076][T16076] veth1_macvtap: entered promiscuous mode [ 1106.021187][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.052474][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.628034][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.674705][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.684566][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.707595][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.727766][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.752632][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.858729][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.877125][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.915756][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.946501][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.968631][T16076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.046460][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.076327][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.092377][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.113770][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.125391][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.136563][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.156169][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.789659][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.799972][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.810833][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.824722][T16076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.835551][T16076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.847080][T16076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.869593][T16076] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.878492][T16076] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.888294][T16076] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.897325][T16076] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.046182][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.094873][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.147412][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.166145][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.452294][T16220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1109.678196][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1109.897644][T16233] syz.8.2160: attempt to access beyond end of device [ 1109.897644][T16233] nbd8: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1110.113389][T16220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1110.125779][T16220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1111.525691][T16252] fuse: Bad value for 'fd' [ 1112.714950][ T10] block nbd6: Possible stuck request ffff8880261d0000: control (read@0,4096B). Runtime 30 seconds [ 1112.771374][ T29] audit: type=1326 audit(2000000649.523:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.7.2199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c385d29 code=0x0 [ 1113.462805][ T29] audit: type=1326 audit(2000000650.168:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16272 comm="syz.8.2202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7785d29 code=0x0 [ 1113.801151][ T29] audit: type=1326 audit(2000000650.477:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16270 comm="syz.5.2200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284e985d29 code=0x0 [ 1114.620156][ T29] audit: type=1326 audit(2000000651.122:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16273 comm="syz.7.2201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c385d29 code=0x0 [ 1116.289299][T16297] syz.8.2206: attempt to access beyond end of device [ 1116.289299][T16297] nbd8: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1116.467554][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2205'. [ 1117.867604][ T44] block nbd4: Possible stuck request ffff88803497fc00: control (read@0,4096B). Runtime 60 seconds [ 1118.135872][T16315] atomic_op ffff888021ff6198 conn xmit_atomic 0000000000000000 [ 1120.370174][ T29] audit: type=1326 audit(2000000656.604:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16337 comm="syz.2.2215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe576b85d29 code=0x0 [ 1121.314819][ T44] block nbd1: Possible stuck request ffff888026000c40: control (read@0,4096B). Runtime 60 seconds [ 1121.436591][ T29] audit: type=1326 audit(2000000657.062:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.8.2216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7785d29 code=0x0 [ 1124.448564][ T29] audit: type=1326 audit(2000000660.448:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.8.2225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7785d29 code=0x0 [ 1126.674407][T16398] atomic_op ffff888054b23998 conn xmit_atomic 0000000000000000 [ 1126.793728][T16401] fuse: Bad value for 'fd' [ 1126.807292][T16402] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1126.831181][T16402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1126.890626][T16402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1126.910529][T16402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1126.928311][T16402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1127.143098][T16401] nbd7: detected capacity change from 0 to 22 [ 1127.279807][T16407] block nbd7: shutting down sockets [ 1127.302031][ C0] blk_print_req_error: 25 callbacks suppressed [ 1127.302048][ C0] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.317300][ C0] buffer_io_error: 25 callbacks suppressed [ 1127.317308][ C0] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1127.333371][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.342832][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1127.457578][ T29] audit: type=1326 audit(2000000663.207:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16411 comm="syz.2.2232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe576b85d29 code=0x0 [ 1127.893681][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1127.905919][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1128.089612][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1128.143762][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1128.162120][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1128.187296][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1128.349665][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1128.358939][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1128.367024][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1128.376263][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1128.386615][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1128.396025][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1128.407731][T15947] ldm_validate_partition_table(): Disk read failed. [ 1128.444544][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1128.461621][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1128.471069][T15947] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1128.482561][T15947] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1128.499797][T15947] Dev nbd7: unable to read RDB block 0 [ 1128.510647][T15947] nbd7: unable to read partition table [ 1128.521091][T15947] nbd7: partition table beyond EOD, truncated [ 1128.550686][T16408] ldm_validate_partition_table(): Disk read failed. [ 1128.559602][T16408] Dev nbd7: unable to read RDB block 0 [ 1128.565901][T16408] nbd7: unable to read partition table [ 1128.575780][T16408] nbd7: partition table beyond EOD, truncated [ 1128.598309][T15947] ldm_validate_partition_table(): Disk read failed. [ 1129.204046][T15947] Dev nbd7: unable to read RDB block 0 [ 1129.227704][T15947] nbd7: unable to read partition table [ 1129.258650][T15947] nbd7: partition table beyond EOD, truncated [ 1129.291127][ T29] audit: type=1326 audit(2000000664.975:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16437 comm="syz.7.2238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c385d29 code=0x0 [ 1130.393871][T16457] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1130.434517][T16457] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2243'. [ 1130.475739][T16457] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2243'. [ 1130.502052][T16459] wlan1 speed is unknown, defaulting to 1000 [ 1130.518282][T16457] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2243'. [ 1130.561566][T16457] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2243'. [ 1130.873824][T16459] lo speed is unknown, defaulting to 1000 [ 1131.122108][T16465] fuse: Bad value for 'fd' [ 1131.663863][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2245'. [ 1132.098619][T16446] nbd0: detected capacity change from 0 to 22 [ 1132.192602][T16465] block nbd0: shutting down sockets [ 1132.321208][T15947] ldm_validate_partition_table(): Disk read failed. [ 1132.338081][T15947] Dev nbd0: unable to read RDB block 0 [ 1132.404040][T15947] nbd0: unable to read partition table [ 1132.423372][T15947] nbd0: partition table beyond EOD, truncated [ 1132.435025][T15947] ldm_validate_partition_table(): Disk read failed. [ 1132.456405][T15947] Dev nbd0: unable to read RDB block 0 [ 1132.590305][T15947] nbd0: unable to read partition table [ 1132.591303][T16484] fuse: Bad value for 'fd' [ 1132.596022][T15947] nbd0: partition table beyond EOD, truncated [ 1132.818657][T16476] blk_print_req_error: 70 callbacks suppressed [ 1132.818670][T16476] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1132.876293][T16476] buffer_io_error: 70 callbacks suppressed [ 1132.876308][T16476] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1132.902542][T15947] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1132.917417][T15947] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1133.500761][T15947] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1133.553252][T15947] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1133.563011][T15947] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1133.573023][T15947] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1134.089989][T15947] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1134.160552][T15947] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1134.168645][T15947] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1134.182983][T15947] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1134.210541][T16476] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1134.214932][ T29] audit: type=1326 audit(2000000669.587:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16502 comm="syz.2.2253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe576b85d29 code=0x0 [ 1134.982534][T16476] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1135.009271][T16476] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.021232][T16476] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1135.173817][T16514] wlan1 speed is unknown, defaulting to 1000 [ 1135.603468][T16514] lo speed is unknown, defaulting to 1000 [ 1136.500463][T16530] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1136.534048][T16530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1136.543032][T16530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1136.610090][T16530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1136.640181][T16530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1136.746149][T16476] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1136.950730][T16476] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1136.959488][T16476] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1137.397425][T16476] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1137.730813][T16476] ldm_validate_partition_table(): Disk read failed. [ 1137.780122][T16476] Dev nbd0: unable to read RDB block 0 [ 1137.910319][T16476] nbd0: unable to read partition table [ 1138.154274][ T29] audit: type=1326 audit(2000000673.263:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.8.2262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7785d29 code=0x0 [ 1138.241785][T16476] nbd0: partition table beyond EOD, truncated [ 1138.282401][T16556] fuse: Bad value for 'fd' [ 1138.575339][T16562] atomic_op ffff8880444cf998 conn xmit_atomic 0000000000000000 [ 1139.110186][T16561] nbd5: detected capacity change from 0 to 22 [ 1139.121873][T16556] block nbd5: shutting down sockets [ 1139.165352][ C0] blk_print_req_error: 10 callbacks suppressed [ 1139.165371][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.180628][ C0] buffer_io_error: 10 callbacks suppressed [ 1139.180642][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.297325][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.307181][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.322482][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.332059][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.341882][ T29] audit: type=1326 audit(2000000674.376:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.8.2265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7785d29 code=0x0 [ 1139.348210][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.382951][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.392146][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.410802][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.418864][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.433847][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.445707][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.459313][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.471145][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.483619][ T29] audit: type=1400 audit(2000000674.507:1025): avc: denied { bind } for pid=16571 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1139.490085][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.504657][ T29] audit: type=1400 audit(2000000674.535:1026): avc: denied { listen } for pid=16571 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1139.517841][T15763] ldm_validate_partition_table(): Disk read failed. [ 1139.534216][ T29] audit: type=1400 audit(2000000674.554:1027): avc: denied { append } for pid=16571 comm="syz.0.2267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1139.577517][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.599882][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.619423][T15763] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1139.641697][T15763] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1139.664320][T15763] Dev nbd5: unable to read RDB block 0 [ 1139.693177][T15763] nbd5: unable to read partition table [ 1139.716916][T15763] nbd5: partition table beyond EOD, truncated [ 1139.786019][T16563] ldm_validate_partition_table(): Disk read failed. [ 1139.792897][T16563] Dev nbd5: unable to read RDB block 0 [ 1139.806144][T16563] nbd5: unable to read partition table [ 1139.811868][T16563] nbd5: partition table beyond EOD, truncated [ 1139.819478][T15763] ldm_validate_partition_table(): Disk read failed. [ 1139.826805][T15763] Dev nbd5: unable to read RDB block 0 [ 1139.832465][T15763] nbd5: unable to read partition table [ 1139.903275][T16577] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2267'. [ 1140.044284][ T29] audit: type=1400 audit(2000000674.900:1028): avc: denied { write } for pid=16571 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1140.433330][T15763] nbd5: partition table beyond EOD, truncated [ 1140.624879][ T29] audit: type=1400 audit(2000000674.900:1029): avc: denied { nlmsg_write } for pid=16571 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1141.243151][T16589] atomic_op ffff88804f80a198 conn xmit_atomic 0000000000000000 [ 1141.243697][ T29] audit: type=1400 audit(2000000675.031:1030): avc: denied { write } for pid=16571 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1143.180856][ T29] audit: type=1326 audit(2000000677.968:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16607 comm="syz.2.2275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe576b85d29 code=0x0 [ 1144.295050][ T29] audit: type=1326 audit(2000000678.950:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16627 comm="syz.7.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c385d29 code=0x0 [ 1144.333903][T16633] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1144.344389][ T29] audit: type=1400 audit(2000000679.044:1033): avc: denied { create } for pid=16618 comm="syz.5.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1144.930398][ T29] audit: type=1400 audit(2000000679.044:1034): avc: denied { ioctl } for pid=16618 comm="syz.5.2277" path="socket:[44614]" dev="sockfs" ino=44614 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1145.049444][ T10] block nbd6: Possible stuck request ffff8880261d0000: control (read@0,4096B). Runtime 60 seconds [ 1145.122316][T16639] fuse: Bad value for 'fd' [ 1145.984804][T16639] nbd8: detected capacity change from 0 to 22 [ 1146.056891][T16645] block nbd8: shutting down sockets [ 1146.165981][T16652] delete_channel: no stack [ 1146.578963][ T44] blk_print_req_error: 40 callbacks suppressed [ 1146.578977][ T44] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1146.595214][ T44] buffer_io_error: 40 callbacks suppressed [ 1146.595222][ T44] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1146.609065][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1146.621383][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1146.629472][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1146.646506][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1146.654413][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1146.663845][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1146.785726][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1146.794820][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1146.821773][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1146.875245][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1146.897171][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1146.957479][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1146.991528][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1147.002766][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1147.011288][T15947] ldm_validate_partition_table(): Disk read failed. [ 1147.018080][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1147.028324][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1147.038603][T15947] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1147.050042][T15947] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1147.058828][T15947] Dev nbd8: unable to read RDB block 0 [ 1147.078833][T15947] nbd8: unable to read partition table [ 1147.085454][T15947] nbd8: partition table beyond EOD, truncated [ 1147.263572][T15947] ldm_validate_partition_table(): Disk read failed. [ 1147.274679][T15947] Dev nbd8: unable to read RDB block 0 [ 1147.288258][T15947] nbd8: unable to read partition table [ 1147.300831][T15947] nbd8: partition table beyond EOD, truncated [ 1147.308870][T16655] ldm_validate_partition_table(): Disk read failed. [ 1147.326727][T16655] Dev nbd8: unable to read RDB block 0 [ 1147.333244][T16655] nbd8: unable to read partition table [ 1147.338923][T16655] nbd8: partition table beyond EOD, truncated [ 1148.731233][T16681] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1148.739402][T16681] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1149.739344][T16690] fuse: Bad value for 'fd' [ 1149.842318][ T29] audit: type=1326 audit(2000000684.142:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.7.2292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c385d29 code=0x0 [ 1150.482233][ T44] block nbd4: Possible stuck request ffff88803497fc00: control (read@0,4096B). Runtime 90 seconds [ 1150.618772][T16690] nbd8: detected capacity change from 0 to 22 [ 1150.766538][T16695] block nbd8: shutting down sockets [ 1150.772376][T15947] ldm_validate_partition_table(): Disk read failed. [ 1151.415029][T15947] Dev nbd8: unable to read RDB block 0 [ 1151.420650][T15947] nbd8: unable to read partition table [ 1151.426979][T15947] nbd8: partition table beyond EOD, truncated [ 1151.527340][T16702] ldm_validate_partition_table(): Disk read failed. [ 1151.549075][T16702] Dev nbd8: unable to read RDB block 0 [ 1151.558998][T16702] nbd8: unable to read partition table [ 1151.565296][T16702] nbd8: partition table beyond EOD, truncated [ 1151.574248][T15947] ldm_validate_partition_table(): Disk read failed. [ 1151.643046][T15947] Dev nbd8: unable to read RDB block 0 [ 1151.657294][T15947] nbd8: unable to read partition table [ 1151.672795][T15947] nbd8: partition table beyond EOD, truncated [ 1152.029377][T16720] netlink: 284 bytes leftover after parsing attributes in process `syz.7.2296'. [ 1152.067248][T16720] netlink: zone id is out of range [ 1152.075554][T16720] netlink: zone id is out of range [ 1152.083188][T16720] netlink: zone id is out of range [ 1152.091717][T16720] netlink: zone id is out of range [ 1152.097298][T16720] netlink: zone id is out of range [ 1152.104872][T16720] netlink: zone id is out of range [ 1152.110380][T16720] netlink: zone id is out of range [ 1152.115526][T16720] netlink: zone id is out of range [ 1152.560588][T16723] fuse: Bad value for 'fd' [ 1153.765535][T16744] atomic_op ffff888012646998 conn xmit_atomic 0000000000000000 [ 1154.213162][ T44] block nbd1: Possible stuck request ffff888026000c40: control (read@0,4096B). Runtime 90 seconds [ 1154.421376][ T29] audit: type=1400 audit(2000000688.482:1036): avc: denied { create } for pid=16748 comm="syz.7.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1154.460266][ T29] audit: type=1400 audit(2000000688.501:1037): avc: denied { connect } for pid=16748 comm="syz.7.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1154.661937][T16752] wlan1 speed is unknown, defaulting to 1000 [ 1154.769828][T16752] lo speed is unknown, defaulting to 1000 [ 1158.002973][T16757] wlan1 speed is unknown, defaulting to 1000 [ 1158.221608][T16757] lo speed is unknown, defaulting to 1000 [ 1159.618436][T16766] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2307'. [ 1160.446782][T16766] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2307'. [ 1160.465441][T16766] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2307'. [ 1160.508200][T16766] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2307'. [ 1161.918823][ T29] audit: type=1400 audit(2000000695.488:1038): avc: denied { create } for pid=16782 comm="syz.7.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1162.872472][ T29] audit: type=1400 audit(2000000696.386:1039): avc: denied { map } for pid=16789 comm="syz.5.2313" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1162.970549][ T29] audit: type=1400 audit(2000000696.386:1040): avc: denied { execute } for pid=16789 comm="syz.5.2313" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1163.094072][ T29] audit: type=1400 audit(2000000696.414:1041): avc: denied { ioctl } for pid=16789 comm="syz.5.2313" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1163.951184][ T29] audit: type=1400 audit(2000000697.396:1042): avc: denied { getopt } for pid=16808 comm="syz.0.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1164.221680][ T29] audit: type=1400 audit(2000000697.396:1043): avc: denied { getopt } for pid=16808 comm="syz.0.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1164.260673][T16816] netem: change failed [ 1164.265926][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2314'. [ 1164.329249][T16817] atomic_op ffff8880438aa998 conn xmit_atomic 0000000000000000 [ 1165.901434][ T29] audit: type=1326 audit(2000000699.211:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16826 comm="syz.8.2321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7785d29 code=0x0 [ 1165.963094][T16828] atomic_op ffff88805a403198 conn xmit_atomic 0000000000000000 [ 1168.679528][T16849] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1168.698961][T16849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2325'. [ 1168.710869][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2325'. [ 1168.720836][T16849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2325'. [ 1168.730786][T16849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2325'. [ 1169.534450][ T29] audit: type=1400 audit(2000000702.616:1045): avc: denied { append } for pid=16858 comm="syz.5.2329" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1169.908113][ T29] audit: type=1400 audit(2000000702.915:1046): avc: denied { bind } for pid=16858 comm="syz.5.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1169.937184][T16866] Invalid source name [ 1169.943057][T16866] UBIFS error (pid: 16866): cannot open "/dev/sg0", error -22 [ 1170.106044][ T29] audit: type=1400 audit(2000000702.915:1047): avc: denied { write } for pid=16858 comm="syz.5.2329" path="socket:[45469]" dev="sockfs" ino=45469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1170.608115][ T29] audit: type=1400 audit(2000000703.617:1048): avc: denied { create } for pid=16867 comm="syz.8.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1171.058796][ T29] audit: type=1400 audit(2000000703.617:1049): avc: denied { ioctl } for pid=16867 comm="syz.8.2330" path="socket:[45012]" dev="sockfs" ino=45012 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1171.772908][T16883] atomic_op ffff888021f7b998 conn xmit_atomic 0000000000000000 [ 1174.121147][ T29] audit: type=1400 audit(2000000706.161:1050): avc: denied { append } for pid=16894 comm="syz.8.2337" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1174.259103][ T29] audit: type=1400 audit(2000000706.180:1051): avc: denied { read write } for pid=16894 comm="syz.8.2337" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1174.419116][ T29] audit: type=1400 audit(2000000706.180:1052): avc: denied { open } for pid=16894 comm="syz.8.2337" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1174.443491][ T29] audit: type=1400 audit(2000000706.236:1053): avc: denied { setopt } for pid=16894 comm="syz.8.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1174.707290][ T29] audit: type=1400 audit(2000000707.433:1054): avc: denied { setattr } for pid=16906 comm="syz.5.2339" name="numa_maps" dev="proc" ino=45517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1175.426188][T16915] wlan1 speed is unknown, defaulting to 1000 [ 1175.507664][T16915] lo speed is unknown, defaulting to 1000 [ 1176.251004][ T29] audit: type=1400 audit(2000000708.125:1055): avc: denied { create } for pid=16911 comm="syz.0.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1176.463055][ T29] audit: type=1400 audit(2000000708.125:1056): avc: denied { sys_admin } for pid=16911 comm="syz.0.2340" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1176.845186][T16930] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1176.879734][T16930] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2343'. [ 1176.955102][T16930] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2343'. [ 1176.970888][T16930] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2343'. [ 1176.980883][T16930] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2343'. [ 1177.147759][ T10] block nbd6: Possible stuck request ffff8880261d0000: control (read@0,4096B). Runtime 90 seconds [ 1177.319709][T16941] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1177.463414][T16941] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2346'. [ 1177.539002][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2346'. [ 1177.656828][ T29] audit: type=1400 audit(2000000710.136:1057): avc: denied { mount } for pid=16938 comm="syz.7.2345" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1178.074503][T16941] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2346'. [ 1178.155756][T16941] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2346'. [ 1178.173478][ T29] audit: type=1400 audit(2000000710.146:1058): avc: denied { mounton } for pid=16938 comm="syz.7.2345" path="/48/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1178.200287][ T29] audit: type=1400 audit(2000000710.146:1059): avc: denied { mount } for pid=16938 comm="syz.7.2345" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1178.235551][ T29] audit: type=1400 audit(2000000710.183:1060): avc: denied { getopt } for pid=16938 comm="syz.7.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1178.306685][ T29] audit: type=1400 audit(2000000710.810:1061): avc: denied { unmount } for pid=15804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1178.591732][T16956] atomic_op ffff888058b30198 conn xmit_atomic 0000000000000000 [ 1180.219071][T16968] fuse: Bad value for 'fd' [ 1180.346037][ T29] audit: type=1400 audit(2000000712.699:1062): avc: denied { mount } for pid=16961 comm="syz.2.2351" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1181.185069][ T5828] block nbd8: Receive control failed (result -32) [ 1181.194219][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1181.197165][T16968] block nbd8: shutting down sockets [ 1181.446059][ T25] usb 1-1: device descriptor read/64, error -71 [ 1181.884620][ T29] audit: type=1326 audit(2000000714.075:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16984 comm="syz.8.2355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7785d29 code=0x0 [ 1181.937271][T16988] fuse: Bad value for 'fd' [ 1181.947243][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1182.203328][T16988] block nbd7: shutting down sockets [ 1182.258437][ T25] usb 1-1: device descriptor read/64, error -71 [ 1182.425344][ T25] usb usb1-port1: attempt power cycle [ 1182.485091][T17000] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2358'. [ 1182.682473][ T44] block nbd4: Possible stuck request ffff88803497fc00: control (read@0,4096B). Runtime 120 seconds [ 1182.852628][ T29] audit: type=1400 audit(2000000715.075:1064): avc: denied { read } for pid=17001 comm="syz.8.2359" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1182.911234][ T29] audit: type=1400 audit(2000000715.075:1065): avc: denied { open } for pid=17001 comm="syz.8.2359" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1182.947363][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1182.968617][ T29] audit: type=1400 audit(2000000715.188:1066): avc: denied { write } for pid=17001 comm="syz.8.2359" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1183.174293][T17009] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1183.228492][ T25] usb 1-1: device descriptor read/8, error -71 [ 1184.098078][T17009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2362'. [ 1184.207331][T17009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2362'. [ 1184.224922][T17009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2362'. [ 1184.257611][T17009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2362'. [ 1184.266916][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1184.533210][ T25] usb 1-1: device not accepting address 19, error -71 [ 1184.565401][ T25] usb usb1-port1: unable to enumerate USB device [ 1184.855023][T17032] net_ratelimit: 6 callbacks suppressed [ 1184.855040][T17032] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1184.868798][T17032] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1185.604391][T17042] atomic_op ffff888058b30998 conn xmit_atomic 0000000000000000 [ 1186.853981][ T29] audit: type=1326 audit(2000000718.817:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.7.2369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c385d29 code=0x0 [ 1186.908699][T17053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2370'. [ 1186.988944][ T44] block nbd1: Possible stuck request ffff888026000c40: control (read@0,4096B). Runtime 120 seconds [ 1187.031711][T17029] fuse: Bad value for 'fd' [ 1187.350346][T17029] block nbd0: shutting down sockets [ 1188.884702][ T29] audit: type=1400 audit(2000000720.716:1068): avc: denied { set_context_mgr } for pid=17070 comm="syz.8.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1188.919763][T17071] binder: BINDER_SET_CONTEXT_MGR already set [ 1188.926056][T17071] binder: 17070:17071 ioctl 4018620d 20004a80 returned -16 [ 1189.946347][ T29] audit: type=1400 audit(2000000720.744:1069): avc: denied { map } for pid=17070 comm="syz.8.2374" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1190.170541][ T29] audit: type=1400 audit(2000000721.184:1070): avc: denied { bind } for pid=17069 comm="syz.5.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1190.215642][ T29] audit: type=1400 audit(2000000721.184:1071): avc: denied { name_bind } for pid=17069 comm="syz.5.2373" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1190.563783][ T29] audit: type=1400 audit(2000000721.184:1072): avc: denied { node_bind } for pid=17069 comm="syz.5.2373" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1190.652670][ T29] audit: type=1400 audit(2000000721.193:1073): avc: denied { listen } for pid=17069 comm="syz.5.2373" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1190.681513][ T29] audit: type=1400 audit(2000000721.193:1074): avc: denied { connect } for pid=17069 comm="syz.5.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1192.050032][ T29] audit: type=1400 audit(2000000721.193:1075): avc: denied { name_connect } for pid=17069 comm="syz.5.2373" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1192.086619][ T29] audit: type=1400 audit(2000000721.923:1076): avc: denied { read append } for pid=17081 comm="syz.7.2376" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1192.116459][ T29] audit: type=1400 audit(2000000721.923:1077): avc: denied { open } for pid=17081 comm="syz.7.2376" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1192.140098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.381903][T17103] atomic_op ffff88804ef59198 conn xmit_atomic 0000000000000000 [ 1192.901785][T17106] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1192.912677][T17106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2381'. [ 1192.922444][T17106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2381'. [ 1192.932019][T17106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2381'. [ 1192.942259][T17106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2381'. [ 1194.297977][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1194.298016][ T29] audit: type=1400 audit(2000000725.776:1081): avc: denied { connect } for pid=17115 comm="syz.0.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1194.327052][ T29] audit: type=1400 audit(2000000725.776:1082): avc: denied { shutdown } for pid=17115 comm="syz.0.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1194.347227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.084307][T17137] dlm: no locking on control device [ 1197.332123][T17140] fuse: Bad value for 'fd' [ 1197.337905][T17150] fuse: Bad value for 'fd' [ 1197.537563][T17151] block nbd8: shutting down sockets [ 1197.589024][T17161] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2394'. [ 1200.136161][T13396] Bluetooth: hci4: command 0x0406 tx timeout [ 1200.201100][T17182] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2397'. [ 1200.709360][T17190] trusted_key: syz.2.2398 sent an empty control message without MSG_MORE. [ 1200.718840][ T29] audit: type=1400 audit(2000000731.772:1083): avc: denied { map } for pid=17187 comm="syz.7.2401" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1201.711541][ T29] audit: type=1400 audit(2000000731.987:1084): avc: denied { connect } for pid=17187 comm="syz.7.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1201.908637][T17207] fuse: Bad value for 'fd' [ 1202.589639][ T29] audit: type=1400 audit(2000000733.531:1085): avc: denied { write } for pid=17214 comm="syz.8.2407" name="ns" dev="proc" ino=45964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1202.611400][ T29] audit: type=1400 audit(2000000733.550:1086): avc: denied { add_name } for pid=17214 comm="syz.8.2407" name="cgroup" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1202.632421][ T29] audit: type=1400 audit(2000000733.578:1087): avc: denied { create } for pid=17214 comm="syz.8.2407" name="cgroup" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 1202.654468][ T29] audit: type=1400 audit(2000000733.596:1088): avc: denied { associate } for pid=17214 comm="syz.8.2407" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1203.029541][ T29] audit: type=1326 audit(2000000733.830:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17214 comm="syz.8.2407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ea7785d29 code=0x0 [ 1203.241656][ T29] audit: type=1400 audit(2000000733.896:1090): avc: denied { read write } for pid=17214 comm="syz.8.2407" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1203.325420][ T29] audit: type=1400 audit(2000000733.896:1091): avc: denied { open } for pid=17214 comm="syz.8.2407" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1203.349754][ T5828] block nbd7: Receive control failed (result -32) [ 1203.359025][T17217] block nbd7: shutting down sockets [ 1203.379291][ T29] audit: type=1400 audit(2000000733.905:1092): avc: denied { ioctl } for pid=17214 comm="syz.8.2407" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1203.997262][T17237] nfs4: Unknown parameter '{€Aîβ+utS×ûß' [ 1204.008258][T17237] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2411'. [ 1204.031420][T17237] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2411'. [ 1204.058905][T17237] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2411'. [ 1204.074087][T17237] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2411'. [ 1205.466412][ T5828] Bluetooth: hci6: command 0x0406 tx timeout [ 1205.498094][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2414'. [ 1205.507131][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2414'. [ 1206.034264][T17259] fuse: Bad value for 'fd' [ 1207.147427][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1207.153714][ T29] audit: type=1326 audit(2000000737.796:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.2417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe576b85d29 code=0x0 [ 1208.406702][ T29] audit: type=1400 audit(2000000738.956:1096): avc: denied { mount } for pid=17272 comm="syz.8.2419" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1208.744026][T17287] atomic_op ffff88805a62a198 conn xmit_atomic 0000000000000000 [ 1208.756483][T17287] netlink: 'syz.7.2422': attribute type 10 has an invalid length. [ 1208.766304][ T29] audit: type=1400 audit(2000000739.312:1097): avc: denied { write } for pid=17282 comm="syz.7.2422" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1208.955603][T17287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.978594][T17287] team0: Port device bond0 added [ 1209.305324][ T10] block nbd6: Possible stuck request ffff8880261d0000: control (read@0,4096B). Runtime 120 seconds [ 1209.618249][ T29] audit: type=1400 audit(2000000740.116:1098): avc: granted { setsecparam } for pid=17294 comm="syz.5.2424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1209.623280][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 1209.643608][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 1209.943203][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 1210.003986][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 1210.433444][T17293] ceph: No mds server is up or the cluster is laggy [ 1210.633953][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 1210.871156][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 1211.050186][T17293] 9pnet_virtio: no channels available for device syz [ 1212.000591][ T29] audit: type=1400 audit(2000000742.324:1099): avc: denied { write } for pid=17306 comm="syz.8.2426" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1212.033063][ T29] audit: type=1400 audit(2000000742.324:1100): avc: denied { ioctl } for pid=17306 comm="syz.8.2426" path="socket:[46738]" dev="sockfs" ino=46738 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1213.779278][T17322] 9pnet_fd: Insufficient options for proto=fd [ 1214.059619][ T29] audit: type=1400 audit(2000000744.110:1101): avc: denied { ioctl } for pid=17327 comm="syz.8.2432" path="socket:[47187]" dev="sockfs" ino=47187 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1214.937360][ T44] block nbd4: Possible stuck request ffff88803497fc00: control (read@0,4096B). Runtime 150 seconds [ 1215.114289][T17320] fuse: Bad value for 'fd' [ 1215.384361][T17342] overlayfs: failed to clone lowerpath [ 1215.972939][T17345] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2435'. [ 1216.454023][T17355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.908266][T17356] wlan1 speed is unknown, defaulting to 1000 [ 1217.037238][T17356] lo speed is unknown, defaulting to 1000 [ 1217.492920][T13396] block nbd7: Receive control failed (result -32) [ 1217.500293][T17347] block nbd7: shutting down sockets [ 1217.718630][ T29] audit: type=1400 audit(2000000747.693:1102): avc: denied { read } for pid=17360 comm="syz.7.2438" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1217.752163][ T29] audit: type=1400 audit(2000000747.693:1103): avc: denied { open } for pid=17360 comm="syz.7.2438" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1217.938930][ T29] audit: type=1400 audit(2000000747.889:1104): avc: denied { mount } for pid=17360 comm="syz.7.2438" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1217.960934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1218.017747][ T29] audit: type=1400 audit(2000000747.964:1105): avc: denied { write } for pid=17367 comm="syz.2.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1218.061530][T17368] dvmrp0: entered allmulticast mode [ 1218.131018][ T29] audit: type=1400 audit(2000000748.001:1106): avc: denied { ioctl } for pid=17360 comm="syz.7.2438" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1218.155958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1218.802251][T17377] syz.0.2439: attempt to access beyond end of device [ 1218.802251][T17377] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1219.270857][ T30] INFO: task udevd:15212 blocked for more than 144 seconds. [ 1219.288080][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1219.312249][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1219.423403][ T30] task:udevd state:D stack:23472 pid:15212 tgid:15212 ppid:5188 flags:0x00000002 [ 1219.552073][ T30] Call Trace: [ 1219.575830][ T30] [ 1219.587371][ T30] __schedule+0xe58/0x5ad0 [ 1219.619502][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1219.626127][ T44] block nbd1: Possible stuck request ffff888026000c40: control (read@0,4096B). Runtime 150 seconds [ 1219.660192][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1219.734348][ T30] ? __pfx___schedule+0x10/0x10 [ 1219.739629][ T30] ? schedule+0x298/0x350 [ 1219.745787][ T30] ? __pfx_lock_release+0x10/0x10 [ 1219.750997][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1219.756901][ T30] ? lock_acquire+0x2f/0xb0 [ 1219.765116][ T30] ? schedule+0x1fd/0x350 [ 1219.781428][ T30] schedule+0xe7/0x350 [ 1219.785549][ T30] schedule_preempt_disabled+0x13/0x30 [ 1219.791017][ T30] __mutex_lock+0x62b/0xa60 [ 1219.813332][ T30] ? bdev_open+0x41a/0xe20 [ 1219.817765][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1219.822797][ T30] ? __pfx_ilookup+0x10/0x10 [ 1219.845616][ T30] ? bdev_open+0x41a/0xe20 [ 1219.850082][ T30] bdev_open+0x41a/0xe20 [ 1219.854339][ T30] blkdev_open+0x329/0x400 [ 1219.866985][ T30] do_dentry_open+0xf59/0x1ea0 [ 1219.871791][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1219.876742][ T30] vfs_open+0x82/0x3f0 [ 1219.892985][ T30] ? may_open+0x1f2/0x400 [ 1219.897360][ T30] path_openat+0x1e6a/0x2d60 [ 1219.902527][ T30] ? __pfx_path_openat+0x10/0x10 [ 1219.907481][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1219.913220][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1219.918513][ T30] ? find_held_lock+0x2d/0x110 [ 1219.923986][ T30] do_filp_open+0x20c/0x470 [ 1219.928506][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1219.934139][ T30] ? find_held_lock+0x2d/0x110 [ 1219.946257][ T30] ? alloc_fd+0x41f/0x760 [ 1219.950908][ T30] do_sys_openat2+0x17a/0x1e0 [ 1219.955887][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1219.961091][ T30] ? __sys_recvmsg+0x197/0x220 [ 1219.966030][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 1219.971153][ T30] __x64_sys_openat+0x175/0x210 [ 1219.976668][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1219.982059][ T30] do_syscall_64+0xcd/0x250 [ 1219.987193][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.993098][ T30] RIP: 0033:0x7f4a2b3169a4 [ 1219.997984][ T30] RSP: 002b:00007ffe803de900 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1220.007120][ T30] RAX: ffffffffffffffda RBX: 00005606e2dde680 RCX: 00007f4a2b3169a4 [ 1220.015098][ T30] RDX: 00000000000a0800 RSI: 00005606e2ddc750 RDI: 00000000ffffff9c [ 1220.023562][ T30] RBP: 00005606e2ddc750 R08: 0000000000000001 R09: 00007f4a2b8c5000 [ 1220.031880][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 1220.040413][ T30] R13: 00005606e2dd7aa0 R14: 0000000000000001 R15: 00005606e2dac2c0 [ 1220.049358][ T30] [ 1220.052393][ T30] INFO: task udevd:15536 blocked for more than 145 seconds. [ 1220.074690][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1220.086200][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1220.095795][ T30] task:udevd state:D stack:24352 pid:15536 tgid:15536 ppid:5188 flags:0x00000002 [ 1220.112037][ T30] Call Trace: [ 1220.115472][ T30] [ 1220.118413][ T30] __schedule+0xe58/0x5ad0 [ 1220.122844][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1220.128461][ T30] ? __pfx___schedule+0x10/0x10 [ 1220.133416][ T30] ? schedule+0x298/0x350 [ 1220.138588][ T30] ? __pfx_lock_release+0x10/0x10 [ 1220.143612][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1220.149596][ T30] ? lock_acquire+0x2f/0xb0 [ 1220.154398][ T30] ? schedule+0x1fd/0x350 [ 1220.159132][ T30] schedule+0xe7/0x350 [ 1220.163187][ T30] schedule_preempt_disabled+0x13/0x30 [ 1220.169226][ T30] __mutex_lock+0x62b/0xa60 [ 1220.173734][ T30] ? bdev_open+0x41a/0xe20 [ 1220.178756][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1220.183813][ T30] ? __pfx_ilookup+0x10/0x10 [ 1220.188942][ T30] ? bdev_open+0x41a/0xe20 [ 1220.193357][ T30] bdev_open+0x41a/0xe20 [ 1220.197584][ T30] blkdev_open+0x329/0x400 [ 1220.202513][ T30] do_dentry_open+0xf59/0x1ea0 [ 1220.207262][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1220.212695][ T30] vfs_open+0x82/0x3f0 [ 1220.216750][ T30] ? may_open+0x1f2/0x400 [ 1220.221546][ T30] path_openat+0x1e6a/0x2d60 [ 1220.226139][ T30] ? __pfx_path_openat+0x10/0x10 [ 1220.231144][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1220.236350][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1220.241709][ T30] ? find_held_lock+0x2d/0x110 [ 1220.246493][ T30] do_filp_open+0x20c/0x470 [ 1220.251004][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1220.256687][ T30] ? find_held_lock+0x2d/0x110 [ 1220.261478][ T30] ? alloc_fd+0x41f/0x760 [ 1220.266681][ T30] do_sys_openat2+0x17a/0x1e0 [ 1220.271378][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1220.277116][ T30] ? __sys_recvmsg+0x197/0x220 [ 1220.281885][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 1220.287362][ T30] __x64_sys_openat+0x175/0x210 [ 1220.292199][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1220.298129][ T30] do_syscall_64+0xcd/0x250 [ 1220.302643][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.309001][ T30] RIP: 0033:0x7f4a2b3169a4 [ 1220.313409][ T30] RSP: 002b:00007ffe803de900 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1220.322252][ T30] RAX: ffffffffffffffda RBX: 00005606e2dde8b0 RCX: 00007f4a2b3169a4 [ 1220.330693][ T30] RDX: 00000000000a0800 RSI: 00005606e2ddeac0 RDI: 00000000ffffff9c [ 1220.339279][ T30] RBP: 00005606e2ddeac0 R08: 0000000000000001 R09: 00007f4a2b8c5000 [ 1220.347253][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 1220.355654][ T30] R13: 00005606e2de4150 R14: 0000000000000001 R15: 00005606e2dac2c0 [ 1220.364056][ T30] [ 1220.367228][ T30] INFO: task syz.4.2060:15546 blocked for more than 145 seconds. [ 1220.400755][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1220.412572][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1220.426609][ T30] task:syz.4.2060 state:D stack:26048 pid:15546 tgid:15546 ppid:5813 flags:0x00000004 [ 1220.448451][ T30] Call Trace: [ 1220.452072][ T30] [ 1220.455671][ T30] __schedule+0xe58/0x5ad0 [ 1220.460103][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1220.465821][ T30] ? __pfx___schedule+0x10/0x10 [ 1220.470674][ T30] ? schedule+0x298/0x350 [ 1220.474982][ T30] ? __pfx_lock_release+0x10/0x10 [ 1220.480514][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1220.486197][ T30] ? lock_acquire+0x2f/0xb0 [ 1220.491152][ T30] ? schedule+0x1fd/0x350 [ 1220.495473][ T30] schedule+0xe7/0x350 [ 1220.499987][ T30] schedule_preempt_disabled+0x13/0x30 [ 1220.505446][ T30] __mutex_lock+0x62b/0xa60 [ 1220.511393][ T30] ? bdev_release+0x15a/0x6d0 [ 1220.516086][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1220.521218][ T30] ? __pfx_lock_release+0x10/0x10 [ 1220.526256][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1220.532046][ T30] ? bdev_release+0x15a/0x6d0 [ 1220.536729][ T30] bdev_release+0x15a/0x6d0 [ 1220.541650][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1220.546829][ T30] blkdev_release+0x15/0x20 [ 1220.552117][ T30] __fput+0x3f8/0xb60 [ 1220.556104][ T30] task_work_run+0x14e/0x250 [ 1220.560678][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1220.566304][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 1220.572608][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1220.578243][ T30] do_syscall_64+0xda/0x250 [ 1220.583159][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.589056][ T30] RIP: 0033:0x7f05da185d29 [ 1220.594291][ T30] RSP: 002b:00007ffe5a4c1be8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1220.602707][ T30] RAX: 0000000000000000 RBX: 00007f05da377ba0 RCX: 00007f05da185d29 [ 1220.611139][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1220.619485][ T30] RBP: 00007f05da377ba0 R08: 0000000000002634 R09: 00007ffe5a4c1edf [ 1220.628084][ T30] R10: 00007f05da377ac0 R11: 0000000000000246 R12: 00000000000f55f5 [ 1220.636057][ T30] R13: 00007ffe5a4c1cf0 R14: 0000000000000032 R15: ffffffffffffffff [ 1220.644550][ T30] [ 1220.648201][ T30] INFO: task syz.4.2060:15548 blocked for more than 145 seconds. [ 1220.655922][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1220.664390][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1220.673630][ T30] task:syz.4.2060 state:D stack:25408 pid:15548 tgid:15546 ppid:5813 flags:0x00004004 [ 1220.684520][ T30] Call Trace: [ 1220.687807][ T30] [ 1220.691331][ T30] __schedule+0xe58/0x5ad0 [ 1220.695755][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1220.701767][ T30] ? __pfx___schedule+0x10/0x10 [ 1220.706634][ T30] ? schedule+0x298/0x350 [ 1220.711531][ T30] ? __pfx_lock_release+0x10/0x10 [ 1220.716566][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1220.722487][ T30] ? lock_acquire+0x2f/0xb0 [ 1220.726971][ T30] ? schedule+0x1fd/0x350 [ 1220.731292][ T30] schedule+0xe7/0x350 [ 1220.735952][ T30] schedule_preempt_disabled+0x13/0x30 [ 1220.741412][ T30] __mutex_lock+0x62b/0xa60 [ 1220.746509][ T30] ? bdev_release+0x15a/0x6d0 [ 1220.751183][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1220.756692][ T30] ? __pfx_lock_release+0x10/0x10 [ 1220.761731][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1220.768148][ T30] ? bdev_release+0x15a/0x6d0 [ 1220.772927][ T30] bdev_release+0x15a/0x6d0 [ 1220.777877][ T30] ? task_work_run+0x126/0x250 [ 1220.782647][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1220.787936][ T30] blkdev_release+0x15/0x20 [ 1220.792434][ T30] __fput+0x3f8/0xb60 [ 1220.796402][ T30] task_work_run+0x14e/0x250 [ 1220.801044][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1220.806153][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1220.812412][ T30] do_syscall_64+0xda/0x250 [ 1220.816921][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.825739][ T30] RIP: 0033:0x7f05da185d29 [ 1220.830689][ T30] RSP: 002b:00007f05dafdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.839093][ T30] RAX: 0000000000000000 RBX: 00007f05da375fa0 RCX: 00007f05da185d29 [ 1220.852232][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000a [ 1220.860201][ T30] RBP: 00007f05da201b08 R08: 0000000000000000 R09: 0000000000000000 [ 1220.871736][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.879714][ T30] R13: 0000000000000000 R14: 00007f05da375fa0 R15: 00007ffe5a4c1a88 [ 1220.891241][ T30] [ 1220.894922][ T30] INFO: task syz.4.2060:15554 blocked for more than 145 seconds. [ 1220.902626][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1220.913245][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1220.922890][ T30] task:syz.4.2060 state:D stack:23472 pid:15554 tgid:15546 ppid:5813 flags:0x00004006 [ 1220.933287][ T30] Call Trace: [ 1220.936813][ T30] [ 1220.939751][ T30] __schedule+0xe58/0x5ad0 [ 1220.944195][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1220.949526][ T30] ? mark_lock+0x81/0xc60 [ 1220.953872][ T30] ? __pfx___schedule+0x10/0x10 [ 1220.958760][ T30] ? schedule+0x298/0x350 [ 1220.963097][ T30] ? __pfx_lock_release+0x10/0x10 [ 1220.968241][ T30] ? lock_acquire+0x2f/0xb0 [ 1220.972749][ T30] ? schedule+0x1fd/0x350 [ 1220.977083][ T30] schedule+0xe7/0x350 [ 1220.981281][ T30] io_schedule+0xbf/0x130 [ 1220.985617][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 1220.991049][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 1220.996506][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1221.002518][ T30] ? filemap_read_folio+0xe2/0x2a0 [ 1221.007632][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1221.013215][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1221.018780][ T30] ? __filemap_get_folio+0x2a5/0xaf0 [ 1221.024192][ T30] do_read_cache_folio+0x342/0x5c0 [ 1221.029309][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1221.035342][ T30] read_part_sector+0xd4/0x310 [ 1221.040150][ T30] adfspart_check_POWERTEC+0x8f/0x710 [ 1221.045585][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1221.051564][ T30] ? bdev_disk_changed+0x48c/0x1520 [ 1221.056816][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1221.062799][ T30] bdev_disk_changed+0x71f/0x1520 [ 1221.067891][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1221.073357][ T30] ? __pfx_ilookup+0x10/0x10 [ 1221.078105][ T30] blkdev_get_whole+0x187/0x290 [ 1221.082963][ T30] bdev_open+0x2c7/0xe20 [ 1221.087244][ T30] blkdev_open+0x329/0x400 [ 1221.091668][ T30] do_dentry_open+0xf59/0x1ea0 [ 1221.096468][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1221.101414][ T30] vfs_open+0x82/0x3f0 [ 1221.105487][ T30] ? may_open+0x1f2/0x400 [ 1221.111830][ T30] path_openat+0x1e6a/0x2d60 [ 1221.116430][ T30] ? __pfx_path_openat+0x10/0x10 [ 1221.121636][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1221.126836][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1221.132161][ T30] ? find_held_lock+0x2d/0x110 [ 1221.136925][ T30] do_filp_open+0x20c/0x470 [ 1221.141946][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1221.146970][ T30] ? find_held_lock+0x2d/0x110 [ 1221.151822][ T30] ? alloc_fd+0x41f/0x760 [ 1221.156151][ T30] do_sys_openat2+0x17a/0x1e0 [ 1221.160999][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1221.166200][ T30] ? __sock_release+0x20b/0x270 [ 1221.171105][ T30] __x64_sys_openat+0x175/0x210 [ 1221.175966][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1221.181387][ T30] do_syscall_64+0xcd/0x250 [ 1221.185892][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.191771][ T30] RIP: 0033:0x7f05da184690 [ 1221.196258][ T30] RSP: 002b:00007f05dafbdb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1221.204780][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05da184690 [ 1221.212732][ T30] RDX: 0000000000000000 RSI: 00007f05dafbdc10 RDI: 00000000ffffff9c [ 1221.220776][ T30] RBP: 00007f05dafbdc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 1221.228807][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1221.236974][ T30] R13: 0000000000000000 R14: 00007f05da376080 R15: 00007ffe5a4c1a88 [ 1221.244991][ T30] [ 1221.249969][ T30] INFO: task syz.1.2071:15625 blocked for more than 146 seconds. [ 1221.260538][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1221.269131][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1221.280433][ T30] task:syz.1.2071 state:D stack:26048 pid:15625 tgid:15625 ppid:5811 flags:0x00004004 [ 1221.291573][ T30] Call Trace: [ 1221.294837][ T30] [ 1221.297757][ T30] __schedule+0xe58/0x5ad0 [ 1221.304770][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1221.312038][ T30] ? __pfx___schedule+0x10/0x10 [ 1221.316903][ T30] ? schedule+0x298/0x350 [ 1221.323726][ T30] ? __pfx_lock_release+0x10/0x10 [ 1221.328748][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1221.335259][ T30] ? lock_acquire+0x2f/0xb0 [ 1221.339746][ T30] ? schedule+0x1fd/0x350 [ 1221.344184][ T30] schedule+0xe7/0x350 [ 1221.348259][ T30] schedule_preempt_disabled+0x13/0x30 [ 1221.353942][ T30] __mutex_lock+0x62b/0xa60 [ 1221.358854][ T30] ? bdev_release+0x15a/0x6d0 [ 1221.363875][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1221.368915][ T30] ? __pfx_lock_release+0x10/0x10 [ 1221.374061][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1221.379271][ T30] ? bdev_release+0x15a/0x6d0 [ 1221.383957][ T30] bdev_release+0x15a/0x6d0 [ 1221.388529][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1221.393732][ T30] blkdev_release+0x15/0x20 [ 1221.398366][ T30] __fput+0x3f8/0xb60 [ 1221.402377][ T30] task_work_run+0x14e/0x250 [ 1221.407089][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1221.412209][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 1221.418048][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1221.423683][ T30] do_syscall_64+0xda/0x250 [ 1221.429948][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.435837][ T30] RIP: 0033:0x7fdee7585d29 [ 1221.440427][ T30] RSP: 002b:00007ffd9400c748 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1221.449066][ T30] RAX: 0000000000000000 RBX: 00007fdee7777ba0 RCX: 00007fdee7585d29 [ 1221.457031][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1221.465746][ T30] RBP: 00007fdee7777ba0 R08: 000000000000249c R09: 00007ffd9400ca3f [ 1221.474442][ T30] R10: 00007fdee7777ac0 R11: 0000000000000246 R12: 00000000000f6546 [ 1221.482498][ T30] R13: 00007fdee7776160 R14: 0000000000000032 R15: ffffffffffffffff [ 1221.490488][ T30] [ 1221.493667][ T30] INFO: task syz.1.2071:15626 blocked for more than 146 seconds. [ 1221.501380][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1221.509604][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1221.518352][ T30] task:syz.1.2071 state:D stack:25536 pid:15626 tgid:15625 ppid:5811 flags:0x00004004 [ 1221.528778][ T30] Call Trace: [ 1221.532062][ T30] [ 1221.535708][ T30] __schedule+0xe58/0x5ad0 [ 1221.540433][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1221.545914][ T30] ? __pfx___schedule+0x10/0x10 [ 1221.550774][ T30] ? schedule+0x298/0x350 [ 1221.555117][ T30] ? __pfx_lock_release+0x10/0x10 [ 1221.560348][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1221.565818][ T30] ? lock_acquire+0x2f/0xb0 [ 1221.570418][ T30] ? schedule+0x1fd/0x350 [ 1221.574752][ T30] schedule+0xe7/0x350 [ 1221.579387][ T30] schedule_preempt_disabled+0x13/0x30 [ 1221.584858][ T30] __mutex_lock+0x62b/0xa60 [ 1221.589575][ T30] ? bdev_release+0x15a/0x6d0 [ 1221.594235][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1221.599308][ T30] ? __pfx_lock_release+0x10/0x10 [ 1221.604346][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1221.609620][ T30] ? bdev_release+0x15a/0x6d0 [ 1221.614288][ T30] bdev_release+0x15a/0x6d0 [ 1221.618771][ T30] ? task_work_run+0x126/0x250 [ 1221.624170][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1221.629368][ T30] blkdev_release+0x15/0x20 [ 1221.633994][ T30] __fput+0x3f8/0xb60 [ 1221.637992][ T30] task_work_run+0x14e/0x250 [ 1221.642625][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1221.647735][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1221.653396][ T30] do_syscall_64+0xda/0x250 [ 1221.657899][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.663865][ T30] RIP: 0033:0x7fdee7585d29 [ 1221.668282][ T30] RSP: 002b:00007fdee841e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.676835][ T30] RAX: 0000000000000000 RBX: 00007fdee7775fa0 RCX: 00007fdee7585d29 [ 1221.684848][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000a [ 1221.693277][ T30] RBP: 00007fdee7601b08 R08: 0000000000000000 R09: 0000000000000000 [ 1221.701311][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.709500][ T30] R13: 0000000000000000 R14: 00007fdee7775fa0 R15: 00007ffd9400c5e8 [ 1221.717593][ T30] [ 1221.725367][ T30] INFO: task syz.1.2071:15630 blocked for more than 146 seconds. [ 1221.735961][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1221.743631][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1221.752406][ T30] task:syz.1.2071 state:D stack:23472 pid:15630 tgid:15625 ppid:5811 flags:0x00004004 [ 1221.762697][ T30] Call Trace: [ 1221.765970][ T30] [ 1221.768895][ T30] __schedule+0xe58/0x5ad0 [ 1221.773371][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1221.778568][ T30] ? mark_lock+0x81/0xc60 [ 1221.784397][ T30] ? __pfx___schedule+0x10/0x10 [ 1221.789236][ T30] ? schedule+0x298/0x350 [ 1221.793636][ T30] ? __pfx_lock_release+0x10/0x10 [ 1221.799072][ T30] ? lock_acquire+0x2f/0xb0 [ 1221.803678][ T30] ? schedule+0x1fd/0x350 [ 1221.808027][ T30] schedule+0xe7/0x350 [ 1221.812132][ T30] io_schedule+0xbf/0x130 [ 1221.816469][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 1221.821752][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 1221.827410][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1221.833232][ T30] ? filemap_read_folio+0xe2/0x2a0 [ 1221.838430][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1221.843990][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1221.849653][ T30] ? __filemap_get_folio+0x2a5/0xaf0 [ 1221.854981][ T30] do_read_cache_folio+0x342/0x5c0 [ 1221.860097][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1221.865591][ T30] read_part_sector+0xd4/0x310 [ 1221.870357][ T30] adfspart_check_POWERTEC+0x8f/0x710 [ 1221.875729][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1221.882290][ T30] ? bdev_disk_changed+0x48c/0x1520 [ 1221.887745][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1221.893734][ T30] bdev_disk_changed+0x71f/0x1520 [ 1221.898993][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1221.904465][ T30] ? __pfx_ilookup+0x10/0x10 [ 1221.909681][ T30] blkdev_get_whole+0x187/0x290 [ 1221.914534][ T30] bdev_open+0x2c7/0xe20 [ 1221.918764][ T30] blkdev_open+0x329/0x400 [ 1221.923405][ T30] do_dentry_open+0xf59/0x1ea0 [ 1221.928180][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1221.934039][ T30] vfs_open+0x82/0x3f0 [ 1221.938115][ T30] ? may_open+0x1f2/0x400 [ 1221.942768][ T30] path_openat+0x1e6a/0x2d60 [ 1221.947363][ T30] ? __pfx_path_openat+0x10/0x10 [ 1221.952447][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1221.957646][ T30] do_filp_open+0x20c/0x470 [ 1221.962409][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1221.967441][ T30] ? find_held_lock+0x2d/0x110 [ 1221.972239][ T30] ? alloc_fd+0x41f/0x760 [ 1221.976857][ T30] do_sys_openat2+0x17a/0x1e0 [ 1221.981555][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1221.986937][ T30] __x64_sys_openat+0x175/0x210 [ 1221.991800][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1221.997395][ T30] do_syscall_64+0xcd/0x250 [ 1222.001903][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.007902][ T30] RIP: 0033:0x7fdee7584690 [ 1222.012309][ T30] RSP: 002b:00007fdee83fcb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1222.022529][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdee7584690 [ 1222.030530][ T30] RDX: 0000000000000000 RSI: 00007fdee83fcc10 RDI: 00000000ffffff9c [ 1222.038559][ T30] RBP: 00007fdee83fcc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 1222.046528][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1222.054559][ T30] R13: 0000000000000000 R14: 00007fdee7776080 R15: 00007ffd9400c5e8 [ 1222.062802][ T30] [ 1222.065842][ T30] [ 1222.065842][ T30] Showing all locks held in the system: [ 1222.076692][ T30] 1 lock held by khungtaskd/30: [ 1222.081584][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1222.091788][ T30] 2 locks held by getty/5572: [ 1222.096450][ T30] #0: ffff88803660a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1222.106342][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1222.116522][ T30] 5 locks held by kworker/u8:28/6595: [ 1222.121896][ T30] 3 locks held by kworker/u8:6/12316: [ 1222.127741][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1222.138206][ T30] #1: ffffc90003197d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1222.151019][ T30] #2: ffffffff8e1c7100 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 1222.160982][ T30] 1 lock held by udevd/15212: [ 1222.167211][ T30] #0: ffff888025f524c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 1222.176714][ T30] 1 lock held by udevd/15536: [ 1222.181378][ T30] #0: ffff8880260774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 1222.190791][ T30] 1 lock held by syz.4.2060/15546: [ 1222.195892][ T30] #0: ffff8880260774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1222.205485][ T30] 1 lock held by syz.4.2060/15548: [ 1222.210636][ T30] #0: ffff8880260774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1222.221419][ T30] 1 lock held by syz.4.2060/15554: [ 1222.226506][ T30] #0: ffff8880260774c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 1222.236421][ T30] 1 lock held by syz.1.2071/15625: [ 1222.241574][ T30] #0: ffff888025f524c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1222.251213][ T30] 1 lock held by syz.1.2071/15626: [ 1222.256318][ T30] #0: ffff888025f524c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1222.265957][ T30] 1 lock held by syz.1.2071/15630: [ 1222.271064][ T30] #0: ffff888025f524c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 1222.280503][ T30] 1 lock held by udevd/15809: [ 1222.285772][ T30] #0: ffff88802609b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 1222.296232][ T30] 1 lock held by syz.6.2098/15890: [ 1222.301326][ T30] #0: ffff88802609b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1222.313477][ T30] 1 lock held by syz.6.2098/15891: [ 1222.318703][ T30] #0: ffff88802609b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1222.328431][ T30] 1 lock held by syz.6.2098/15895: [ 1222.333529][ T30] #0: ffff88802609b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 1222.342868][ T30] [ 1222.345594][ T30] ============================================= [ 1222.345594][ T30] [ 1222.354473][ T30] NMI backtrace for cpu 1 [ 1222.358799][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1222.369296][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1222.379351][ T30] Call Trace: [ 1222.382619][ T30] [ 1222.385530][ T30] dump_stack_lvl+0x116/0x1f0 [ 1222.390199][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1222.395130][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1222.401095][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1222.407071][ T30] watchdog+0xf14/0x1240 [ 1222.411314][ T30] ? __pfx_watchdog+0x10/0x10 [ 1222.415978][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1222.421163][ T30] ? __kthread_parkme+0x148/0x220 [ 1222.426179][ T30] ? __pfx_watchdog+0x10/0x10 [ 1222.430844][ T30] kthread+0x2c1/0x3a0 [ 1222.434905][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1222.440089][ T30] ? __pfx_kthread+0x10/0x10 [ 1222.444690][ T30] ret_from_fork+0x45/0x80 [ 1222.449092][ T30] ? __pfx_kthread+0x10/0x10 [ 1222.453672][ T30] ret_from_fork_asm+0x1a/0x30 [ 1222.458434][ T30] [ 1222.461954][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1222.467482][ C0] NMI backtrace for cpu 0 [ 1222.467493][ C0] CPU: 0 UID: 0 PID: 12316 Comm: kworker/u8:6 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1222.467509][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1222.467518][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1222.467537][ C0] RIP: 0010:hlock_class+0x58/0x130 [ 1222.467558][ C0] Code: 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 1c e5 96 e8 e2 f1 86 00 48 0f a3 1d 2a 4b 6f 15 73 13 <48> 69 c3 c8 00 00 00 5b 48 05 e0 20 e5 96 c3 cc cc cc cc 48 c7 c0 [ 1222.467571][ C0] RSP: 0018:ffffc90003196ed0 EFLAGS: 00000047 [ 1222.467581][ C0] RAX: 0000000000000001 RBX: 00000000000006a8 RCX: ffffffff8175d18e [ 1222.467590][ C0] RDX: fffffbfff2dca3b3 RSI: 0000000000000008 RDI: ffffffff96e51d90 [ 1222.467598][ C0] RBP: ffffc90003197020 R08: 0000000000000000 R09: fffffbfff2dca3b2 [ 1222.467607][ C0] R10: ffffffff96e51d97 R11: 0000000000000004 R12: ffff888021f4c880 [ 1222.467615][ C0] R13: 0000000000000004 R14: 0000000000000002 R15: 1ffff92000632de2 [ 1222.467623][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1222.467637][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1222.467646][ C0] CR2: 00007fb98c547ab8 CR3: 000000001311c000 CR4: 00000000003526f0 [ 1222.467655][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1222.467663][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1222.467671][ C0] Call Trace: [ 1222.467676][ C0] [ 1222.467681][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1222.467696][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1222.467710][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1222.467725][ C0] ? hlock_class+0x58/0x130 [ 1222.467743][ C0] ? default_do_nmi+0x6a/0x160 [ 1222.467757][ C0] ? exc_nmi+0x170/0x1e0 [ 1222.467769][ C0] ? end_repeat_nmi+0xf/0x53 [ 1222.467789][ C0] ? hlock_class+0x4e/0x130 [ 1222.467807][ C0] ? hlock_class+0x58/0x130 [ 1222.467824][ C0] ? hlock_class+0x58/0x130 [ 1222.467842][ C0] ? hlock_class+0x58/0x130 [ 1222.467859][ C0] [ 1222.467863][ C0] [ 1222.467868][ C0] mark_lock+0xb5/0xc60 [ 1222.467882][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1222.467895][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1222.467915][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1222.467930][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1222.467944][ C0] ? find_held_lock+0x2d/0x110 [ 1222.467962][ C0] ? debug_object_activate+0x2e6/0x4a0 [ 1222.467978][ C0] ? __pfx_lock_release+0x10/0x10 [ 1222.467993][ C0] mark_held_locks+0x9f/0xe0 [ 1222.468007][ C0] lockdep_hardirqs_on_prepare+0x137/0x420 [ 1222.468022][ C0] trace_hardirqs_on+0x36/0x40 [ 1222.468037][ C0] _raw_spin_unlock_irqrestore+0x52/0x80 [ 1222.468053][ C0] debug_object_activate+0x2e6/0x4a0 [ 1222.468068][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1222.468088][ C0] kvfree_call_rcu+0x30/0xbe0 [ 1222.468111][ C0] cfg80211_update_known_bss+0x3c0/0x11e0 [ 1222.468131][ C0] __cfg80211_bss_update+0x1aa/0x2440 [ 1222.468149][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1222.468166][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1222.468182][ C0] ? lock_acquire+0x2f/0xb0 [ 1222.468194][ C0] ? cfg80211_inform_single_bss_data+0x794/0x1df0 [ 1222.468210][ C0] cfg80211_inform_single_bss_data+0x7b2/0x1df0 [ 1222.468223][ C0] ? unwind_next_frame+0xe5d/0x20c0 [ 1222.468238][ C0] ? arch_stack_walk+0x74/0x100 [ 1222.468255][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1222.468275][ C0] ? ieee802_11_parse_elems_full+0xea/0x1680 [ 1222.468292][ C0] ? stack_trace_save+0x95/0xd0 [ 1222.468309][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1222.468327][ C0] ? stack_depot_save_flags+0x28/0x9c0 [ 1222.468348][ C0] ? cfg80211_inform_bss_data+0x205/0x3ba0 [ 1222.468361][ C0] cfg80211_inform_bss_data+0x205/0x3ba0 [ 1222.468374][ C0] ? mark_lock+0xb5/0xc60 [ 1222.468386][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f50 [ 1222.468401][ C0] ? ieee80211_iface_work+0xc0b/0xf00 [ 1222.468419][ C0] ? process_one_work+0x9c5/0x1ba0 [ 1222.468434][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1222.468449][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1222.468463][ C0] ? hlock_class+0x4e/0x130 [ 1222.468479][ C0] ? mark_lock+0xb5/0xc60 [ 1222.468491][ C0] ? hlock_class+0x4e/0x130 [ 1222.468509][ C0] ? hlock_class+0x4e/0x130 [ 1222.468526][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 1222.468544][ C0] ? hlock_class+0x4e/0x130 [ 1222.468562][ C0] ? find_held_lock+0x2d/0x110 [ 1222.468581][ C0] ? ieee80211_bss_info_update+0x2cb/0xab0 [ 1222.468597][ C0] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 1222.468613][ C0] ieee80211_bss_info_update+0x311/0xab0 [ 1222.468628][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1222.468643][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1862/0x2f50 [ 1222.468673][ C0] ? ieee80211_mandatory_rates+0x1ab/0x220 [ 1222.468692][ C0] ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50 [ 1222.468707][ C0] ? hlock_class+0x4e/0x130 [ 1222.468727][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1222.468741][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1222.468755][ C0] ? find_held_lock+0x2d/0x110 [ 1222.468771][ C0] ? find_held_lock+0x2d/0x110 [ 1222.468788][ C0] ? kcov_remote_start+0x370/0x6e0 [ 1222.468806][ C0] ? mark_held_locks+0x9f/0xe0 [ 1222.468820][ C0] ? kcov_remote_start+0x3cf/0x6e0 [ 1222.468837][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 1222.468854][ C0] cfg80211_wiphy_work+0x3de/0x560 [ 1222.468869][ C0] process_one_work+0x9c5/0x1ba0 [ 1222.468886][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1222.468904][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1222.468917][ C0] ? rcu_is_watching+0x12/0xc0 [ 1222.468936][ C0] ? assign_work+0x1a0/0x250 [ 1222.468949][ C0] worker_thread+0x6c8/0xf00 [ 1222.468965][ C0] ? __kthread_parkme+0x148/0x220 [ 1222.468982][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1222.468996][ C0] kthread+0x2c1/0x3a0 [ 1222.469011][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1222.469025][ C0] ? __pfx_kthread+0x10/0x10 [ 1222.469041][ C0] ret_from_fork+0x45/0x80 [ 1222.469053][ C0] ? __pfx_kthread+0x10/0x10 [ 1222.469069][ C0] ret_from_fork_asm+0x1a/0x30 [ 1222.469090][ C0] [ 1222.474322][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1223.076010][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1223.086515][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1223.096574][ T30] Call Trace: [ 1223.099845][ T30] [ 1223.102766][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1223.107361][ T30] panic+0x71d/0x800 [ 1223.111263][ T30] ? __pfx_panic+0x10/0x10 [ 1223.115680][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1223.121136][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1223.127103][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1223.132473][ T30] ? watchdog+0xd7e/0x1240 [ 1223.136872][ T30] ? watchdog+0xd71/0x1240 [ 1223.141269][ T30] watchdog+0xd8f/0x1240 [ 1223.145504][ T30] ? __pfx_watchdog+0x10/0x10 [ 1223.150181][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1223.155376][ T30] ? __kthread_parkme+0x148/0x220 [ 1223.160392][ T30] ? __pfx_watchdog+0x10/0x10 [ 1223.165071][ T30] kthread+0x2c1/0x3a0 [ 1223.169120][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1223.174308][ T30] ? __pfx_kthread+0x10/0x10 [ 1223.178911][ T30] ret_from_fork+0x45/0x80 [ 1223.183303][ T30] ? __pfx_kthread+0x10/0x10 [ 1223.187871][ T30] ret_from_fork_asm+0x1a/0x30 [ 1223.192637][ T30] [ 1223.195867][ T30] Kernel Offset: disabled [ 1223.200174][ T30] Rebooting in 86400 seconds..