last executing test programs: 11m0.302106501s ago: executing program 3 (id=395): epoll_create1(0x80000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000a0) r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioperm(0x0, 0x9, 0x7) r2 = gettid() r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000040000180060001000a000000080005"], 0x54}}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000006c0)={0x1, 0x1, 0x7000000}) 10m59.102729904s ago: executing program 3 (id=400): mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) unlinkat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0x108, 0x0, 0x0, 0x0, 0x108, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, '\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x3e8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket(0x1e, 0x1, 0x0) getrlimit(0x9, 0x0) connect$tipc(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x20000023896) 10m55.784428181s ago: executing program 3 (id=408): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000fda00d6ce00791048001700800008000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) 10m53.405964959s ago: executing program 3 (id=411): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x402202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x48, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1f}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffd614, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x3}}]}, 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 10m51.508182836s ago: executing program 3 (id=415): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmc(&(0x7f0000002600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0xc0844123, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 10m49.928596962s ago: executing program 3 (id=419): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000500)={0x2, 0x4e1d, @multicast1=0xe0000306}, 0x10, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) ioperm(0x0, 0x4, 0x1) ioprio_set$pid(0x3, 0x0, 0x0) 10m34.588792955s ago: executing program 32 (id=419): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000500)={0x2, 0x4e1d, @multicast1=0xe0000306}, 0x10, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) ioperm(0x0, 0x4, 0x1) ioprio_set$pid(0x3, 0x0, 0x0) 7m44.821612956s ago: executing program 0 (id=779): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x43, 0x0, 0x4, 0x7, @multicast}, 0x10) bind$llc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 7m41.52038217s ago: executing program 0 (id=784): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semop(0x0, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 7m40.178681651s ago: executing program 0 (id=786): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000}) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x8000451a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r4, 0x3002}], 0x1, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x1d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x7, 0x6, 0x5, 0x1, 0x8001}, @generic={0x6, 0x9, 0x3, 0x9}, @call={0x85, 0x0, 0x0, 0x49}, @call={0x85, 0x0, 0x0, 0x9c}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x7e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$media(&(0x7f0000000140), 0x7fffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x8}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 7m37.941412698s ago: executing program 0 (id=791): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x4000) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0xffffff14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) recvmsg(r2, 0x0, 0x10100) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x810) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m35.050192523s ago: executing program 0 (id=797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0, r2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffe, @loopback}, 0x0, 0x0, 0x3}}, 0x80) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) 7m29.274779753s ago: executing program 0 (id=806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x88981) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7d, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, 0x0, 0x25, 0x1, @void}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={0xf9, 0x4, 0x40000, {r7}}, 0x20) writev(r4, &(0x7f0000000300)=[{0x0}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7m13.972912558s ago: executing program 33 (id=806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x88981) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7d, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, 0x0, 0x25, 0x1, @void}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={0xf9, 0x4, 0x40000, {r7}}, 0x20) writev(r4, &(0x7f0000000300)=[{0x0}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m10.637053507s ago: executing program 5 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) listen(0xffffffffffffffff, 0x5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c80c}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 6m6.711691461s ago: executing program 5 (id=949): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001f80)={0x2020}, 0x2020) r7 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x6, 0x8080) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0xcf77, 0x1, 0xdd59, 0x400, 0x7, 0x10001, 0x4c28, 0xfffff89f, 0x8, 0x9, 0xc, 0x3, 0x7fffffff, 0x3, 0x10be, 0x80, 0x3, 0xa9, 0x7, 0xfffffffd, 0xffffffff, 0xfffff060, 0x1, 0x100, 0x5, 0x5, 0x2, 0x8, 0x7, 0xfffffffa, 0x70000000, 0x240000]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r6}, 0x18) unshare(0x6a040000) write$P9_RREADLINK(r6, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TIOCSETD(r5, 0x5423, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r9 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4) sendmsg$can_bcm(r9, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x9) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) 6m3.798458975s ago: executing program 5 (id=953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000080)={0x1, @sdr={0x38415261, 0x400}}) socket$nl_netfilter(0x10, 0x3, 0xc) 6m1.986937489s ago: executing program 5 (id=956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0xf069afb206e88bfe, 0x2003c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x44, 0x30, 0x1af, 0x1000, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffff72, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x4}, {0xffff}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x40}}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000000)=0xfffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r7, &(0x7f0000000100), 0x0}, 0x20) recvmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)=""/136, 0x88}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000580)=""/82, 0x52}], 0x3, &(0x7f0000000200)=""/57, 0x39}, 0x10142) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) close(r0) 5m59.912882103s ago: executing program 5 (id=961): open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x120) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1001, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x15) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f00000000c0)=0x33) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x538, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r7, 0x1261, 0x3) 5m58.154791775s ago: executing program 5 (id=965): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20049809) socket$inet6_tcp(0xa, 0x1, 0x0) 5m42.258560457s ago: executing program 34 (id=965): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20049809) socket$inet6_tcp(0xa, 0x1, 0x0) 1m53.408641507s ago: executing program 7 (id=1441): socket$inet6_sctp(0xa, 0x1, 0x84) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x42800, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x80, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000005f40)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x5, [0x9e0, 0x6, 0x100000001, 0xff, 0x8000]}) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x400000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sndpcmc(&(0x7f0000002600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0xc0844123, 0x20000000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x23b, 0x0, &(0x7f0000000080), 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) 1m51.106562538s ago: executing program 7 (id=1445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f0000000540)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@mmap}, {@directio}, {@cache_none}, {@msize={'msize', 0x3d, 0x2}}, {@noxattr}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='mand'}, {@fsname={'fsname', 0x3d, 'N%&@.g$'}}, {@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, 'sched_switch\x00'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '(,'}}]}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, 0x0, &(0x7f0000000840)=r3}, 0x20) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 1m49.282900847s ago: executing program 7 (id=1451): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffffffffff3b) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000002c0)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x0, 0x140, 0xfeffffff, 0x210, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'caif0\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x68}}}}, {{@ip={@remote, @broadcast, 0xffffff, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @port=0x4e24, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000022000000000000900000000f7de91d072f5d271a57f91024139aece8db91e1d8e82288ca8649f63a521a2dc1a2307dd600c404fc2870600000000000000538e739da7e6d848be9059c849be16c7ddbd9876bdbd1b030fe15f551495ba607fe175bb93027dd1960091a59610b358333150481d3ed6b64ec0cc765e330833a5bbfdeb920c795ac183db423e8dab23646405ba18dacc352566761039cdff3945f617000f1c284604439e766404add891351c2d97df8ac5d2e95a66f0f6723c8a85d8acfc06c49b415ec157ce42d851c816ae376695b0f13274e4467a4231460997ea6255efa739d4524442b8cffdfb397b293d6a560ab4a10c9469627e72e1262b3b8f69d41e0b796718843c3413ae68173a6eb15c8f2b8154b38fc25f8341a61e120891d442850183ae9ead18bc90fb1f97e1ac4c9e"], 0x1c}}, 0x24040018) syz_open_procfs$userns(r2, &(0x7f0000000040)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r8, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x400000000000006, 0x800040000000206b}) syz_clone3(&(0x7f00000011c0)={0x80, 0x0, &(0x7f00000005c0), 0x0, {}, &(0x7f0000001040)=""/185, 0xb9, &(0x7f0000001100)=""/107, 0x0, 0x0, {r8}}, 0x58) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 1m48.094758821s ago: executing program 7 (id=1454): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x484400, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m41.001274268s ago: executing program 7 (id=1467): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(r3, r2) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0046d00, &(0x7f0000001500)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) 1m39.465162687s ago: executing program 7 (id=1469): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) sched_setscheduler(r1, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fspick(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, 0x0, 0x3) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) socket$igmp(0x2, 0x3, 0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) ioctl$BLKROSET(r8, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r8, 0x125f, 0x0) 1m31.532527843s ago: executing program 1 (id=1484): r0 = socket$nl_route(0x10, 0x3, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r3, r2, 0x0, 0x80009) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r5) pipe2(0x0, 0x84880) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x8, 0x1455, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x118, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 1m27.422605604s ago: executing program 1 (id=1490): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x484400, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r4, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x40, 0x3], [], [0x0, 0x1]}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m26.081355522s ago: executing program 1 (id=1495): syz_open_dev$vbi(0x0, 0x0, 0x2) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2c, 0x7ff) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) 1m24.563476446s ago: executing program 1 (id=1498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000009511000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82", 0x13, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000017f8c98"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) 1m24.176487444s ago: executing program 35 (id=1469): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) sched_setscheduler(r1, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fspick(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, 0x0, 0x3) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) socket$igmp(0x2, 0x3, 0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) ioctl$BLKROSET(r8, 0x125d, &(0x7f0000000000)=0x4) ioctl$BLKRRPART(r8, 0x125f, 0x0) 1m22.946665517s ago: executing program 1 (id=1502): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x549, 0x56dd, 0x54362d63}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}}) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x9, 0x0, [0x0], [0xff, 0x0, 0x39a], [], [0x100000001]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000200)={r4, 0x4000, 0x0, 0x5, 0x0, [], [], [], [0x0, 0x8]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 1m20.438294303s ago: executing program 1 (id=1510): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) listen(0xffffffffffffffff, 0x5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c80c}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 1m5.247737915s ago: executing program 36 (id=1510): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) listen(0xffffffffffffffff, 0x5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c80c}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 20.810844727s ago: executing program 9 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a00020000000000020000000500010001"], 0x28}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="cb1100000db5506bf7d29017beb993880de9"], 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003540), 0x0, 0xfffffffe, 0xd) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}], 0xc}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a3000"], 0x1f4}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x6000, 0xc0940621f232ea96}) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) 19.980279222s ago: executing program 8 (id=1601): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x8000000, 0x2, 0x101, 0x0, 0x0, [{0x8, 0x2e, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xeb}, {0xff, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x6, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x0, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0x8}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x5, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x7f, 0x0, '\x00', 0x72}, {0x7f, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x81}, {0xf, 0x7, 0x5}, {0x3, 0x6, 0xb}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x4, 0x40001e5a, &(0x7f00000001c0)="03cb1b98aa701cbf367c22c3ed3af392da09e5fd06efdf7c331579a9bae0efdba6f59f9850048049843ddd6472263d5e1058f262d03d08a428f31552fb9e47dec13d75ee2e6025f42f376550", &(0x7f0000000340)="4a791682346cf51347742b3eb956c91aed4f6a22ebca4e74d7a2ce01779607cb783e1fae8fcb03929cd085e6d792df757bec9a1e0854b020d468cfedc942a0f10e2445da7e35", 0x4c, 0x46}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) lseek(r2, 0x9, 0x1) tkill(0x0, 0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) readv(r5, 0x0, 0x0) getrandom(&(0x7f00000005c0)=""/169, 0xa9, 0x2) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x24d, 0xa, 0x0, 0x0, 0x3e, 0x180, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000400)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x6573, 0x4}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x100000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000340)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x9c) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc}) 15.777530156s ago: executing program 6 (id=1609): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000002c0)={{0x1}, 'port1\x00', 0x0, 0x100008, 0x0, 0x0, 0x3}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x15}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x21, 0x0, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000000)={0x4, 0x0, 0x2, 0x10000, 0x0}) 14.127982589s ago: executing program 6 (id=1611): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0xe6}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, r1, 0x413, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x80000000}}}}, 0x30}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x3, 0x5}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x302, 0x0, 0xe0, 0xff, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @val={0x3, 0x1, 0x4, 0x400, 0x2, 0x4}, @x25={0x0, 0x0, 0x9, "7fcd9d28e3298567243d09db11b0171460e7a17cdc8012cc2535cfcfb59ce21dfc44b9a4da370d97dec389f72119eae0ce416b62fd4f8644e38c6169047766867f162cb824372374f5e6ed78606a765eb2b065d1072ca3a3a1e54df343e91422aecf70f689db48e2458a7dc2ab91b7add8148594f40e"}}, 0x83) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x120, r7, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "d494a1defe9867f43cd073b084fe7331ce8c3b1205a2df75e42aee13be8f48af10ed3d7fe40b1226f1ad2806af5444c25e5d4f7d0cc84fc190a92520bbed11b3c0194e70b9af14ffec1712e641ab5464743122007743fe855dcc698f6c45621828ab9d143e77812249c0302c8cc7c84306ddeccd25fa0274ce7f0bc23476b797a1d0f50906ef5f7d76d7f5696a8f3e0b435e7ce3d8a72999468c9ae58eeb847e664ad043b0aa2479a25c3f7eb627f8d80fd7c7c52148054c8811a046f8d021527de1d0fb133e900d60c0cb1fe2b161dc64c1269b1a18522bf9818e75f674f1fa4ea7ba2391"}]}]}, 0x120}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) syz_emit_ethernet(0x48, &(0x7f0000000000)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3}]}}}}}}, 0x0) 14.035980013s ago: executing program 9 (id=1612): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r3, 0x0, 0x80005, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000680)={0x48, 0x1, r3, 0x0, 0x7fffffffffffffff, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r3, 0x0, 0x81, 0x81}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r3, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) r4 = io_uring_setup(0x617f, &(0x7f0000000300)={0x0, 0x174, 0x4, 0x1, 0x175}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x162c, r6, 0x2}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@remote, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000440)=0xe8) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x2}, 0x0, 0x2, 0x8}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="99742bbd7000fbdbdf2515"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904000000ff005013cda3"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) 13.841354987s ago: executing program 8 (id=1614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000009511000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82", 0x13, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000017f8c98"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) 12.531874389s ago: executing program 2 (id=1615): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1106000, 0x1000, 0xe9, 0x6}, 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000100)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) gettid() bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x1) write(r1, &(0x7f0000000380)="ecc31b33e3db531e4b5ea24c56aa8ad6ec918d5b75014e963046a7bd5a", 0x1d) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 10.944940737s ago: executing program 2 (id=1616): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@deltaction={0x6c, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) add_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000ac0)="a1", 0x1, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000000010000000b000000000000000000000c0600000007000000850400000000000000000000000000000d000000030000000300000005"]) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x0, 0x0) shutdown(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000800000000000000079c4800"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe35, @void, @value}, 0x94) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) 10.943792993s ago: executing program 8 (id=1617): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @loopback, [], [], 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x0, 0x96}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2f}, {0x16c000000000, 0x0, 0x0, 0x1, 0x0, 0x4, 0xfffffffffffffffd}, {0x0, 0x2}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x2, 0x4, 0x6a}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd28, 0x70bd2b, 0x70bd29, 0x2}}]}, 0x154}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x60, 0x0) fanotify_mark(r7, 0x71, 0x800000a, 0xffffffffffffffff, 0x0) fanotify_mark(r7, 0x12, 0x8001001, r6, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x804) 10.550242347s ago: executing program 6 (id=1618): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x61) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000080)={r8, 0x2, 0x0, 0x0, 0x3, [0x0], [0x800000, 0x0, 0xffffffff], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9], [0x2b8], [0x0, 0x9]}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 9.915667022s ago: executing program 2 (id=1619): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x549, 0x56dd, 0x54362d63}) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x9, 0x0, [0x0], [0xff, 0x0, 0x39a], [], [0x100000001]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000200)={r5, 0x4000, 0x0, 0x5, 0x0, [], [], [], [0x0, 0x8]}) 9.900401275s ago: executing program 9 (id=1621): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x4, @private2, 0x80000000}, {0xa, 0x4e20, 0x7ff, @rand_addr=' \x01\x00', 0x3}, 0x1, {[0x5, 0x632, 0xbf2a0, 0xffffffff, 0x3, 0x8001, 0x3, 0x5]}}, 0x5c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x301, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xfc, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000300)) 8.96188739s ago: executing program 6 (id=1622): syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c00000001040500000000000000000000000000060006400000000008000540000000000500010001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24000000010401"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) shutdown(r7, 0x1) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, 0x0, 0x0) 8.850539615s ago: executing program 2 (id=1624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp], 0x4) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="8002030042800000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002480)=@newsa={0x13c, 0x10, 0x1, 0xffffffff, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7, 0x3}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1-avx2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) clock_gettime(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xe, 0x6, 0x11, @dev={0xfe, 0x80, '\x00', 0x2c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x0, 0x9, 0x80000000}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r9, @ANYBLOB="8da16f416fbb13bee64f7ea7d6da69fe6b2e643f3dd6459a000000000176bcefc85d36ae225b72e221fc6b721ea62a9de30dc2750000000054a2b6f6b207acd14f44ae0ce018ee2e4fd2a33b9c57a4b59b064b12e3d6f698b0996edf1b11ca263716ba64464e07fadce21e7db069b948d57d9e676d4d8f270695c382b1f89ac4114c94e5860915e31904db52972406cee196e50cb0ca1f17981ac5fd895f35525a9c0700"/182], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 7.876730898s ago: executing program 6 (id=1625): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x300}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/11, 0xb}], 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="080002000000ebff0b00000013000800"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r8, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0) 7.30118276s ago: executing program 4 (id=1626): ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x8, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r8, 0x0, 0x408100) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r9, 0x3b71, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 7.203110799s ago: executing program 2 (id=1627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioprio_set$pid(0x1, r7, 0x2004) 6.247436611s ago: executing program 4 (id=1628): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="041498f8c8003122784634d73fc02777c6b8bdf15ee640453352751ea20c2dca2aeaaf6c80a2b7341cadd557b016b18e756a038a6b681e6fe53090fa3d86117a64be137743aad0a2e0b45f43c5d6baaa41e2373c5150bca930218a0c750dd54329e7646c7d31258c5f17fac5b7cef555"], 0x9) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xec9223f0ec860c78, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) epoll_create(0x207ffd) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001f80)={0x2020}, 0x2020) r7 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x6, 0x8080) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0xcf77, 0x1, 0xdd59, 0x400, 0x7, 0x10001, 0x4c28, 0xfffff89f, 0x8, 0x9, 0xc, 0x3, 0x7fffffff, 0x3, 0x10be, 0x80, 0x3, 0xa9, 0x7, 0xfffffffd, 0xffffffff, 0xfffff060, 0x1, 0x100, 0x5, 0x5, 0x2, 0x8, 0x7, 0xfffffffa, 0x70000000, 0x240000]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r6}, 0x18) unshare(0x6a040000) write$P9_RREADLINK(r6, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TIOCSETD(r5, 0x5423, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r9 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4) sendmsg$can_bcm(r9, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x9) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)=@newtaction={0xef0, 0x30, 0xb, 0x0, 0x0, {}, [{0xedc, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe90, 0x2, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0xec0}, {0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7f0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {0x0, 0xcb1}, {}, {0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x391a04c0a5f5edad}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xef0}}, 0x0) 5.557967818s ago: executing program 9 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_io_uring_setup(0x1661, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000003c00038038000080340001802d000100fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90231f7365de2ae1583b710c20da833679ebe6000000140000001000010000000000000000000084000a"], 0xec}}, 0x0) socket$unix(0x1, 0x2, 0x0) lstat(&(0x7f00000019c0)='./cgroup\x00', &(0x7f0000001a00)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a80), &(0x7f0000001ac0)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 3.754648229s ago: executing program 9 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) setregid(r5, r5) stat(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000240)={{0x1, 0x0, r5, 0x0, r6, 0x2, 0x800}, 0x0, 0x0, 0x3, 0x3, 0x4000, 0x6, 0xd3e8, 0xb, 0x1000, 0x9, 0x0, r7}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) acct(0x0) 3.747475903s ago: executing program 4 (id=1632): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3ac1, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='Y\x00', @ANYBLOB="00002bbd7000fcdbdf250b0000003400018008000300ac1e010108000600080000000500020005000000080006001800000008000300ac1e010106"], 0x58}, 0x1, 0x0, 0x0, 0x400c095}, 0x20040041) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2db7fffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYBLOB='c', @ANYRESDEC=r1, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r6, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r7, &(0x7f0000002980), 0x400000000000239, 0x0) r8 = semget(0x3, 0x3, 0x200) semop(r8, &(0x7f0000000000)=[{0x4, 0x8, 0x800}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.725314919s ago: executing program 6 (id=1633): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000400)={0x28, 0x0, r2, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x9}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000240)="955f8418538d9e50a456f1aa5649b042bd867b5a6f13b079a4947ce6ee586934bf2e995bf8a08bb2ec9850bfdf5e62b17eaa787f9bdb6a6ed615ee6bf2632e37fbe07d18692faefb2f00000000000000005808443b06997d535da4eb447e89f616382e5546f387110ef7ad73f9febfe4c53d3b46a672eaab98e2ed37f18ddad04720104371", 0x85, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@nullb, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r9, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) 3.695116435s ago: executing program 8 (id=1634): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES16=0xffffffffffffffff, @ANYRESHEX=r4], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5, 0x0, 0x83}, 0x18) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) io_uring_setup(0x1fc2, 0x0) capget(0x0, &(0x7f0000000040)={0x3, 0xaf, 0x1, 0x5, 0x2, 0xa}) r8 = socket(0x10, 0x4, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004001) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r10, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x1fe, 0x1c14, 0xffffffff, 0x42, 0x2]}, &(0x7f00000002c0)=0x54) r11 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r11, &(0x7f0000000240)=""/112, 0x349b7f55) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = dup(r12) ioctl$KVM_SET_CPUID2(r13, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYRES32=r6]) write$selinux_validatetrans(r0, 0x0, 0x0) 2.232274247s ago: executing program 4 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x167a, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x0, 0xa87b1ca1aba2f6e5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x80203, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x8, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 2.073766103s ago: executing program 9 (id=1636): pipe(&(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000000280), 0x9, 0x208c40) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x1ff) sendto$inet(r2, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r4, 0x101, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xe3}]}, 0x24}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x0, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) syz_clone(0x1200200, 0x0, 0x0, 0x0, 0x0, 0x0) 2.020507312s ago: executing program 8 (id=1637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'dh\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x3, 0x8040210, 0x10, 0xf9, 0x7, 0x5, 0x0, 0x0, 0x4, 0xd}}, 0x50) r5 = open(0x0, 0xc162, 0x0) r6 = open$dir(0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, &(0x7f0000000380)=0xc) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r8, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0x9}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x6, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x7, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff5, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8020, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0xffff8001, 0x7fe, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x1002, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x7f, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x1, 0x5, 0x8, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0xf80, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x1, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x805, 0x40001, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r8, &(0x7f0000000100)="76f63e1741c1e2a080b895d550d429e4414614f8e4abe64ce7b111ab0b"}, 0x20) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r9, 0x0) 468.421083ms ago: executing program 4 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r7 = dup(0xffffffffffffffff) read$FUSE(r7, 0x0, 0x0) linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010480)={0x390, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x348, 0x8, 0x0, 0x1, [{0x344, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x390}}, 0x0) r8 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x50, 0x13, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x14, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x50}}, 0x0) 118.415113ms ago: executing program 8 (id=1639): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/173, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) tkill(r1, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, r7, r0], &(0x7f0000000700)=[{0x1, 0x4, 0x9, 0x7}], 0x10, 0x6, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=1640): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r10, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c000000090002"], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): red! [ 593.362370][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.207203][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.535720][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.714525][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.751325][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.981865][ T29] audit: type=1400 audit(1737250793.677:1025): avc: denied { mount } for pid=11188 comm="syz.7.1083" name="/" dev="ramfs" ino=28294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 596.004756][ T29] audit: type=1400 audit(1737250793.677:1026): avc: denied { getopt } for pid=11188 comm="syz.7.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 596.024598][ T29] audit: type=1400 audit(1737250793.677:1027): avc: denied { remount } for pid=11188 comm="syz.7.1083" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 596.168968][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.320444][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.531631][T11210] 9pnet_virtio: no channels available for device syz [ 597.445770][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.484988][T11222] loop9: detected capacity change from 0 to 6 [ 597.670987][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.790840][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.343991][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.906055][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.030017][T11256] Cannot find add_set index 0 as target [ 600.054084][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.255519][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 600.279206][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.502547][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 600.543407][T11254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11254 comm=syz.2.1094 [ 600.992735][ T6693] net_ratelimit: 4 callbacks suppressed [ 600.992752][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.419227][T11273] overlayfs: failed to clone upperpath [ 601.974820][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.455354][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.572138][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.714735][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.825356][ T29] audit: type=1400 audit(1737250800.517:1028): avc: denied { setopt } for pid=11269 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 602.849712][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.991129][ T29] audit: type=1400 audit(1737250800.667:1029): avc: denied { accept } for pid=11269 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 603.014149][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.157627][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 603.946756][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.481808][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.610782][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.688194][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 606.345384][ T6693] net_ratelimit: 3 callbacks suppressed [ 606.345406][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.460065][ T29] audit: type=1400 audit(1737250804.147:1030): avc: denied { read } for pid=11324 comm="syz.7.1107" path="socket:[28775]" dev="sockfs" ino=28775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 606.485553][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.524909][ T970] IPVS: starting estimator thread 0... [ 606.639412][T11336] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 606.643120][T11331] IPVS: using max 34 ests per chain, 81600 per kthread [ 606.690626][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.767473][T11332] netlink: 'syz.7.1107': attribute type 6 has an invalid length. [ 606.839963][ T29] audit: type=1400 audit(1737250804.527:1031): avc: denied { create } for pid=11324 comm="syz.7.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 606.840357][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.860298][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.969579][ T29] audit: type=1400 audit(1737250804.637:1032): avc: denied { ioctl } for pid=11304 comm="syz.2.1104" path="socket:[28787]" dev="sockfs" ino=28787 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 607.072772][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 608.119856][ T29] audit: type=1400 audit(1737250805.147:1033): avc: denied { connect } for pid=11345 comm="syz.4.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 608.531589][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 608.655043][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 608.752207][T11367] xt_NFQUEUE: number of total queues is 0 [ 608.803364][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 609.022288][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 609.671618][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 609.681248][ T29] audit: type=1400 audit(1737250807.377:1034): avc: denied { audit_write } for pid=11347 comm="syz.1.1111" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 609.766295][ T29] audit: type=1400 audit(1737250807.397:1035): avc: denied { watch_mount } for pid=11347 comm="syz.1.1111" path="/218" dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 611.761484][ T1848] net_ratelimit: 4 callbacks suppressed [ 611.761516][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 612.085447][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 612.457450][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 613.094307][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 613.868274][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 613.959306][T11419] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 614.019099][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 614.387228][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 614.418704][ T29] audit: type=1400 audit(1737250812.027:1036): avc: denied { accept } for pid=11414 comm="syz.2.1123" laddr=::ffff:172.20.20.187 lport=54599 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 614.511187][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 614.525545][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 614.535297][T11417] ceph: No mds server is up or the cluster is laggy [ 614.697772][ T29] audit: type=1400 audit(1737250812.027:1037): avc: denied { getopt } for pid=11414 comm="syz.2.1123" laddr=::ffff:172.20.20.187 lport=54599 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 614.709935][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 614.773280][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.942281][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 615.948371][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 615.976311][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.008812][T11438] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1127'. [ 617.181668][T11446] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 617.199539][T11445] --map-set only usable from mangle table [ 617.550098][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 617.883851][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 618.051600][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.059419][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.760418][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 619.891836][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.087510][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.231902][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.352316][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 622.107642][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 622.674260][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 622.991146][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 623.668746][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 623.842890][ T29] audit: type=1400 audit(1737250821.527:1038): avc: denied { setopt } for pid=11496 comm="syz.6.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 623.857283][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 624.507474][T11504] overlayfs: failed to clone upperpath [ 624.534463][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.541146][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.586197][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 624.709636][ T5868] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 624.728150][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 624.839543][ T5868] usb 2-1: device descriptor read/64, error -71 [ 625.089778][ T5868] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 625.139631][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.534755][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.739616][ T5868] usb 2-1: device descriptor read/64, error -71 [ 625.761740][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.014841][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.660552][ T5868] usb usb2-port1: attempt power cycle [ 628.746166][ T6695] net_ratelimit: 1 callbacks suppressed [ 628.746185][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 628.794097][ T29] audit: type=1804 audit(1737250825.487:1039): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1144" name="/newroot/221/file1" dev="fuse" ino=1 res=1 errno=0 [ 628.863099][ T29] audit: type=1800 audit(1737250825.487:1040): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1144" name="/" dev="fuse" ino=1 res=0 errno=0 [ 628.884267][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.903628][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.759879][ T29] audit: type=1804 audit(1737250825.497:1041): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1144" name="/newroot/221/file1" dev="fuse" ino=1 res=1 errno=0 [ 629.814293][ T29] audit: type=1804 audit(1737250825.497:1042): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1144" name="/newroot/221/file1" dev="fuse" ino=1 res=1 errno=0 [ 629.835997][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.868615][ T29] audit: type=1800 audit(1737250825.497:1043): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1144" name="/" dev="fuse" ino=1 res=0 errno=0 [ 629.894202][ T29] audit: type=1400 audit(1737250825.837:1044): avc: denied { getopt } for pid=11526 comm="syz.6.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 630.077617][T11557] Invalid source name [ 631.919986][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 632.227217][ T29] audit: type=1800 audit(1737250829.877:1045): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1152" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 632.629988][T11575] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 632.824783][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 632.950561][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 633.286197][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 633.402584][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 634.129725][T11591] tipc: Started in network mode [ 634.134664][T11591] tipc: Node identity 080211, cluster identity 4711 [ 634.141588][T11591] tipc: Enabled bearer , priority 7 [ 634.343824][T11592] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1157'. [ 634.726520][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.471319][ T29] audit: type=1800 audit(1737250833.157:1046): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1155" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 635.499562][T11483] tipc: Node number set to 134353152 [ 635.509642][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.750009][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.778082][T11603] Process accounting resumed [ 636.073397][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.146799][ T29] audit: type=1400 audit(1737250833.837:1047): avc: denied { bind } for pid=11604 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 637.120107][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 637.855851][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 638.914024][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 638.923398][T11621] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1164'. [ 638.930605][ T29] audit: type=1400 audit(1737250834.937:1048): avc: denied { ioctl } for pid=11610 comm="syz.6.1164" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 639.939699][ T29] audit: type=1400 audit(1737250835.307:1049): avc: denied { bind } for pid=11610 comm="syz.6.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 641.116582][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.368871][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 642.252022][T11638] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 642.690485][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 642.711057][T11640] tty tty34: ldisc open failed (-12), clearing slot 33 [ 642.800493][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 643.180083][T11648] tipc: Enabling of bearer rejected, failed to enable media [ 643.211661][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 643.480572][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 643.680935][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 643.794751][T11658] x_tables: unsorted underflow at hook 3 [ 644.729537][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.386799][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.389896][T11673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 645.400871][T11673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 645.406818][T11673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 645.458255][T11673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 645.585681][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.847286][ T5940] net_ratelimit: 1 callbacks suppressed [ 646.847298][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.878482][T11686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.001397][T11691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.120416][T11692] Invalid ELF header magic: != ELF [ 647.130996][T11692] ntfs3(nullb0): Primary boot signature is not NTFS. [ 647.138537][T11692] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 647.299895][ T29] audit: type=1400 audit(1737250844.817:1050): avc: denied { module_load } for pid=11682 comm="syz.1.1178" path="/sys/kernel/notes" dev="sysfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 647.547313][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 647.553492][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 647.612780][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.729302][ T29] audit: type=1400 audit(1737250845.417:1051): avc: denied { create } for pid=11689 comm="syz.4.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 647.807534][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.839804][ T29] audit: type=1400 audit(1737250845.527:1052): avc: denied { ioctl } for pid=11697 comm="syz.1.1180" path="socket:[30104]" dev="sockfs" ino=30104 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 647.920801][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.989661][ T29] audit: type=1400 audit(1737250845.527:1053): avc: denied { connect } for pid=11689 comm="syz.4.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 648.057095][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 649.071030][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 649.740297][ T29] audit: type=1400 audit(1737250845.527:1054): avc: denied { write } for pid=11689 comm="syz.4.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 649.742256][ T6695] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 649.822331][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.827773][ T29] audit: type=1400 audit(1737250847.017:1055): avc: denied { recv } for pid=11703 comm="syz.6.1183" saddr=10.128.0.169 src=38662 daddr=10.128.0.95 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 650.154021][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1184'. [ 650.193776][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.329657][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.457498][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.005887][ T29] audit: type=1326 audit(1737250848.657:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9650985d29 code=0x7ffc0000 [ 651.402524][ T29] audit: type=1326 audit(1737250848.677:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9650985d29 code=0x7ffc0000 [ 651.452249][ T29] audit: type=1326 audit(1737250848.687:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9650985d29 code=0x7ffc0000 [ 651.542260][ T29] audit: type=1326 audit(1737250848.687:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9650985d29 code=0x7ffc0000 [ 651.822024][T11733] binder: BINDER_SET_CONTEXT_MGR already set [ 651.828105][T11733] binder: 11732:11733 ioctl 4018620d 200001c0 returned -16 [ 651.839615][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 651.878441][ T3451] net_ratelimit: 4 callbacks suppressed [ 651.878477][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.439637][T11483] IPVS: starting estimator thread 0... [ 652.511965][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.582539][T11743] IPVS: using max 33 ests per chain, 79200 per kthread [ 652.629569][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.876733][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 653.015592][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 653.169299][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 653.259096][T11752] befs: (nbd1): No write support. Marking filesystem read-only [ 653.267389][T11752] syz.1.1191: attempt to access beyond end of device [ 653.267389][T11752] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 653.280405][T11752] befs: (nbd1): unable to read superblock [ 654.425451][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 654.506560][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 654.641254][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 654.659588][ T5825] Bluetooth: hci1: Malformed LE Event: 0x0d [ 654.900235][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.596769][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.172049][ T6654] net_ratelimit: 2 callbacks suppressed [ 657.172066][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.309744][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.431129][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.841498][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 658.493056][T11789] netlink: 'syz.7.1199': attribute type 10 has an invalid length. [ 659.169090][T11789] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 659.179883][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.349738][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.347439][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.351021][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 661.351033][ T29] audit: type=1400 audit(1737250858.637:1094): avc: denied { mount } for pid=11791 comm="syz.2.1202" name="/" dev="autofs" ino=30784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 661.453716][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.670798][T11808] pim6reg: entered allmulticast mode [ 661.717570][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.362762][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.376463][ T29] audit: type=1400 audit(1737250859.507:1095): avc: denied { bind } for pid=11804 comm="syz.7.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 662.377817][ T29] audit: type=1400 audit(1737250859.507:1096): avc: denied { connect } for pid=11804 comm="syz.7.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 662.377849][ T29] audit: type=1400 audit(1737250859.617:1097): avc: denied { accept } for pid=11804 comm="syz.7.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 662.450020][T11805] tty tty4: ldisc open failed (-12), clearing slot 3 [ 662.472091][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.841372][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 663.080378][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 663.686728][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 663.862057][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 664.013185][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 664.201353][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 664.686541][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.326991][ T29] audit: type=1400 audit(1737250862.497:1098): avc: denied { create } for pid=11835 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 665.358590][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.549979][ T29] audit: type=1400 audit(1737250863.787:1099): avc: denied { ioctl } for pid=11835 comm="syz.1.1213" path="socket:[30404]" dev="sockfs" ino=30404 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 666.584778][T11843] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.681959][ T29] audit: type=1400 audit(1737250864.277:1100): avc: denied { write } for pid=11835 comm="syz.1.1213" path="socket:[30846]" dev="sockfs" ino=30846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 666.705931][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.363985][T11847] input: syz1 as /devices/virtual/input/input11 [ 667.674916][ T5940] net_ratelimit: 4 callbacks suppressed [ 667.674954][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 667.781537][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 668.031704][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 668.442942][ T29] audit: type=1400 audit(1737250865.987:1101): avc: denied { read } for pid=11855 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 668.700769][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 668.812301][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 669.008110][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 669.033997][T11867] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 669.264023][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.013754][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.174119][ T29] audit: type=1326 audit(1737250867.837:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d25d85d29 code=0x7ffc0000 [ 670.235312][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.371415][ T29] audit: type=1326 audit(1737250867.837:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d25d85d29 code=0x7ffc0000 [ 670.395062][ T29] audit: type=1326 audit(1737250867.847:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d25d85d29 code=0x7ffc0000 [ 670.466348][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.479190][ T29] audit: type=1326 audit(1737250867.847:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d25d85d29 code=0x7ffc0000 [ 670.502937][ T29] audit: type=1326 audit(1737250867.847:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d25d85d29 code=0x7ffc0000 [ 670.526575][ T29] audit: type=1326 audit(1737250867.847:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d25d85d29 code=0x7ffc0000 [ 670.550255][ T29] audit: type=1326 audit(1737250867.847:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.6.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d25d85d29 code=0x7ffc0000 [ 670.679621][T11879] Cannot find set identified by id 0 to match [ 671.786642][T11887] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1224'. [ 671.812086][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 671.812101][ T29] audit: type=1400 audit(1737250869.477:1125): avc: denied { write } for pid=11877 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 671.986540][T11886] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 672.748713][ T1848] net_ratelimit: 6 callbacks suppressed [ 672.748734][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.887273][ T5825] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 672.971343][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.136379][T11909] netlink: zone id is out of range [ 673.144167][T11909] netlink: zone id is out of range [ 673.157958][T11909] netlink: set zone limit has 8 unknown bytes [ 673.584265][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.702363][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.899826][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 674.040912][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 674.808525][T11910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.049626][ T29] audit: type=1400 audit(1737250871.797:1126): avc: denied { ioctl } for pid=11911 comm="syz.4.1230" path="socket:[30998]" dev="sockfs" ino=30998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 675.056640][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 675.075350][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.231034][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1232'. [ 675.766085][T11926] overlayfs: failed to resolve './file1': -2 [ 676.485942][T11932] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 676.987356][ T5825] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 676.997554][ T5825] Bluetooth: hci2: Injecting HCI hardware error event [ 677.010503][ T5833] Bluetooth: hci2: hardware error 0x00 [ 678.064132][T11943] veth0_to_team: entered promiscuous mode [ 678.099490][T11943] veth0_to_team: entered allmulticast mode [ 678.485909][ T1848] net_ratelimit: 8 callbacks suppressed [ 678.485925][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.630888][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.191817][ T5833] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 679.223309][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.256449][ T29] audit: type=1400 audit(1737250876.917:1127): avc: denied { watch } for pid=11934 comm="syz.1.1237" path="/239/file0" dev="tmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 680.958878][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.831963][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.171084][T11973] No control pipe specified [ 682.956500][ T29] audit: type=1400 audit(1737250879.877:1128): avc: denied { create } for pid=11968 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 682.979716][ T29] audit: type=1400 audit(1737250879.877:1129): avc: denied { bind } for pid=11968 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 683.005293][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.162351][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.287956][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.290773][ T29] audit: type=1400 audit(1737250880.847:1130): avc: denied { setopt } for pid=11976 comm="syz.7.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 683.447664][ T29] audit: type=1400 audit(1737250881.017:1131): avc: denied { bind } for pid=11976 comm="syz.7.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 683.499047][ T29] audit: type=1400 audit(1737250881.037:1132): avc: denied { ioctl } for pid=11976 comm="syz.7.1246" path="/dev/usbmon7" dev="devtmpfs" ino=741 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 683.599935][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.511906][T11992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11992 comm=syz.2.1250 [ 684.593699][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.021343][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.320264][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.327076][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.826576][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 687.155010][ T29] audit: type=1400 audit(1737250884.847:1133): avc: denied { accept } for pid=11999 comm="syz.1.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 687.191081][T11995] infiniband syz0: set down [ 687.195671][T11995] tipc: Resetting bearer [ 687.233558][T11995] veth0_to_team: left promiscuous mode [ 687.239047][T11995] veth0_to_team: left allmulticast mode [ 687.284804][T11995] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.293774][T11995] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.302983][T11995] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.311860][T11995] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.322139][T11995] geneve2: left promiscuous mode [ 687.327097][T11995] geneve2: left allmulticast mode [ 687.335603][T11995] ipvlan2: left allmulticast mode [ 687.340952][T11995] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 687.441578][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.502146][T12010] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 687.530832][T12010] batman_adv: batadv0: Adding interface: team0 [ 687.536995][T12010] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.562231][T12010] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 687.581907][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.613487][T12014] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 687.633923][T12014] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1254'. [ 687.643842][T12014] team0: entered promiscuous mode [ 687.648971][T12014] team_slave_0: entered promiscuous mode [ 687.839081][T12014] team_slave_1: entered promiscuous mode [ 687.855609][T12014] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.246240][T12020] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 688.253287][T12020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 688.262147][T12020] vhci_hcd vhci_hcd.0: Device attached [ 688.397588][T12014] batman_adv: batadv0: Interface activated: team0 [ 688.410945][T12014] batman_adv: batadv0: Interface deactivated: team0 [ 688.418459][T12014] batman_adv: batadv0: Removing interface: team0 [ 688.425821][T12014] bridge0: port 4(team0) entered blocking state [ 688.432328][T12014] bridge0: port 4(team0) entered disabled state [ 688.438782][T12014] team0: entered allmulticast mode [ 688.448294][T12014] team_slave_0: entered allmulticast mode [ 688.460735][T12014] team_slave_1: entered allmulticast mode [ 688.477691][T12014] bridge0: port 4(team0) entered blocking state [ 688.484072][T12014] bridge0: port 4(team0) entered listening state [ 688.515522][T12022] vhci_hcd: connection closed [ 688.518359][ T6654] vhci_hcd: stop threads [ 688.542141][ T6654] vhci_hcd: release socket [ 688.546761][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.570747][ T6654] vhci_hcd: disconnect device [ 688.582305][ T5897] vhci_hcd: vhci_device speed not set [ 688.588117][ T5866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 688.712586][ T29] audit: type=1400 audit(1737250886.397:1134): avc: denied { setopt } for pid=12025 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 688.751500][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.894813][ T29] audit: type=1400 audit(1737250886.567:1135): avc: denied { mounton } for pid=12012 comm="syz.6.1255" path="/81/file0/bus" dev="ramfs" ino=31305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 689.179748][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.213282][T12024] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 689.232987][ T29] audit: type=1400 audit(1737250886.927:1136): avc: denied { create } for pid=12012 comm="syz.6.1255" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 689.236511][T12024] overlayfs: failed to set xattr on upper [ 689.276864][T12024] overlayfs: ...falling back to redirect_dir=nofollow. [ 689.285950][T12024] overlayfs: ...falling back to index=off. [ 689.292441][T12024] overlayfs: ...falling back to uuid=null. [ 689.317385][ T5866] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 689.327404][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.341139][ T5866] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 689.629856][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.757834][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.797793][ T5866] usb 5-1: config 0 descriptor?? [ 689.906550][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.240393][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.439725][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.531775][ T29] audit: type=1400 audit(1737250888.227:1137): avc: denied { accept } for pid=12050 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 690.552278][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.606997][ T29] audit: type=1400 audit(1737250888.297:1138): avc: denied { unmount } for pid=9984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 690.738895][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.829672][ T29] audit: type=1400 audit(1737250888.427:1139): avc: denied { unlink } for pid=9984 comm="syz-executor" name="file1" dev="ramfs" ino=31749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 690.852059][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.875767][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.083391][T12046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 691.090261][T12016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.099814][T12016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.986290][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 693.231256][ T970] usb 5-1: USB disconnect, device number 9 [ 693.760359][ T62] net_ratelimit: 8 callbacks suppressed [ 693.760407][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.203717][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.328967][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.425795][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1278'. [ 694.455163][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.205541][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.314309][T12100] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 695.897561][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.100403][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.394472][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.116309][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 697.568782][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 698.766846][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.101949][ T29] audit: type=1400 audit(1737250897.167:1140): avc: denied { audit_read } for pid=12108 comm="syz.1.1283" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 700.152563][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.279782][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.290095][T12131] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 700.479811][T12137] 9pnet_virtio: no channels available for device syz [ 700.589630][ T29] audit: type=1400 audit(1737250898.167:1141): avc: denied { bind } for pid=12123 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 700.950530][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.306896][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.392314][T12142] Invalid source name [ 701.449894][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.451453][T12141] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 701.559608][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.669670][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.699864][ T29] audit: type=1400 audit(1737250899.397:1142): avc: denied { write } for pid=12143 comm="syz.7.1292" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 701.893571][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 702.083725][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1291'. [ 702.721146][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 702.791086][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 704.002626][ C0] bridge0: port 4(team0) entered learning state [ 704.408035][T12161] vivid-000: disconnect [ 704.566531][T12143] vivid-000: reconnect [ 705.872993][T12155] tipc: Enabling of bearer rejected, failed to enable media [ 707.032066][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.108664][ T29] audit: type=1400 audit(1737250904.467:1143): avc: denied { execute_no_trans } for pid=12164 comm="syz.4.1296" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 707.649117][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.904909][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.536532][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.973536][ T29] audit: type=1400 audit(1737250906.167:1144): avc: denied { shutdown } for pid=12186 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 708.996418][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 709.164442][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 709.170748][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 709.331429][ T29] audit: type=1400 audit(1737250907.027:1145): avc: denied { setopt } for pid=12194 comm="syz.7.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 709.432153][T12206] Cannot find add_set index 0 as target [ 710.178152][ T3451] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.189606][T12207] Cannot find set identified by id 0 to match [ 710.299111][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.460073][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.495578][T12183] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12183 comm=syz.4.1299 [ 710.518434][ T29] audit: type=1400 audit(1737250908.187:1146): avc: denied { listen } for pid=12182 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 710.570299][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.692829][ T29] audit: type=1400 audit(1737250908.387:1147): avc: granted { setsecparam } for pid=12216 comm="syz.1.1309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 710.889354][T12218] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 710.897293][T12218] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 713.297279][ T29] audit: type=1400 audit(1737250909.637:1148): avc: denied { map } for pid=12213 comm="syz.7.1308" path="/dev/vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 713.333436][ T6693] net_ratelimit: 4 callbacks suppressed [ 713.333453][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.422519][T12221] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1308'. [ 713.758891][T12244] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 714.206825][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 714.424920][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.100083][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.270185][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.449756][ T29] audit: type=1400 audit(1737250913.147:1149): avc: denied { bind } for pid=12252 comm="syz.1.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 715.767812][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.890432][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.009641][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.344971][T12268] xt_connbytes: Forcing CT accounting to be enabled [ 716.351817][T12268] Cannot find add_set index 0 as target [ 716.894101][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.059397][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.814593][ T12] net_ratelimit: 9 callbacks suppressed [ 718.814605][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 719.035249][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 719.121830][ T29] audit: type=1326 audit(1737250916.797:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.2.1324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7bad85d29 code=0x0 [ 719.149978][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 719.371234][ C0] bridge0: port 4(team0) entered forwarding state [ 719.377736][ C0] bridge0: topology change detected, propagating [ 719.413587][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 720.241244][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 720.470545][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 720.645685][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 720.776382][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.369633][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 722.223550][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 722.672007][T12313] block nbd6: shutting down sockets [ 724.474203][ T6693] net_ratelimit: 9 callbacks suppressed [ 724.474239][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.501256][T12346] Cannot find set identified by id 0 to match [ 724.593314][T12288] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.711350][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.820204][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.498530][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.777139][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.964129][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.081465][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.232854][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.496216][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.975137][T12364] pty pty35: ldisc open failed (-12), clearing slot 35 [ 729.629561][ T1848] net_ratelimit: 13 callbacks suppressed [ 729.629579][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 730.790187][T12288] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 730.919633][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.892138][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.913205][ T29] audit: type=1400 audit(1737250929.097:1151): avc: denied { connect } for pid=12398 comm="syz.6.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 731.946477][ T29] audit: type=1400 audit(1737250929.247:1152): avc: denied { setattr } for pid=12398 comm="syz.6.1349" name="file0" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 732.010167][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.258898][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.733264][ T5868] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 732.928946][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 733.611835][T12415] befs: (nbd1): No write support. Marking filesystem read-only [ 733.619969][T12415] syz.1.1353: attempt to access beyond end of device [ 733.619969][T12415] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 733.632903][T12415] befs: (nbd1): unable to read superblock [ 733.738562][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.772947][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1351'. [ 733.825229][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 733.832549][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.876578][ T5868] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 733.885720][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.894165][ T5868] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 733.908541][ T5868] usb 7-1: config 1 interface 0 has no altsetting 0 [ 734.048896][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 734.265986][ T5868] usb 7-1: New USB device found, idVendor=0e25, idProduct=a400, bcdDevice= 0.40 [ 734.280946][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 734.299555][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.097544][ T5868] usb 7-1: can't set config #1, error -71 [ 735.115713][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 735.418761][ T5868] usb 7-1: USB disconnect, device number 3 [ 735.447671][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 735.601375][T12432] befs: (nbd6): No write support. Marking filesystem read-only [ 735.609672][T12432] syz.6.1357: attempt to access beyond end of device [ 735.609672][T12432] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 735.622599][T12432] befs: (nbd6): unable to read superblock [ 736.512994][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.665669][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.723410][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.872896][T12452] 9pnet_virtio: no channels available for device syz [ 738.075274][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.863145][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.938351][ T29] audit: type=1400 audit(1737250936.117:1153): avc: denied { write } for pid=12440 comm="syz.2.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 739.405499][T12288] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 741.009498][T12480] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1366'. [ 741.019881][T12480] openvswitch: netlink: Flow actions attr not present in new flow. [ 741.586331][T12482] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1368'. [ 741.966369][ T29] audit: type=1400 audit(1737250939.657:1154): avc: denied { execute } for pid=12478 comm="syz.6.1368" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 741.992083][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1367'. [ 743.640479][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.732301][T12485] netlink: 'syz.7.1367': attribute type 1 has an invalid length. [ 743.740851][T12485] netlink: 'syz.7.1367': attribute type 2 has an invalid length. [ 744.201294][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.360106][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.256049][T12518] capability: warning: `syz.2.1372' uses deprecated v2 capabilities in a way that may be insecure [ 745.276405][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.399680][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.008701][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.151544][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.230302][T12520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 746.289560][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.008527][ T29] audit: type=1400 audit(1737250944.187:1155): avc: denied { mounton } for pid=12525 comm="syz.1.1378" path="/proc/1111/task" dev="proc" ino=33121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 747.166615][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.226907][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.363015][ T29] audit: type=1400 audit(1737250944.217:1156): avc: denied { compute_member } for pid=12525 comm="syz.1.1378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 747.395284][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.494651][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.609618][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.789656][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.919086][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.310540][T12554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.323170][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1382'. [ 748.334408][T12554] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 748.343196][T12554] overlayfs: missing 'lowerdir' [ 748.347406][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 748.361602][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 748.371183][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.698485][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.069515][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.598511][T12568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1386'. [ 749.707027][ T29] audit: type=1400 audit(1737250947.397:1157): avc: denied { listen } for pid=12566 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 751.392541][T12286] net_ratelimit: 11 callbacks suppressed [ 751.392561][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.528204][T12590] overlayfs: overlapping lowerdir path [ 752.200958][ T29] audit: type=1326 audit(1737250949.857:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 752.229472][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.333312][ T29] audit: type=1326 audit(1737250949.857:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 752.367716][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.375593][ T29] audit: type=1326 audit(1737250949.997:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 752.399194][ T29] audit: type=1326 audit(1737250949.997:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 752.422825][ T29] audit: type=1326 audit(1737250949.997:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 752.481774][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.500905][ T29] audit: type=1326 audit(1737250950.187:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 752.589761][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.609583][ T29] audit: type=1326 audit(1737250950.187:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 752.737596][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.820158][ T29] audit: type=1326 audit(1737250950.187:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 752.853263][ T29] audit: type=1400 audit(1737250950.187:1166): avc: denied { connect } for pid=12595 comm="syz.7.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 752.939059][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1393'. [ 752.949576][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.378392][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.409863][ T29] audit: type=1326 audit(1737250950.197:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5d79185d29 code=0x7ffc0000 [ 753.436321][T12605] netlink: 'syz.4.1396': attribute type 4 has an invalid length. [ 753.528930][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.951260][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 756.435438][T12286] net_ratelimit: 9 callbacks suppressed [ 756.435456][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 756.560605][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 756.681730][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 757.025300][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 757.637615][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 757.971706][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.297766][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.859796][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.982772][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 759.120538][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 759.182413][T12658] tipc: Disabling bearer [ 759.210576][T12662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 759.392205][T12671] xt_NFQUEUE: number of queues (3) out of range (got 65536) [ 759.413686][T12671] binder: 12657:12671 ioctl c00c620f 200001c0 returned -22 [ 759.422157][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 759.422171][ T29] audit: type=1400 audit(1737250957.097:1235): avc: denied { write } for pid=12657 comm="syz.6.1408" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 759.505996][ T29] audit: type=1400 audit(1737250957.197:1236): avc: denied { setopt } for pid=12669 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 759.851964][ T5897] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 760.744751][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 761.171616][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 761.177762][ T5897] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 761.187858][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.208623][ T5897] usb 8-1: config 0 descriptor?? [ 761.483129][T12287] net_ratelimit: 11 callbacks suppressed [ 761.483166][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 761.808298][T12677] ipt_ECN: cannot use operation on non-tcp rule [ 761.825757][T12677] xt_nat: multiple ranges no longer supported [ 761.857844][ T5897] usb 8-1: can't set config #0, error -71 [ 761.873460][ T5897] usb 8-1: USB disconnect, device number 3 [ 762.014069][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 762.118373][T12693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1414'. [ 762.704695][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 762.819156][T12694] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 762.819156][T12694] The task syz.7.1415 (12694) triggered the difference, watch for misbehavior. [ 762.859462][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.030912][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.149688][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.832723][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.991730][T12692] dvmrp0: entered allmulticast mode [ 765.032463][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 765.298346][ T29] audit: type=1400 audit(1737250961.977:1237): avc: denied { create } for pid=12704 comm="syz.1.1417" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 766.612629][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 767.202932][T12695] dvmrp0: left allmulticast mode [ 767.248181][ T29] audit: type=1400 audit(1737250964.307:1238): avc: denied { unlink } for pid=5828 comm="syz-executor" name="file0" dev="tmpfs" ino=1549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 768.692520][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.460665][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.601436][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.879571][ T29] audit: type=1400 audit(1737250967.447:1239): avc: denied { accept } for pid=12738 comm="syz.4.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.912896][T12735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 770.040766][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 770.210841][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 770.330809][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 770.411168][ T29] audit: type=1400 audit(1737250968.107:1240): avc: denied { setcheckreqprot } for pid=12756 comm="syz.6.1429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 770.454426][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 770.657976][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 771.617783][T12767] syz.1.1427: attempt to access beyond end of device [ 771.617783][T12767] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 771.655621][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 772.314638][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 772.569484][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 772.578531][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 772.696729][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.029283][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.220145][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.551361][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.674905][T12776] tipc: Started in network mode [ 773.680052][T12776] tipc: Node identity 72ce055b07b1, cluster identity 4711 [ 773.687258][T12776] tipc: Enabled bearer , priority 7 [ 774.093723][T12775] tipc: Disabling bearer [ 774.108784][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 774.289570][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 774.493305][ T29] audit: type=1400 audit(1737250972.127:1241): avc: denied { setopt } for pid=12796 comm="syz.4.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 774.537231][T12800] Invalid option length (0) for dns_resolver key [ 774.682793][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 775.304966][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 775.634470][T12794] block nbd1: shutting down sockets [ 775.659580][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 776.875211][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.169769][ T57] net_ratelimit: 6 callbacks suppressed [ 777.169788][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 777.797322][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 778.442500][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 778.458457][ T29] audit: type=1400 audit(1737250975.757:1242): avc: denied { write } for pid=12826 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 779.033785][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 779.055816][ T29] audit: type=1400 audit(1737250976.297:1243): avc: denied { map } for pid=12833 comm="syz.1.1446" path="socket:[33643]" dev="sockfs" ino=33643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 779.140160][ T5825] Bluetooth: hci5: sending frame failed (-49) [ 779.148356][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 779.158739][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 779.198284][T12818] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 779.213056][T12821] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 779.220953][T12821] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1443'. [ 779.229944][T12821] team0: entered promiscuous mode [ 779.235262][T12821] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.242001][T12821] bridge0: port 1(team0) entered blocking state [ 779.248415][T12821] bridge0: port 1(team0) entered disabled state [ 779.254946][T12821] team0: entered allmulticast mode [ 779.310387][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 779.450339][T12847] Cannot find add_set index 0 as target [ 779.498611][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 779.506634][ T29] audit: type=1400 audit(1737250977.197:1244): avc: denied { append } for pid=12815 comm="syz.4.1443" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 779.557569][T12848] Cannot find add_set index 0 as target [ 779.597140][ T29] audit: type=1400 audit(1737250977.237:1245): avc: denied { map } for pid=12815 comm="syz.4.1443" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 779.633256][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 779.693337][ T29] audit: type=1400 audit(1737250977.237:1246): avc: denied { write execute } for pid=12815 comm="syz.4.1443" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 779.749747][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 779.879923][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 780.329852][T12857] xt_TCPMSS: Only works on TCP SYN packets [ 782.238061][ T12] net_ratelimit: 2 callbacks suppressed [ 782.238079][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 782.366609][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 782.517980][T12886] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 783.342152][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 783.528022][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 784.057824][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 784.211836][T12876] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 784.351752][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 785.378855][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 785.991984][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 786.087697][ T29] audit: type=1400 audit(1737250983.777:1247): avc: denied { remount } for pid=12909 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 786.136371][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 786.249537][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 786.334183][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 786.452869][ T970] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 786.598999][T12914] Cannot find add_set index 0 as target [ 786.976838][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 787.556811][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.569512][ T970] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 787.579495][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.953002][ T970] usb 2-1: config 0 descriptor?? [ 787.991362][ T3539] net_ratelimit: 4 callbacks suppressed [ 787.991380][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 788.168622][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 789.341831][ T29] audit: type=1400 audit(1737250986.397:1248): avc: denied { map } for pid=12926 comm="syz.7.1467" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 789.372900][ T29] audit: type=1400 audit(1737250986.397:1249): avc: denied { execute } for pid=12926 comm="syz.7.1467" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 789.413278][ T970] usbhid 2-1:0.0: can't add hid device: -71 [ 789.480143][ T970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 789.488734][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 789.520613][ T970] usb 2-1: USB disconnect, device number 9 [ 789.649936][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 790.055991][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 790.097533][T12953] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 791.053399][T12953] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 791.220707][T12957] befs: (nbd6): No write support. Marking filesystem read-only [ 791.229856][T12957] syz.6.1471: attempt to access beyond end of device [ 791.229856][T12957] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 791.242593][T12957] befs: (nbd6): unable to read superblock [ 791.252491][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.438401][ T29] audit: type=1400 audit(1737250989.127:1250): avc: denied { block_suspend } for pid=12952 comm="syz.4.1473" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 791.460915][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.681315][T12967] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1474'. [ 791.696445][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 792.696659][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.651339][ T29] audit: type=1400 audit(1737250990.587:1251): avc: denied { create } for pid=12958 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 793.672935][ T29] audit: type=1400 audit(1737250990.587:1252): avc: denied { sys_admin } for pid=12958 comm="syz.2.1475" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 793.694127][ T29] audit: type=1400 audit(1737250990.977:1253): avc: denied { associate } for pid=12980 comm="syz.2.1475" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 794.675856][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 795.240549][T12981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 795.457466][T12991] usb usb8: usbfs: process 12991 (syz.4.1479) did not claim interface 0 before use [ 795.461217][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 795.686119][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.363438][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.525872][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.613469][T13001] nvme_fabrics: missing parameter 'transport=%s' [ 796.769308][T13008] netem: change failed [ 797.290371][T13001] nvme_fabrics: missing parameter 'nqn=%s' [ 797.337102][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.359619][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 797.459598][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.579668][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.461704][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.586790][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 799.376673][T13025] netlink: 'syz.6.1485': attribute type 10 has an invalid length. [ 799.906910][T13025] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 799.923043][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 800.040084][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 801.199661][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 801.610233][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.441513][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.597467][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.739599][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.859677][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.969633][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 803.091317][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 804.990891][ T3539] net_ratelimit: 4 callbacks suppressed [ 804.990909][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 805.203532][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 805.919279][T13078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 805.948723][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 806.170210][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 806.776738][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.187371][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.426328][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.436123][ T29] audit: type=1400 audit(1737251005.127:1254): avc: denied { bind } for pid=13092 comm="syz.6.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 807.457619][T13097] netlink: 'syz.6.1504': attribute type 1 has an invalid length. [ 808.147954][ T29] audit: type=1400 audit(1737251005.147:1255): avc: denied { shutdown } for pid=13092 comm="syz.6.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 808.167652][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.217842][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 808.223750][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.306295][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.315290][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 808.328479][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.350837][T13107] --map-set only usable from mangle table [ 808.466233][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.475258][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.537107][T13108] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 808.603324][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.692284][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 808.703845][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 808.715456][ T5833] Bluetooth: hci6: sending frame failed (-49) [ 808.716097][T13114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.724024][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 809.549503][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 809.567158][T13110] sit0 speed is unknown, defaulting to 1000 [ 809.575085][T13110] sit0 speed is unknown, defaulting to 1000 [ 809.581445][T13110] sit0 speed is unknown, defaulting to 1000 [ 809.657964][T13110] infiniband syz2: set down [ 809.662572][T13110] infiniband syz2: added sit0 [ 810.159350][ T5866] sit0 speed is unknown, defaulting to 1000 [ 810.167972][T13110] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 810.172534][T13110] infiniband syz2: Couldn't open port 1 [ 810.195380][T13110] RDS/IB: syz2: added [ 810.201241][T13110] smc: adding ib device syz2 with port count 1 [ 810.207406][T13110] smc: ib device syz2 port 1 has pnetid [ 810.215355][T13110] sit0 speed is unknown, defaulting to 1000 [ 810.258530][T13110] sit0 speed is unknown, defaulting to 1000 [ 810.298756][T13110] sit0 speed is unknown, defaulting to 1000 [ 810.339361][T13110] sit0 speed is unknown, defaulting to 1000 [ 810.379592][T13110] sit0 speed is unknown, defaulting to 1000 [ 810.420135][T13110] sit0 speed is unknown, defaulting to 1000 [ 810.460974][T13110] sit0 speed is unknown, defaulting to 1000 [ 810.536014][T11483] sit0 speed is unknown, defaulting to 1000 [ 810.626039][T13123] Cannot find set identified by id 0 to match [ 810.680311][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 810.823921][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 811.226302][T13129] befs: (nbd4): No write support. Marking filesystem read-only [ 811.235490][T13129] syz.4.1511: attempt to access beyond end of device [ 811.235490][T13129] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 811.248655][T13129] befs: (nbd4): unable to read superblock [ 811.670721][ T5825] Bluetooth: hci5: command tx timeout [ 811.854989][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 811.895091][T13091] sit0 speed is unknown, defaulting to 1000 [ 811.973681][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 813.017415][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 813.822670][T13136] 9pnet_virtio: no channels available for device syz [ 814.000887][ T5825] Bluetooth: hci5: command tx timeout [ 814.019629][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 816.812105][ T5825] Bluetooth: hci5: command tx timeout [ 816.843725][T13151] --map-set only usable from mangle table [ 818.849731][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.923368][ T5825] Bluetooth: hci5: command tx timeout [ 819.059695][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 819.278628][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 819.328302][ T29] audit: type=1400 audit(1737251017.017:1256): avc: denied { view } for pid=13161 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 819.474826][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 819.510517][T13091] chnl_net:caif_netlink_parms(): no params data found [ 819.629120][T13166] /dev/nullb0: Can't lookup blockdev [ 820.623762][T13180] 9pnet_fd: Insufficient options for proto=fd [ 821.033762][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.093901][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.101148][T13175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 821.107214][T13175] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 821.109060][T13091] bridge_slave_0: entered allmulticast mode [ 821.113234][T13175] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 821.120531][T13091] bridge_slave_0: entered promiscuous mode [ 821.132323][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.139428][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.146600][T13091] bridge_slave_1: entered allmulticast mode [ 821.153413][T13091] bridge_slave_1: entered promiscuous mode [ 821.165859][T13175] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 822.386994][T13091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.882887][T13091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.929431][T13091] team0: Port device team_slave_0 added [ 822.936552][T13190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 822.943022][T13190] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 823.112236][T13091] team0: Port device team_slave_1 added [ 823.724457][T13091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.735963][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.118452][T13091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.139348][T13091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.147419][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.173558][T13091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.222173][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 825.048031][ T5825] Bluetooth: hci5: command 0x0c1a tx timeout [ 825.054619][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 825.060951][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 825.081296][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 825.090242][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 825.098517][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 825.111110][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 825.220521][T13091] hsr_slave_0: entered promiscuous mode [ 825.231744][T13091] hsr_slave_1: entered promiscuous mode [ 825.251975][T13091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.274567][T13091] Cannot create hsr debugfs directory [ 826.091467][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.221175][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 826.318399][T13206] sit0 speed is unknown, defaulting to 1000 [ 826.989891][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.128740][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 827.199646][ T5831] Bluetooth: hci2: command tx timeout [ 827.211154][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.320685][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.569758][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.339277][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.478247][T13091] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 828.636092][ T5868] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 828.637743][T13091] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 828.688213][ T57] bond0: (slave netdevsim0): Releasing backup interface [ 828.721597][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.741478][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.304920][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 829.353187][ T5831] Bluetooth: hci2: command tx timeout [ 829.411398][T13091] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 829.438510][T13091] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 829.462868][ T5868] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 829.488135][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.556151][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 65 [ 829.569739][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.582492][T13206] chnl_net:caif_netlink_parms(): no params data found [ 829.586795][ T5868] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 829.598675][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.608864][ T5868] usb 5-1: config 0 descriptor?? [ 829.668500][T13091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.820205][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 830.450159][ T29] audit: type=1400 audit(1737251027.597:1257): avc: denied { write } for pid=13253 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 830.457489][ T5868] hid-u2fzero 0003:10C4:8ACF.0005: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 830.583014][ T5868] hid-u2fzero 0003:10C4:8ACF.0005: U2F Zero LED initialised [ 830.592801][ T5868] hid-u2fzero 0003:10C4:8ACF.0005: U2F Zero RNG initialised [ 830.934666][T13091] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.983202][T13206] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.005899][ T5866] usb 5-1: USB disconnect, device number 10 [ 831.020692][T13206] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.030198][T13206] bridge_slave_0: entered allmulticast mode [ 831.036874][T13206] bridge_slave_0: entered promiscuous mode [ 831.044277][T13206] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.052392][T13206] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.059982][T13206] bridge_slave_1: entered allmulticast mode [ 831.066864][T13206] bridge_slave_1: entered promiscuous mode [ 831.143694][ T57] bridge_slave_1: left allmulticast mode [ 831.149367][ T57] bridge_slave_1: left promiscuous mode [ 831.158721][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.168869][ T57] bridge_slave_0: left allmulticast mode [ 831.174645][ T57] bridge_slave_0: left promiscuous mode [ 831.184693][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.199030][ T29] audit: type=1400 audit(1737251028.887:1258): avc: denied { setattr } for pid=13266 comm="syz.6.1539" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 831.224261][ T29] audit: type=1400 audit(1737251028.887:1259): avc: denied { write } for pid=13266 comm="syz.6.1539" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 831.246046][ T29] audit: type=1400 audit(1737251028.887:1260): avc: denied { open } for pid=13266 comm="syz.6.1539" path="/143/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 831.371592][ T5833] Bluetooth: hci2: command tx timeout [ 831.684702][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.712656][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.725064][ T57] bond0 (unregistering): Released all slaves [ 831.754580][T13206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.816540][T13267] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 831.821357][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.833221][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.843077][T13267] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 831.894789][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.906166][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.010688][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 832.037145][ T57] tipc: Left network mode [ 832.038584][T13206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.132546][ T29] audit: type=1400 audit(1737251029.807:1261): avc: denied { unmount } for pid=9984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 832.287724][T13206] team0: Port device team_slave_0 added [ 832.320244][T13206] team0: Port device team_slave_1 added [ 832.520306][T13206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.544689][ T5833] Bluetooth: hci2: command tx timeout [ 833.677661][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1542'. [ 833.707547][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.733489][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.798585][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1541'. [ 833.807610][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1541'. [ 833.859757][T13287] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1541'. [ 833.869620][T13287] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1541'. [ 833.908388][T13206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.959540][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.169704][T13206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.176879][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.204283][T13206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.291461][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 834.970688][ T3539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.991393][T13310] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 835.050251][T13206] hsr_slave_0: entered promiscuous mode [ 835.068864][T13206] hsr_slave_1: entered promiscuous mode [ 835.142581][T13206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.168386][T13206] Cannot create hsr debugfs directory [ 835.212038][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 835.340100][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 835.431150][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1545'. [ 835.529600][T12287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 836.913618][ T57] hsr_slave_0: left promiscuous mode [ 836.923258][ T57] hsr_slave_1: left promiscuous mode [ 836.941457][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.949029][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.137128][ T5831] Bluetooth: hci4: command 0x1003 tx timeout [ 837.144045][ T5833] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 837.159593][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.167270][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.122988][ T57] veth1_macvtap: left promiscuous mode [ 838.138265][ T57] veth0_macvtap: left promiscuous mode [ 838.144111][ T57] veth1_vlan: left promiscuous mode [ 838.152224][ T57] veth0_vlan: left promiscuous mode [ 838.949580][ T57] team0 (unregistering): Port device team_slave_1 removed [ 839.024369][ T57] team0 (unregistering): Port device team_slave_0 removed [ 839.299364][T13359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.331689][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 840.371703][T13342] sit0 speed is unknown, defaulting to 1000 [ 840.610754][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 840.735933][T13206] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 840.811999][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 840.849611][T13206] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 840.982639][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 841.029932][T13091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.104611][T13206] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 841.263132][T13206] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 841.389786][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 841.581866][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 841.714817][T13389] ax25_connect(): syz.6.1555 uses autobind, please contact jreuter@yaina.de [ 841.738755][ T29] audit: type=1400 audit(1737251039.407:1262): avc: denied { connect } for pid=13377 comm="syz.6.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 841.949597][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 842.079914][ T1848] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 842.195298][ T57] IPVS: stop unused estimator thread 0... [ 842.342114][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 842.419996][T13206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.451898][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.584594][T13206] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.736872][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.744065][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.848956][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.856208][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.949057][T13206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 844.959692][T13206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.489621][T13457] ALSA: mixer_oss: invalid index 80000 [ 845.579821][ T29] audit: type=1400 audit(1737251043.187:1263): avc: denied { write } for pid=13434 comm="syz.6.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 846.425998][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.596294][ T6654] net_ratelimit: 1 callbacks suppressed [ 846.596311][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.826496][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.850466][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 847.144298][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 847.187239][T13487] tmpfs: Bad value for 'mpol' [ 847.319619][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 847.404622][T13091] veth0_vlan: entered promiscuous mode [ 847.428352][T13091] veth1_vlan: entered promiscuous mode [ 847.475318][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 847.528910][T13091] veth0_macvtap: entered promiscuous mode [ 847.659097][T13206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.259626][ T5866] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 848.274085][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.288973][ T29] audit: type=1400 audit(1737251045.977:1264): avc: denied { getopt } for pid=13500 comm="syz.6.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 848.612111][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 848.628002][ T5866] usb 5-1: config 129 has an invalid interface number: 190 but max is 0 [ 848.674334][T13091] veth1_macvtap: entered promiscuous mode [ 848.693871][ T5866] usb 5-1: config 129 has no interface number 0 [ 848.709698][ T5866] usb 5-1: config 129 interface 190 has no altsetting 0 [ 848.720159][ T5866] usb 5-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=b8.db [ 848.734265][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.757662][ T5866] usb 5-1: Product: syz [ 848.770045][ T5866] usb 5-1: Manufacturer: syz [ 848.774694][ T5866] usb 5-1: SerialNumber: syz [ 848.911873][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.970903][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 849.015264][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.660135][ T29] audit: type=1400 audit(1737251047.207:1265): avc: denied { shutdown } for pid=13513 comm="syz.2.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 849.720199][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.996316][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.047885][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.089053][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.111876][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.128079][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.142997][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.159418][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.176603][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.193407][T13091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.259624][T13460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.261286][ T5866] usb 5-1: can't set first interface for hiFace device. [ 850.280047][T13520] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 850.288946][T13520] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 850.330072][ T5866] snd-usb-hiface 5-1:129.190: probe with driver snd-usb-hiface failed with error -5 [ 850.374187][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.396005][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.438938][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.458106][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.469253][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.473739][ T5866] usb 5-1: USB disconnect, device number 11 [ 850.517094][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.527850][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.538216][T13091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.549837][T13091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.563930][T13091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.613403][T13091] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.628026][T13091] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.638925][T13091] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.649223][T13091] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.329157][T13206] veth0_vlan: entered promiscuous mode [ 851.920291][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 851.930007][T13206] veth1_vlan: entered promiscuous mode [ 855.277325][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.291366][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.306356][ T57] bond0 (unregistering): Released all slaves [ 855.856475][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 855.880585][T13563] sit0 speed is unknown, defaulting to 1000 [ 856.026319][T13460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 856.132241][ T29] audit: type=1400 audit(1737251053.827:1266): avc: denied { bind } for pid=13593 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 856.196502][T13206] veth0_macvtap: entered promiscuous mode [ 856.824930][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 856.831312][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 857.111686][T13599] ceph: No mds server is up or the cluster is laggy [ 857.125183][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 857.150952][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.174248][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 857.189466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.227324][T13206] veth1_macvtap: entered promiscuous mode [ 857.321049][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 857.458059][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 857.494253][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.507449][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.518790][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.582965][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.088573][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.099602][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.109968][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.124512][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.134631][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.148915][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.159025][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.176719][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.210477][T13206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.396087][T13460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.404461][ T5940] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 858.453624][T13460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.469164][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.509544][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.548051][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.558699][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.576696][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.596345][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.614848][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.627416][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.645119][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.667766][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.683888][T13206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.734327][ T57] hsr_slave_0: left promiscuous mode [ 858.753560][ T57] hsr_slave_1: left promiscuous mode [ 858.774545][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.786324][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.803957][ T57] veth1_macvtap: left promiscuous mode [ 858.810185][ T57] veth0_macvtap: left promiscuous mode [ 858.817401][ T57] veth1_vlan: left promiscuous mode [ 858.824001][ T57] veth0_vlan: left promiscuous mode [ 858.936225][ T57] team0 (unregistering): Port device batadv1 removed [ 859.339655][ T29] audit: type=1326 audit(1737251057.027:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.420973][ T29] audit: type=1326 audit(1737251057.027:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.453081][ T29] audit: type=1326 audit(1737251057.027:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.480207][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 859.492374][ T29] audit: type=1326 audit(1737251057.027:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.492757][ T57] team0 (unregistering): Port device team_slave_1 removed [ 859.516279][ T29] audit: type=1326 audit(1737251057.027:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.547882][ T29] audit: type=1326 audit(1737251057.027:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.571958][ T29] audit: type=1326 audit(1737251057.027:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.595630][ T29] audit: type=1326 audit(1737251057.027:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.637655][ T29] audit: type=1326 audit(1737251057.027:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc7bad85d29 code=0x7ffc0000 [ 859.661079][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.675481][ T57] team0 (unregistering): Port device team_slave_0 removed [ 860.173844][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 860.210375][T13206] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.252796][T13206] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.266137][T13206] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.316546][T13206] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.338607][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 861.669173][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 861.669188][ T29] audit: type=1400 audit(1737251059.357:1284): avc: denied { ioctl } for pid=13626 comm="syz.4.1586" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x54d7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 861.701109][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.709542][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 862.652128][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 862.725423][T13637] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 864.487567][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 864.671921][T12286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.696429][T12286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.103560][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.147704][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.400762][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.492177][ T57] IPVS: stop unused estimator thread 0... [ 865.529581][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.675545][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.766512][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1593'. [ 866.571698][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.580014][T13114] Bluetooth: hci2: command 0x0405 tx timeout [ 866.701994][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 867.311574][ T29] audit: type=1326 audit(1737251064.497:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13699 comm="syz.4.1595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9650985d29 code=0x0 [ 867.343456][T11296] IPVS: starting estimator thread 0... [ 868.096297][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.139520][T13707] IPVS: using max 36 ests per chain, 86400 per kthread [ 868.265727][T13715] overlayfs: failed to clone upperpath [ 868.279984][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.021885][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.192260][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.240513][T13723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 869.246919][T13723] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 869.254491][T13723] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 869.260649][T13723] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 869.310262][T13723] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 869.349660][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.535805][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.602693][ T29] audit: type=1400 audit(1737251067.297:1286): avc: denied { write } for pid=13727 comm="syz.8.1601" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 869.675657][T13740] loop7: detected capacity change from 0 to 16384 [ 869.736615][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.758393][T13742] usb usb8: usbfs: process 13742 (syz.6.1602) did not claim interface 0 before use [ 869.781255][T13740] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0 [ 869.783275][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.783335][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.803155][T13740] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0 [ 869.803872][T13740] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 869.803940][T13740] Buffer I/O error on dev loop7, logical block 256, async page read [ 869.852782][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.858965][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.982265][ T29] audit: type=1400 audit(1737251067.677:1287): avc: denied { ioctl } for pid=13739 comm="syz.4.1603" path="socket:[37806]" dev="sockfs" ino=37806 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 869.988470][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 870.027940][T13737] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 870.027973][T13737] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 870.028032][T13737] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 870.028073][T13737] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 870.028114][T13737] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 870.028156][T13737] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 870.028203][T13737] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 870.028244][T13737] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 870.028284][T13737] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 870.028324][T13737] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 870.034380][T13737] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 870.069593][T13743] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 870.089749][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 870.122830][ T29] audit: type=1326 audit(1737251067.817:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13739 comm="syz.4.1603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9650985d29 code=0x0 [ 870.628686][T13747] sit0 speed is unknown, defaulting to 1000 [ 871.209456][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 871.750076][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 871.750192][T13114] Bluetooth: hci5: command 0x0c1a tx timeout [ 872.101914][T13767] netlink: 284 bytes leftover after parsing attributes in process `syz.9.1598'. [ 872.749539][ T29] audit: type=1400 audit(1737251070.387:1289): avc: denied { execute } for pid=13765 comm="syz.4.1607" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=37837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 873.197776][ T6693] net_ratelimit: 21 callbacks suppressed [ 873.197795][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 873.330477][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 873.799598][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 873.812347][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 873.922917][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 874.850523][T13768] tty tty38: ldisc open failed (-12), clearing slot 37 [ 875.000142][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 875.160043][T13795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.883747][T13801] infiniband syz1: set active [ 875.888511][T13801] infiniband syz1: added syz_tun [ 876.118338][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 876.119132][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.197430][T13801] RDS/IB: syz1: added [ 876.201606][T13801] smc: adding ib device syz1 with port count 1 [ 876.207769][T13801] smc: ib device syz1 port 1 has pnetid [ 876.382035][T13795] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1612'. [ 876.502739][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.690580][T13808] Invalid source name [ 876.697180][T13808] UBIFS error (pid: 13808): cannot open "/dev/sg0", error -22 [ 876.712552][T12286] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.170551][ T5870] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 877.397860][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.453267][T13817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 877.459562][T13817] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 877.469969][T13817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 878.028685][ T5870] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 878.069495][ T5870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.077617][ T5870] usb 10-1: Product: syz [ 878.085651][ T5870] usb 10-1: Manufacturer: syz [ 878.093016][ T5870] usb 10-1: SerialNumber: syz [ 878.121997][ T5870] usb 10-1: config 0 descriptor?? [ 878.589707][T13829] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 878.598709][T13829] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 878.614186][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.032300][ T5870] usb 10-1: USB disconnect, device number 2 [ 879.081208][T13833] xt_NFQUEUE: number of total queues is 0 [ 879.091233][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.330284][T13460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.851191][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 879.857282][ T5825] Bluetooth: hci5: command 0x0c1a tx timeout [ 879.863440][ T5825] Bluetooth: hci2: command 0x0405 tx timeout [ 879.929480][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.979946][T13850] xt_connbytes: Forcing CT accounting to be enabled [ 880.037624][T13850] Cannot find add_set index 0 as target [ 880.160705][ T29] audit: type=1326 audit(1737251077.847:1290): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.2.1624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7bad85d29 code=0x0 [ 880.243246][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 880.370030][T13861] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 880.380162][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 880.477000][T13862] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1622'. [ 880.496245][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1622'. [ 880.700841][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.099049][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.308657][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.794078][T13874] ptrace attach of "./syz-executor exec"[9984] was attempted by "./syz-executor exec"[13874] [ 883.303387][T13460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 883.783265][T13904] sit0 speed is unknown, defaulting to 1000 [ 884.503960][ T11] net_ratelimit: 1 callbacks suppressed [ 884.503979][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.912212][T13909] befs: (nbd9): No write support. Marking filesystem read-only [ 884.920923][T13909] syz.9.1630: attempt to access beyond end of device [ 884.920923][T13909] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 884.935898][T13909] befs: (nbd9): unable to read superblock [ 885.518649][ T29] audit: type=1400 audit(1737251083.207:1291): avc: denied { accept } for pid=13915 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 886.015336][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 886.146443][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 886.186125][T13923] ceph: No mds server is up or the cluster is laggy [ 886.287118][T13933] trusted_key: encrypted_key: insufficient parameters specified [ 886.650578][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 886.737458][ T29] audit: type=1400 audit(1737251083.997:1292): avc: denied { validate_trans } for pid=13919 comm="syz.8.1634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 886.757966][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.930462][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 887.031825][T13938] fuse: Bad value for 'fd' [ 887.260181][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.496206][T11296] IPVS: starting estimator thread 0... [ 888.811095][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.829548][T13951] IPVS: using max 29 ests per chain, 69600 per kthread [ 888.999495][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 889.169006][T13961] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 889.694097][T13965] [ 889.696467][T13965] ====================================================== [ 889.703489][T13965] WARNING: possible circular locking dependency detected [ 889.710514][T13965] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 889.717627][T13965] ------------------------------------------------------ [ 889.724644][T13965] syz.8.1639/13965 is trying to acquire lock: [ 889.730698][T13965] ffff8880330b01e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 889.739587][T13965] [ 889.739587][T13965] but task is already holding lock: [ 889.746940][T13965] ffff888025807e78 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 889.756175][T13965] [ 889.756175][T13965] which lock already depends on the new lock. [ 889.756175][T13965] [ 889.766571][T13965] [ 889.766571][T13965] the existing dependency chain (in reverse order) is: [ 889.775575][T13965] [ 889.775575][T13965] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 889.783395][T13965] __mutex_lock+0x19b/0xa60 [ 889.788425][T13965] blk_mq_init_sched+0x42b/0x640 [ 889.793886][T13965] elevator_init_mq+0x2cd/0x420 [ 889.799248][T13965] add_disk_fwnode+0x113/0x1300 [ 889.804613][T13965] sd_probe+0xa86/0x1000 [ 889.809370][T13965] really_probe+0x23e/0xa90 [ 889.814391][T13965] __driver_probe_device+0x1de/0x440 [ 889.820195][T13965] driver_probe_device+0x4c/0x1b0 [ 889.825734][T13965] __device_attach_driver+0x1df/0x310 [ 889.831629][T13965] bus_for_each_drv+0x157/0x1e0 [ 889.836997][T13965] __device_attach_async_helper+0x1d3/0x290 [ 889.841965][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 889.843399][T13965] async_run_entry_fn+0x9c/0x530 [ 889.856217][T13965] process_one_work+0x9c5/0x1ba0 [ 889.861694][T13965] worker_thread+0x6c8/0xf00 [ 889.866816][T13965] kthread+0x2c1/0x3a0 [ 889.871416][T13965] ret_from_fork+0x45/0x80 [ 889.876357][T13965] ret_from_fork_asm+0x1a/0x30 [ 889.881655][T13965] [ 889.881655][T13965] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 889.890530][T13965] blk_queue_enter+0x50f/0x640 [ 889.895831][T13965] blk_mq_alloc_request+0x59b/0x950 [ 889.901561][T13965] scsi_execute_cmd+0x1da/0xf40 [ 889.906942][T13965] read_capacity_16+0x213/0xe10 [ 889.912333][T13965] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 889.918675][T13965] sd_probe+0x904/0x1000 [ 889.923442][T13965] really_probe+0x23e/0xa90 [ 889.928466][T13965] __driver_probe_device+0x1de/0x440 [ 889.929572][ T29] audit: type=1400 audit(1737251087.387:1293): avc: denied { append } for pid=13957 comm="syz.8.1639" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 889.934244][T13965] driver_probe_device+0x4c/0x1b0 [ 889.934266][T13965] __device_attach_driver+0x1df/0x310 [ 889.969348][T13965] bus_for_each_drv+0x157/0x1e0 [ 889.974732][T13965] __device_attach_async_helper+0x1d3/0x290 [ 889.981160][T13965] async_run_entry_fn+0x9c/0x530 [ 889.986623][T13965] process_one_work+0x9c5/0x1ba0 [ 889.992080][T13965] worker_thread+0x6c8/0xf00 [ 889.997185][T13965] kthread+0x2c1/0x3a0 [ 890.001772][T13965] ret_from_fork+0x45/0x80 [ 890.006706][T13965] ret_from_fork_asm+0x1a/0x30 [ 890.011992][T13965] [ 890.011992][T13965] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 890.019636][T13965] __mutex_lock+0x19b/0xa60 [ 890.024661][T13965] __nbd_set_size+0x2c0/0x730 [ 890.029851][T13965] nbd_start_device+0x8fd/0xd70 [ 890.035219][T13965] nbd_ioctl+0x21a/0xfd0 [ 890.039977][T13965] blkdev_ioctl+0x276/0x6d0 [ 890.045007][T13965] __x64_sys_ioctl+0x190/0x200 [ 890.050296][T13965] do_syscall_64+0xcd/0x250 [ 890.055328][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.061743][T13965] [ 890.061743][T13965] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 890.070352][T13965] blk_mq_submit_bio+0x1fb6/0x24c0 [ 890.075982][T13965] __submit_bio+0x384/0x540 [ 890.080999][T13965] submit_bio_noacct_nocheck+0x698/0xd70 [ 890.087146][T13965] submit_bio_noacct+0x93a/0x1e20 [ 890.092686][T13965] block_read_full_folio+0x812/0xa50 [ 890.098488][T13965] filemap_read_folio+0xc6/0x2a0 [ 890.103941][T13965] filemap_get_pages+0x155f/0x1be0 [ 890.109570][T13965] filemap_read+0x3ca/0xd70 [ 890.114588][T13965] blkdev_read_iter+0x187/0x480 [ 890.119957][T13965] vfs_read+0x87f/0xbe0 [ 890.124641][T13965] ksys_read+0x12b/0x250 [ 890.129410][T13965] do_syscall_64+0xcd/0x250 [ 890.134453][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.140881][T13965] [ 890.140881][T13965] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 890.149418][T13965] down_read+0x9a/0x330 [ 890.154101][T13965] filemap_fault+0x62c/0x2820 [ 890.159297][T13965] __do_fault+0x10a/0x490 [ 890.164145][T13965] do_pte_missing+0xebd/0x3e00 [ 890.169417][T13965] __handle_mm_fault+0x103c/0x2a40 [ 890.175032][T13965] handle_mm_fault+0x3fa/0xaa0 [ 890.180300][T13965] do_user_addr_fault+0x7a3/0x13f0 [ 890.185917][T13965] exc_page_fault+0x5c/0xc0 [ 890.190926][T13965] asm_exc_page_fault+0x26/0x30 [ 890.196283][T13965] rep_movs_alternative+0x4a/0x70 [ 890.201815][T13965] _copy_from_iter+0x385/0x1560 [ 890.207174][T13965] tipc_msg_build+0x308/0x1120 [ 890.212439][T13965] __tipc_sendstream+0x6fa/0x1190 [ 890.217971][T13965] tipc_sendstream+0x4f/0x70 [ 890.223068][T13965] sock_write_iter+0x4fe/0x5b0 [ 890.228438][T13965] vfs_write+0x5ae/0x1150 [ 890.233295][T13965] ksys_write+0x207/0x250 [ 890.238140][T13965] do_syscall_64+0xcd/0x250 [ 890.243161][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.249570][T13965] [ 890.249570][T13965] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 890.257108][T13965] __lock_acquire+0x249e/0x3c40 [ 890.262466][T13965] lock_acquire.part.0+0x11b/0x380 [ 890.268092][T13965] __might_fault+0x11b/0x190 [ 890.273191][T13965] _copy_from_user+0x29/0xd0 [ 890.278284][T13965] __blk_trace_setup+0xa8/0x180 [ 890.283644][T13965] blk_trace_setup+0x47/0x70 [ 890.288739][T13965] sg_ioctl+0x65e/0x2750 [ 890.293488][T13965] __x64_sys_ioctl+0x190/0x200 [ 890.298762][T13965] do_syscall_64+0xcd/0x250 [ 890.303772][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.310173][T13965] [ 890.310173][T13965] other info that might help us debug this: [ 890.310173][T13965] [ 890.320377][T13965] Chain exists of: [ 890.320377][T13965] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 890.320377][T13965] [ 890.334697][T13965] Possible unsafe locking scenario: [ 890.334697][T13965] [ 890.342300][T13965] CPU0 CPU1 [ 890.347643][T13965] ---- ---- [ 890.352984][T13965] lock(&q->debugfs_mutex); [ 890.357554][T13965] lock(&q->q_usage_counter(queue)#50); [ 890.365693][T13965] lock(&q->debugfs_mutex); [ 890.372783][T13965] rlock(&mm->mmap_lock); [ 890.377179][T13965] [ 890.377179][T13965] *** DEADLOCK *** [ 890.377179][T13965] [ 890.385299][T13965] 1 lock held by syz.8.1639/13965: [ 890.390389][T13965] #0: ffff888025807e78 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 890.400032][T13965] [ 890.400032][T13965] stack backtrace: [ 890.405897][T13965] CPU: 1 UID: 0 PID: 13965 Comm: syz.8.1639 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 890.416650][T13965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 890.426689][T13965] Call Trace: [ 890.429962][T13965] [ 890.432898][T13965] dump_stack_lvl+0x116/0x1f0 [ 890.437583][T13965] print_circular_bug+0x419/0x5d0 [ 890.442597][T13965] check_noncircular+0x31a/0x400 [ 890.447518][T13965] ? __pfx_check_noncircular+0x10/0x10 [ 890.452958][T13965] ? lockdep_lock+0xc6/0x200 [ 890.457538][T13965] ? __pfx_lockdep_lock+0x10/0x10 [ 890.462555][T13965] __lock_acquire+0x249e/0x3c40 [ 890.467395][T13965] ? __pfx___lock_acquire+0x10/0x10 [ 890.472580][T13965] ? trace_lock_acquire+0x14e/0x1f0 [ 890.477766][T13965] ? __pfx_mark_lock+0x10/0x10 [ 890.482513][T13965] lock_acquire.part.0+0x11b/0x380 [ 890.487626][T13965] ? __might_fault+0xe3/0x190 [ 890.492322][T13965] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 890.497948][T13965] ? rcu_is_watching+0x12/0xc0 [ 890.502700][T13965] ? trace_lock_acquire+0x14e/0x1f0 [ 890.507901][T13965] ? __might_fault+0xe3/0x190 [ 890.512564][T13965] ? lock_acquire+0x2f/0xb0 [ 890.517064][T13965] ? __might_fault+0xe3/0x190 [ 890.521727][T13965] ? __might_fault+0xe3/0x190 [ 890.526389][T13965] __might_fault+0x11b/0x190 [ 890.530964][T13965] ? __might_fault+0xe3/0x190 [ 890.535628][T13965] _copy_from_user+0x29/0xd0 [ 890.540213][T13965] __blk_trace_setup+0xa8/0x180 [ 890.545052][T13965] ? __pfx___blk_trace_setup+0x10/0x10 [ 890.550502][T13965] ? do_vfs_ioctl+0x513/0x1990 [ 890.555252][T13965] blk_trace_setup+0x47/0x70 [ 890.559829][T13965] sg_ioctl+0x65e/0x2750 [ 890.564060][T13965] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 890.570549][T13965] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 890.577387][T13965] ? __pfx_sg_ioctl+0x10/0x10 [ 890.582048][T13965] ? __pfx_lock_release+0x10/0x10 [ 890.587056][T13965] ? selinux_file_ioctl+0x180/0x270 [ 890.592242][T13965] ? selinux_file_ioctl+0xb4/0x270 [ 890.597341][T13965] ? __pfx_sg_ioctl+0x10/0x10 [ 890.602003][T13965] __x64_sys_ioctl+0x190/0x200 [ 890.606755][T13965] do_syscall_64+0xcd/0x250 [ 890.611247][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.617129][T13965] RIP: 0033:0x7fc4a4985d29 [ 890.621525][T13965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.641113][T13965] RSP: 002b:00007fc4a56d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.649506][T13965] RAX: ffffffffffffffda RBX: 00007fc4a4b76160 RCX: 00007fc4a4985d29 [ 890.657458][T13965] RDX: 00000000200000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 890.665496][T13965] RBP: 00007fc4a4a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 890.673449][T13965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.681400][T13965] R13: 0000000000000000 R14: 00007fc4a4b76160 R15: 00007ffff9f828a8 [ 890.689359][T13965] [ 890.796953][T13963] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1639'. [ 890.819595][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.953264][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.072299][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.200390][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.320461][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.440753][ T11] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.559680][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.669568][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.779717][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 894.899752][T13446] net_ratelimit: 27 callbacks suppressed [ 894.899769][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.019437][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.139431][T13446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.254262][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.369467][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.489517][ T6654] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.609520][T13453] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.719503][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.829474][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.939489][ T6693] bond1: (slave ip6gretap1): failed to get link speed/duplex