last executing test programs: 15.675429719s ago: executing program 2 (id=28): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x59555956, 0x2, @stepwise={0x3, 0x7fff, 0x3, 0x6, 0x1000, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000300)={0x3ff, 0x3, 0x8, 0x4, 0x5, 0x1b, 0x43, "d6ffdc1e06695e358e53e698e21429e50916bb6c", "3daeb258cc37a691135764fa43031f0d00"}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r5}, 0x38) 13.227597051s ago: executing program 2 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xb, 0x6, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000090000000a0000000100000000000000", @ANYRES32, @ANYBLOB="0d00000000000000000000000000000000000000cfe03dc84ede915e904aa9e62bd5c961748f333d484e90105d36f0a0db125f13e1b87739ed3d16eafd452b199a3a474b0836700dd55958bb5901e638a5d5f7cf3394b9a10814a7af0e59b82a9016bf73ee57b1a6b639006d21fdfe86ecae7aaa5ee476afb7d81b27a578c3898f325b6bb9bdc849b3634299ba31dfe68ad68d2b85bbdceb98c38be2aa48918d093bb03024479ac032c8b19344af0b1358773451f5439e346ebe844680f8c500b9e2f2ce3e117c86bd96a442ff6f9c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1f9959ef9dc00"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009f40)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24008814}, 0x4040004) recvmmsg(r5, 0x0, 0x0, 0x142, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}}) mkdirat(0xffffffffffffff9c, 0x0, 0xd7b706656310aba8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff0}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000001980)=0x1) 13.042844067s ago: executing program 4 (id=37): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) 12.040988866s ago: executing program 2 (id=39): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x154, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0xd0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x198}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.87841099s ago: executing program 4 (id=41): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={0x0, &(0x7f0000002180)=""/255, 0x0, 0xff, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f00000024c0)=ANY=[@ANYBLOB="9feb010018000000080000000c0000000c000000070000000d0000000000000700000000007100616130001da838ea4dff86e47b2b25ef72b13f03c209e4260d921fd94cbbb9f8d8d2206163a9be95f80b30202216dd023313711c86e5a78ace9d3bd14371becf13e4144c1a7345bc86f7bd3866d7b2aaf2c6e68f2addce72fffb3012d29008426695d6129042aed7196e88e5bee205663f2e246b2e6bbe247171f3ffaa60a40c8ddc90eb6d680c32a17e1f0973be7c56b599b66f97fbe78fdb10e8f777ee3b52469049193ac208cc02d3c5291dfb"], &(0x7f0000002380)=""/113, 0x2b, 0x71, 0x9, 0x9, 0x10000, @value}, 0x28) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000004c0)={{0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) 10.335357821s ago: executing program 1 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x1e, 0x5, 0x0) listen(r5, 0x0) r6 = socket(0x1e, 0x805, 0x0) accept4$inet6(r5, 0x0, 0x0, 0x800) sendmsg$tipc(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)}, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) r8 = memfd_secret(0x0) ioctl$SOUND_MIXER_INFO(r8, 0x805c4d65, &(0x7f0000000240)) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r9, 0xb}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r7}) socket$kcm(0x2d, 0x2, 0x0) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x32, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 9.352615811s ago: executing program 3 (id=45): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x4, @sliced={0x1d, [0x9, 0x4, 0x7, 0x6, 0x7ff, 0x9, 0x72, 0x8, 0xf, 0xea4, 0x8, 0x2, 0x40, 0x4, 0x4, 0x6, 0x4, 0x4, 0x5df, 0xfff, 0x5, 0x5, 0x101, 0x8001, 0xd22e, 0x8000, 0x17ff, 0x8003, 0x5, 0x3, 0x7f, 0x4, 0x1, 0x100, 0x8, 0x5, 0xeea9, 0x9, 0x8, 0x0, 0xe1b, 0x40, 0x6, 0xaf, 0x89, 0x9db7, 0x0, 0x9994]}}) 9.021311131s ago: executing program 0 (id=46): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x800, 0x70bd26, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r3, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 8.859665416s ago: executing program 2 (id=47): syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000003c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x4000, 0x7, {}, {0x0, 0x8, 0xfd, 0x5, 0x0, 0x6, 'y)\x00'}, 0x9, 0x1, {0x0}, 0xa}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) lseek(0xffffffffffffffff, 0xfffffffffffffbf3, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000a40)={'erspan0\x00', 0x0, 0x1, 0x8, 0x49, 0x2, {{0xc, 0x4, 0x2, 0x35, 0x30, 0x64, 0x0, 0xf7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, {[@ssrr={0x89, 0x7, 0x2a, [@empty]}, @generic={0x88, 0x12, "34f4ba9020e82d0c2683e7cf5573166c"}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000080), 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x80, 0x2, 0x3, 0x232a0, 0xffffffffffffffff, 0xfffffffb, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x7, @void, @value, @void, @value}, 0x50) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x4000) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000200)}, {&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000700)=""/145, 0x91}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f00000003c0)=""/44, 0x2c}], 0xa, 0xa, 0xfffffff9) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b2"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x113402, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000300)) 8.857561003s ago: executing program 3 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x1e, 0x5, 0x0) listen(r5, 0x0) r6 = socket(0x1e, 0x805, 0x0) accept4$inet6(r5, 0x0, 0x0, 0x800) sendmsg$tipc(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r7 = memfd_secret(0x0) ioctl$SOUND_MIXER_INFO(r7, 0x805c4d65, &(0x7f0000000240)) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r8, 0xb}], 0x1, 0x0, 0x0, 0x0) 7.627159819s ago: executing program 1 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 7.623618708s ago: executing program 0 (id=50): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 7.622034199s ago: executing program 4 (id=51): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xfeffffff, r1, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 6.340617468s ago: executing program 1 (id=52): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "28a6e4", 0x0, 0x33, 0x0, @private2, @dev, [@fragment={0x6c}], "61870d32b178042d"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setuid(0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file0/file0\x00', &(0x7f00000008c0), 0x200000, &(0x7f0000000980)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}, {@posixacl}, {@loose}, {@loose}, {@directio}, {}], [{@permit_directio}, {@audit}]}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 6.219476213s ago: executing program 0 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xb, 0x6, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff0}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000001980)=0x1) 6.088245869s ago: executing program 3 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8004) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5.91113177s ago: executing program 4 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xb, 0x6, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000090000000a0000000100000000000000", @ANYRES32, @ANYBLOB="0d00000000000000000000000000000000000000cfe03dc84ede915e904aa9e62bd5c961748f333d484e90105d36f0a0db125f13e1b87739ed3d16eafd452b199a3a474b0836700dd55958bb5901e638a5d5f7cf3394b9a10814a7af0e59b82a9016bf73ee57b1a6b639006d21fdfe86ecae7aaa5ee476afb7d81b27a578c3898f325b6bb9bdc849b3634299ba31dfe68ad68d2b85bbdceb98c38be2aa48918d093bb03024479ac032c8b19344af0b1358773451f5439e346ebe844680f8c500b9e2f2ce3e117c86bd96a442ff6f9c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1f9959ef9dc00"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009f40)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24008814}, 0x4040004) recvmmsg(r5, 0x0, 0x0, 0x142, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}}) mkdirat(0xffffffffffffff9c, 0x0, 0xd7b706656310aba8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff0}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4028af11, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000001980)=0x1) 3.327565068s ago: executing program 3 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xb, 0x6, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000090000000a0000000100000000000000", @ANYRES32, @ANYBLOB="0d00000000000000000000000000000000000000cfe03dc84ede915e904aa9e62bd5c961748f333d484e90105d36f0a0db125f13e1b87739ed3d16eafd452b199a3a474b0836700dd55958bb5901e638a5d5f7cf3394b9a10814a7af0e59b82a9016bf73ee57b1a6b639006d21fdfe86ecae7aaa5ee476afb7d81b27a578c3898f325b6bb9bdc849b3634299ba31dfe68ad68d2b85bbdceb98c38be2aa48918d093bb03024479ac032c8b19344af0b1358773451f5439e346ebe844680f8c500b9e2f2ce3e117c86bd96a442ff6f9c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1f9959ef9dc00"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009f40)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24008814}, 0x4040004) recvmmsg(r5, 0x0, 0x0, 0x142, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}}) mkdirat(0xffffffffffffff9c, 0x0, 0xd7b706656310aba8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff0}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000001980)=0x1) 3.326232652s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x1e, 0x5, 0x0) listen(r5, 0x0) r6 = socket(0x1e, 0x805, 0x0) accept4$inet6(r5, 0x0, 0x0, 0x800) sendmsg$tipc(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r7 = memfd_secret(0x0) ioctl$SOUND_MIXER_INFO(r7, 0x805c4d65, &(0x7f0000000240)) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r8, 0xb}], 0x1, 0x0, 0x0, 0x0) 3.324413229s ago: executing program 1 (id=58): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 3.0476668s ago: executing program 4 (id=59): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xfeffffff, r1, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 1.981218442s ago: executing program 2 (id=60): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x154, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0xd0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x198}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.616291869s ago: executing program 1 (id=61): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x154, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0xd0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x198}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.590218143s ago: executing program 0 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xb, 0x6, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000090000000a0000000100000000000000", @ANYRES32, @ANYBLOB="0d00000000000000000000000000000000000000cfe03dc84ede915e904aa9e62bd5c961748f333d484e90105d36f0a0db125f13e1b87739ed3d16eafd452b199a3a474b0836700dd55958bb5901e638a5d5f7cf3394b9a10814a7af0e59b82a9016bf73ee57b1a6b639006d21fdfe86ecae7aaa5ee476afb7d81b27a578c3898f325b6bb9bdc849b3634299ba31dfe68ad68d2b85bbdceb98c38be2aa48918d093bb03024479ac032c8b19344af0b1358773451f5439e346ebe844680f8c500b9e2f2ce3e117c86bd96a442ff6f9c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1f9959ef9dc00"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009f40)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24008814}, 0x4040004) recvmmsg(r5, 0x0, 0x0, 0x142, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}}) mkdirat(0xffffffffffffff9c, 0x0, 0xd7b706656310aba8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff0}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000001980)=0x1) 1.472073803s ago: executing program 3 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 1.320625469s ago: executing program 1 (id=64): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 109.141762ms ago: executing program 3 (id=65): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 90.45562ms ago: executing program 0 (id=66): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 48.922193ms ago: executing program 2 (id=67): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "28a6e4", 0x0, 0x33, 0x0, @private2, @dev, [@fragment={0x6c}], "61870d32b178042d"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setuid(0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file0/file0\x00', &(0x7f00000008c0), 0x200000, &(0x7f0000000980)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}, {@posixacl}, {@loose}, {@loose}, {@directio}, {}], [{@permit_directio}, {@audit}]}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 0s ago: executing program 4 (id=68): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.49' (ED25519) to the list of known hosts. [ 66.502839][ T30] audit: type=1400 audit(1750347090.612:62): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.506298][ T5804] cgroup: Unknown subsys name 'net' [ 66.525608][ T30] audit: type=1400 audit(1750347090.612:63): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.555386][ T30] audit: type=1400 audit(1750347090.672:64): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.770089][ T5804] cgroup: Unknown subsys name 'cpuset' [ 66.777967][ T5804] cgroup: Unknown subsys name 'rlimit' [ 66.884604][ T30] audit: type=1400 audit(1750347090.992:65): avc: denied { setattr } for pid=5804 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.908123][ T30] audit: type=1400 audit(1750347090.992:66): avc: denied { create } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.938562][ T30] audit: type=1400 audit(1750347090.992:67): avc: denied { write } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.959145][ T30] audit: type=1400 audit(1750347090.992:68): avc: denied { read } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.979646][ T30] audit: type=1400 audit(1750347091.022:69): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.007084][ T30] audit: type=1400 audit(1750347091.022:70): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.028142][ T5806] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.030538][ T30] audit: type=1400 audit(1750347091.052:71): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.938737][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.969738][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.976071][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.685052][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 71.685066][ T30] audit: type=1400 audit(1750347095.792:78): avc: denied { create } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.725878][ T30] audit: type=1400 audit(1750347095.822:79): avc: denied { read write } for pid=5820 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.751645][ T30] audit: type=1400 audit(1750347095.832:80): avc: denied { open } for pid=5820 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.808305][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.819761][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.823282][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.829734][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.843013][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.845894][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.850555][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.858584][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.865792][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.873230][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.891034][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.899390][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.907378][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.907577][ T30] audit: type=1400 audit(1750347095.832:81): avc: denied { ioctl } for pid=5820 comm="syz-executor" path="socket:[3872]" dev="sockfs" ino=3872 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.915060][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.959191][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.975487][ T30] audit: type=1400 audit(1750347095.992:82): avc: denied { read } for pid=5820 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.003886][ T30] audit: type=1400 audit(1750347095.992:83): avc: denied { open } for pid=5820 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.042570][ T30] audit: type=1400 audit(1750347095.992:84): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.098233][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.107709][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.115253][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.123473][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.131589][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.139613][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.146955][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.155856][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.163968][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.171829][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.230406][ T30] audit: type=1400 audit(1750347096.342:85): avc: denied { module_request } for pid=5820 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.356839][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 72.462460][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.524969][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.533183][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.541966][ T5820] bridge_slave_0: entered allmulticast mode [ 72.548973][ T5820] bridge_slave_0: entered promiscuous mode [ 72.559459][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.566552][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.574379][ T5820] bridge_slave_1: entered allmulticast mode [ 72.581840][ T5820] bridge_slave_1: entered promiscuous mode [ 72.639077][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 72.663298][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.691978][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.765264][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.773146][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.781420][ T5829] bridge_slave_0: entered allmulticast mode [ 72.789123][ T5829] bridge_slave_0: entered promiscuous mode [ 72.803633][ T5820] team0: Port device team_slave_0 added [ 72.814947][ T5820] team0: Port device team_slave_1 added [ 72.821069][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.828233][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.835317][ T5829] bridge_slave_1: entered allmulticast mode [ 72.842318][ T5829] bridge_slave_1: entered promiscuous mode [ 72.855562][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 72.917103][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.950306][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.957358][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.984964][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.004869][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.024869][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.032337][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.039892][ T5821] bridge_slave_0: entered allmulticast mode [ 73.046531][ T5821] bridge_slave_0: entered promiscuous mode [ 73.053958][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.060978][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.086946][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.138876][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.146005][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.153324][ T5821] bridge_slave_1: entered allmulticast mode [ 73.163046][ T5821] bridge_slave_1: entered promiscuous mode [ 73.191905][ T5829] team0: Port device team_slave_0 added [ 73.199502][ T5829] team0: Port device team_slave_1 added [ 73.221766][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.251674][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.270026][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 73.279783][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.286926][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.295323][ T5836] bridge_slave_0: entered allmulticast mode [ 73.302440][ T5836] bridge_slave_0: entered promiscuous mode [ 73.311163][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.318283][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.344215][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.357269][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.364206][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.390315][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.438071][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.445196][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.455014][ T5836] bridge_slave_1: entered allmulticast mode [ 73.463062][ T5836] bridge_slave_1: entered promiscuous mode [ 73.491011][ T5820] hsr_slave_0: entered promiscuous mode [ 73.497111][ T5820] hsr_slave_1: entered promiscuous mode [ 73.527396][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.539434][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.550165][ T5821] team0: Port device team_slave_0 added [ 73.585001][ T5821] team0: Port device team_slave_1 added [ 73.619120][ T5829] hsr_slave_0: entered promiscuous mode [ 73.625227][ T5829] hsr_slave_1: entered promiscuous mode [ 73.631568][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.640114][ T5829] Cannot create hsr debugfs directory [ 73.654292][ T5836] team0: Port device team_slave_0 added [ 73.685726][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.693037][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.700834][ T5837] bridge_slave_0: entered allmulticast mode [ 73.707645][ T5837] bridge_slave_0: entered promiscuous mode [ 73.716618][ T5836] team0: Port device team_slave_1 added [ 73.723062][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.730230][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.756405][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.772438][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.779688][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.786796][ T5837] bridge_slave_1: entered allmulticast mode [ 73.793627][ T5837] bridge_slave_1: entered promiscuous mode [ 73.816092][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.823160][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.849070][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.905954][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.916587][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.924261][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.950436][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.961670][ T5828] Bluetooth: hci0: command tx timeout [ 73.968910][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.975870][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.001825][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.012845][ T5828] Bluetooth: hci1: command tx timeout [ 74.033496][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.079502][ T5837] team0: Port device team_slave_0 added [ 74.089953][ T5828] Bluetooth: hci2: command tx timeout [ 74.105032][ T5821] hsr_slave_0: entered promiscuous mode [ 74.111186][ T5821] hsr_slave_1: entered promiscuous mode [ 74.117063][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.124673][ T5821] Cannot create hsr debugfs directory [ 74.135913][ T5837] team0: Port device team_slave_1 added [ 74.179066][ T5836] hsr_slave_0: entered promiscuous mode [ 74.185375][ T5836] hsr_slave_1: entered promiscuous mode [ 74.192782][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.200644][ T5836] Cannot create hsr debugfs directory [ 74.236495][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.243562][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.269547][ T5828] Bluetooth: hci3: command tx timeout [ 74.271591][ T5826] Bluetooth: hci4: command tx timeout [ 74.275601][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.292934][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.299944][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.326305][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.495478][ T5837] hsr_slave_0: entered promiscuous mode [ 74.502222][ T5837] hsr_slave_1: entered promiscuous mode [ 74.508412][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.515954][ T5837] Cannot create hsr debugfs directory [ 74.600287][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.632482][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.650361][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.669613][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.720996][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.751893][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.763339][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.786047][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.833763][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.848917][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.860940][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.874028][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.958145][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.984676][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.004425][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.014904][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.056774][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.100293][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.111110][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.122215][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.135044][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.146013][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.156497][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.184954][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.192183][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.219547][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.226642][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.272857][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.293987][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.315744][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.322831][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.331459][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.338639][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.367021][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.405573][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.450205][ T30] audit: type=1400 audit(1750347099.552:86): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.452140][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.482817][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.489999][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.504788][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.511936][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.569524][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.595693][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.606657][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.642389][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.649538][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.664847][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.681621][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.688750][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.733018][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.764277][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.834726][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.841915][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.854972][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.862156][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.001845][ T5820] veth0_vlan: entered promiscuous mode [ 76.011583][ T5826] Bluetooth: hci0: command tx timeout [ 76.015488][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.041821][ T5820] veth1_vlan: entered promiscuous mode [ 76.087681][ T5826] Bluetooth: hci1: command tx timeout [ 76.167499][ T5826] Bluetooth: hci2: command tx timeout [ 76.199923][ T5820] veth0_macvtap: entered promiscuous mode [ 76.209764][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.232746][ T5820] veth1_macvtap: entered promiscuous mode [ 76.240433][ T5829] veth0_vlan: entered promiscuous mode [ 76.261434][ T5829] veth1_vlan: entered promiscuous mode [ 76.274777][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.286608][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.322472][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.329416][ T5826] Bluetooth: hci4: command tx timeout [ 76.329489][ T5826] Bluetooth: hci3: command tx timeout [ 76.402917][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.413469][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.425142][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.434405][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.482857][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.508284][ T5829] veth0_macvtap: entered promiscuous mode [ 76.519062][ T5829] veth1_macvtap: entered promiscuous mode [ 76.543544][ T5821] veth0_vlan: entered promiscuous mode [ 76.565972][ T5821] veth1_vlan: entered promiscuous mode [ 76.623339][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.671162][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.715443][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.726461][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.736184][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.745799][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.783968][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.792136][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.809398][ T5821] veth0_macvtap: entered promiscuous mode [ 76.850634][ T5837] veth0_vlan: entered promiscuous mode [ 76.862602][ T5821] veth1_macvtap: entered promiscuous mode [ 76.899580][ T5837] veth1_vlan: entered promiscuous mode [ 76.914681][ T5836] veth0_vlan: entered promiscuous mode [ 76.922813][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.927915][ T5836] veth1_vlan: entered promiscuous mode [ 76.942281][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.955169][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.980952][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.990147][ T30] audit: type=1400 audit(1750347101.102:87): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.6OIyfI/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.010336][ T5836] veth0_macvtap: entered promiscuous mode [ 77.023585][ T30] audit: type=1400 audit(1750347101.102:88): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.039216][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.061581][ T30] audit: type=1400 audit(1750347101.102:89): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.6OIyfI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.086912][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.100896][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.102696][ T30] audit: type=1400 audit(1750347101.102:90): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.118434][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.147325][ T30] audit: type=1400 audit(1750347101.102:91): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.6OIyfI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.151313][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.183534][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.192747][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.202770][ T30] audit: type=1400 audit(1750347101.102:92): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.6OIyfI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.208540][ T5836] veth1_macvtap: entered promiscuous mode [ 77.237000][ T30] audit: type=1400 audit(1750347101.102:93): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.259929][ T30] audit: type=1400 audit(1750347101.132:94): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.281141][ T5837] veth0_macvtap: entered promiscuous mode [ 77.313538][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.322552][ T30] audit: type=1400 audit(1750347101.132:95): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="gadgetfs" ino=7272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.340319][ T5837] veth1_macvtap: entered promiscuous mode [ 77.357090][ T30] audit: type=1400 audit(1750347101.132:96): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.398880][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.411317][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.421455][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.441808][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.455867][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468701][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.480866][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.532283][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.626212][ T5937] input: syz0 as /devices/virtual/input/input5 [ 77.699154][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.713764][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.733839][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.742829][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.751853][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.760948][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.912511][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.947390][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.019831][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.053716][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.088046][ T5828] Bluetooth: hci0: command tx timeout [ 78.167516][ T5828] Bluetooth: hci1: command tx timeout [ 78.248022][ T5828] Bluetooth: hci2: command tx timeout [ 78.264932][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.292284][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.451418][ T5828] Bluetooth: hci3: command tx timeout [ 78.457066][ T5828] Bluetooth: hci4: command tx timeout [ 78.833903][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.859082][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.902789][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.931490][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.034175][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.077094][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.187641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.227645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.264951][ T5952] input: syz0 as /devices/virtual/input/input6 [ 79.467666][ T5956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7'. [ 79.622983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.827777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.124679][ T5957] input: syz0 as /devices/virtual/input/input7 [ 80.168156][ T5826] Bluetooth: hci0: command tx timeout [ 80.211666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.255657][ T5826] Bluetooth: hci1: command tx timeout [ 80.331253][ T5826] Bluetooth: hci2: command tx timeout [ 80.348274][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.442717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.451705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.541018][ T5828] Bluetooth: hci3: command tx timeout [ 80.541017][ T5826] Bluetooth: hci4: command tx timeout [ 80.647915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 80.852243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.868729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.483249][ T5963] Zero length message leads to an empty skb [ 81.539993][ T3077] cfg80211: failed to load regulatory.db [ 82.116829][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 82.116861][ T30] audit: type=1400 audit(1750347874.076:140): avc: denied { unlink } for pid=5964 comm="syz.3.9" name="#1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.242652][ T5976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.843737][ T30] audit: type=1400 audit(1750347874.086:141): avc: denied { mount } for pid=5964 comm="syz.3.9" name="/" dev="overlay" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.882722][ T30] audit: type=1400 audit(1750347874.176:142): avc: denied { create } for pid=5964 comm="syz.3.9" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.904425][ T30] audit: type=1400 audit(1750347874.176:143): avc: denied { link } for pid=5964 comm="syz.3.9" name="#5" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.932283][ T30] audit: type=1400 audit(1750347874.176:144): avc: denied { rename } for pid=5964 comm="syz.3.9" name="#6" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.324518][ T30] audit: type=1326 audit(1750348130.480:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6558e929 code=0x7ffc0000 [ 84.386123][ T30] audit: type=1326 audit(1750348130.480:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6558e929 code=0x7ffc0000 [ 84.627178][ T30] audit: type=1400 audit(1750348130.580:147): avc: denied { read } for pid=5969 comm="syz.0.10" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.505426][ T30] audit: type=1400 audit(1750348130.580:148): avc: denied { open } for pid=5969 comm="syz.0.10" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.544112][ T30] audit: type=1400 audit(1750348131.030:149): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.273945][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 88.274684][ T30] audit: type=1400 audit(1750348136.370:165): avc: denied { create } for pid=6021 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.446490][ T30] audit: type=1400 audit(1750348136.420:166): avc: denied { bind } for pid=6021 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.466118][ T30] audit: type=1400 audit(1750348136.430:167): avc: denied { accept } for pid=6021 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.485690][ T30] audit: type=1400 audit(1750348136.440:168): avc: denied { write } for pid=6021 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.596814][ T30] audit: type=1400 audit(1750348136.450:169): avc: denied { read } for pid=6021 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.195450][ T6036] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 89.420048][ T30] audit: type=1326 audit(1750348136.730:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68958e929 code=0x7ffc0000 [ 89.848649][ T30] audit: type=1326 audit(1750348136.730:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68958e929 code=0x7ffc0000 [ 90.002554][ T30] audit: type=1326 audit(1750348136.740:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc68958e929 code=0x7ffc0000 [ 91.038792][ T30] audit: type=1326 audit(1750348136.740:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68958e929 code=0x7ffc0000 [ 92.053477][ T6059] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 92.127044][ T30] audit: type=1326 audit(1750348136.740:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68958e929 code=0x7ffc0000 [ 93.580160][ T6085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.35'. [ 93.935977][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 93.935993][ T30] audit: type=1400 audit(1750348397.992:212): avc: denied { create } for pid=6087 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.051262][ T30] audit: type=1400 audit(1750348398.152:213): avc: denied { create } for pid=6094 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.961982][ T30] audit: type=1400 audit(1750348398.152:214): avc: denied { setopt } for pid=6094 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 95.138051][ T6102] input: syz0 as /devices/virtual/input/input9 [ 96.150711][ T30] audit: type=1400 audit(1750348656.192:215): avc: denied { bind } for pid=6087 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.621993][ T30] audit: type=1400 audit(1750348656.722:216): avc: denied { create } for pid=6101 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.329107][ T6111] vivid-000: kernel_thread() failed [ 97.490903][ T30] audit: type=1400 audit(1750348656.732:217): avc: denied { listen } for pid=6101 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.004511][ T30] audit: type=1400 audit(1750348656.732:218): avc: denied { accept } for pid=6101 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.258198][ T30] audit: type=1400 audit(1750348656.802:219): avc: denied { write } for pid=6101 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.281163][ T30] audit: type=1400 audit(1750348656.812:220): avc: denied { create } for pid=6101 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 98.313112][ T30] audit: type=1400 audit(1750348656.812:221): avc: denied { create } for pid=6101 comm="syz.1.44" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.086502][ T30] audit: type=1400 audit(1750348656.902:222): avc: denied { ioctl } for pid=6101 comm="syz.1.44" path="socket:[7774]" dev="sockfs" ino=7774 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 99.094253][ T6138] 9pnet_fd: Insufficient options for proto=fd [ 99.111985][ T30] audit: type=1400 audit(1750348658.262:223): avc: denied { create } for pid=6116 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.137758][ T30] audit: type=1400 audit(1750348658.262:224): avc: denied { write } for pid=6116 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.158979][ T30] audit: type=1400 audit(1750348658.412:225): avc: denied { create } for pid=6125 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.221525][ T30] audit: type=1400 audit(1750348658.412:226): avc: denied { allowed } for pid=6125 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.395382][ T30] audit: type=1400 audit(1750348658.412:227): avc: denied { map } for pid=6125 comm="syz.4.51" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.421753][ T30] audit: type=1400 audit(1750348658.412:228): avc: denied { read write } for pid=6125 comm="syz.4.51" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.478296][ T6117] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.47'. [ 99.632413][ T6145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.930228][ T6148] overlayfs: failed to resolve './file1': -2 [ 100.207542][ T6117] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 100.217775][ T30] audit: type=1326 audit(1750348659.832:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6141 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6558e929 code=0x7ffc0000 [ 100.257890][ T30] audit: type=1326 audit(1750348659.832:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6141 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6558e929 code=0x7ffc0000 [ 100.326754][ T6146] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 100.356979][ T30] audit: type=1326 audit(1750348659.832:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6141 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5b6558e929 code=0x7ffc0000 [ 105.250365][ T6205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.257861][ T6205] IPv6: NLM_F_CREATE should be set when creating new route [ 105.339150][ T6205] lo: entered allmulticast mode [ 105.370284][ T6205] tunl0: entered allmulticast mode [ 105.377172][ T6205] gre0: entered allmulticast mode [ 105.493929][ T6211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.501255][ T6211] IPv6: NLM_F_CREATE should be set when creating new route [ 105.514001][ T6205] gretap0: entered allmulticast mode [ 105.535662][ T6205] erspan0: entered allmulticast mode [ 105.547603][ T6205] ip_vti0: entered allmulticast mode [ 105.554850][ T6205] ip6_vti0: entered allmulticast mode [ 105.562955][ T6205] sit0: entered allmulticast mode [ 105.572981][ T6205] ip6tnl0: entered allmulticast mode [ 105.581445][ T6205] ip6gre0: entered allmulticast mode [ 106.144762][ C1] ------------[ cut here ]------------ [ 106.150461][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5024 __ieee80211_beacon_get+0x14f4/0x1720 [ 106.160244][ C1] Modules linked in: [ 106.164193][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 106.175851][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.185915][ C1] RIP: 0010:__ieee80211_beacon_get+0x14f4/0x1720 [ 106.192249][ C1] Code: 24 89 df 89 ee e8 2c ef bc f6 40 38 eb 72 a2 e8 02 f5 bc f6 4c 89 e7 e8 8a c5 18 f7 45 31 e4 e9 9b fe ff ff e8 ed f4 bc f6 90 <0f> 0b 90 e9 3e f6 ff ff 48 89 c6 48 c7 c7 e0 0b 75 90 48 89 44 24 [ 106.211865][ C1] RSP: 0018:ffffc90000a08b70 EFLAGS: 00010246 [ 106.217942][ C1] RAX: 0000000000000000 RBX: ffff888057f369d0 RCX: ffffffff8aff1d81 [ 106.225910][ C1] RDX: ffff88801e6b2440 RSI: ffffffff8aff2743 RDI: 0000000000000001 [ 106.233875][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 106.241841][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90000a08c28 [ 106.249810][ C1] R13: ffff88802a1dbc00 R14: 0000000000000041 R15: ffff888057f36500 [ 106.257781][ C1] FS: 0000000000000000(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 106.266710][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.273289][ C1] CR2: 0000001b2f806ff8 CR3: 0000000033cde000 CR4: 00000000003526f0 [ 106.281257][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.289250][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.297253][ C1] Call Trace: [ 106.300531][ C1] [ 106.303366][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 106.308316][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 106.313769][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 106.319841][ C1] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 106.325420][ C1] __iterate_interfaces+0x2e5/0x650 [ 106.330643][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.336710][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.342781][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 106.348584][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 106.355596][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 106.360886][ C1] __hrtimer_run_queues+0x202/0xad0 [ 106.366080][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 106.371795][ C1] ? read_tsc+0x9/0x20 [ 106.375859][ C1] hrtimer_run_softirq+0x17d/0x350 [ 106.380987][ C1] handle_softirqs+0x216/0x8e0 [ 106.385746][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 106.391081][ C1] __irq_exit_rcu+0x109/0x170 [ 106.395746][ C1] irq_exit_rcu+0x9/0x30 [ 106.399986][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.405636][ C1] [ 106.408576][ C1] [ 106.411495][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.417506][ C1] RIP: 0010:do_idle+0x110/0x510 [ 106.422351][ C1] Code: 16 0f 0f 83 05 02 00 00 e8 6d 80 ce ff 8b 05 f3 1b 16 0f 85 c0 75 09 e8 ae 0e ee 09 85 c0 74 3d e8 a5 37 1b 00 e8 30 28 ee 09 7b fe ff ff 80 7d 00 00 0f 85 35 03 00 00 49 8b 45 00 a8 08 0f [ 106.441951][ C1] RSP: 0018:ffffc90000197e10 EFLAGS: 00000206 [ 106.448011][ C1] RAX: 000000000015b587 RBX: 0000000000000001 RCX: ffffffff81c3ebdf [ 106.455982][ C1] RDX: 0000000000000000 RSI: ffffffff8de1a120 RDI: ffffffff8c1579e0 [ 106.463987][ C1] RBP: ffffed1003cd6488 R08: 0000000000000001 R09: 0000000000000001 [ 106.471981][ C1] R10: ffffffff90a81557 R11: 0000000000000001 R12: 0000000000000001 [ 106.479948][ C1] R13: ffff88801e6b2440 R14: ffffffff90a81550 R15: 0000000000000000 [ 106.487920][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 106.493904][ C1] ? __pfx_do_idle+0x10/0x10 [ 106.498489][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 106.503677][ C1] ? do_idle+0x6/0x510 [ 106.507744][ C1] cpu_startup_entry+0x4f/0x60 [ 106.512497][ C1] start_secondary+0x21d/0x2b0 [ 106.517261][ C1] ? __pfx_start_secondary+0x10/0x10 [ 106.522557][ C1] common_startup_64+0x13e/0x148 [ 106.527522][ C1] [ 106.530561][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.537824][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 106.549455][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.559498][ C1] Call Trace: [ 106.562763][ C1] [ 106.565596][ C1] dump_stack_lvl+0x3d/0x1f0 [ 106.570188][ C1] panic+0x71c/0x800 [ 106.574078][ C1] ? __pfx_panic+0x10/0x10 [ 106.578500][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 106.583717][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 106.588845][ C1] ? __ieee80211_beacon_get+0x14f4/0x1720 [ 106.594571][ C1] check_panic_on_warn+0xab/0xb0 [ 106.599502][ C1] __warn+0xf6/0x3c0 [ 106.603387][ C1] ? __ieee80211_beacon_get+0x14f4/0x1720 [ 106.609092][ C1] report_bug+0x3c3/0x580 [ 106.613412][ C1] ? __ieee80211_beacon_get+0x14f4/0x1720 [ 106.619113][ C1] handle_bug+0x184/0x210 [ 106.623423][ C1] exc_invalid_op+0x17/0x50 [ 106.627909][ C1] asm_exc_invalid_op+0x1a/0x20 [ 106.632741][ C1] RIP: 0010:__ieee80211_beacon_get+0x14f4/0x1720 [ 106.639056][ C1] Code: 24 89 df 89 ee e8 2c ef bc f6 40 38 eb 72 a2 e8 02 f5 bc f6 4c 89 e7 e8 8a c5 18 f7 45 31 e4 e9 9b fe ff ff e8 ed f4 bc f6 90 <0f> 0b 90 e9 3e f6 ff ff 48 89 c6 48 c7 c7 e0 0b 75 90 48 89 44 24 [ 106.658666][ C1] RSP: 0018:ffffc90000a08b70 EFLAGS: 00010246 [ 106.664727][ C1] RAX: 0000000000000000 RBX: ffff888057f369d0 RCX: ffffffff8aff1d81 [ 106.672684][ C1] RDX: ffff88801e6b2440 RSI: ffffffff8aff2743 RDI: 0000000000000001 [ 106.680635][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 106.688620][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90000a08c28 [ 106.696595][ C1] R13: ffff88802a1dbc00 R14: 0000000000000041 R15: ffff888057f36500 [ 106.704563][ C1] ? __ieee80211_beacon_get+0xb31/0x1720 [ 106.710191][ C1] ? __ieee80211_beacon_get+0x14f3/0x1720 [ 106.715902][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 106.720834][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 106.726278][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 106.732343][ C1] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 106.737885][ C1] __iterate_interfaces+0x2e5/0x650 [ 106.743071][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.749128][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.755180][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 106.760970][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 106.767981][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 106.773267][ C1] __hrtimer_run_queues+0x202/0xad0 [ 106.778463][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 106.784165][ C1] ? read_tsc+0x9/0x20 [ 106.788225][ C1] hrtimer_run_softirq+0x17d/0x350 [ 106.793321][ C1] handle_softirqs+0x216/0x8e0 [ 106.798076][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 106.803349][ C1] __irq_exit_rcu+0x109/0x170 [ 106.808018][ C1] irq_exit_rcu+0x9/0x30 [ 106.812261][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.817894][ C1] [ 106.820808][ C1] [ 106.823722][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.829685][ C1] RIP: 0010:do_idle+0x110/0x510 [ 106.834523][ C1] Code: 16 0f 0f 83 05 02 00 00 e8 6d 80 ce ff 8b 05 f3 1b 16 0f 85 c0 75 09 e8 ae 0e ee 09 85 c0 74 3d e8 a5 37 1b 00 e8 30 28 ee 09 7b fe ff ff 80 7d 00 00 0f 85 35 03 00 00 49 8b 45 00 a8 08 0f [ 106.854113][ C1] RSP: 0018:ffffc90000197e10 EFLAGS: 00000206 [ 106.860166][ C1] RAX: 000000000015b587 RBX: 0000000000000001 RCX: ffffffff81c3ebdf [ 106.868120][ C1] RDX: 0000000000000000 RSI: ffffffff8de1a120 RDI: ffffffff8c1579e0 [ 106.876074][ C1] RBP: ffffed1003cd6488 R08: 0000000000000001 R09: 0000000000000001 [ 106.884028][ C1] R10: ffffffff90a81557 R11: 0000000000000001 R12: 0000000000000001 [ 106.891979][ C1] R13: ffff88801e6b2440 R14: ffffffff90a81550 R15: 0000000000000000 [ 106.899941][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 106.905917][ C1] ? __pfx_do_idle+0x10/0x10 [ 106.910491][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 106.915683][ C1] ? do_idle+0x6/0x510 [ 106.919760][ C1] cpu_startup_entry+0x4f/0x60 [ 106.924512][ C1] start_secondary+0x21d/0x2b0 [ 106.929262][ C1] ? __pfx_start_secondary+0x10/0x10 [ 106.934538][ C1] common_startup_64+0x13e/0x148 [ 106.939472][ C1] [ 106.942665][ C1] Kernel Offset: disabled [ 106.946967][ C1] Rebooting in 86400 seconds..