last executing test programs: 10.120379342s ago: executing program 0 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 10.091917303s ago: executing program 2 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 9.980513748s ago: executing program 1 (id=2): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 9.947512859s ago: executing program 3 (id=4): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, 0x0, &(0x7f0000000480)}, 0x20) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000240)={{r1}, 0x2, &(0x7f0000000100)=[0x70, 0x380000000], 0x3}) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x10840) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.820569755s ago: executing program 2 (id=10): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(0x0, 0x0, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1350, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x131c, 0x2, [@TCA_MATCHALL_ACT={0x9cc, 0x2, [@m_ife={0xcc, 0xd, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff1b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x3fc, 0x0, 0xab, 0x5}}}]}, {0x16, 0x6, "ca96f73706b3bd8a9e25fd6316dd4b379c43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x40, 0x6, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x8bc, 0x16, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xa, 0x7, 0xa58, 0x1, 0x4, 0xffffffff, 0x7, 0x8000, 0xfffffff7, 0x8, 0x4, 0x3, 0x4a99790e, 0x1, 0x9, 0xffff49d2, 0x37ea, 0x5, 0x5, 0xfffffff8, 0x7, 0xf, 0x3, 0x2, 0x101, 0xfffffff2, 0x3, 0x5, 0x5df, 0x1, 0x3, 0x7f, 0xcf5, 0x6be, 0x1ff, 0x8, 0x2, 0x5, 0x401, 0xb, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x1, 0x0, 0x3, 0x6, 0xbe, 0x0, 0x4, 0x3, 0x4, 0x7, 0x5, 0x400, 0x1, 0x7, 0x0, 0x6, 0x80000001, 0x4e45, 0x7ff, 0x3ff, 0x65f, 0x9, 0x7d, 0x8, 0x7, 0x8000, 0x80, 0x6, 0x0, 0x8000, 0x9, 0x5, 0x7, 0xfff, 0x6, 0x81, 0xf4, 0x1ff, 0x6, 0x5, 0x6, 0x5, 0xffff, 0x2, 0x8, 0x2, 0xfffffff8, 0x2, 0x7, 0x7, 0x6, 0x1, 0x9, 0x58e, 0xdfb, 0x2, 0x3, 0xffff8001, 0x7455, 0x995a, 0x1, 0x1000, 0x1, 0x7fff, 0x8, 0x81, 0x9, 0x7f, 0x97d3, 0x3, 0xa, 0x0, 0x8, 0x40, 0x7fff, 0x8, 0xf, 0x1, 0x2, 0x5, 0x100, 0x0, 0x6, 0x2, 0x0, 0x10000, 0x6fd, 0x3, 0x800, 0x550, 0x9, 0x95, 0x6, 0x10, 0xffff6b02, 0x0, 0x101, 0x9, 0x6, 0x1, 0xf9, 0x6, 0xfffffffb, 0x9, 0x10001, 0xd4b, 0x4, 0x0, 0x100, 0x7, 0x1, 0xdf6, 0x8, 0x7f, 0x8e, 0xff, 0x4, 0x8, 0x6, 0xa12, 0x7, 0x3, 0x0, 0xa, 0x8000, 0x2, 0x8, 0x5, 0x0, 0x3, 0x7, 0x4ac5, 0x5, 0x9, 0xcc7, 0x8, 0x3, 0x3, 0x1ff, 0xe8, 0x3ff, 0x5, 0x3b8, 0x0, 0x80000000, 0x4, 0xa, 0x2, 0x6, 0x7f, 0x4, 0x4, 0x5, 0xdb, 0x4, 0x9, 0x4, 0x46, 0x2, 0x4, 0x1, 0x781, 0x7ff, 0xffffff4a, 0x80000001, 0x5, 0x1ff, 0x5, 0x1, 0xf, 0x9, 0x0, 0x5, 0x152a, 0xe, 0x2, 0x80000001, 0x4, 0x2, 0x8, 0x1ff, 0x401, 0xffff4065, 0x5, 0xf, 0x7, 0x9, 0x0, 0x6, 0x5, 0x8, 0xfffffffd, 0x80, 0x2, 0x7, 0x0, 0x9, 0xf, 0x3, 0xf73, 0x4, 0x4, 0x8, 0xd, 0x3, 0x3, 0x1, 0x8ac, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7fffffff, 0x2, 0x7f, 0xb7e, 0x0, 0x3, 0x2, 0x2, 0x2, 0xc19, 0x1, 0x1, 0x126f29d5, 0x0, 0x5, 0x2, 0x2, 0x3, 0xcc19, 0x9, 0x200, 0x8, 0x8, 0x0, 0x8, 0x6, 0x1, 0xb, 0x9, 0x3, 0x200, 0x6, 0x7, 0x6526a70a, 0x401, 0x3, 0x8, 0x5, 0x9, 0x7fff, 0x4, 0x0, 0x1, 0x3ff, 0x100, 0x7, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x1, 0x3, 0xebe, 0x0, 0x4731719a, 0x2, 0xbdb, 0xc, 0x5, 0x0, 0x5, 0x5, 0x1, 0x5, 0x3, 0x4, 0x2, 0x1, 0xffffffff, 0x3, 0x461, 0x2, 0x3, 0x2, 0x40, 0x1, 0x7788, 0x4, 0x4, 0x9, 0x3, 0x4, 0xf, 0x4, 0x1, 0x80000001, 0x41, 0x9, 0x3, 0xb, 0xc, 0xff, 0x3, 0x7, 0x80, 0x3, 0x2, 0x9, 0x7, 0x5, 0x3ff, 0x9, 0x401, 0x4, 0xff, 0xb059, 0x4, 0x3, 0x0, 0xe56b, 0x4, 0x10001, 0x80, 0x101, 0x10001, 0x5, 0xfffff801, 0x9572, 0x401, 0x7, 0x6f30, 0x7, 0x5, 0x6, 0xff, 0x7, 0xe, 0x6, 0x3, 0xb8, 0x6, 0x0, 0xffffffff, 0x8, 0x1, 0x1, 0xfffd, 0x80000000, 0x9270, 0x8, 0x0, 0x5, 0x10000, 0x8, 0x81a, 0x400, 0x2, 0x7, 0x100, 0x9a4, 0xff, 0x7, 0xf, 0x6, 0xfff, 0x0, 0x0, 0x3, 0x2, 0x2, 0x7, 0x6, 0x3, 0x7, 0x7, 0x9, 0x5, 0x1, 0xb, 0x6, 0x7, 0xb, 0x81, 0x2, 0x36c, 0x800, 0x3, 0x800, 0x7ff, 0x1, 0x8, 0x7ff, 0x6, 0x9, 0x9, 0xffe0000, 0x10, 0x45, 0xfffffff6, 0x5, 0xfffffeab, 0x7, 0x2, 0x69, 0x7, 0x81, 0x2, 0x6, 0x9, 0xfff, 0x9, 0x3, 0x3aa, 0x7, 0x7f, 0x4, 0x8001, 0x16645508, 0x0, 0x8, 0x5, 0xb8, 0x9, 0x6, 0x4, 0xc, 0x3, 0x4, 0x8, 0x200, 0x8000, 0x3, 0x1, 0x401, 0x7, 0x0, 0x0, 0xe7a6, 0x9, 0xbad449bc, 0x5, 0x1, 0x2, 0x3, 0xffa, 0xe, 0x7, 0xe, 0x5, 0x1, 0x5, 0x7ff, 0x800, 0x2, 0x6, 0x8, 0x102, 0x3c5, 0xc, 0x5, 0x4, 0x1ff, 0x37fb, 0x8]}]]}, {0x64, 0x6, "8eeb0f42c51369ff5723abc46891f64f2a1f64b3267e7c97f4f3d90a0c7d62be724a70b2c3eb7956ab9ea45ccf922446afdaa4f240339bed2c135ceff58dc86310f74505c14874ea0c91ac38bcd5490b5edd4d596ea793c923c098ba71fb7643"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x914, 0x2, [@m_police={0x910, 0x6, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa3b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x5, 0xfc5b, 0x5, 0x8, 0x1, 0xa, 0x1, 0x0, 0x4, 0xdf, 0x8000, 0x80000000, 0x0, 0x9, 0x0, 0xce7, 0x10, 0x7e4, 0xb, 0x7, 0x7, 0x1000, 0xb36, 0x10000, 0x9, 0x1, 0x7ff, 0xe, 0x4062, 0x0, 0x4, 0x8001, 0xd9b, 0x5, 0x5, 0x3, 0x6, 0x6, 0x80000001, 0x7be, 0x4, 0x79, 0x6, 0x8, 0x5, 0xffff, 0x4ea, 0x4, 0x0, 0x7f, 0xd702, 0x800, 0x8, 0xf, 0xadb2, 0xa7f0, 0x5, 0x17dca32e, 0x7, 0xfffffffc, 0x8, 0xf, 0xd, 0x9b, 0x0, 0x7, 0x8, 0x5a7b, 0xffff8000, 0x100, 0x200, 0x2, 0x0, 0x6, 0x5, 0xc, 0x7, 0x1, 0x4, 0x7, 0x7, 0x2, 0x5, 0x1, 0xc64f, 0x3, 0x9, 0x20000, 0x5, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0xffff, 0x6e82, 0x8dd0, 0x3, 0x2, 0x4, 0x1, 0x26, 0xa7ce, 0x4, 0x6, 0x4, 0x4, 0xa0000, 0xffffff01, 0xfffff20e, 0x6, 0x2, 0x3, 0x21bb, 0x5, 0x400, 0x7, 0x6, 0xed, 0x7, 0x4, 0x5, 0x6, 0x1ff, 0xfffffff9, 0x5, 0x0, 0x9, 0xf, 0xe, 0xfffffffa, 0xfffffffa, 0x80000000, 0x0, 0x7, 0x482, 0x0, 0xc935, 0x298bd4a6, 0xe, 0x9, 0x8, 0x5, 0x9, 0x5, 0x9e, 0xfff, 0x213, 0x7, 0x9, 0x4, 0x6, 0x2, 0x6cd7778a, 0x4, 0x0, 0x1a, 0x0, 0xfff, 0x1, 0x4, 0x3, 0xbd, 0xffffffff, 0x2, 0xfffffff1, 0x10001, 0x2, 0x0, 0x1, 0x7f, 0xe0, 0x4, 0x2, 0x1000, 0x0, 0x6, 0xe, 0xfffffff8, 0x7, 0xaff0, 0xffffffff, 0x7a96, 0x80000001, 0x4, 0x4, 0x2, 0x9, 0x893, 0x9, 0x5, 0x4, 0x1, 0x7, 0x5, 0x4, 0x7cf, 0x2, 0x2, 0x8000, 0x80000001, 0x87, 0x2, 0x7, 0xfff, 0x2, 0x5, 0x1, 0x9, 0xca8, 0x0, 0x81, 0x9, 0x0, 0x2, 0x3ff, 0x9, 0x101, 0x7fffffff, 0x209e, 0x0, 0x8, 0x0, 0x7, 0x7, 0x1000, 0x28d, 0xfffffffe, 0x0, 0x707, 0x4, 0x0, 0x200, 0x3, 0x2, 0xf, 0x5, 0x100, 0x9, 0x73, 0x0, 0x4, 0x1, 0x10000, 0x7fff, 0x68, 0x2, 0x81, 0x52, 0x200, 0x4, 0x27]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4b68}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfafa, 0x3, 0x23b, 0x8, 0x3, 0x3, 0x532c, 0x6, 0x0, 0x8, 0xa8e, 0x1, 0x81, 0x897, 0x3, 0x1, 0x80, 0x0, 0xf, 0x5, 0x0, 0x8, 0x2e5, 0x9, 0x7, 0x2, 0x6, 0x800, 0xfffffff7, 0x3, 0xb, 0xfffffffb, 0x4, 0x830, 0x1, 0x5, 0x2, 0xf20, 0xb9, 0x8, 0x59c, 0x7, 0xff, 0x2, 0x7ff, 0x1, 0xc5d1, 0x80, 0x2, 0x4, 0x7ff, 0x7, 0x43c, 0x4, 0x8fa3, 0x69565e33, 0x5, 0x9368, 0x2, 0x123a, 0xe, 0x6c7, 0x2, 0x7, 0x4, 0x5, 0x7, 0x5, 0x267, 0xffff, 0x6, 0xb2, 0x6, 0x97b, 0x40, 0x3, 0x7, 0x7, 0x1, 0x1, 0x2, 0x2, 0x1000, 0xfffffff7, 0xf, 0x4, 0x4e, 0x40, 0x4, 0xffff, 0xff, 0xb1a, 0x988, 0x401, 0x2, 0x2, 0x40, 0x0, 0x7fffffff, 0x9, 0xffffdefe, 0x2, 0x80000000, 0x5, 0x54, 0xe0000, 0x1, 0xe92, 0x2, 0x0, 0x0, 0x1, 0x3, 0xf7a6, 0x0, 0x100, 0x0, 0x10, 0x4, 0x4, 0x2, 0x8, 0x23421d05, 0x1, 0x9, 0xf95e, 0xd0, 0xdbf, 0x0, 0x8, 0x800, 0xffff, 0x5, 0x7, 0xfffffffa, 0x81, 0x7, 0x3, 0x5, 0x40, 0x3, 0xce3, 0x1, 0x4, 0x5, 0x3, 0x8, 0xdd, 0x4, 0x9, 0x6, 0x8, 0x88a, 0x9, 0x50f, 0xffffffff, 0xffffffff, 0x1ff, 0x3, 0xffff, 0x7, 0x400, 0x4, 0x7a, 0x5, 0xff, 0x5, 0x0, 0xed2c, 0xffffffff, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x1, 0x100, 0x1, 0x71, 0x5, 0x3, 0x5, 0x9, 0x59, 0x7, 0x400, 0x6, 0x0, 0x80000003, 0xfffffff8, 0xb, 0x6, 0xaf, 0x400, 0x5, 0x0, 0x1, 0x2, 0xe8d, 0x0, 0x8, 0x600000, 0x3, 0x2, 0x80, 0xa6e, 0x6, 0x6, 0xa17, 0x6, 0x7, 0x1, 0x4, 0x5, 0x8, 0x8, 0x7ff, 0x8, 0x8, 0x2, 0x0, 0x1, 0x7, 0x400, 0x3ff, 0x10001, 0x0, 0x200, 0xfffffffb, 0x1, 0x9, 0x8, 0x7, 0x4, 0x8f, 0xffffffff, 0x2, 0x3, 0x1, 0x8b, 0x8001, 0x0, 0x100, 0x6, 0x8, 0x9, 0x5e9, 0x7, 0xd, 0x5, 0x3, 0xea5a, 0x400, 0x1, 0x6, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0xffffffffffffffff, 0x800, 0x2, 0x10000, {0x2, 0x2, 0x200, 0x45de, 0xfff, 0x8}, {0x81, 0x0, 0x40, 0x852, 0x1, 0x9}, 0x0, 0x8000, 0x9}}]]}, {0x67, 0x6, "a9d100d777e6c747a5f4009e8d2d861b7cfa0a1ec94cb2dec992da98fd369ece27f1657891fe7fb2d989bd27c10168607ddc0f2932acadd814942e1dddf9a00b04c444a708fac080f1043b1b1b28079419a30d8287fa0c40d10a72cccce1b491f14c19"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x1350}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000c000180080003000200000030000180140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030000000000640001801400020076657468305f746f5f626174616476001400020070696d367265670000000000000000001400020077673200000000000000", @ANYRES32=0x0, @ANYBLOB="140002006d61637365633000000000000000000008000100", @ANYRES32, @ANYBLOB="340001801400020076657468315f746f5f7465616d0000001400020076657468305f746f5f626f6e6400000008000300020000003400018014000200776731000000000000000000000000001400020076657468315f746f5f62726964676500080003000200000034000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008", @ANYRES32=r5, @ANYBLOB="fa6c0000000000000a96e79364200100fb401589d45a66d8cc2c8c185bb86912fc85f74b28dacb9ac36ed470bdb85f5d039cb65823548770a7fc41869d76575163479991f8a096", @ANYRES32, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r2, 0x0, 0x7ffff000) 9.748109038s ago: executing program 3 (id=11): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) 9.662828042s ago: executing program 0 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 7.294052524s ago: executing program 0 (id=14): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r7, 0xffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 7.289732735s ago: executing program 4 (id=15): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) 7.272084505s ago: executing program 3 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x7ffffffa) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x8572a000) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7.229082527s ago: executing program 1 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 7.193917919s ago: executing program 2 (id=18): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(0x0, 0x0, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1350, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x131c, 0x2, [@TCA_MATCHALL_ACT={0x9cc, 0x2, [@m_ife={0xcc, 0xd, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff1b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x3fc, 0x0, 0xab, 0x5}}}]}, {0x16, 0x6, "ca96f73706b3bd8a9e25fd6316dd4b379c43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x40, 0x6, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x8bc, 0x16, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xa, 0x7, 0xa58, 0x1, 0x4, 0xffffffff, 0x7, 0x8000, 0xfffffff7, 0x8, 0x4, 0x3, 0x4a99790e, 0x1, 0x9, 0xffff49d2, 0x37ea, 0x5, 0x5, 0xfffffff8, 0x7, 0xf, 0x3, 0x2, 0x101, 0xfffffff2, 0x3, 0x5, 0x5df, 0x1, 0x3, 0x7f, 0xcf5, 0x6be, 0x1ff, 0x8, 0x2, 0x5, 0x401, 0xb, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x1, 0x0, 0x3, 0x6, 0xbe, 0x0, 0x4, 0x3, 0x4, 0x7, 0x5, 0x400, 0x1, 0x7, 0x0, 0x6, 0x80000001, 0x4e45, 0x7ff, 0x3ff, 0x65f, 0x9, 0x7d, 0x8, 0x7, 0x8000, 0x80, 0x6, 0x0, 0x8000, 0x9, 0x5, 0x7, 0xfff, 0x6, 0x81, 0xf4, 0x1ff, 0x6, 0x5, 0x6, 0x5, 0xffff, 0x2, 0x8, 0x2, 0xfffffff8, 0x2, 0x7, 0x7, 0x6, 0x1, 0x9, 0x58e, 0xdfb, 0x2, 0x3, 0xffff8001, 0x7455, 0x995a, 0x1, 0x1000, 0x1, 0x7fff, 0x8, 0x81, 0x9, 0x7f, 0x97d3, 0x3, 0xa, 0x0, 0x8, 0x40, 0x7fff, 0x8, 0xf, 0x1, 0x2, 0x5, 0x100, 0x0, 0x6, 0x2, 0x0, 0x10000, 0x6fd, 0x3, 0x800, 0x550, 0x9, 0x95, 0x6, 0x10, 0xffff6b02, 0x0, 0x101, 0x9, 0x6, 0x1, 0xf9, 0x6, 0xfffffffb, 0x9, 0x10001, 0xd4b, 0x4, 0x0, 0x100, 0x7, 0x1, 0xdf6, 0x8, 0x7f, 0x8e, 0xff, 0x4, 0x8, 0x6, 0xa12, 0x7, 0x3, 0x0, 0xa, 0x8000, 0x2, 0x8, 0x5, 0x0, 0x3, 0x7, 0x4ac5, 0x5, 0x9, 0xcc7, 0x8, 0x3, 0x3, 0x1ff, 0xe8, 0x3ff, 0x5, 0x3b8, 0x0, 0x80000000, 0x4, 0xa, 0x2, 0x6, 0x7f, 0x4, 0x4, 0x5, 0xdb, 0x4, 0x9, 0x4, 0x46, 0x2, 0x4, 0x1, 0x781, 0x7ff, 0xffffff4a, 0x80000001, 0x5, 0x1ff, 0x5, 0x1, 0xf, 0x9, 0x0, 0x5, 0x152a, 0xe, 0x2, 0x80000001, 0x4, 0x2, 0x8, 0x1ff, 0x401, 0xffff4065, 0x5, 0xf, 0x7, 0x9, 0x0, 0x6, 0x5, 0x8, 0xfffffffd, 0x80, 0x2, 0x7, 0x0, 0x9, 0xf, 0x3, 0xf73, 0x4, 0x4, 0x8, 0xd, 0x3, 0x3, 0x1, 0x8ac, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7fffffff, 0x2, 0x7f, 0xb7e, 0x0, 0x3, 0x2, 0x2, 0x2, 0xc19, 0x1, 0x1, 0x126f29d5, 0x0, 0x5, 0x2, 0x2, 0x3, 0xcc19, 0x9, 0x200, 0x8, 0x8, 0x0, 0x8, 0x6, 0x1, 0xb, 0x9, 0x3, 0x200, 0x6, 0x7, 0x6526a70a, 0x401, 0x3, 0x8, 0x5, 0x9, 0x7fff, 0x4, 0x0, 0x1, 0x3ff, 0x100, 0x7, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x1, 0x3, 0xebe, 0x0, 0x4731719a, 0x2, 0xbdb, 0xc, 0x5, 0x0, 0x5, 0x5, 0x1, 0x5, 0x3, 0x4, 0x2, 0x1, 0xffffffff, 0x3, 0x461, 0x2, 0x3, 0x2, 0x40, 0x1, 0x7788, 0x4, 0x4, 0x9, 0x3, 0x4, 0xf, 0x4, 0x1, 0x80000001, 0x41, 0x9, 0x3, 0xb, 0xc, 0xff, 0x3, 0x7, 0x80, 0x3, 0x2, 0x9, 0x7, 0x5, 0x3ff, 0x9, 0x401, 0x4, 0xff, 0xb059, 0x4, 0x3, 0x0, 0xe56b, 0x4, 0x10001, 0x80, 0x101, 0x10001, 0x5, 0xfffff801, 0x9572, 0x401, 0x7, 0x6f30, 0x7, 0x5, 0x6, 0xff, 0x7, 0xe, 0x6, 0x3, 0xb8, 0x6, 0x0, 0xffffffff, 0x8, 0x1, 0x1, 0xfffd, 0x80000000, 0x9270, 0x8, 0x0, 0x5, 0x10000, 0x8, 0x81a, 0x400, 0x2, 0x7, 0x100, 0x9a4, 0xff, 0x7, 0xf, 0x6, 0xfff, 0x0, 0x0, 0x3, 0x2, 0x2, 0x7, 0x6, 0x3, 0x7, 0x7, 0x9, 0x5, 0x1, 0xb, 0x6, 0x7, 0xb, 0x81, 0x2, 0x36c, 0x800, 0x3, 0x800, 0x7ff, 0x1, 0x8, 0x7ff, 0x6, 0x9, 0x9, 0xffe0000, 0x10, 0x45, 0xfffffff6, 0x5, 0xfffffeab, 0x7, 0x2, 0x69, 0x7, 0x81, 0x2, 0x6, 0x9, 0xfff, 0x9, 0x3, 0x3aa, 0x7, 0x7f, 0x4, 0x8001, 0x16645508, 0x0, 0x8, 0x5, 0xb8, 0x9, 0x6, 0x4, 0xc, 0x3, 0x4, 0x8, 0x200, 0x8000, 0x3, 0x1, 0x401, 0x7, 0x0, 0x0, 0xe7a6, 0x9, 0xbad449bc, 0x5, 0x1, 0x2, 0x3, 0xffa, 0xe, 0x7, 0xe, 0x5, 0x1, 0x5, 0x7ff, 0x800, 0x2, 0x6, 0x8, 0x102, 0x3c5, 0xc, 0x5, 0x4, 0x1ff, 0x37fb, 0x8]}]]}, {0x64, 0x6, "8eeb0f42c51369ff5723abc46891f64f2a1f64b3267e7c97f4f3d90a0c7d62be724a70b2c3eb7956ab9ea45ccf922446afdaa4f240339bed2c135ceff58dc86310f74505c14874ea0c91ac38bcd5490b5edd4d596ea793c923c098ba71fb7643"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x914, 0x2, [@m_police={0x910, 0x6, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa3b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x5, 0xfc5b, 0x5, 0x8, 0x1, 0xa, 0x1, 0x0, 0x4, 0xdf, 0x8000, 0x80000000, 0x0, 0x9, 0x0, 0xce7, 0x10, 0x7e4, 0xb, 0x7, 0x7, 0x1000, 0xb36, 0x10000, 0x9, 0x1, 0x7ff, 0xe, 0x4062, 0x0, 0x4, 0x8001, 0xd9b, 0x5, 0x5, 0x3, 0x6, 0x6, 0x80000001, 0x7be, 0x4, 0x79, 0x6, 0x8, 0x5, 0xffff, 0x4ea, 0x4, 0x0, 0x7f, 0xd702, 0x800, 0x8, 0xf, 0xadb2, 0xa7f0, 0x5, 0x17dca32e, 0x7, 0xfffffffc, 0x8, 0xf, 0xd, 0x9b, 0x0, 0x7, 0x8, 0x5a7b, 0xffff8000, 0x100, 0x200, 0x2, 0x0, 0x6, 0x5, 0xc, 0x7, 0x1, 0x4, 0x7, 0x7, 0x2, 0x5, 0x1, 0xc64f, 0x3, 0x9, 0x20000, 0x5, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0xffff, 0x6e82, 0x8dd0, 0x3, 0x2, 0x4, 0x1, 0x26, 0xa7ce, 0x4, 0x6, 0x4, 0x4, 0xa0000, 0xffffff01, 0xfffff20e, 0x6, 0x2, 0x3, 0x21bb, 0x5, 0x400, 0x7, 0x6, 0xed, 0x7, 0x4, 0x5, 0x6, 0x1ff, 0xfffffff9, 0x5, 0x0, 0x9, 0xf, 0xe, 0xfffffffa, 0xfffffffa, 0x80000000, 0x0, 0x7, 0x482, 0x0, 0xc935, 0x298bd4a6, 0xe, 0x9, 0x8, 0x5, 0x9, 0x5, 0x9e, 0xfff, 0x213, 0x7, 0x9, 0x4, 0x6, 0x2, 0x6cd7778a, 0x4, 0x0, 0x1a, 0x0, 0xfff, 0x1, 0x4, 0x3, 0xbd, 0xffffffff, 0x2, 0xfffffff1, 0x10001, 0x2, 0x0, 0x1, 0x7f, 0xe0, 0x4, 0x2, 0x1000, 0x0, 0x6, 0xe, 0xfffffff8, 0x7, 0xaff0, 0xffffffff, 0x7a96, 0x80000001, 0x4, 0x4, 0x2, 0x9, 0x893, 0x9, 0x5, 0x4, 0x1, 0x7, 0x5, 0x4, 0x7cf, 0x2, 0x2, 0x8000, 0x80000001, 0x87, 0x2, 0x7, 0xfff, 0x2, 0x5, 0x1, 0x9, 0xca8, 0x0, 0x81, 0x9, 0x0, 0x2, 0x3ff, 0x9, 0x101, 0x7fffffff, 0x209e, 0x0, 0x8, 0x0, 0x7, 0x7, 0x1000, 0x28d, 0xfffffffe, 0x0, 0x707, 0x4, 0x0, 0x200, 0x3, 0x2, 0xf, 0x5, 0x100, 0x9, 0x73, 0x0, 0x4, 0x1, 0x10000, 0x7fff, 0x68, 0x2, 0x81, 0x52, 0x200, 0x4, 0x27]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4b68}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfafa, 0x3, 0x23b, 0x8, 0x3, 0x3, 0x532c, 0x6, 0x0, 0x8, 0xa8e, 0x1, 0x81, 0x897, 0x3, 0x1, 0x80, 0x0, 0xf, 0x5, 0x0, 0x8, 0x2e5, 0x9, 0x7, 0x2, 0x6, 0x800, 0xfffffff7, 0x3, 0xb, 0xfffffffb, 0x4, 0x830, 0x1, 0x5, 0x2, 0xf20, 0xb9, 0x8, 0x59c, 0x7, 0xff, 0x2, 0x7ff, 0x1, 0xc5d1, 0x80, 0x2, 0x4, 0x7ff, 0x7, 0x43c, 0x4, 0x8fa3, 0x69565e33, 0x5, 0x9368, 0x2, 0x123a, 0xe, 0x6c7, 0x2, 0x7, 0x4, 0x5, 0x7, 0x5, 0x267, 0xffff, 0x6, 0xb2, 0x6, 0x97b, 0x40, 0x3, 0x7, 0x7, 0x1, 0x1, 0x2, 0x2, 0x1000, 0xfffffff7, 0xf, 0x4, 0x4e, 0x40, 0x4, 0xffff, 0xff, 0xb1a, 0x988, 0x401, 0x2, 0x2, 0x40, 0x0, 0x7fffffff, 0x9, 0xffffdefe, 0x2, 0x80000000, 0x5, 0x54, 0xe0000, 0x1, 0xe92, 0x2, 0x0, 0x0, 0x1, 0x3, 0xf7a6, 0x0, 0x100, 0x0, 0x10, 0x4, 0x4, 0x2, 0x8, 0x23421d05, 0x1, 0x9, 0xf95e, 0xd0, 0xdbf, 0x0, 0x8, 0x800, 0xffff, 0x5, 0x7, 0xfffffffa, 0x81, 0x7, 0x3, 0x5, 0x40, 0x3, 0xce3, 0x1, 0x4, 0x5, 0x3, 0x8, 0xdd, 0x4, 0x9, 0x6, 0x8, 0x88a, 0x9, 0x50f, 0xffffffff, 0xffffffff, 0x1ff, 0x3, 0xffff, 0x7, 0x400, 0x4, 0x7a, 0x5, 0xff, 0x5, 0x0, 0xed2c, 0xffffffff, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x1, 0x100, 0x1, 0x71, 0x5, 0x3, 0x5, 0x9, 0x59, 0x7, 0x400, 0x6, 0x0, 0x80000003, 0xfffffff8, 0xb, 0x6, 0xaf, 0x400, 0x5, 0x0, 0x1, 0x2, 0xe8d, 0x0, 0x8, 0x600000, 0x3, 0x2, 0x80, 0xa6e, 0x6, 0x6, 0xa17, 0x6, 0x7, 0x1, 0x4, 0x5, 0x8, 0x8, 0x7ff, 0x8, 0x8, 0x2, 0x0, 0x1, 0x7, 0x400, 0x3ff, 0x10001, 0x0, 0x200, 0xfffffffb, 0x1, 0x9, 0x8, 0x7, 0x4, 0x8f, 0xffffffff, 0x2, 0x3, 0x1, 0x8b, 0x8001, 0x0, 0x100, 0x6, 0x8, 0x9, 0x5e9, 0x7, 0xd, 0x5, 0x3, 0xea5a, 0x400, 0x1, 0x6, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0xffffffffffffffff, 0x800, 0x2, 0x10000, {0x2, 0x2, 0x200, 0x45de, 0xfff, 0x8}, {0x81, 0x0, 0x40, 0x852, 0x1, 0x9}, 0x0, 0x8000, 0x9}}]]}, {0x67, 0x6, "a9d100d777e6c747a5f4009e8d2d861b7cfa0a1ec94cb2dec992da98fd369ece27f1657891fe7fb2d989bd27c10168607ddc0f2932acadd814942e1dddf9a00b04c444a708fac080f1043b1b1b28079419a30d8287fa0c40d10a72cccce1b491f14c19"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x1350}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000c000180080003000200000030000180140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030000000000640001801400020076657468305f746f5f626174616476001400020070696d367265670000000000000000001400020077673200000000000000", @ANYRES32=0x0, @ANYBLOB="140002006d61637365633000000000000000000008000100", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="fa6c0000000000000a96e79364200100fb401589d45a66d8cc2c8c185bb86912fc85f74b28dacb9ac36ed470bdb85f5d039cb65823548770a7fc41869d76575163479991f8a096", @ANYRES32, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r2, 0x0, 0x7ffff000) 4.990799704s ago: executing program 3 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x6, 0xdddd8004, 0x2000, &(0x7f0000276000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7000000000000006111900000000000c600000000000000950000000000000010d5bd091242fea83da4b5f92feb6bdc31757711fa632640922e684578b61f435fbc05b668f786cd51f56d6b0f43bf9f1a9abd3bbf977c0ac55d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 4.982627434s ago: executing program 0 (id=20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x6, 0xdddd8004, 0x2000, &(0x7f0000276000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7000000000000006111900000000000c600000000000000950000000000000010d5bd091242fea83da4b5f92feb6bdc31757711fa632640922e684578b61f435fbc05b668f786cd51f56d6b0f43bf9f1a9abd3bbf977c0ac55d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 4.85567004s ago: executing program 4 (id=21): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r7, 0xffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.833088624s ago: executing program 1 (id=22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x6, 0xdddd8004, 0x2000, &(0x7f0000276000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7000000000000006111900000000000c600000000000000950000000000000010d5bd091242fea83da4b5f92feb6bdc31757711fa632640922e684578b61f435fbc05b668f786cd51f56d6b0f43bf9f1a9abd3bbf977c0ac55d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 3.00627034s ago: executing program 4 (id=23): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r7, 0xffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.094635489s ago: executing program 2 (id=24): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) 1.942990326s ago: executing program 4 (id=25): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 1.926567317s ago: executing program 4 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x7ffffffa) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x8572a000) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.411122919s ago: executing program 0 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 966.062188ms ago: executing program 4 (id=28): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(0x0, 0x0, 0xa0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1350, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x131c, 0x2, [@TCA_MATCHALL_ACT={0x9cc, 0x2, [@m_ife={0xcc, 0xd, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff1b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x3fc, 0x0, 0xab, 0x5}}}]}, {0x16, 0x6, "ca96f73706b3bd8a9e25fd6316dd4b379c43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x40, 0x6, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x8bc, 0x16, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xa, 0x7, 0xa58, 0x1, 0x4, 0xffffffff, 0x7, 0x8000, 0xfffffff7, 0x8, 0x4, 0x3, 0x4a99790e, 0x1, 0x9, 0xffff49d2, 0x37ea, 0x5, 0x5, 0xfffffff8, 0x7, 0xf, 0x3, 0x2, 0x101, 0xfffffff2, 0x3, 0x5, 0x5df, 0x1, 0x3, 0x7f, 0xcf5, 0x6be, 0x1ff, 0x8, 0x2, 0x5, 0x401, 0xb, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x1, 0x0, 0x3, 0x6, 0xbe, 0x0, 0x4, 0x3, 0x4, 0x7, 0x5, 0x400, 0x1, 0x7, 0x0, 0x6, 0x80000001, 0x4e45, 0x7ff, 0x3ff, 0x65f, 0x9, 0x7d, 0x8, 0x7, 0x8000, 0x80, 0x6, 0x0, 0x8000, 0x9, 0x5, 0x7, 0xfff, 0x6, 0x81, 0xf4, 0x1ff, 0x6, 0x5, 0x6, 0x5, 0xffff, 0x2, 0x8, 0x2, 0xfffffff8, 0x2, 0x7, 0x7, 0x6, 0x1, 0x9, 0x58e, 0xdfb, 0x2, 0x3, 0xffff8001, 0x7455, 0x995a, 0x1, 0x1000, 0x1, 0x7fff, 0x8, 0x81, 0x9, 0x7f, 0x97d3, 0x3, 0xa, 0x0, 0x8, 0x40, 0x7fff, 0x8, 0xf, 0x1, 0x2, 0x5, 0x100, 0x0, 0x6, 0x2, 0x0, 0x10000, 0x6fd, 0x3, 0x800, 0x550, 0x9, 0x95, 0x6, 0x10, 0xffff6b02, 0x0, 0x101, 0x9, 0x6, 0x1, 0xf9, 0x6, 0xfffffffb, 0x9, 0x10001, 0xd4b, 0x4, 0x0, 0x100, 0x7, 0x1, 0xdf6, 0x8, 0x7f, 0x8e, 0xff, 0x4, 0x8, 0x6, 0xa12, 0x7, 0x3, 0x0, 0xa, 0x8000, 0x2, 0x8, 0x5, 0x0, 0x3, 0x7, 0x4ac5, 0x5, 0x9, 0xcc7, 0x8, 0x3, 0x3, 0x1ff, 0xe8, 0x3ff, 0x5, 0x3b8, 0x0, 0x80000000, 0x4, 0xa, 0x2, 0x6, 0x7f, 0x4, 0x4, 0x5, 0xdb, 0x4, 0x9, 0x4, 0x46, 0x2, 0x4, 0x1, 0x781, 0x7ff, 0xffffff4a, 0x80000001, 0x5, 0x1ff, 0x5, 0x1, 0xf, 0x9, 0x0, 0x5, 0x152a, 0xe, 0x2, 0x80000001, 0x4, 0x2, 0x8, 0x1ff, 0x401, 0xffff4065, 0x5, 0xf, 0x7, 0x9, 0x0, 0x6, 0x5, 0x8, 0xfffffffd, 0x80, 0x2, 0x7, 0x0, 0x9, 0xf, 0x3, 0xf73, 0x4, 0x4, 0x8, 0xd, 0x3, 0x3, 0x1, 0x8ac, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7fffffff, 0x2, 0x7f, 0xb7e, 0x0, 0x3, 0x2, 0x2, 0x2, 0xc19, 0x1, 0x1, 0x126f29d5, 0x0, 0x5, 0x2, 0x2, 0x3, 0xcc19, 0x9, 0x200, 0x8, 0x8, 0x0, 0x8, 0x6, 0x1, 0xb, 0x9, 0x3, 0x200, 0x6, 0x7, 0x6526a70a, 0x401, 0x3, 0x8, 0x5, 0x9, 0x7fff, 0x4, 0x0, 0x1, 0x3ff, 0x100, 0x7, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x1, 0x3, 0xebe, 0x0, 0x4731719a, 0x2, 0xbdb, 0xc, 0x5, 0x0, 0x5, 0x5, 0x1, 0x5, 0x3, 0x4, 0x2, 0x1, 0xffffffff, 0x3, 0x461, 0x2, 0x3, 0x2, 0x40, 0x1, 0x7788, 0x4, 0x4, 0x9, 0x3, 0x4, 0xf, 0x4, 0x1, 0x80000001, 0x41, 0x9, 0x3, 0xb, 0xc, 0xff, 0x3, 0x7, 0x80, 0x3, 0x2, 0x9, 0x7, 0x5, 0x3ff, 0x9, 0x401, 0x4, 0xff, 0xb059, 0x4, 0x3, 0x0, 0xe56b, 0x4, 0x10001, 0x80, 0x101, 0x10001, 0x5, 0xfffff801, 0x9572, 0x401, 0x7, 0x6f30, 0x7, 0x5, 0x6, 0xff, 0x7, 0xe, 0x6, 0x3, 0xb8, 0x6, 0x0, 0xffffffff, 0x8, 0x1, 0x1, 0xfffd, 0x80000000, 0x9270, 0x8, 0x0, 0x5, 0x10000, 0x8, 0x81a, 0x400, 0x2, 0x7, 0x100, 0x9a4, 0xff, 0x7, 0xf, 0x6, 0xfff, 0x0, 0x0, 0x3, 0x2, 0x2, 0x7, 0x6, 0x3, 0x7, 0x7, 0x9, 0x5, 0x1, 0xb, 0x6, 0x7, 0xb, 0x81, 0x2, 0x36c, 0x800, 0x3, 0x800, 0x7ff, 0x1, 0x8, 0x7ff, 0x6, 0x9, 0x9, 0xffe0000, 0x10, 0x45, 0xfffffff6, 0x5, 0xfffffeab, 0x7, 0x2, 0x69, 0x7, 0x81, 0x2, 0x6, 0x9, 0xfff, 0x9, 0x3, 0x3aa, 0x7, 0x7f, 0x4, 0x8001, 0x16645508, 0x0, 0x8, 0x5, 0xb8, 0x9, 0x6, 0x4, 0xc, 0x3, 0x4, 0x8, 0x200, 0x8000, 0x3, 0x1, 0x401, 0x7, 0x0, 0x0, 0xe7a6, 0x9, 0xbad449bc, 0x5, 0x1, 0x2, 0x3, 0xffa, 0xe, 0x7, 0xe, 0x5, 0x1, 0x5, 0x7ff, 0x800, 0x2, 0x6, 0x8, 0x102, 0x3c5, 0xc, 0x5, 0x4, 0x1ff, 0x37fb, 0x8]}]]}, {0x64, 0x6, "8eeb0f42c51369ff5723abc46891f64f2a1f64b3267e7c97f4f3d90a0c7d62be724a70b2c3eb7956ab9ea45ccf922446afdaa4f240339bed2c135ceff58dc86310f74505c14874ea0c91ac38bcd5490b5edd4d596ea793c923c098ba71fb7643"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x914, 0x2, [@m_police={0x910, 0x6, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa3b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x5, 0xfc5b, 0x5, 0x8, 0x1, 0xa, 0x1, 0x0, 0x4, 0xdf, 0x8000, 0x80000000, 0x0, 0x9, 0x0, 0xce7, 0x10, 0x7e4, 0xb, 0x7, 0x7, 0x1000, 0xb36, 0x10000, 0x9, 0x1, 0x7ff, 0xe, 0x4062, 0x0, 0x4, 0x8001, 0xd9b, 0x5, 0x5, 0x3, 0x6, 0x6, 0x80000001, 0x7be, 0x4, 0x79, 0x6, 0x8, 0x5, 0xffff, 0x4ea, 0x4, 0x0, 0x7f, 0xd702, 0x800, 0x8, 0xf, 0xadb2, 0xa7f0, 0x5, 0x17dca32e, 0x7, 0xfffffffc, 0x8, 0xf, 0xd, 0x9b, 0x0, 0x7, 0x8, 0x5a7b, 0xffff8000, 0x100, 0x200, 0x2, 0x0, 0x6, 0x5, 0xc, 0x7, 0x1, 0x4, 0x7, 0x7, 0x2, 0x5, 0x1, 0xc64f, 0x3, 0x9, 0x20000, 0x5, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0xffff, 0x6e82, 0x8dd0, 0x3, 0x2, 0x4, 0x1, 0x26, 0xa7ce, 0x4, 0x6, 0x4, 0x4, 0xa0000, 0xffffff01, 0xfffff20e, 0x6, 0x2, 0x3, 0x21bb, 0x5, 0x400, 0x7, 0x6, 0xed, 0x7, 0x4, 0x5, 0x6, 0x1ff, 0xfffffff9, 0x5, 0x0, 0x9, 0xf, 0xe, 0xfffffffa, 0xfffffffa, 0x80000000, 0x0, 0x7, 0x482, 0x0, 0xc935, 0x298bd4a6, 0xe, 0x9, 0x8, 0x5, 0x9, 0x5, 0x9e, 0xfff, 0x213, 0x7, 0x9, 0x4, 0x6, 0x2, 0x6cd7778a, 0x4, 0x0, 0x1a, 0x0, 0xfff, 0x1, 0x4, 0x3, 0xbd, 0xffffffff, 0x2, 0xfffffff1, 0x10001, 0x2, 0x0, 0x1, 0x7f, 0xe0, 0x4, 0x2, 0x1000, 0x0, 0x6, 0xe, 0xfffffff8, 0x7, 0xaff0, 0xffffffff, 0x7a96, 0x80000001, 0x4, 0x4, 0x2, 0x9, 0x893, 0x9, 0x5, 0x4, 0x1, 0x7, 0x5, 0x4, 0x7cf, 0x2, 0x2, 0x8000, 0x80000001, 0x87, 0x2, 0x7, 0xfff, 0x2, 0x5, 0x1, 0x9, 0xca8, 0x0, 0x81, 0x9, 0x0, 0x2, 0x3ff, 0x9, 0x101, 0x7fffffff, 0x209e, 0x0, 0x8, 0x0, 0x7, 0x7, 0x1000, 0x28d, 0xfffffffe, 0x0, 0x707, 0x4, 0x0, 0x200, 0x3, 0x2, 0xf, 0x5, 0x100, 0x9, 0x73, 0x0, 0x4, 0x1, 0x10000, 0x7fff, 0x68, 0x2, 0x81, 0x52, 0x200, 0x4, 0x27]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4b68}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfafa, 0x3, 0x23b, 0x8, 0x3, 0x3, 0x532c, 0x6, 0x0, 0x8, 0xa8e, 0x1, 0x81, 0x897, 0x3, 0x1, 0x80, 0x0, 0xf, 0x5, 0x0, 0x8, 0x2e5, 0x9, 0x7, 0x2, 0x6, 0x800, 0xfffffff7, 0x3, 0xb, 0xfffffffb, 0x4, 0x830, 0x1, 0x5, 0x2, 0xf20, 0xb9, 0x8, 0x59c, 0x7, 0xff, 0x2, 0x7ff, 0x1, 0xc5d1, 0x80, 0x2, 0x4, 0x7ff, 0x7, 0x43c, 0x4, 0x8fa3, 0x69565e33, 0x5, 0x9368, 0x2, 0x123a, 0xe, 0x6c7, 0x2, 0x7, 0x4, 0x5, 0x7, 0x5, 0x267, 0xffff, 0x6, 0xb2, 0x6, 0x97b, 0x40, 0x3, 0x7, 0x7, 0x1, 0x1, 0x2, 0x2, 0x1000, 0xfffffff7, 0xf, 0x4, 0x4e, 0x40, 0x4, 0xffff, 0xff, 0xb1a, 0x988, 0x401, 0x2, 0x2, 0x40, 0x0, 0x7fffffff, 0x9, 0xffffdefe, 0x2, 0x80000000, 0x5, 0x54, 0xe0000, 0x1, 0xe92, 0x2, 0x0, 0x0, 0x1, 0x3, 0xf7a6, 0x0, 0x100, 0x0, 0x10, 0x4, 0x4, 0x2, 0x8, 0x23421d05, 0x1, 0x9, 0xf95e, 0xd0, 0xdbf, 0x0, 0x8, 0x800, 0xffff, 0x5, 0x7, 0xfffffffa, 0x81, 0x7, 0x3, 0x5, 0x40, 0x3, 0xce3, 0x1, 0x4, 0x5, 0x3, 0x8, 0xdd, 0x4, 0x9, 0x6, 0x8, 0x88a, 0x9, 0x50f, 0xffffffff, 0xffffffff, 0x1ff, 0x3, 0xffff, 0x7, 0x400, 0x4, 0x7a, 0x5, 0xff, 0x5, 0x0, 0xed2c, 0xffffffff, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x1, 0x100, 0x1, 0x71, 0x5, 0x3, 0x5, 0x9, 0x59, 0x7, 0x400, 0x6, 0x0, 0x80000003, 0xfffffff8, 0xb, 0x6, 0xaf, 0x400, 0x5, 0x0, 0x1, 0x2, 0xe8d, 0x0, 0x8, 0x600000, 0x3, 0x2, 0x80, 0xa6e, 0x6, 0x6, 0xa17, 0x6, 0x7, 0x1, 0x4, 0x5, 0x8, 0x8, 0x7ff, 0x8, 0x8, 0x2, 0x0, 0x1, 0x7, 0x400, 0x3ff, 0x10001, 0x0, 0x200, 0xfffffffb, 0x1, 0x9, 0x8, 0x7, 0x4, 0x8f, 0xffffffff, 0x2, 0x3, 0x1, 0x8b, 0x8001, 0x0, 0x100, 0x6, 0x8, 0x9, 0x5e9, 0x7, 0xd, 0x5, 0x3, 0xea5a, 0x400, 0x1, 0x6, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0xffffffffffffffff, 0x800, 0x2, 0x10000, {0x2, 0x2, 0x200, 0x45de, 0xfff, 0x8}, {0x81, 0x0, 0x40, 0x852, 0x1, 0x9}, 0x0, 0x8000, 0x9}}]]}, {0x67, 0x6, "a9d100d777e6c747a5f4009e8d2d861b7cfa0a1ec94cb2dec992da98fd369ece27f1657891fe7fb2d989bd27c10168607ddc0f2932acadd814942e1dddf9a00b04c444a708fac080f1043b1b1b28079419a30d8287fa0c40d10a72cccce1b491f14c19"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x1350}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf25020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000c000180080003000200000030000180140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030000000000640001801400020076657468305f746f5f626174616476001400020070696d367265670000000000000000001400020077673200000000000000", @ANYRES32=0x0, @ANYBLOB="140002006d61637365633000000000000000000008000100", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="fa6c0000000000000a96e79364200100fb401589d45a66d8cc2c8c185bb86912fc85f74b28dacb9ac36ed470bdb85f5d039cb65823548770a7fc41869d76575163479991f8a096", @ANYRES32, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r2, 0x0, 0x7ffff000) 888.081671ms ago: executing program 3 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 838.565904ms ago: executing program 2 (id=30): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 198.986001ms ago: executing program 1 (id=31): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) 67.370467ms ago: executing program 2 (id=32): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c091}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TIOCSTI(r2, 0x5412, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) 47.796768ms ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000780)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=0x0], 0x1, 0x26c, &(0x7f0000000340)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x9}]}}, &(0x7f00000000c0)=""/138, 0x26, 0x8a, 0x1}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 3 (id=34): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x9}]}}, &(0x7f00000000c0)=""/138, 0x26, 0x8a, 0x1}, 0x28) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 9.976640][ T112] udevd (112) used greatest stack depth: 22752 bytes left [ 17.983380][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 17.983395][ T28] audit: type=1400 audit(1764013567.159:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.988491][ T28] audit: type=1400 audit(1764013567.159:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.991638][ T28] audit: type=1400 audit(1764013567.159:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[14558]" dev="pipefs" ino=14558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.994916][ T28] audit: type=1400 audit(1764013567.159:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.998421][ T28] audit: type=1400 audit(1764013567.159:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 25.657603][ T28] audit: type=1400 audit(1764013574.839:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.659068][ T275] cgroup: Unknown subsys name 'net' [ 25.681432][ T28] audit: type=1400 audit(1764013574.839:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.709045][ T28] audit: type=1400 audit(1764013574.879:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.709231][ T275] cgroup: Unknown subsys name 'devices' [ 25.857708][ T275] cgroup: Unknown subsys name 'hugetlb' [ 25.863348][ T275] cgroup: Unknown subsys name 'rlimit' [ 25.970606][ T28] audit: type=1400 audit(1764013575.149:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.994172][ T28] audit: type=1400 audit(1764013575.149:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.019161][ T28] audit: type=1400 audit(1764013575.149:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.031390][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.051544][ T28] audit: type=1400 audit(1764013575.239:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.077521][ T28] audit: type=1400 audit(1764013575.239:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.114722][ T28] audit: type=1400 audit(1764013575.289:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.115304][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.140799][ T28] audit: type=1400 audit(1764013575.289:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.237120][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.244200][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.251743][ T283] device bridge_slave_0 entered promiscuous mode [ 27.266801][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.273870][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.281619][ T283] device bridge_slave_1 entered promiscuous mode [ 27.371712][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.379138][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.386587][ T285] device bridge_slave_0 entered promiscuous mode [ 27.406286][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.413351][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.420949][ T285] device bridge_slave_1 entered promiscuous mode [ 27.440292][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.447529][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.455564][ T284] device bridge_slave_0 entered promiscuous mode [ 27.475862][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.482932][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.490435][ T284] device bridge_slave_1 entered promiscuous mode [ 27.505190][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.512431][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.520016][ T287] device bridge_slave_0 entered promiscuous mode [ 27.538873][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.545975][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.553359][ T287] device bridge_slave_1 entered promiscuous mode [ 27.584065][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.591189][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.598686][ T286] device bridge_slave_0 entered promiscuous mode [ 27.605625][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.612670][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.620178][ T286] device bridge_slave_1 entered promiscuous mode [ 27.749700][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.756845][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.812382][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.819486][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.826787][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.833824][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.877657][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.885213][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.892708][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.901736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.909478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.917210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.925982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.934221][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.941283][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.950379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.959062][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.966318][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.012606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.029697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.069722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.077449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.085037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.093107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.102016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.110270][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.117307][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.124801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.133519][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.140695][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.148214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.156445][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.163481][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.170946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.179151][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.186202][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.193562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.201799][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.208864][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.216296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.224448][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.231522][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.239859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.247775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.255533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.279297][ T283] device veth0_vlan entered promiscuous mode [ 28.286859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.295386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.303785][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.310946][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.318482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.327910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.336042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.344390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.352453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.360878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.369385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.377504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.385793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.393331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.420004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.428239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.436538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.444598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.453173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.461773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.470037][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.477089][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.484474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.492799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.500872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.509063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.517189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.525258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.540039][ T283] device veth1_macvtap entered promiscuous mode [ 28.559116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.567395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.576346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.584059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.593062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.601682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.610563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.618969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.627084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.635011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.643126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.651516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.659181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.671195][ T286] device veth0_vlan entered promiscuous mode [ 28.679005][ T285] device veth0_vlan entered promiscuous mode [ 28.686078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.694204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.702810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.711523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.719244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.738575][ T286] device veth1_macvtap entered promiscuous mode [ 28.746723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.755032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.763758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.773683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.782558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.802015][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 28.809581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.819040][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.828926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.837498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.851978][ T287] device veth0_vlan entered promiscuous mode [ 28.867985][ T285] device veth1_macvtap entered promiscuous mode [ 28.878364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.887226][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.897231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.905483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.914243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.923274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.931764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.939661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.950376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.969315][ T284] device veth0_vlan entered promiscuous mode [ 28.979136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.988209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.997797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.006947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.016056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.024105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.040700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.053189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.106724][ T363] overlayfs: failed to resolve './file0': -2 [ 29.181739][ T287] device veth1_macvtap entered promiscuous mode [ 29.353084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.394781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.519233][ T284] device veth1_macvtap entered promiscuous mode [ 29.817953][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.836647][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.877830][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.418936][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.431446][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.453335][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.472142][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.510981][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.527712][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.637861][ T384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.723654][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 30.723669][ T28] audit: type=1326 audit(1764013579.899:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 30.782241][ T28] audit: type=1326 audit(1764013579.939:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 30.807293][ T391] loop2: detected capacity change from 0 to 2048 [ 30.835643][ T28] audit: type=1326 audit(1764013579.939:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 30.868111][ T391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.880207][ T28] audit: type=1326 audit(1764013579.939:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 30.902515][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 30.925085][ T28] audit: type=1326 audit(1764013579.939:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 30.946234][ T391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 30.962897][ T28] audit: type=1326 audit(1764013579.939:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 31.111132][ T405] loop0: detected capacity change from 0 to 512 [ 31.117755][ T405] ======================================================= [ 31.117755][ T405] WARNING: The mand mount option has been deprecated and [ 31.117755][ T405] and is ignored by this kernel. Remove the mand [ 31.117755][ T405] option from the mount to silence this warning. [ 31.117755][ T405] ======================================================= [ 31.159374][ T405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.319186][ T28] audit: type=1326 audit(1764013579.939:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 31.405393][ T405] EXT4-fs (loop0): orphan cleanup on readonly fs [ 31.429330][ T405] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12: bg 0: block 248: padding at end of block bitmap is not set [ 31.450625][ T405] Quota error (device loop0): write_blk: dquota write failed [ 31.458750][ T405] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 31.469027][ T405] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.12: Failed to acquire dquot type 1 [ 31.493697][ T405] EXT4-fs (loop0): 1 truncate cleaned up [ 31.525313][ T405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.219096][ T28] audit: type=1326 audit(1764013579.939:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 32.330891][ T409] overlayfs: failed to resolve './file0': -2 [ 32.968980][ T405] syz.0.12 (405) used greatest stack depth: 21504 bytes left [ 33.035657][ T283] EXT4-fs (loop0): unmounting filesystem. [ 33.340230][ T286] EXT4-fs (loop2): unmounting filesystem. [ 34.505224][ T427] loop1: detected capacity change from 0 to 512 [ 35.518770][ T427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.815376][ T433] loop2: detected capacity change from 0 to 2048 [ 36.325280][ C1] sched: RT throttling activated [ 36.331056][ T427] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.343431][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 36.343465][ T28] audit: type=1326 audit(1764013585.509:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=423 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 36.375826][ T427] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.17: bg 0: block 248: padding at end of block bitmap is not set [ 36.391257][ T427] Quota error (device loop1): write_blk: dquota write failed [ 36.398935][ T427] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 36.409047][ T427] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.17: Failed to acquire dquot type 1 [ 36.422603][ T427] EXT4-fs (loop1): 1 truncate cleaned up [ 36.429251][ T427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.604595][ T28] audit: type=1326 audit(1764013585.509:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=423 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 36.634609][ T28] audit: type=1400 audit(1764013585.819:194): avc: denied { write } for pid=435 comm="syz.0.20" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.669293][ T427] syz.1.17 (427) used greatest stack depth: 21208 bytes left [ 36.692458][ T433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.701998][ T287] EXT4-fs (loop1): unmounting filesystem. [ 36.722780][ T28] audit: type=1326 audit(1764013585.899:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=423 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 36.731451][ T431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 36.746320][ T28] audit: type=1326 audit(1764013585.899:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=423 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 36.765101][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 36.778848][ T28] audit: type=1326 audit(1764013585.899:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=423 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 36.879020][ T28] audit: type=1326 audit(1764013585.899:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=423 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 37.349495][ T334] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.431038][ T28] audit: type=1326 audit(1764013585.899:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=423 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af278f749 code=0x7ffc0000 [ 37.535420][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.555364][ T334] usb 1-1: Using ep0 maxpacket: 32 [ 37.562104][ T334] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.572801][ T334] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.582391][ T334] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 37.591778][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.629742][ T334] usb 1-1: config 0 descriptor?? [ 37.695465][ T367] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.429627][ T286] EXT4-fs (loop2): unmounting filesystem. [ 38.451338][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 38.459766][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.470204][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 38.479305][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 38.488902][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.502099][ T24] usb 4-1: config 0 descriptor?? [ 38.541297][ T368] usb 1-1: USB disconnect, device number 2 [ 38.657386][ T367] usb 2-1: Using ep0 maxpacket: 32 [ 38.663764][ T367] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.674424][ T367] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 38.683456][ T367] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 38.692587][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.701830][ T367] usb 2-1: config 0 descriptor?? [ 38.737334][ T367] usb 4-1: USB disconnect, device number 2 [ 39.068002][ T368] usb 2-1: USB disconnect, device number 2 [ 39.265161][ T475] loop0: detected capacity change from 0 to 512 [ 39.274022][ T475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.304591][ T475] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.313610][ T475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.27: bg 0: block 248: padding at end of block bitmap is not set [ 39.329005][ T475] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.27: Failed to acquire dquot type 1 [ 39.342346][ T475] EXT4-fs (loop0): 1 truncate cleaned up [ 39.359801][ T475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.319182][ T478] loop4: detected capacity change from 0 to 2048 [ 40.486471][ T283] EXT4-fs (loop0): unmounting filesystem. [ 40.492931][ T478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.541117][ T478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 140.615249][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 140.622590][ C1] (detected by 1, t=10002 jiffies, g=1857, q=526 ncpus=2) [ 140.629993][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294951269-4294941267), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 140.643400][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g1857 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 140.654535][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 140.664521][ C1] rcu: RCU grace-period kthread stack dump: [ 140.670437][ C1] task:rcu_preempt state:R running task stack:28528 pid:14 ppid:2 flags:0x00004000 [ 140.681266][ C1] Call Trace: [ 140.684605][ C1] [ 140.687564][ C1] __schedule+0xb87/0x14e0 [ 140.692042][ C1] ? __sched_text_start+0x8/0x8 [ 140.696925][ C1] schedule+0xbd/0x170 [ 140.701034][ C1] schedule_timeout+0x12c/0x2e0 [ 140.706063][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 140.711460][ C1] ? preempt_schedule+0xa7/0xb0 [ 140.716508][ C1] ? __cfi_process_timeout+0x10/0x10 [ 140.721825][ C1] ? prepare_to_swait_event+0x308/0x320 [ 140.727406][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 140.732279][ C1] ? rcu_gp_init+0xf10/0xf10 [ 140.736888][ C1] rcu_gp_kthread+0x95/0x370 [ 140.741501][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 140.746725][ C1] ? set_cpus_allowed_ptr+0x82/0xc0 [ 140.751948][ C1] ? __kasan_check_read+0x11/0x20 [ 140.757003][ C1] ? __kthread_parkme+0x142/0x180 [ 140.762054][ C1] kthread+0x281/0x320 [ 140.766144][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 140.771389][ C1] ? __cfi_kthread+0x10/0x10 [ 140.776034][ C1] ret_from_fork+0x1f/0x30 [ 140.780582][ C1] [ 140.783631][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 140.789985][ C1] Sending NMI from CPU 1 to CPUs 0: [ 140.795225][ C0] NMI backtrace for cpu 0 [ 140.795239][ C0] CPU: 0 PID: 495 Comm: syz.0.33 Not tainted syzkaller #0 [ 140.795256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.795269][ C0] RIP: 0010:__dequeue_signal+0x74/0x600 [ 140.795294][ C0] Code: 70 00 4d 8b 27 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 72 20 70 00 4c 8b 33 49 f7 d6 <4c> 89 e6 4c 21 f6 31 db 31 ff e8 3d ae 2b 00 4d 21 e6 74 3d 44 89 [ 140.795308][ C0] RSP: 0018:ffffc9000fa3fae0 EFLAGS: 00000046 [ 140.795323][ C0] RAX: 1ffff110230cb61c RBX: ffff88811865b0e0 RCX: dffffc0000000000 [ 140.795337][ C0] RDX: ffffc9000166a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 140.795348][ C0] RBP: ffffc9000fa3fb38 R08: 0000000000000004 R09: 0000000000000003 [ 140.795358][ C0] R10: fffff52001f47f64 R11: 1ffff92001f47f64 R12: 0000000000000000 [ 140.795369][ C0] R13: ffff88811865b0f8 R14: ffffffffffffffff R15: ffff88811865b108 [ 140.795382][ C0] FS: 00007fe14e95d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 140.795396][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.795408][ C0] CR2: 000020000006b000 CR3: 00000001169a6000 CR4: 00000000003506b0 [ 140.795422][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.795431][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.795441][ C0] Call Trace: [ 140.795446][ C0] [ 140.795453][ C0] ? __kasan_check_write+0x14/0x20 [ 140.795471][ C0] dequeue_signal+0x73/0x4d0 [ 140.795492][ C0] get_signal+0x522/0x1520 [ 140.795518][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 140.795539][ C0] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 140.795560][ C0] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 140.795581][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 140.795606][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 140.795624][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 140.795642][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 140.795666][ C0] do_syscall_64+0x58/0xa0 [ 140.795683][ C0] ? clear_bhb_loop+0x30/0x80 [ 140.795714][ C0] ? clear_bhb_loop+0x30/0x80 [ 140.795737][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.795758][ C0] RIP: 0033:0x7fe14db8f747 [ 140.795771][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 140.795784][ C0] RSP: 002b:00007fe14e95d038 EFLAGS: 00000246 [ 140.795796][ C0] RAX: 0000000000000113 RBX: 00007fe14dde5fa0 RCX: 00007fe14db8f749 [ 140.795807][ C0] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 140.795822][ C0] RBP: 00007fe14dc13f91 R08: 0000000000000007 R09: 0000000000000000 [ 140.795832][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.795841][ C0] R13: 00007fe14dde6038 R14: 00007fe14dde5fa0 R15: 00007ffec36b2018 [ 140.795856][ C0] [ 285.526121][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 244s! [ 285.535100][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 244s! [ 285.544042][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 241s! [ 285.553192][ C0] Showing busy workqueues and worker pools: [ 285.559129][ C0] workqueue events: flags=0x0 [ 285.563832][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.563880][ C0] in-flight: 24:free_work [ 285.563928][ C0] pending: kfree_rcu_monitor, xfrm_state_gc_task [ 285.563976][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.564015][ C0] pending: kfree_rcu_monitor, psi_avgs_work, vmstat_shepherd [ 285.564176][ C0] workqueue events_unbound: flags=0x2 [ 285.604084][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 285.604201][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 285.604407][ C0] workqueue events_power_efficient: flags=0x80 [ 285.625806][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 285.625856][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work [ 285.625984][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.626025][ C0] pending: gc_worker, reg_check_chans_work, check_lifetime [ 285.626088][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.666995][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.667045][ C0] pending: vmstat_update [ 285.667078][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.667126][ C0] pending: vmstat_update [ 285.667165][ C0] workqueue writeback: flags=0x4a [ 285.696830][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=6/256 refcnt=8 [ 285.696873][ C0] pending: wb_update_bandwidth_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 285.696986][ C0] workqueue kblockd: flags=0x18 [ 285.719664][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=4/256 refcnt=5 [ 285.719712][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 285.719860][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.719900][ C0] pending: blk_mq_timeout_work [ 285.720246][ C0] workqueue dm_bufio_cache: flags=0x8 [ 285.757134][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.757192][ C0] pending: work_fn [ 285.757368][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.774819][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 285.774871][ C0] pending: addrconf_verify_work [ 285.774900][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 285.774939][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 285.774982][ C0] pending: addrconf_verify_work [ 285.775007][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 285.815281][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.820682][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.820734][ C0] pending: wg_packet_encrypt_worker [ 285.820769][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.820811][ C0] pending: wg_packet_encrypt_worker [ 285.820839][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.852284][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.852334][ C0] pending: wg_packet_handshake_send_worker [ 285.852374][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.871052][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.871099][ C0] pending: wg_packet_encrypt_worker [ 285.871130][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.871172][ C0] pending: wg_packet_encrypt_worker [ 285.871201][ C0] workqueue wg-kex-wg2: flags=0x6 [ 285.903454][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 285.903505][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 285.903561][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.925284][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.925333][ C0] pending: wg_packet_encrypt_worker [ 285.925372][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.925413][ C0] pending: wg_packet_encrypt_worker [ 285.925530][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.956967][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.957014][ C0] pending: wg_packet_handshake_send_worker [ 285.957051][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.975825][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.975885][ C0] pending: wg_packet_encrypt_worker [ 285.975922][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.975981][ C0] pending: wg_packet_encrypt_worker [ 285.976011][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.007813][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.007869][ C0] pending: wg_packet_encrypt_worker [ 286.007904][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.007946][ C0] pending: wg_packet_encrypt_worker [ 286.007975][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.039513][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.039564][ C0] pending: wg_packet_handshake_send_worker [ 286.039599][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.058291][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.058339][ C0] pending: wg_packet_encrypt_worker [ 286.058383][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.058423][ C0] pending: wg_packet_encrypt_worker [ 286.058512][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.090021][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.090077][ C0] pending: wg_packet_handshake_send_worker [ 286.090111][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.108791][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.108849][ C0] pending: wg_packet_encrypt_worker [ 286.108881][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.108921][ C0] pending: wg_packet_encrypt_worker [ 286.109017][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.140735][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.140786][ C0] pending: wg_packet_encrypt_worker [ 286.140819][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.140858][ C0] pending: wg_packet_encrypt_worker [ 286.140941][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.172531][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.172579][ C0] pending: wg_packet_handshake_send_worker [ 286.172613][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.191271][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.191318][ C0] pending: wg_packet_encrypt_worker [ 286.191352][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.191390][ C0] pending: wg_packet_encrypt_worker [ 286.191419][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.223090][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.223141][ C0] pending: wg_packet_encrypt_worker [ 286.223175][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.223216][ C0] pending: wg_packet_encrypt_worker [ 286.223246][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.255099][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.255148][ C0] pending: wg_packet_encrypt_worker [ 286.268392][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.268438][ C0] pending: wg_packet_encrypt_worker [ 286.268472][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.286953][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.286999][ C0] pending: wg_packet_encrypt_worker [ 286.287029][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.305275][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.305319][ C0] pending: wg_packet_handshake_send_worker [ 286.305351][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.324061][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.324109][ C0] pending: wg_packet_encrypt_worker [ 286.324140][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.324180][ C0] pending: wg_packet_encrypt_worker [ 286.324209][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.355650][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.355697][ C0] pending: wg_packet_handshake_send_worker [ 286.355730][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.374619][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.374672][ C0] pending: wg_packet_encrypt_worker [ 286.374709][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.374751][ C0] pending: wg_packet_encrypt_worker [ 286.374877][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=245s workers=6 idle: 367 39 334 454 291