last executing test programs: 20m40.02445223s ago: executing program 32 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = semget$private(0x0, 0x7, 0x191) semtimedop(r1, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0) 20m36.566933015s ago: executing program 33 (id=626): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r0, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 20m26.484666069s ago: executing program 34 (id=769): ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0405602, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4044) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c0002"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 20m19.460725395s ago: executing program 35 (id=839): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d80", @ANYRES32=r2, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 20m19.437043269s ago: executing program 36 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2501000000000000000841000000030018"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19m31.434381451s ago: executing program 37 (id=1039): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0xa, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8b19, &(0x7f0000000000)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) 18m59.226132709s ago: executing program 38 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) sendmmsg$inet(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x30}}], 0x400000000000234, 0x200448c0) 17m51.232644942s ago: executing program 39 (id=1790): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m38.967733688s ago: executing program 40 (id=2143): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 14m13.958668497s ago: executing program 41 (id=2700): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xe0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1b}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa7e4a71329317a60}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 10m29.050735847s ago: executing program 42 (id=3259): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 7m30.190457978s ago: executing program 43 (id=3647): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6m30.954160283s ago: executing program 44 (id=3749): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x5, 0xd9, 0xffdffe0000000001, 0xfa11, 0xfffffffa}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 5m37.774344037s ago: executing program 45 (id=3849): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) userfaultfd(0x801) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 4m33.132925753s ago: executing program 46 (id=3968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000300)=""/138, 0x8a}], 0x2, 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xdf, 0xd, 0x0, 0x5f, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8000, 0x2f00, 0x95, 0xc6}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000008c0)=[@wr_crn={0x67, 0x20, {0x3, 0x7}}], 0x20}) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) 2m33.635232217s ago: executing program 47 (id=4182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @broadcast}, 0x501, 0x0, 0x0, 0x0, 0xefff, 0x0, 0x0, 0x2, 0x300}) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000002c0)={0x0, 0x213a, 0x80, 0xb, 0x3ce}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m12.094140536s ago: executing program 48 (id=4226): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d0001071000"], 0x18}}, 0x880) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r4, 0x3}, 0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 2m12.011160896s ago: executing program 49 (id=4227): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) read(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x300, 0xb16, 0x146]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) 2m7.389098644s ago: executing program 1 (id=4259): openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ftruncate(r4, 0x400000) write(r1, 0x0, 0x0) 2m3.640842767s ago: executing program 9 (id=4264): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x2, 0x3, {0xa, 0x4e22, 0xe19a, @private1, 0x68e}}}, 0x3a) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'cpuset'}]}, 0xd) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)="00a1", 0x2}) 2m2.690694359s ago: executing program 9 (id=4265): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) setpriority(0x2, 0x0, 0x8) socket(0xa, 0x3, 0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x6, 0x7fffffff}]}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) 2m1.762366803s ago: executing program 9 (id=4266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000005000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x84, 0x2, "2fa1"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "8797fe"}}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x4004510f, &(0x7f0000001b80)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 1m56.813030434s ago: executing program 50 (id=4252): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r4 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x65, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f0000000080)={0x1f, "14a6c63d876ff44271f19ca6e4482707dab7299602aed83463604d70b41d4008e3"}}) syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) 1m55.500390947s ago: executing program 9 (id=4275): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x3, 0x4) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1800, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x404c801}, 0x4008090) syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000500)) 1m53.959086802s ago: executing program 9 (id=4277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c0000000000000000850000000700000004000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(0x0, 0x8fff5) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 1m52.914970076s ago: executing program 7 (id=4279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x2000, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24, 0xe, {0x3, 0x6, 0x9, 0x1, 0x8, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) dup(0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x4a, {0x2, 0x4, @dev}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 1m51.95036687s ago: executing program 51 (id=4259): openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x2, 0x3, {0xa, 0x4e22, 0xe19a, @private1, 0x68e}}}, 0x3a) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'cpuset'}]}, 0xd) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)="00a1", 0x2}) 1m50.250389331s ago: executing program 7 (id=4283): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x24008890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1m49.969025043s ago: executing program 7 (id=4284): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback}, &(0x7f0000000040)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output], 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f979, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$read(0x0, 0x0, 0x11) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01134f9b3a000000fc006700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800c300741300000800c4"], 0x3c}}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) socket$nl_xfrm(0x10, 0x3, 0x6) 1m48.122923142s ago: executing program 7 (id=4286): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) get_mempolicy(0x0, &(0x7f0000000180), 0x5a, &(0x7f0000ffd000/0x2000)=nil, 0x5) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5416, &(0x7f0000001100)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a01040000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000a6627f237107cd1dff2ca95d5dee0d7a3215db1daa3c3ef70debdeaed6b0480e90d499c6985744a9f18992d39a6f5e30aacc9ff20733b41ce2e38efc09c2d493f17cdf362f457c9b4f559bda4a580dfed8f15"], 0x48}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 1m46.876945892s ago: executing program 7 (id=4288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000906030200000000000000000200ffff240007800c00018008000140e0000001140017006261746164765f736cb580655f0800000900020073797a310000000005000100"], 0x4c}}, 0x40c0080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1m38.523377939s ago: executing program 52 (id=4277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c0000000000000000850000000700000004000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(0x0, 0x8fff5) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 1m33.762548908s ago: executing program 6 (id=4311): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000002080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r8}) 1m32.676409412s ago: executing program 6 (id=4313): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="0a80c2000000aaaaaaaaaaaa08004510001c00020000fe119078ac1414aae000000100004e20000890781b6246c805c4b4eb183dba565bb9d5fefe91ca133ae6c469649996a2c126cd6c4db885fde7ae91ac800d7799d70fdc13cb8812ee5931f52389361e2b376a877f05a3100cbc352921e40ed8f95a286ba038950e8f3076803183d82c30c7960ff036d371df0c36629c52c369a3af280dc9ca877165ec4a93"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) 1m31.176742284s ago: executing program 6 (id=4314): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1002000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x1e70, &(0x7f0000000380)={0x0, 0x608f, 0x10100, 0xfffffffe, 0x1eb, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x7) 1m31.123726042s ago: executing program 53 (id=4288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000906030200000000000000000200ffff240007800c00018008000140e0000001140017006261746164765f736cb580655f0800000900020073797a310000000005000100"], 0x4c}}, 0x40c0080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1m28.394109236s ago: executing program 6 (id=4320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) chown(0x0, 0x0, 0xee01) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000980)=""/205, 0xcd}], 0x6, 0xa3, 0x2917) 1m27.408503275s ago: executing program 6 (id=4322): prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xb) r0 = getpid() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x40005, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="ab50e3df348709aef965b9e11672ceea81dc9e3185b4c23122646b0885d60e90d7922169fb086e848d21a2395793a17f85bf47b80d7bf822ba8937d1dd129f96dc9d5fadce4af1a0f2433501a655dfbdac53b1a8763bc22b51c0c921e0a801c826b4a34a4990177eba7ad60c5f3accf77e86e4ba85428bc9b77d1c3e915fc8b5f9403dbedb4cf4676f4ad723406c197624f37eeea50da64317442efaaca9555052e1368d5e2dee3b19899ee7870e28f675aa8ce0e788e8b51c11fb4ecc", 0xbd}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f00000003c0)="15c3fd7ee78991dd", 0x8}, {&(0x7f0000000400)}], 0x4, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x28000000}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f0000001b80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xe6dac699fb4364a0}}, {{&(0x7f0000001ec0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f40)="91302c4f93bcfa7016f5c9468c8a08bdd6ed3de60b130f2564f9f75cc634b7d5d930f619a1657a7fc5bc8a1421675647e9bd71af0cc558fb3d89cf5b71d9222a85fb9e7138f64999a4ac8da50d0e64aff6d7a74867653086b9643cfe58fd1d3cdb536d77816adf17eaf4b125bfd3a12e85c12db866fef8cc727bec44ecf7d6f6b816a6afe0a759f1f7856ea9c958ea5d10fd9023aeb339355fd193cf535d94e8d17753486fae226ccc405633b361a9f3201ab6b7a7a7c5381adc812bb0f3b4032f11bdc8fd", 0xc5}, {0x0}, {&(0x7f0000003200)}], 0x3, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000091c0), 0x0, 0x40}}], 0x5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x717b, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6) 1m26.952966297s ago: executing program 6 (id=4323): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) lseek(r0, 0x9, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r6, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 1m13.406195563s ago: executing program 4 (id=4343): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x8000, 0xf, 0x4, 0xc}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x20000, 0x10c) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa0f5}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0xa004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008840}, 0x4004415) 1m11.965720843s ago: executing program 4 (id=4344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m11.887099194s ago: executing program 54 (id=4323): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) lseek(r0, 0x9, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r6, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 1m9.791239059s ago: executing program 4 (id=4349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x5000248) 1m8.759394329s ago: executing program 4 (id=4351): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f000004b680)=""/102400, 0x19000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80003, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 1m5.458234246s ago: executing program 4 (id=4358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0xa, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10008, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019340)=@newsa={0x20c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@empty, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x73}, {@in6=@mcast2, 0x4ce, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, {0x0, 0x192, 0x9ba3, 0xffff, 0x10008251c, 0x5, 0x81, 0xe02}, {0xffffffffffffffff, 0x0, 0x19, 0x4}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x109, 0x3, {{'deflate\x00'}, 0x608, "41f36a4be351117ffa4963176d5b2a662685c245968b9b7fd8df3008504f9532775a90c42766786840aab15a04bea058bc3624564e66fbb7b3e8393f407b3d7d180affde5fc8e173f47cc849d85ab9f03a0b234730564846b5ae78a6bcb76d715832cc23c8c86e0a29eddc3f755fde410000000000000002a280e148d7ef3089b3cf02cc7e877ae801aa8378aec14e033214bdba9119261aeb5f836a22c9e6c892aaf5de457ed84dae8148b68af4ebb2c92f5ca094f2428d31ec3131320c1bd49b"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd28, 0xd2eb}}]}, 0x20c}}, 0x8c4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a310000000009000100"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m4.758175012s ago: executing program 4 (id=4360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 49.234828547s ago: executing program 55 (id=4360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) unshare(0x22020400) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 46.038142087s ago: executing program 8 (id=4393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) 45.094407939s ago: executing program 8 (id=4396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) 45.070350426s ago: executing program 2 (id=4397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip_vs_stats_percpu\x00') sendmsg$sock(r6, &(0x7f0000000900)={&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x1, @local, 'netdevsim0\x00'}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000a00)="9c280a5aaca549d197b5b0c3131f84b54706d81179a41aafd6cf88bfddfd5d5d8cf44b6a565ccef21977e89eb700b23ec03c", 0x32}, {&(0x7f00000007c0)="7022e478f6ce4c35426d604272d37b6bc71528793d1732ea9896ef7c4aa6304b36ed3cfa494891bf97318cdce2a2", 0x2e}], 0x2, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xa3cc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x78}, 0x40002) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89901) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r7, 0x4) 43.62613576s ago: executing program 8 (id=4398): socket(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xc2, 0x0, 0x7fff0005}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7ffffb}, 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 43.334962141s ago: executing program 8 (id=4400): syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) syz_emit_ethernet(0x107, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00001100ff8a9ec64ab8068fcd7dc5ea86b299f42e6eccc1962f4820ebc2a82324763e4734dbdef83e111878f45b6554061a5dec7ea2583a2276bafc68ea11ce9ba2fd482b60b68c15d52e8fa6765a0454c7ed400349f0513b4bcd2b8368cfdbd1bb0a421b30ce868ad82653325eea40631e5f3686ace6366a5cc3cea66e4b3351e5a6a8078590d30300000000000000b9ea6cbc9e428ff1535e71b7eee7b3071299702e06b11de926390622d90f5996e6ea6d16f76e59fb76e1c7da3dccc33bba68a7dbb1480b129bef14f3a4b43af4c718b18e"], 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={0x0, 0x300}) 42.270482965s ago: executing program 8 (id=4402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) execveat$binfmt(r8, r6, 0x0, 0x0, 0x1000) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r9, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0xb, 0x0, 0x0) 37.619841003s ago: executing program 2 (id=4410): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 35.693923318s ago: executing program 8 (id=4413): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x1, 0xc}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x39, &(0x7f0000000080), 0x1}, 0x60040820) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setns(r4, 0x66020000) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 34.467682326s ago: executing program 2 (id=4416): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x4, 0xfcc0, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r5, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400001c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) 31.340899702s ago: executing program 2 (id=4421): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) io_uring_setup(0xd71, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x8000000000000001, 0x3, 0x5, 0xfffffffb}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 27.050142223s ago: executing program 2 (id=4425): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) capget(&(0x7f0000000400)={0x19980330, r1}, &(0x7f0000000440)={0xa57f, 0x1, 0x7fff, 0xffff29f4, 0x4, 0x2}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8401) 25.834717652s ago: executing program 2 (id=4428): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="18000000010005", 0x7) 25.519125838s ago: executing program 56 (id=4428): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="18000000010005", 0x7) 20.017521537s ago: executing program 57 (id=4413): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x1, 0xc}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x39, &(0x7f0000000080), 0x1}, 0x60040820) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setns(r4, 0x66020000) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 17.506906464s ago: executing program 3 (id=4441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_open_dev$dri(0x0, 0xd21, 0x0) mprotect(&(0x7f0000ad4000/0x3000)=nil, 0x3000, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) r4 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x7, 0x20080) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f00000001c0)={0xa, 0xff}) 16.461015168s ago: executing program 3 (id=4442): socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3ff, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x6}, 0xff}) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, 0x0, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x92) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13.407309961s ago: executing program 5 (id=4447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x400, 0x7f, 0x2, 0x4, 0x1, 0x9, 0x0, 0x10000, 0x2, 0x9, 0x4, 0x0, 0x3, 0x3, 0x0, 0x7, 0x40, 0xfffe000, 0x3, 0xffffffff, 0x2, 0xec, 0x0, 0x445a, 0x735, 0x400, 0x1, 0xc, 0xfffffff9, 0x8, 0x1ff, 0x8, 0x4, 0x2bf5, 0xfbd7, 0x101, 0x101, 0x0, 0x1, 0x7fff, 0x6e39, 0x7, 0x80, 0xa48, 0x9, 0xff, 0x2, 0x8, 0x9, 0x4, 0x0, 0x10000000, 0x6, 0xffffffff, 0x3, 0x2, 0x8, 0x40, 0x0, 0x9ae, 0x9, 0x8, 0x7, 0x58, 0x0, 0x8, 0x5, 0x4, 0x2, 0x8913, 0x6, 0x7fff, 0x5, 0x6, 0x1, 0xc, 0x6, 0xe, 0x1, 0x10000, 0x4, 0xfffffffc, 0x4, 0x100, 0x5, 0x8, 0x75, 0x5, 0x6, 0xb, 0x46c, 0x4, 0x4, 0x1, 0x8, 0x5, 0x9, 0x7fffffff, 0xffc, 0x80000001, 0xd6, 0x7, 0x4, 0x3, 0xfff, 0xb, 0x2, 0x4, 0x8, 0x7f, 0x9, 0x14000000, 0x8, 0x4, 0x7, 0x400, 0xff, 0x6, 0x7, 0x8, 0x4, 0x3, 0x80000001, 0x274d, 0x4, 0x80000001, 0x6, 0xcf60, 0x4, 0x8, 0x1, 0x9, 0x7, 0x4, 0x6, 0x4, 0x81, 0x8, 0xb, 0xfa, 0x7, 0xd, 0x5, 0xffffffff, 0x7, 0x4, 0x6, 0x3, 0x6, 0x7f, 0x8, 0x81, 0xfffeffff, 0x7, 0x8, 0xffff2749, 0x0, 0x8001, 0x4, 0x5, 0x9, 0x81, 0x5c6a834b, 0x1, 0x7, 0x9, 0x4, 0x8, 0x9, 0x5, 0x1, 0x6, 0x5, 0x1, 0x10000000, 0x8, 0x9, 0x4, 0x9, 0x5, 0x0, 0xb168, 0xde7, 0x6, 0x2, 0x5, 0x9, 0x6, 0x7, 0x6643, 0x9, 0x5fd4, 0x2, 0xfffffffd, 0x9, 0x8, 0x1, 0x10000, 0x80, 0x2, 0x9, 0xe3, 0x3, 0x6, 0x2e5f, 0xc819, 0x8, 0x0, 0x8, 0x5, 0x9, 0x1, 0x7ff, 0x5, 0x400, 0x5, 0x0, 0x1ff, 0x1, 0x5, 0x8001, 0x1, 0x1, 0xfd, 0x8, 0x9, 0x2, 0x80000001, 0x0, 0x2, 0x1000, 0xae, 0x790, 0x3ff, 0x7, 0x3, 0x3, 0x4, 0xc4b, 0xe4a, 0xfffffc01, 0xff, 0x0, 0xff, 0x7ff, 0x7, 0x8, 0x8, 0x8, 0x1000, 0x3aaf, 0x23546785, 0x3, 0x7, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x2, 0x9, 0xe5c, 0x8, 0x1, 0x0, 0x6, 0x3, 0x800, 0x6, 0x6, 0x79c, 0x5, 0x1, 0x4, 0x3, 0x101, 0x0, 0x4, 0xe0e, 0x4b, 0x7, 0x5a, 0x8, 0x0, 0x2, 0x800, 0x9, 0x7, 0x0, 0x2, 0x1000, 0xa, 0x9, 0x7, 0x1, 0x9, 0x1, 0xfffffff9, 0xfff, 0x7, 0x3, 0x4, 0x8, 0x3, 0xb01d, 0x0, 0x1000, 0x2a7a, 0x9, 0x3, 0x9, 0x0, 0x200, 0x0, 0x3, 0xb, 0x7, 0x0, 0xfffffffe, 0x9, 0x8, 0xfffffffb, 0x8, 0x10, 0x8001, 0x7, 0x7, 0x7fff, 0xa66, 0x8, 0x3, 0x8, 0x9, 0x9d, 0x15d3, 0x4, 0x9, 0x81, 0x0, 0x7, 0x1ff0, 0x7, 0x3ff, 0x430c8601, 0x3, 0x9, 0x200, 0xffff8000, 0x4, 0xfff, 0xa, 0x4, 0x240, 0x4d, 0x4, 0x9, 0x0, 0x4, 0x40, 0x4, 0x7, 0x2, 0x400002, 0x0, 0x10000, 0x7e4d, 0x8, 0x2, 0x8, 0x5, 0x3, 0x7, 0xff, 0x6, 0xdce, 0x6b, 0xffffff7f, 0x7a3b874e, 0x1, 0x3, 0x5, 0xba1b, 0x0, 0x801, 0xc32b, 0x7f, 0x80000000, 0x8, 0x1, 0x85, 0xfff, 0x8, 0x3, 0xfffffffc, 0x9, 0xfffffe00, 0xdb, 0x9, 0x1, 0x800, 0xcda2, 0x7, 0x7, 0x6, 0xba4, 0xb4, 0x4, 0x2, 0xf525, 0x7, 0x3, 0x200, 0x80000001, 0x5, 0x6, 0x1ff, 0xc00, 0xc43, 0x1, 0xffffffff, 0xabd2, 0xfffff69d, 0x2, 0x2bf24db6, 0x10, 0x10000, 0x8, 0x7, 0xfffffff8, 0x81, 0x1, 0xdc7b, 0x9d2b, 0x1, 0xf3da, 0xa, 0x5, 0xfffffff9, 0x8, 0x90000000, 0x6, 0x0, 0x5e9, 0xfffff001, 0x0, 0x10001, 0x1000, 0x3, 0x4, 0xfffffffd, 0xfffffffd, 0x5, 0x80000001, 0x0, 0x4, 0xfffffff7, 0x4bf9ab00, 0x0, 0x7, 0x1000, 0x5fb, 0x73, 0xa963, 0x800, 0x0, 0x401, 0xfffffffd, 0x7, 0xa, 0x6, 0x3660, 0x0, 0x3ff, 0xfffffffd, 0x8, 0x9e, 0x4, 0x7, 0x4, 0xfa, 0xffff, 0x8, 0xffff, 0x9, 0x3, 0xe5cf, 0x2, 0x5, 0x8, 0x0, 0x0, 0x200, 0x484, 0x7d2479be, 0x8, 0x1, 0x100, 0x3, 0x3, 0x80000000, 0xfffffff8, 0x5, 0x10, 0x1, 0xffffffff, 0x81, 0x1, 0x5, 0x9, 0x101, 0x9, 0x830b, 0xffff, 0xca]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x4, 0x2, 0xfffffffe, {0x2, 0x1, 0x49, 0x7, 0x5, 0x3}, {0x10, 0x0, 0x4, 0x7, 0xb0a, 0x900}, 0x2, 0x0, 0x5}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9}}]}, 0x884}, 0x1, 0x0, 0x0, 0x40004}, 0x4000804) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 12.429281963s ago: executing program 3 (id=4448): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f00000006c0)={0x80, 0x0, 0xf0d3}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000000400000002000000000000001800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb2074fd2ad1a038d822b4f468c444e8c112cf7335b7f760dac21b43edfc76af46a95565fb94c738ede3470b51df9cb5e4c17aad7a4e9a6142cef11efe32e6a9d1fc56e2915a5ee65f81de530520b5d6d30a23437623495f0787b52d7a7e4b8f1b170624e078235abd50134b8bd1ec9333c820ae91d6"], 0x58}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x48, {}, [@common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 12.31823649s ago: executing program 5 (id=4449): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x20, 0x0) preadv(r5, &(0x7f0000000100)=[{0x0}], 0x1, 0x7fffffffffffffff, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 11.374706586s ago: executing program 5 (id=4450): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000180)='fdinfo\x00') epoll_pwait(r1, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x7fff, &(0x7f0000000100)={[0x5]}, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f00000044c0)) socket(0x10, 0x803, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x149441) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.475104234s ago: executing program 3 (id=4451): r0 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x103040, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x62) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)='n', 0x1}, {&(0x7f00000001c0)="b8dfed3f162d6ad14070d1e7", 0xc}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000019380)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000640)=@conn_svc_rsp={0x0, 0x0, 0xa, "ddf008c5", {0x3, 0x102, 0x0, 0xb, 0x0, 0x80, 0x1}}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x4300, 0x0, 0x1, 0x80000001}) 10.363133875s ago: executing program 5 (id=4452): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) creat(0x0, 0xecf86c37d53049ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0) 10.170818663s ago: executing program 0 (id=4453): socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) 9.061944472s ago: executing program 5 (id=4454): syz_open_procfs(0x0, 0x0) r0 = socket(0x28, 0x3, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404a0d0}, 0x10000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$sock_SIOCADDDLCI(r3, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x7) 8.888509635s ago: executing program 1 (id=4437): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x62) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200021, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xdf}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.891314417s ago: executing program 0 (id=4455): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0xdffaa000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x14}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r4, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 7.819967511s ago: executing program 1 (id=4456): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1000003) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x8924, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002400)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x8, 0x7}, 0x4) syz_emit_ethernet(0x83, 0x0, 0x0) 6.556197241s ago: executing program 0 (id=4457): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) socket$inet_tcp(0x2, 0x1, 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000a547ae412132080045004877ae1c56d505546c907ceb001c00ad000017e634c6ecd50972b967b66288460002000000000000080014aa121f908ca40d7901"], 0x0) getitimer(0x2, &(0x7f0000000140)) fchdir(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x41, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@delchain={0x2c, 0x65, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {0x4, 0xd}, {0x5, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffff9b0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xc, 0x2, [@TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x8d6}]}, 0x64}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.362255442s ago: executing program 5 (id=4458): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = dup(0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000540)={{0x5, 0x0, 0x5, 0x100, '\x00', 0x401}, 0x3, 0x20, 0x6, r6, 0x5, 0x3, 'syz1\x00', &(0x7f0000000200)=[',&,,]\x00', '@{.}(\x00', '#! ', '#! ', '\x00'], 0x13}) getsockname(r0, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) socketpair(0x2b, 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 5.198706993s ago: executing program 0 (id=4459): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) close(r5) 5.185797001s ago: executing program 1 (id=4460): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) getpgrp(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0xe, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x20, &(0x7f0000000380)={0x0}, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0xffffffffffffffff, 0x8, &(0x7f0000001340)) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) process_vm_writev(0x0, &(0x7f0000001080)=[{&(0x7f0000001040)=""/37, 0x25}], 0x1, &(0x7f0000001300)=[{&(0x7f00000010c0)=""/26, 0x1a}, {&(0x7f0000001100)=""/125, 0x7d}, {&(0x7f0000001180)=""/84, 0x54}, {&(0x7f0000001200)=""/249, 0xf9}], 0x4, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x202400, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d0bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a974448000000000000000000000000000000001600", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 4.113927501s ago: executing program 0 (id=4461): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000080)={'rose0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e01, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 3.661629129s ago: executing program 1 (id=4462): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) syz_emit_ethernet(0x6e, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.804422957s ago: executing program 3 (id=4463): socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) link(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setrlimit(0xa, &(0x7f0000000000)={0x3, 0xfff}) iopl(0x3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x0, 0x128200}}, 0x50) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.503921201s ago: executing program 1 (id=4464): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041810) 226.16165ms ago: executing program 3 (id=4465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_usb_connect(0x3, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x13, 0x3c, 0x3b, 0x10, 0x497, 0xc001, 0xd516, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7d, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0xa5, 0x81, 0x0, 0x88, 0xc8, 0x76, 0x61}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x801) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x6, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0x81}, {0x8000000, 0x0, 0x4, 0x88, 0xf0, 0x81, 0x8c, 0x6, 0x7, 0x99, 0x1, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0xfc, 0x5, 0x1, 0x7, 0x5, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0x9, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xf, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0xc3, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x80a0000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x80a0000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x0, 0xa]}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000000c0)={0x6, 0x81}) r7 = socket(0x11, 0xa, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) getsockname$packet(r7, 0x0, &(0x7f0000000080)) 0s ago: executing program 0 (id=4466): socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.659577][ T8748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.676557][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1063.781714][ T9644] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1063.801857][ T8742] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1063.821762][ T6150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1064.775560][ T6150] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1064.852668][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.866677][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1064.887187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.900901][ T50] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1065.091750][ T5939] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1065.221307][T19270] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1065.550684][T19270] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1065.562147][T19270] overlayfs: failed to look up (tracing) for ino (-66) [ 1066.591764][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 1066.614652][ T5939] usb 2-1: config 250 has an invalid interface number: 228 but max is 0 [ 1066.648638][ T30] audit: type=1326 audit(3915823759.998:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1066.801646][ T5939] usb 2-1: config 250 has no interface number 0 [ 1066.831644][ T5939] usb 2-1: New USB device found, idVendor=041e, idProduct=4034, bcdDevice=ff.d7 [ 1067.362158][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.387676][ T30] audit: type=1326 audit(3915823759.998:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1067.483290][ T5939] usb 2-1: can't set config #250, error -71 [ 1067.633023][ T5939] usb 2-1: USB disconnect, device number 39 [ 1067.663279][ T30] audit: type=1326 audit(3915823760.028:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1067.859261][ T30] audit: type=1326 audit(3915823760.028:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1068.062342][ T8745] net_ratelimit: 26 callbacks suppressed [ 1068.062360][ T8745] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.221011][ T30] audit: type=1326 audit(3915823760.028:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1068.244630][ T8745] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1068.299560][ T30] audit: type=1326 audit(3915823760.028:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1068.361698][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.411245][ T9646] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1068.481907][ T30] audit: type=1326 audit(3915823760.028:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1068.571662][ T9648] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.616400][ T9648] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.657903][ T30] audit: type=1326 audit(3915823760.028:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1068.691688][ T8745] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.734470][ T30] audit: type=1326 audit(3915823760.028:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbd4318f749 code=0x7ffc0000 [ 1068.786108][ T8745] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.817124][ T30] audit: type=1326 audit(3915823760.028:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd4318f783 code=0x7ffc0000 [ 1068.862311][ T8745] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.883913][ T8745] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1070.769214][T19310] input: syz1 as /devices/virtual/input/input34 [ 1072.387251][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1072.387266][ T30] audit: type=1400 audit(3915823765.738:1048): avc: denied { bind } for pid=19322 comm="syz.5.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1073.081928][ T12] net_ratelimit: 102 callbacks suppressed [ 1073.081969][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.211725][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.231717][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.252910][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.296580][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.341732][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.361751][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.394265][ T8737] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.441685][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.461866][ T8745] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1074.031980][T16875] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1074.055895][ T8737] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.309802][T16875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.394560][T16875] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1074.447640][T16875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.470374][T16875] usb 5-1: config 0 descriptor?? [ 1074.559877][ T8737] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.074800][ T8737] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.364931][T16875] usbhid 5-1:0.0: can't add hid device: -71 [ 1075.384959][T16875] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1075.468589][T16875] usb 5-1: USB disconnect, device number 24 [ 1075.665348][ T8737] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.926977][T19372] 9pnet_virtio: no channels available for device syz [ 1077.576564][ T30] audit: type=1400 audit(3915823770.928:1049): avc: denied { getopt } for pid=19368 comm="syz.5.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1077.998264][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1078.011916][ T8737] bridge_slave_1: left allmulticast mode [ 1078.017549][ T8737] bridge_slave_1: left promiscuous mode [ 1078.029598][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1078.069830][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.142238][ T1009] net_ratelimit: 89 callbacks suppressed [ 1078.142259][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1078.197644][T19385] netlink: 'syz.0.3956': attribute type 12 has an invalid length. [ 1078.230225][T19385] netlink: 'syz.0.3956': attribute type 11 has an invalid length. [ 1078.798216][ T8737] bridge_slave_0: left allmulticast mode [ 1078.801713][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1078.831711][ T8732] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1078.848928][ T8737] bridge_slave_0: left promiscuous mode [ 1078.942888][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.961068][ T8732] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1079.602645][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1080.203604][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1080.292527][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1081.387698][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1081.911708][ T4083] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1082.102065][ T8731] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1082.491878][T16875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1082.693011][T16875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.737669][T16875] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1082.751699][T16875] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1082.760831][T16875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.772609][T16875] usb 4-1: config 0 descriptor?? [ 1083.154105][ T9646] net_ratelimit: 40 callbacks suppressed [ 1083.154124][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.239216][ T4083] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.523116][ T9] usb 4-1: USB disconnect, device number 10 [ 1083.535799][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.619408][ T2212] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.668994][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.731713][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.781659][ T2212] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.828566][ T2212] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.881696][ T2212] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.923200][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.994635][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.051445][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.086726][ T8737] bond0 (unregistering): Released all slaves [ 1086.307274][T19454] netlink: 'syz.1.3970': attribute type 3 has an invalid length. [ 1086.319067][T19454] netlink: 'syz.1.3970': attribute type 3 has an invalid length. [ 1087.311678][ T5819] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1087.966198][ T5819] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1088.005219][ T5819] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1088.221714][ T8720] net_ratelimit: 76 callbacks suppressed [ 1088.221733][ T8720] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1088.803546][ T5819] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1088.931732][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.962043][ T8720] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1089.004021][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.118887][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.181735][ T8718] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.302171][ T8718] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1090.302750][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1090.671895][ T8737] hsr_slave_0: left promiscuous mode [ 1090.691745][ T4083] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.738412][ T8737] hsr_slave_1: left promiscuous mode [ 1090.761679][ T8718] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.802575][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.831728][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.845418][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.884513][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.911801][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.950106][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.643190][ T8737] veth1_macvtap: left promiscuous mode [ 1091.655966][ T8737] veth0_macvtap: left promiscuous mode [ 1091.678198][ T8737] veth1_vlan: left promiscuous mode [ 1091.709603][ T8737] veth0_vlan: left promiscuous mode [ 1092.834237][T19505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19505 comm=syz.0.3984 [ 1092.989033][ T30] audit: type=1326 audit(3915823786.198:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1093.121233][ T30] audit: type=1326 audit(3915823786.208:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1093.197197][ T30] audit: type=1326 audit(3915823786.208:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1093.231739][ T9646] net_ratelimit: 67 callbacks suppressed [ 1093.231750][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.281742][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.313148][ T30] audit: type=1326 audit(3915823786.208:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1093.348865][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.432309][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.445884][ T30] audit: type=1326 audit(3915823786.208:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1093.479360][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.514664][ T30] audit: type=1326 audit(3915823786.208:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1093.539738][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.576250][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.709667][ T30] audit: type=1326 audit(3915823786.208:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1094.219648][ T5819] usb 5-1: can't set config #16, error -110 [ 1094.248909][ T30] audit: type=1326 audit(3915823786.208:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1094.281957][ T8718] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1094.354422][ T8718] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1094.365280][ T30] audit: type=1326 audit(3915823786.208:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1094.441814][ T8718] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1094.500898][ T30] audit: type=1326 audit(3915823786.208:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.5.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe3d8f749 code=0x7ffc0000 [ 1095.459041][T19523] binder: 19519:19523 ioctl c0306201 0 returned -14 [ 1096.110452][T19528] SELinux: failed to load policy [ 1097.255793][T19536] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3990'. [ 1097.648362][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 1098.385593][T19543] net_ratelimit: 74 callbacks suppressed [ 1098.385626][T19543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.809842][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1098.831672][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1098.931824][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1098.954135][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.002658][ T8720] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.051269][ T8720] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.152996][ T8742] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.171307][T19546] fuse: Bad value for 'fd' [ 1099.340989][ T8731] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.380772][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 1099.411763][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.399067][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3992'. [ 1101.511700][T19505] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1101.525507][T19505] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1101.551660][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1101.551675][ T30] audit: type=1800 audit(3915823794.898:1077): pid=19510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.5.3985" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1101.590915][ T30] audit: type=1400 audit(3915823794.938:1078): avc: denied { firmware_load } for pid=19506 comm="syz.5.3985" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1101.591219][T19510] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1101.627824][T19505] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1101.652508][T19505] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1101.683089][T19505] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1101.700054][T19505] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1101.717796][T19510] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1101.873398][T15658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1101.885027][T15658] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1101.890091][T19510] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1101.904498][T15658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1101.920905][T15658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1101.932937][T15658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1103.883134][ T36] net_ratelimit: 78 callbacks suppressed [ 1103.883154][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1103.929174][T19559] Bluetooth: hci5: command 0x0c1a tx timeout [ 1103.935273][T15658] Bluetooth: hci6: command 0x0c1a tx timeout [ 1104.051794][T15658] Bluetooth: hci4: command tx timeout [ 1104.076128][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1104.211690][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1104.241807][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1104.372430][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1104.548157][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1105.518974][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.533322][ T30] audit: type=1400 audit(3915823798.388:1079): avc: denied { bind } for pid=19578 comm="syz.1.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1105.580561][T19554] chnl_net:caif_netlink_parms(): no params data found [ 1105.670476][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.761733][ T9646] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.841703][T19002] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1106.025828][T15658] Bluetooth: hci6: command 0x0c1a tx timeout [ 1106.025834][T19559] Bluetooth: hci5: command 0x0c1a tx timeout [ 1106.069132][T19600] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1106.522647][T19559] Bluetooth: hci4: command tx timeout [ 1106.861871][T18384] usb 5-1: USB disconnect, device number 25 [ 1107.587778][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1108.073424][T19559] Bluetooth: hci5: command 0x0c1a tx timeout [ 1108.081711][T19559] Bluetooth: hci6: command 0x0c1a tx timeout [ 1108.149932][T19621] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1108.303415][T19621] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1108.313669][T19621] overlayfs: failed to look up (tracing) for ino (-66) [ 1108.565172][T19559] Bluetooth: hci4: command tx timeout [ 1108.931720][ T1009] net_ratelimit: 42 callbacks suppressed [ 1108.931744][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.017536][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.050429][ T8737] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.061273][T19002] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.080775][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.109927][ T8737] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.120520][ T1009] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.141871][T19002] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.191942][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.201510][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1109.221822][T19554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.228977][T19554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.263866][T19554] bridge_slave_0: entered allmulticast mode [ 1109.281867][T19554] bridge_slave_0: entered promiscuous mode [ 1109.301321][T19554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.323815][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.423309][T19554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.430527][T19554] bridge_slave_1: entered allmulticast mode [ 1109.457008][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1109.473104][T19554] bridge_slave_1: entered promiscuous mode [ 1109.484102][T17001] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1109.671805][T17001] usb 6-1: Using ep0 maxpacket: 16 [ 1109.686134][ T8737] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.755980][ T8737] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.801645][T17001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.911666][T17001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.921486][T17001] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1110.927180][T19559] Bluetooth: hci4: command tx timeout [ 1110.954271][T17001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.965180][T17001] usb 6-1: config 0 descriptor?? [ 1111.029957][T17001] usb 6-1: can't set config #0, error -71 [ 1111.046452][T17001] usb 6-1: USB disconnect, device number 12 [ 1111.233844][ T8737] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1111.251385][ T8737] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.306371][T19554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.342476][T19554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.371939][T18384] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1111.443264][ T8737] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1111.472075][ T8737] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.552552][T18384] usb 2-1: Using ep0 maxpacket: 32 [ 1111.577560][T18384] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1111.614755][T19554] team0: Port device team_slave_0 added [ 1111.629660][T18384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.654112][T19554] team0: Port device team_slave_1 added [ 1111.665154][T18384] usb 2-1: config 0 descriptor?? [ 1111.695965][T18384] usb 2-1: selecting invalid altsetting 3 [ 1111.710135][T18384] comedi comedi4: could not set alternate setting 3 in high speed [ 1111.725022][T18384] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1111.738026][T19554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.756196][T18384] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1111.765277][T19554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.799102][T19554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.873282][T19554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.880935][T19554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.940702][T19554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.157046][T19554] hsr_slave_0: entered promiscuous mode [ 1112.187666][T19554] hsr_slave_1: entered promiscuous mode [ 1112.238489][T19554] debugfs: 'hsr0' already exists in 'hsr' [ 1112.257484][T19554] Cannot create hsr debugfs directory [ 1112.582181][ T8737] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1112.646140][ T8737] bond0 (unregistering): (slave ip6erspan0): Releasing active interface [ 1113.370839][ T5819] usb 2-1: USB disconnect, device number 40 [ 1113.529562][ T8737] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1114.019405][ T8737] bond1 (unregistering): Released all slaves [ 1114.390291][ T8737] bond4 (unregistering): (slave bond0): Releasing active interface [ 1114.399443][ T8737] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1114.896609][ T8737] bond0 (unregistering): Released all slaves [ 1116.039778][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.047180][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.274162][ T8737] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1116.283502][ T8737] bond2 (unregistering): Released all slaves [ 1116.443336][ T8737] bond3 (unregistering): Released all slaves [ 1116.638454][ T8737] bond4 (unregistering): Released all slaves [ 1117.521006][ T30] audit: type=1400 audit(3915823810.848:1080): avc: denied { getopt } for pid=19666 comm="syz.1.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1117.961975][ T8737] tipc: Left network mode [ 1120.808574][T19554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.966428][T19554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.084762][T19554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.186477][T19713] fuse: Bad value for 'fd' [ 1124.633337][T19554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.185560][ T8737] hsr_slave_0: left promiscuous mode [ 1125.771823][ T8737] hsr_slave_1: left promiscuous mode [ 1125.989341][ T8737] veth1_macvtap: left promiscuous mode [ 1126.005467][ T8737] veth0_macvtap: left promiscuous mode [ 1126.460145][ T8737] veth1_vlan: left promiscuous mode [ 1126.465566][ T8737] veth0_vlan: left promiscuous mode [ 1128.148481][ T8737] pimreg (unregistering): left allmulticast mode [ 1133.496337][T19554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1133.587360][T19554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1133.666367][T19554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1133.676430][ T8737] IPVS: stop unused estimator thread 0... [ 1133.771411][T19554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1134.615578][T19554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.004155][T19554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.064878][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.072319][ T8737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.121448][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.128530][ T8737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.148551][T19554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.231806][T18384] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1137.352370][T19554] veth0_vlan: entered promiscuous mode [ 1137.419181][T18384] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1137.428866][T19554] veth1_vlan: entered promiscuous mode [ 1137.450729][T18384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.511832][T18384] usb 6-1: Product: syz [ 1137.516027][T18384] usb 6-1: Manufacturer: syz [ 1137.520618][T18384] usb 6-1: SerialNumber: syz [ 1137.565721][T19554] veth0_macvtap: entered promiscuous mode [ 1137.674190][T18384] usb 6-1: config 0 descriptor?? [ 1137.687395][T19554] veth1_macvtap: entered promiscuous mode [ 1137.756462][T19554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.815721][T19808] overlayfs: missing 'lowerdir' [ 1138.092275][T18384] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1138.109982][T19554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.203210][ T8732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.353300][ T8732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.520986][T18384] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1139.607785][ T8742] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.649709][ T8742] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.444277][T19002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.489961][T19002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.672279][ T9644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.700519][ T9644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.082051][T19831] IPVS: Error connecting to the multicast addr [ 1141.534231][ T974] usb 6-1: USB disconnect, device number 13 [ 1147.946753][T19883] netlink: 'syz.3.4066': attribute type 1 has an invalid length. [ 1147.981750][T19883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1148.299317][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4067'. [ 1149.502321][T19901] tipc: Can't bind to reserved service type 0 [ 1151.823697][T19921] Mount JFS Failure: -22 [ 1151.828291][T19921] jfs_mount failed w/return code = -22 [ 1151.848873][T19921] SELinux: syz.0.4074 (19921) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1154.979031][T19559] block nbd1: Receive control failed (result -32) [ 1155.492054][T19939] nbd1: detected capacity change from 0 to 127 [ 1157.071700][ T8297] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1157.471897][ T8297] usb 4-1: Using ep0 maxpacket: 8 [ 1157.699920][ T8297] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1157.733916][ T8297] usb 4-1: config 8 has an invalid interface number: 255 but max is 8 [ 1157.742418][ T8297] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 9 [ 1157.769267][ T8297] usb 4-1: config 8 has no interface number 0 [ 1157.917497][ T8297] usb 4-1: config 8 interface 255 has no altsetting 0 [ 1157.934860][ T8297] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 1157.981796][ T8297] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1158.020427][ T8297] usb 4-1: Product: syz [ 1158.161627][ T8297] usb 4-1: Manufacturer: syz [ 1158.634071][ T8297] usb 4-1: SerialNumber: syz [ 1160.328009][ T8297] catc 4-1:8.255: Can't set altsetting 1. [ 1160.359831][ T8297] catc 4-1:8.255: probe with driver catc failed with error -5 [ 1160.514807][ T8297] usb 4-1: USB disconnect, device number 11 [ 1161.121894][T16875] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1161.180944][T19985] Process accounting resumed [ 1161.561659][T16875] usb 3-1: Using ep0 maxpacket: 32 [ 1161.587404][T16875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.761948][T16875] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1161.808273][T16875] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1161.834194][T16875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.985845][T16875] usb 3-1: config 0 descriptor?? [ 1163.192077][T20000] kAFS: unable to lookup cell 'Ţ({^ú@' [ 1163.750060][T16875] hid_parser_main: 24 callbacks suppressed [ 1163.750079][T16875] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1163.813271][T16875] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1164.501509][T16875] usb 3-1: USB disconnect, device number 8 [ 1165.224776][T20024] netlink: 'syz.5.4099': attribute type 1 has an invalid length. [ 1165.611752][ T30] audit: type=1400 audit(3915823858.958:1081): avc: denied { ioctl } for pid=20006 comm="syz.3.4095" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1165.664462][T20025] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1165.675162][ T30] audit: type=1400 audit(3915823859.018:1082): avc: denied { recv } for pid=36 comm="kworker/u8:2" saddr=10.128.0.169 src=30006 daddr=10.128.0.223 dest=41872 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1165.846154][T20025] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1165.906831][T20024] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1166.215119][T20029] bond1: (slave gretap1): making interface the new active one [ 1166.267591][T20029] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1166.376632][T20032] macvlan2: entered promiscuous mode [ 1166.413685][T20032] macvlan2: entered allmulticast mode [ 1166.467738][T20032] bond1: entered promiscuous mode [ 1166.481773][T20038] nbd2: detected capacity change from 0 to 127 [ 1166.521435][T20032] gretap1: entered promiscuous mode [ 1166.665482][T20032] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1167.430446][T19559] block nbd2: Receive control failed (result -32) [ 1167.522149][T20032] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1167.556830][T20044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4103'. [ 1167.574828][T20032] bond1: left promiscuous mode [ 1167.650225][T20032] gretap1: left promiscuous mode [ 1168.908125][T20047] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1168.974972][T20057] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1169.010994][T20057] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1169.112651][T20058] binder: BINDER_SET_CONTEXT_MGR already set [ 1169.120614][T20058] binder: 20055:20058 ioctl 4018620d 200000000040 returned -16 [ 1169.483148][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1172.316423][T20084] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1173.408175][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4117'. [ 1177.446593][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.460359][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.093154][ T30] audit: type=1400 audit(3915823872.438:1083): avc: denied { sqpoll } for pid=20134 comm="syz.0.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1184.654597][T20179] trusted_key: encrypted_key: insufficient parameters specified [ 1187.974980][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4147'. [ 1188.806773][ T30] audit: type=1400 audit(3915823882.158:1084): avc: denied { read } for pid=20216 comm="syz.5.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1188.851345][T20221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1188.860773][T20221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1188.913213][T20221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1188.930429][T20221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1191.185094][ T30] audit: type=1800 audit(3915823884.528:1085): pid=20241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4154" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1191.474720][T20243] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4154'. [ 1193.610579][ T30] audit: type=1400 audit(3915823886.958:1086): avc: denied { unmount } for pid=18590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1194.681810][T20268] pimreg: entered allmulticast mode [ 1196.953466][T20297] overlayfs: missing 'workdir' [ 1200.014500][T20329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4173'. [ 1204.313970][T20360] 9pnet_fd: p9_fd_create_tcp (20360): problem connecting socket to 127.0.0.1 [ 1205.900455][ T30] audit: type=1400 audit(3915823898.752:1087): avc: denied { setopt } for pid=20358 comm="syz.3.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1206.589495][T20382] netlink: 'syz.3.4184': attribute type 2 has an invalid length. [ 1206.793129][T20380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.812355][T20380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.024324][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1209.036113][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1209.046410][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1209.857733][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1209.867076][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1209.876985][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1210.170210][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1210.181629][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1210.190638][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1210.765237][ T30] audit: type=1400 audit(3915823911.119:1088): avc: denied { connect } for pid=20418 comm="syz.5.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1210.782442][T20417] : entered promiscuous mode [ 1212.256534][ T8297] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1212.725832][ T8297] usb 6-1: config 0 has no interfaces? [ 1212.743485][ T8297] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1212.772015][ T8297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.804190][ T8297] usb 6-1: config 0 descriptor?? [ 1212.993562][T20414] xt_bpf: check failed: parse error [ 1215.321513][T19271] usb 6-1: USB disconnect, device number 14 [ 1215.901208][T20466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4204'. [ 1215.919960][ T30] audit: type=1400 audit(3915823916.269:1089): avc: denied { ioctl } for pid=20463 comm="syz.5.4205" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1216.197780][T20471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4206'. [ 1217.571792][ T30] audit: type=1326 audit(3915823917.889:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20475 comm="syz.2.4208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fbc18f749 code=0x0 [ 1219.249583][T20486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4211'. [ 1219.377731][ T30] audit: type=1400 audit(3915823919.729:1091): avc: denied { write } for pid=20491 comm="syz.5.4212" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1219.422030][T20492] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1219.425652][T20492] @0Ů: renamed from bond_slave_1 (while UP) [ 1219.551615][ T30] audit: type=1400 audit(3915823919.759:1092): avc: denied { open } for pid=20491 comm="syz.5.4212" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1219.608361][T20494] 9pnet_fd: Insufficient options for proto=fd [ 1220.848777][T15658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1220.861761][T15658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1220.872900][T15658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1221.461913][T15658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1221.470821][T15658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.427920][T20510] mac80211_hwsim hwsim44 4: renamed from wlan1 (while UP) [ 1223.577090][T20530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1223.595667][T15658] Bluetooth: hci2: command tx timeout [ 1224.206062][T20503] chnl_net:caif_netlink_parms(): no params data found [ 1225.091378][T15658] Bluetooth: hci4: command 0x0406 tx timeout [ 1225.158193][T20537] random: crng reseeded on system resumption [ 1225.232722][T20537] Restarting kernel threads ... [ 1225.240616][T20537] Done restarting kernel threads. [ 1225.673049][ T30] audit: type=1400 audit(3915823925.579:1093): avc: denied { ioctl } for pid=20533 comm="syz.1.4222" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1225.708854][ T5822] Bluetooth: hci2: command tx timeout [ 1227.753246][T19559] Bluetooth: hci2: command tx timeout [ 1228.340400][T20503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.348145][T20503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.355535][T20503] bridge_slave_0: entered allmulticast mode [ 1228.363276][T20503] bridge_slave_0: entered promiscuous mode [ 1228.372491][T20503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.387823][T20503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.395329][T20503] bridge_slave_1: entered allmulticast mode [ 1228.403447][T20503] bridge_slave_1: entered promiscuous mode [ 1228.495930][T20503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.509094][T20503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.626850][T20503] team0: Port device team_slave_0 added [ 1228.637736][T20503] team0: Port device team_slave_1 added [ 1228.687837][T20503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.695288][T20503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.722282][T20503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.734873][T20503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.742691][T20503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.769358][T20503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.875954][T20503] hsr_slave_0: entered promiscuous mode [ 1228.886056][T20503] hsr_slave_1: entered promiscuous mode [ 1228.897035][T20503] debugfs: 'hsr0' already exists in 'hsr' [ 1228.903212][T20503] Cannot create hsr debugfs directory [ 1229.927272][T20580] Mount JFS Failure: -22 [ 1229.931645][T20580] jfs_mount failed w/return code = -22 [ 1229.945891][T20580] SELinux: syz.3.4231 (20580) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1229.959956][T19559] Bluetooth: hci2: command tx timeout [ 1230.743645][T20503] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1230.792860][T20503] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1230.820310][T20503] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1230.847815][T20503] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1231.110214][T20503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.140525][T20503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.179876][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.187031][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.202909][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.210047][ T8732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.239102][T20503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1231.249929][T20503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1231.390950][ T8364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.538993][ T8364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.582171][T20503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.665564][ T8364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.838476][ T8364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.899608][T20503] veth0_vlan: entered promiscuous mode [ 1231.926548][T20503] veth1_vlan: entered promiscuous mode [ 1231.967559][T20503] veth0_macvtap: entered promiscuous mode [ 1231.999818][T20503] veth1_macvtap: entered promiscuous mode [ 1232.052786][T20503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.084382][T20503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.106229][ T9648] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.116271][ T9648] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.126366][ T9648] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.154530][ T8745] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.297575][ T8364] bridge_slave_1: left allmulticast mode [ 1232.315282][ T8364] bridge_slave_1: left promiscuous mode [ 1232.322238][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.351831][ T8364] bridge_slave_0: left allmulticast mode [ 1232.357555][ T8364] bridge_slave_0: left promiscuous mode [ 1232.363716][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.111514][ T8364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.138033][ T8364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.148801][ T8364] bond0 (unregistering): Released all slaves [ 1233.202005][ T9644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.209891][ T9644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.284420][ T8732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.292667][ T8732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.126612][ T8364] hsr_slave_0: left promiscuous mode [ 1234.141699][ T8364] hsr_slave_1: left promiscuous mode [ 1234.148564][ T8364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.156260][ T8364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.171673][ T8364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.181596][ T8364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.234429][ T8364] veth1_macvtap: left promiscuous mode [ 1234.240494][ T8364] veth0_macvtap: left promiscuous mode [ 1234.247476][ T8364] veth1_vlan: left promiscuous mode [ 1234.253161][ T8364] veth0_vlan: left promiscuous mode [ 1234.829477][T20614] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4233'. [ 1236.154523][T20627] net_ratelimit: 77 callbacks suppressed [ 1236.154542][T20627] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1236.823925][ T8364] team0 (unregistering): Port device team_slave_1 removed [ 1236.899120][ T8364] team0 (unregistering): Port device team_slave_0 removed [ 1238.419405][ T30] audit: type=1400 audit(3915823938.389:1094): avc: denied { shutdown } for pid=20632 comm="syz.9.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1238.439541][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.446206][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.817346][T20637] kAFS: unable to lookup cell 'Ţ({^ú@' [ 1239.560201][ T30] audit: type=1400 audit(3915823939.909:1095): avc: denied { setcheckreqprot } for pid=20640 comm="syz.1.4241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1241.989965][T20666] netlink: 'syz.9.4251': attribute type 6 has an invalid length. [ 1242.113459][T19559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1242.133881][T19559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1242.167032][T19559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1242.178137][T19559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1242.187717][T19559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1242.315215][ T5822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1242.326273][ T5822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1242.335885][ T5822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1242.343674][ T5822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1242.351118][ T5822] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1244.231712][ T5822] Bluetooth: hci5: command tx timeout [ 1244.391844][ T5822] Bluetooth: hci7: command tx timeout [ 1244.418987][T20669] chnl_net:caif_netlink_parms(): no params data found [ 1244.585365][T20674] chnl_net:caif_netlink_parms(): no params data found [ 1244.708673][T20697] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4254'. [ 1244.785605][T20698] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4254'. [ 1245.105188][T20669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.114135][T20669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.138734][T20669] bridge_slave_0: entered allmulticast mode [ 1245.145628][T20669] bridge_slave_0: entered promiscuous mode [ 1245.208193][T20669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.215631][T20669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.224745][T20669] bridge_slave_1: entered allmulticast mode [ 1245.254925][T20669] bridge_slave_1: entered promiscuous mode [ 1245.532650][T20674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.545138][T20674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.566442][T20674] bridge_slave_0: entered allmulticast mode [ 1245.612122][T20674] bridge_slave_0: entered promiscuous mode [ 1245.635193][T20669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.654950][T20674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.662163][T20674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.696869][T20674] bridge_slave_1: entered allmulticast mode [ 1245.709914][T20674] bridge_slave_1: entered promiscuous mode [ 1245.746642][T20669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.897219][T20669] team0: Port device team_slave_0 added [ 1245.904655][T20674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.922453][T20669] team0: Port device team_slave_1 added [ 1245.970938][T20674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.221894][T20669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.255324][T20669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.321209][ T5822] Bluetooth: hci5: command tx timeout [ 1246.329281][T20669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.476363][T20669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.484489][T20669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.521742][ T5822] Bluetooth: hci7: command tx timeout [ 1246.521984][T20669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.552476][T20674] team0: Port device team_slave_0 added [ 1246.812503][T20674] team0: Port device team_slave_1 added [ 1246.926139][T20674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.933480][T20674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.960297][T20674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.999963][T20674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.009859][T20674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.040810][T20674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.095351][T20669] hsr_slave_0: entered promiscuous mode [ 1247.102709][T20669] hsr_slave_1: entered promiscuous mode [ 1247.109254][T20669] debugfs: 'hsr0' already exists in 'hsr' [ 1247.116777][T20669] Cannot create hsr debugfs directory [ 1247.336329][T20674] hsr_slave_0: entered promiscuous mode [ 1247.352071][T20674] hsr_slave_1: entered promiscuous mode [ 1247.363185][ T30] audit: type=1400 audit(3915823947.719:1096): avc: denied { write } for pid=20718 comm="syz.9.4260" path="socket:[82056]" dev="sockfs" ino=82056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1247.402566][T20674] debugfs: 'hsr0' already exists in 'hsr' [ 1247.408323][T20674] Cannot create hsr debugfs directory [ 1247.452582][ T30] audit: type=1400 audit(3915823947.789:1097): avc: denied { connect } for pid=20718 comm="syz.9.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1247.531666][ T30] audit: type=1400 audit(3915823947.809:1098): avc: denied { connect } for pid=20718 comm="syz.9.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1248.082386][T20669] team0: Port device netdevsim0 removed [ 1248.392691][ T5822] Bluetooth: hci5: command tx timeout [ 1248.551797][ T5822] Bluetooth: hci7: command tx timeout [ 1248.575555][T20669] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1248.613229][T20669] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1248.671869][T20669] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1248.701742][T20669] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1249.068246][T20674] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1249.091554][T20674] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1249.110929][T20674] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1249.137589][T20674] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1249.361157][T20669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.399183][T20669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.473110][T20674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.484117][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.491267][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.511331][T20674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.520331][ T30] audit: type=1400 audit(3915823949.869:1099): avc: denied { append } for pid=20743 comm="syz.9.4263" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1249.547264][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.554392][ T8742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.561724][T20744] random: crng reseeded on system resumption [ 1249.589974][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.597313][ T8742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.120458][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.127654][ T8742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.490655][ T5822] Bluetooth: hci5: command tx timeout [ 1250.497500][T20669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.635258][ T5822] Bluetooth: hci7: command tx timeout [ 1250.929084][T20674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.065622][T20669] veth0_vlan: entered promiscuous mode [ 1251.079025][T20669] veth1_vlan: entered promiscuous mode [ 1251.115096][T20669] veth0_macvtap: entered promiscuous mode [ 1251.128051][T20669] veth1_macvtap: entered promiscuous mode [ 1251.201845][T20669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.228427][T20669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.293090][ T8742] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.305737][ T8742] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.479949][ T8742] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.489867][ T8742] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.941092][ T8737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.957796][ T8737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.008108][ T8742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.016725][ T8742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.048281][T20674] veth0_vlan: entered promiscuous mode [ 1252.075975][T20674] veth1_vlan: entered promiscuous mode [ 1252.205966][T20674] veth0_macvtap: entered promiscuous mode [ 1252.221393][T20674] veth1_macvtap: entered promiscuous mode [ 1252.278228][T20674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.394771][T20674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.494694][ T8737] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.524608][ T8737] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.559261][ T8737] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.668788][ T8737] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.738652][ T9184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.750571][ T9184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.811443][ T9184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.822099][ T9184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.882556][ T5939] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1253.109660][ T5939] usb 10-1: Using ep0 maxpacket: 32 [ 1253.612077][ T5939] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1253.621220][ T5939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.650805][ T5939] usb 10-1: config 0 descriptor?? [ 1253.679311][ T5939] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1254.518371][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1254.527440][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1254.536534][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1254.614112][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1254.624002][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1254.633988][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1254.754567][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1254.763694][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1254.772831][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1255.944690][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4270'. [ 1256.122932][ T5939] gspca_nw80x: reg_w err -71 [ 1256.127682][ T5939] nw80x 10-1:0.0: probe with driver nw80x failed with error -71 [ 1256.137269][ T5939] usb 10-1: USB disconnect, device number 16 [ 1258.654009][ T30] audit: type=1400 audit(3915823958.999:1100): avc: denied { recv } for pid=20814 comm="syz.8.4274" saddr=10.128.0.169 src=38980 daddr=10.128.0.223 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1258.691488][T19559] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1258.739143][ T9648] Bluetooth: hci9: Frame reassembly failed (-84) [ 1258.780097][T19559] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1258.804678][T19559] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1258.812981][T19559] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1258.822222][T19559] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1258.994156][ T30] audit: type=1326 audit(3915823959.349:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.040889][ T30] audit: type=1326 audit(3915823959.389:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.256230][T20816] chnl_net:caif_netlink_parms(): no params data found [ 1259.261592][ T30] audit: type=1326 audit(3915823959.469:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.337985][ T30] audit: type=1326 audit(3915823959.469:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.740500][ T30] audit: type=1326 audit(3915823959.469:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.799360][ T30] audit: type=1326 audit(3915823959.469:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.850007][ T30] audit: type=1326 audit(3915823959.469:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.901638][ T30] audit: type=1326 audit(3915823959.469:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.925948][ T30] audit: type=1326 audit(3915823959.469:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.9.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ffd8f749 code=0x7ffc0000 [ 1259.998375][T20816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.021701][T20816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.029378][T20816] bridge_slave_0: entered allmulticast mode [ 1260.037306][T20816] bridge_slave_0: entered promiscuous mode [ 1260.045949][T20816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.054510][T20816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.067467][T20816] bridge_slave_1: entered allmulticast mode [ 1260.076303][T20816] bridge_slave_1: entered promiscuous mode [ 1260.153084][T20816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.167517][T20816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.210439][T20816] team0: Port device team_slave_0 added [ 1260.221843][T20816] team0: Port device team_slave_1 added [ 1260.261440][T20816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.268668][T20816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.301735][T20816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.358886][T20816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.365961][T20816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.394115][T20816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.812186][T19559] Bluetooth: hci9: command 0x1003 tx timeout [ 1260.820537][T15658] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 1260.907632][ T5822] Bluetooth: hci8: command tx timeout [ 1261.035424][T20816] hsr_slave_0: entered promiscuous mode [ 1261.066480][T20816] hsr_slave_1: entered promiscuous mode [ 1262.185698][T20816] debugfs: 'hsr0' already exists in 'hsr' [ 1262.192381][T20816] Cannot create hsr debugfs directory [ 1262.237550][T20844] kthread_run failed with err -4 [ 1262.757006][T15658] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1262.773238][T15658] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1262.783100][T15658] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1262.790828][T15658] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1262.799187][T15658] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1262.952200][T15658] Bluetooth: hci8: command tx timeout [ 1263.948069][T20861] __nla_validate_parse: 3 callbacks suppressed [ 1263.948083][T20861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4283'. [ 1264.026690][T20853] chnl_net:caif_netlink_parms(): no params data found [ 1264.249514][T20816] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1264.414005][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4284'. [ 1264.435121][T20816] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1264.873131][T15658] Bluetooth: hci9: command tx timeout [ 1264.936721][T20816] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1264.948302][T20853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.957776][T20853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.966007][T20853] bridge_slave_0: entered allmulticast mode [ 1264.976478][T20853] bridge_slave_0: entered promiscuous mode [ 1264.985813][T20816] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1265.002675][T20853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.011076][T20853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.018814][T20853] bridge_slave_1: entered allmulticast mode [ 1265.026545][T20853] bridge_slave_1: entered promiscuous mode [ 1265.033239][T15658] Bluetooth: hci8: command tx timeout [ 1265.169542][T20853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.197920][T20853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.408002][T20853] team0: Port device team_slave_0 added [ 1265.417207][T20853] team0: Port device team_slave_1 added [ 1265.885629][T20853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.892815][T20853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.919697][T20853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.934052][T20853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.942692][T20853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.976036][T20853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.001045][T15658] Bluetooth: hci9: command tx timeout [ 1267.044336][T20816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.085985][T20853] hsr_slave_0: entered promiscuous mode [ 1267.569030][T15658] Bluetooth: hci8: command tx timeout [ 1267.636515][T20853] hsr_slave_1: entered promiscuous mode [ 1267.643059][T20853] debugfs: 'hsr0' already exists in 'hsr' [ 1267.649446][T20853] Cannot create hsr debugfs directory [ 1267.765114][T20816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.287971][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.295151][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.305452][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.312668][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.825059][T20816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.040401][T15658] Bluetooth: hci9: command tx timeout [ 1269.389994][T20853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1269.407364][T20853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1269.442402][T20853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1269.464414][T20853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1269.549324][T20816] veth0_vlan: entered promiscuous mode [ 1269.558424][T20920] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4289'. [ 1269.577630][T20816] veth1_vlan: entered promiscuous mode [ 1269.605167][T20920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.614000][T20920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.717754][T20908] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4289'. [ 1269.732532][T20816] veth0_macvtap: entered promiscuous mode [ 1269.739507][T20908] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4289'. [ 1269.763466][T20816] veth1_macvtap: entered promiscuous mode [ 1269.787670][T20816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.799949][T20816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.836802][ T9644] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.903850][ T9644] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.942093][ T9644] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.028992][ T9644] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.135902][ T9644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.165043][ T9644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.204621][ T9644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.214009][ T9644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.129317][ T5822] Bluetooth: hci9: command tx timeout [ 1271.284264][T20853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.345088][T20853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.403194][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.410369][ T9648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.422672][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.429881][ T9648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.223323][T20853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.722755][T20853] veth0_vlan: entered promiscuous mode [ 1274.564045][T20853] veth1_vlan: entered promiscuous mode [ 1274.602045][T20853] veth0_macvtap: entered promiscuous mode [ 1274.611328][T20853] veth1_macvtap: entered promiscuous mode [ 1274.645939][T20853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.664985][T20853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.699318][ T8748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.900112][ T8748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.928401][ T8748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.406407][ T9644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.489224][ T9644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.499405][ T9644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.796394][ T9197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.807653][T15658] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1275.825161][T15658] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1275.853574][ T9197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.866612][T15658] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1276.404675][T15658] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1276.440261][T15658] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1277.778530][T20974] chnl_net:caif_netlink_parms(): no params data found [ 1278.111156][T20974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.134107][T21002] netlink: 'syz.4.4303': attribute type 1 has an invalid length. [ 1278.142656][T21002] netlink: 'syz.4.4303': attribute type 2 has an invalid length. [ 1278.150373][T21002] netlink: 'syz.4.4303': attribute type 1 has an invalid length. [ 1278.158115][T21002] netlink: 'syz.4.4303': attribute type 3 has an invalid length. [ 1278.165852][T21002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4303'. [ 1278.218677][T20974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.248634][T20974] bridge_slave_0: entered allmulticast mode [ 1278.263011][T20974] bridge_slave_0: entered promiscuous mode [ 1278.333484][T20974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.352266][T20974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.377831][T20974] bridge_slave_1: entered allmulticast mode [ 1278.405294][T20974] bridge_slave_1: entered promiscuous mode [ 1278.616319][T20974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1278.721922][T21007] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4305'. [ 1278.731446][T15658] Bluetooth: hci10: command tx timeout [ 1278.834012][T20974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.992091][T20974] team0: Port device team_slave_0 added [ 1279.000932][T20974] team0: Port device team_slave_1 added [ 1279.676155][T20974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.685451][T20974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.713755][T20974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.753364][T20974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.769287][T20974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.799944][T20974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.816111][T21019] overlayfs: failed to clone upperpath [ 1279.935240][T20974] hsr_slave_0: entered promiscuous mode [ 1279.950496][T20974] hsr_slave_1: entered promiscuous mode [ 1279.960532][T20974] debugfs: 'hsr0' already exists in 'hsr' [ 1279.966557][T20974] Cannot create hsr debugfs directory [ 1280.794868][T15658] Bluetooth: hci10: command tx timeout [ 1281.545091][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4312'. [ 1282.871707][T15658] Bluetooth: hci10: command tx timeout [ 1283.899215][ T5822] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1283.922614][ T5822] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1283.932587][ T5822] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1283.940506][ T5822] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1283.948438][ T5822] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1284.383905][T20974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1284.432832][T20974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1284.618200][T20974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1284.734835][T21061] gfs2: not a GFS2 filesystem [ 1284.954353][ T5822] Bluetooth: hci10: command tx timeout [ 1285.211395][T20974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1285.658754][T21052] chnl_net:caif_netlink_parms(): no params data found [ 1285.695344][T20974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.013955][ T5822] Bluetooth: hci11: command tx timeout [ 1286.600804][T20974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.639267][T21052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.721661][T21052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.940233][T21052] bridge_slave_0: entered allmulticast mode [ 1286.978777][T21052] bridge_slave_0: entered promiscuous mode [ 1287.041108][T21052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.085122][T21052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.095722][T21052] bridge_slave_1: entered allmulticast mode [ 1288.060571][T21052] bridge_slave_1: entered promiscuous mode [ 1288.081928][ T5822] Bluetooth: hci11: command tx timeout [ 1288.094040][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.101210][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.219941][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1288.219959][ T30] audit: type=1401 audit(3915823988.559:1153): op=fscreate invalid_context="?" [ 1288.277684][T21052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.292768][T21052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.349358][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.356557][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.897881][T21052] team0: Port device team_slave_0 added [ 1288.907009][T21052] team0: Port device team_slave_1 added [ 1289.019172][T20974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1289.030654][T20974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1289.043772][T21052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.051448][T21052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.078937][T21052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.126521][T21052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.142218][T21052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.307960][T21052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.335875][T21052] hsr_slave_0: entered promiscuous mode [ 1290.342717][T21052] hsr_slave_1: entered promiscuous mode [ 1290.348984][T21052] debugfs: 'hsr0' already exists in 'hsr' [ 1290.355194][T21052] Cannot create hsr debugfs directory [ 1290.384294][ T5822] Bluetooth: hci11: command tx timeout [ 1290.922771][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4330'. [ 1291.299481][T20974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.556971][T21052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.960124][T20974] veth0_vlan: entered promiscuous mode [ 1292.414844][ T5822] Bluetooth: hci11: command tx timeout [ 1292.435782][T21052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.924651][T20974] veth1_vlan: entered promiscuous mode [ 1292.963691][T20974] veth0_macvtap: entered promiscuous mode [ 1292.985789][T20974] veth1_macvtap: entered promiscuous mode [ 1293.200586][T21052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.245054][T20974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.558733][T20974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.599153][ T9183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.460045][T21052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.569661][ T9648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.598816][ T9648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.619441][T20927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.644757][T20927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.662177][ T9648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.940996][T21142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.084047][T21142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.271833][T21052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1295.294433][T21052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1295.324067][T21052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1295.342000][T21052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1297.003906][T21052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.444964][T21165] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1297.514758][T21052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.543071][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.550377][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.610250][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.617411][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.565516][T21052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.708554][T21052] veth0_vlan: entered promiscuous mode [ 1299.584091][T21052] veth1_vlan: entered promiscuous mode [ 1299.674955][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.692284][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.192285][T21052] veth0_macvtap: entered promiscuous mode [ 1300.213955][T21052] veth1_macvtap: entered promiscuous mode [ 1300.277026][T21052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.308512][T21052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.358175][ T8718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.385492][ T8718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.427180][ T8718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.482385][ T8718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.503711][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1301.184546][ T30] audit: type=1326 audit(3915824001.539:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21189 comm="syz.4.4343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30f218f749 code=0x0 [ 1302.044237][ T9648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.081898][ T9648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.202444][ T8732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.222064][ T8732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.450229][T15658] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1302.488822][T15658] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1302.581968][T15658] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1302.590811][T15658] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1302.598814][T15658] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1304.201823][T21202] chnl_net:caif_netlink_parms(): no params data found [ 1304.800126][T15658] Bluetooth: hci12: command tx timeout [ 1304.973935][T21202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.987267][T21202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.997763][T21202] bridge_slave_0: entered allmulticast mode [ 1305.006118][T21202] bridge_slave_0: entered promiscuous mode [ 1305.014589][T21202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.022777][T21202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.031060][T21202] bridge_slave_1: entered allmulticast mode [ 1305.039774][T21202] bridge_slave_1: entered promiscuous mode [ 1305.924095][T21202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.938663][T21202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.149600][T21202] team0: Port device team_slave_0 added [ 1306.170271][T21202] team0: Port device team_slave_1 added [ 1306.891353][T15658] Bluetooth: hci12: command tx timeout [ 1306.944674][T21244] lo speed is unknown, defaulting to 1000 [ 1306.950963][T21244] lo speed is unknown, defaulting to 1000 [ 1306.957343][T21244] lo speed is unknown, defaulting to 1000 [ 1306.971342][T21244] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1307.802900][T21244] lo speed is unknown, defaulting to 1000 [ 1307.810136][T21244] lo speed is unknown, defaulting to 1000 [ 1307.817589][T21244] lo speed is unknown, defaulting to 1000 [ 1307.824701][T21244] lo speed is unknown, defaulting to 1000 [ 1307.833615][T21244] lo speed is unknown, defaulting to 1000 [ 1307.835506][T21202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.979695][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4356'. [ 1308.145532][ T30] audit: type=1400 audit(3915824008.369:1155): avc: denied { read } for pid=21251 comm="syz.0.4356" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1308.179264][T21202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.242036][ T30] audit: type=1400 audit(3915824008.369:1156): avc: denied { open } for pid=21251 comm="syz.0.4356" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1308.275843][T21202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.341899][T21244] lo speed is unknown, defaulting to 1000 [ 1308.349735][T21244] lo speed is unknown, defaulting to 1000 [ 1308.356810][T21244] lo speed is unknown, defaulting to 1000 [ 1308.364051][T21244] lo speed is unknown, defaulting to 1000 [ 1308.370528][T21244] lo speed is unknown, defaulting to 1000 [ 1308.377770][T21202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.407564][T21202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.421580][ T30] audit: type=1400 audit(3915824008.369:1157): avc: denied { ioctl } for pid=21251 comm="syz.0.4356" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1308.546538][T21202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.585278][T21244] lo speed is unknown, defaulting to 1000 [ 1308.824215][T21262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1308.900471][T21244] lo speed is unknown, defaulting to 1000 [ 1308.951826][T15658] Bluetooth: hci12: command tx timeout [ 1308.993102][T21244] lo speed is unknown, defaulting to 1000 [ 1308.999969][T21244] lo speed is unknown, defaulting to 1000 [ 1309.062298][T21202] hsr_slave_0: entered promiscuous mode [ 1309.088799][T21202] hsr_slave_1: entered promiscuous mode [ 1309.103902][T21202] debugfs: 'hsr0' already exists in 'hsr' [ 1309.138653][T21202] Cannot create hsr debugfs directory [ 1309.935258][T20846] lo speed is unknown, defaulting to 1000 [ 1309.975289][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4361'. [ 1310.196850][T21202] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.343781][T21202] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.496619][T21202] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.607215][T21202] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.958277][T21202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1311.013164][T21202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1311.032196][T21202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1311.042313][T15658] Bluetooth: hci12: command tx timeout [ 1311.089118][T21202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1311.308918][T21202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.395429][T21202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.443371][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.450455][ T9183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.491719][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.498866][ T9183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.131869][T21202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.735929][T18384] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1314.765799][T21202] veth0_vlan: entered promiscuous mode [ 1314.835214][T21202] veth1_vlan: entered promiscuous mode [ 1314.901853][T18384] usb 3-1: Using ep0 maxpacket: 32 [ 1314.911274][T18384] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.982989][T18384] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1315.085417][T18384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.253082][T21202] veth0_macvtap: entered promiscuous mode [ 1315.322542][T18384] usb 3-1: config 0 descriptor?? [ 1315.346180][T18384] hub 3-1:0.0: bad descriptor, ignoring hub [ 1315.375898][T21202] veth1_macvtap: entered promiscuous mode [ 1315.387002][T18384] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1315.437348][T21202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.459198][T21202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.525365][ T9184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.536468][ T9184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.856423][ T9184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.927639][ T8718] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.454965][ T8718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.488475][ T8718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.717707][ T8718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.726668][ T8718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.848169][T21331] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1316.857160][T21331] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1316.865818][T21331] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1318.170446][ T48] usb 3-1: USB disconnect, device number 9 [ 1322.806188][T21386] tipc: Started in network mode [ 1322.813116][T21386] tipc: Node identity 4e6ef26fe484, cluster identity 4711 [ 1322.829291][T21386] tipc: Enabled bearer , priority 0 [ 1322.847132][T21386] syzkaller0: entered promiscuous mode [ 1322.862135][T21386] syzkaller0: entered allmulticast mode [ 1322.983518][T21386] tipc: Resetting bearer [ 1323.044167][T21385] tipc: Resetting bearer [ 1323.183414][T21385] tipc: Disabling bearer [ 1323.692843][T21396] veth0_to_team: entered promiscuous mode [ 1323.877131][T21398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1325.109589][ T30] audit: type=1400 audit(3915824025.379:1158): avc: denied { remount } for pid=21413 comm="syz.5.4388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1325.900644][ T5822] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1325.923895][ T5822] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1325.933787][ T5822] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1325.941430][ T5822] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1326.442706][ T5822] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1326.589640][T21418] lo speed is unknown, defaulting to 1000 [ 1326.708366][T21428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4390'. [ 1328.476623][ T5822] Bluetooth: hci13: command tx timeout [ 1329.194517][T21418] chnl_net:caif_netlink_parms(): no params data found [ 1329.724224][T21455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4397'. [ 1330.622215][ T5822] Bluetooth: hci13: command tx timeout [ 1331.473715][T21418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.507525][T21418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.532572][T21418] bridge_slave_0: entered allmulticast mode [ 1331.555755][T21418] bridge_slave_0: entered promiscuous mode [ 1331.584228][T21418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.626364][T21418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.696303][T21418] bridge_slave_1: entered allmulticast mode [ 1331.712617][T21418] bridge_slave_1: entered promiscuous mode [ 1332.111250][T21480] gfs2: not a GFS2 filesystem [ 1332.162072][T21481] Invalid source name [ 1332.794388][ T5822] Bluetooth: hci13: command tx timeout [ 1332.916394][T21418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.946823][T21418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.886616][ T5822] Bluetooth: hci13: command tx timeout [ 1334.988246][T21500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1335.007306][T21418] team0: Port device team_slave_0 added [ 1335.247953][T21504] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 1335.299982][T21504] block nbd0: Dead connection, failed to find a fallback [ 1335.307749][T21504] block nbd0: shutting down sockets [ 1335.313841][T21504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.324178][T21504] buffer_io_error: 4 callbacks suppressed [ 1335.324207][T21504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1335.341696][T21504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.351286][T21504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1335.359632][T21504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.369227][T21504] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1335.381722][T21504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.391337][T21504] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1335.399595][T21504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.409197][T21504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1335.417509][T21504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.427249][T21504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1335.435130][T21504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.445335][T21504] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1335.453242][T21504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.462733][T21504] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1335.470491][T21504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.481445][T21504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1335.489402][T21504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1335.498888][T21504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1335.507086][T21504] ldm_validate_partition_table(): Disk read failed. [ 1335.518153][T21504] Dev nbd0: unable to read RDB block 0 [ 1335.524779][T21504] nbd0: unable to read partition table [ 1335.530742][T21504] befs: (nbd0): unable to read superblock [ 1335.537818][ T30] audit: type=1400 audit(3915824035.619:1159): avc: denied { relabelto } for pid=21498 comm="syz.0.4407" name="19" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1335.564165][T21418] team0: Port device team_slave_1 added [ 1335.611005][ T30] audit: type=1400 audit(3915824035.619:1160): avc: denied { associate } for pid=21498 comm="syz.0.4407" name="19" dev="tmpfs" ino=111 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1335.640037][ T30] audit: type=1400 audit(3915824035.619:1161): avc: denied { mounton } for pid=21498 comm="syz.0.4407" path="/19" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1336.292385][ T30] audit: type=1400 audit(3915824036.639:1162): avc: denied { remove_name } for pid=20974 comm="syz-executor" name="binderfs" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1336.370119][T21418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.522480][T21418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.627301][ T30] audit: type=1400 audit(3915824036.679:1163): avc: denied { rmdir } for pid=20974 comm="syz-executor" name="19" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1337.093899][T21418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.453009][T21418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.460102][T21418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.896362][T21418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.248620][T21418] hsr_slave_0: entered promiscuous mode [ 1338.271094][T21418] hsr_slave_1: entered promiscuous mode [ 1338.343211][T21418] debugfs: 'hsr0' already exists in 'hsr' [ 1338.420454][T21418] Cannot create hsr debugfs directory [ 1341.459950][T21552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4418'. [ 1342.177064][T21550] bridge1: entered promiscuous mode [ 1342.182317][T21550] bridge1: entered allmulticast mode [ 1342.725854][T21418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.914589][T21052] overlayfs: failed lookup in lower (newroot/13, name='file0', err=-40): overlapping layers [ 1347.025039][T21052] overlayfs: failed lookup in lower (newroot/13, name='file0', err=-40): overlapping layers [ 1347.076183][T21418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.539230][ T5878] IPVS: starting estimator thread 0... [ 1347.667497][T21586] IPVS: using max 49 ests per chain, 117600 per kthread [ 1347.720033][T21418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.840058][T15658] Bluetooth: hci2: command 0x0406 tx timeout [ 1347.986083][T21418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.328415][T21418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1348.348493][T21418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1348.392280][T21418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1348.431879][T21418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1348.684969][T21418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.726572][T15658] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1348.738815][T15658] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1348.747754][T15658] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1348.756247][T15658] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1348.938074][T15658] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1349.154784][T21418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.227584][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.234776][ T9645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.243821][T21601] lo speed is unknown, defaulting to 1000 [ 1349.291311][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.298480][ T9645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.710916][T21601] chnl_net:caif_netlink_parms(): no params data found [ 1349.907250][T21601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.915825][T21601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.925619][T21601] bridge_slave_0: entered allmulticast mode [ 1349.933384][T21601] bridge_slave_0: entered promiscuous mode [ 1349.944795][T21418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.953046][T21601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.961014][T21601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.969196][T21601] bridge_slave_1: entered allmulticast mode [ 1349.976935][T21601] bridge_slave_1: entered promiscuous mode [ 1350.036863][T21601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.054915][T21601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.175959][T21601] team0: Port device team_slave_0 added [ 1350.197940][T21601] team0: Port device team_slave_1 added [ 1350.347460][T21601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.359875][T21601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.421147][T21601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.468429][T21601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.485295][T21601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.551596][T21601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.829502][T21601] hsr_slave_0: entered promiscuous mode [ 1350.836362][T21601] hsr_slave_1: entered promiscuous mode [ 1350.844781][T21601] debugfs: 'hsr0' already exists in 'hsr' [ 1350.850643][T21601] Cannot create hsr debugfs directory [ 1350.890086][T21418] veth0_vlan: entered promiscuous mode [ 1351.050833][T21418] veth1_vlan: entered promiscuous mode [ 1351.113468][T15658] Bluetooth: hci11: command tx timeout [ 1351.184981][T21418] veth0_macvtap: entered promiscuous mode [ 1351.210491][T21418] veth1_macvtap: entered promiscuous mode [ 1351.231654][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1351.274687][T21418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.312453][T21418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1351.383585][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.399648][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.412683][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1351.426088][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1351.435288][ T9648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.444905][ T9] usb 6-1: Manufacturer: syz [ 1351.456436][ T9648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.469333][ T9648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.479106][ T9] usb 6-1: config 0 descriptor?? [ 1351.625091][ T9648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.990672][ T9648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.995956][ T9645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.001232][ T9648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.007688][ T9645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.447214][ T9] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001D/input/input36 [ 1352.467088][ T9] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001D/input/input37 [ 1352.489673][ T9] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001D/input/input38 [ 1352.509773][ T9] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001D/input/input39 [ 1352.516507][T21601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1353.005128][ T30] audit: type=1400 audit(3915824052.969:1164): avc: denied { setopt } for pid=21620 comm="syz.3.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1353.142852][ T9] uclogic 0003:256C:006D.001D: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 1353.164297][ T9] usb 6-1: USB disconnect, device number 15 [ 1353.175930][T21601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1353.192959][T15658] Bluetooth: hci11: command tx timeout [ 1353.215836][T21601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1353.383943][T21601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1353.847253][ T30] audit: type=1400 audit(3915824053.839:1165): avc: denied { read write } for pid=21625 comm="syz.0.4433" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1353.901934][ T30] audit: type=1400 audit(3915824053.839:1166): avc: denied { open } for pid=21625 comm="syz.0.4433" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1353.997874][ T30] audit: type=1400 audit(3915824053.839:1167): avc: denied { ioctl } for pid=21625 comm="syz.0.4433" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1354.364712][T21629] befs: (nbd3): unable to read superblock [ 1354.497875][T21601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.886987][ T5822] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1354.897798][T21601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.911319][ T5822] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1354.943096][ T5822] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1354.951363][ T5822] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1354.992032][ T5822] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1355.070424][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.077581][ T8720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.149624][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.156790][ T6204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.225222][T21647] lo speed is unknown, defaulting to 1000 [ 1355.284850][T15658] Bluetooth: hci11: command tx timeout [ 1355.936600][T21647] chnl_net:caif_netlink_parms(): no params data found [ 1355.980299][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1356.065332][T21601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.202242][T21663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.209560][T21663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.234319][ T30] audit: type=1400 audit(3915824056.589:1168): avc: denied { write } for pid=21670 comm="syz.5.4440" name="usbmon6" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1356.351804][ T30] audit: type=1400 audit(3915824056.689:1169): avc: denied { read } for pid=21670 comm="syz.5.4440" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1356.403137][T21680] usb usb8: usbfs: process 21680 (syz.5.4440) did not claim interface 0 before use [ 1356.552298][T21677] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1356.560258][T21677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1356.578246][T21677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1357.113543][T15658] Bluetooth: hci14: command tx timeout [ 1357.368637][T15658] Bluetooth: hci11: command tx timeout [ 1357.557830][T21677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1357.564087][T21677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1357.575523][T21677] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1357.584242][T21677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1357.790696][T21677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1357.817771][T21647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.825189][T21647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.840101][T21677] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1357.856753][T21647] bridge_slave_0: entered allmulticast mode [ 1357.865509][T21647] bridge_slave_0: entered promiscuous mode [ 1357.883033][T21677] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1357.909147][T21677] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1357.933242][T21647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.949912][T21647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.970413][T21647] bridge_slave_1: entered allmulticast mode [ 1357.978793][T21647] bridge_slave_1: entered promiscuous mode [ 1357.998109][T21677] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1358.004197][T21601] veth0_vlan: entered promiscuous mode [ 1358.019843][T21601] veth1_vlan: entered promiscuous mode [ 1358.035769][T21677] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1358.051858][T21677] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1358.081081][T21677] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1358.113267][T21677] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1358.208292][T21677] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1358.270776][T21693] CIFS mount error: No usable UNC path provided in device string! [ 1358.270776][T21693] [ 1358.281533][T21693] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1358.360311][T21677] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 1358.415933][T21677] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1358.456672][T21693] netlink: 6716 bytes leftover after parsing attributes in process `syz.0.4443'. [ 1358.462634][T21647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.479562][T21647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.503379][T21677] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1358.526921][T21677] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 1358.535628][T21677] Bluetooth: hci12: Opcode 0x0406 failed: -4 [ 1358.558206][T21677] Bluetooth: hci12: Opcode 0x0406 failed: -4 [ 1358.630279][T21677] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 1358.636870][T15658] Bluetooth: hci4: command 0x0406 tx timeout [ 1358.658303][ T5822] Bluetooth: hci6: command 0x0c1a tx timeout [ 1358.672942][T21677] Bluetooth: hci13: Opcode 0x0406 failed: -4 [ 1358.724627][T21677] Bluetooth: hci13: Opcode 0x0406 failed: -4 [ 1358.741074][T21601] veth0_macvtap: entered promiscuous mode [ 1358.741809][T21677] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 1358.758128][T21677] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 1358.771598][T21677] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 1358.774857][T21647] team0: Port device team_slave_0 added [ 1358.798662][T21677] Bluetooth: hci14: Opcode 0x0c1a failed: -4 [ 1358.800952][T21647] team0: Port device team_slave_1 added [ 1358.812172][T21677] Bluetooth: hci14: Opcode 0x0406 failed: -4 [ 1358.825340][T15658] Bluetooth: hci10: unexpected event for opcode 0x0411 [ 1358.844973][T21677] Bluetooth: hci14: Opcode 0x0406 failed: -4 [ 1358.856534][T21601] veth1_macvtap: entered promiscuous mode [ 1359.034919][T21601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.047311][T21647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.054650][T21647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.136252][T21647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.153659][T21647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.411143][T21647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.439759][T21647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.476138][T21601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.587207][ T9648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.599465][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 1359.599461][T15658] Bluetooth: hci5: command 0x0c1a tx timeout [ 1359.615300][ T9648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.654172][T21647] hsr_slave_0: entered promiscuous mode [ 1359.841748][T21647] hsr_slave_1: entered promiscuous mode [ 1359.911601][T15658] Bluetooth: hci7: command 0x0c1a tx timeout [ 1360.071766][T15658] Bluetooth: hci8: command 0x0c1a tx timeout [ 1360.151572][T15658] Bluetooth: hci9: command 0x0c1a tx timeout [ 1360.277500][T21647] debugfs: 'hsr0' already exists in 'hsr' [ 1360.290004][T21647] Cannot create hsr debugfs directory [ 1360.412575][ T9648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.556142][T15658] Bluetooth: hci12: command 0x0c1a tx timeout [ 1360.601592][ T9648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.637254][T15658] Bluetooth: hci13: command 0x0c1a tx timeout [ 1360.735845][T15658] Bluetooth: hci4: command 0x0406 tx timeout [ 1360.791567][T15658] Bluetooth: hci11: command 0x0c1a tx timeout [ 1361.221237][T15658] Bluetooth: hci14: command 0x040f tx timeout [ 1361.248741][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.257883][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.377955][T21710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1361.671817][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 1361.676038][T15658] Bluetooth: hci5: command 0x0c1a tx timeout [ 1362.424026][T19559] Bluetooth: hci9: command 0x0c1a tx timeout [ 1362.430419][ T5822] Bluetooth: hci8: command 0x0c1a tx timeout [ 1362.436715][T15658] Bluetooth: hci7: command 0x0c1a tx timeout [ 1362.494075][T21250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.560781][ T30] audit: type=1400 audit(3915824062.909:1170): avc: denied { unmount } for pid=21202 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1362.570414][T21250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.631927][T15658] Bluetooth: hci12: command 0x0c1a tx timeout [ 1362.721888][T15658] Bluetooth: hci13: command 0x0c1a tx timeout [ 1363.300297][ T30] audit: type=1400 audit(3915824063.269:1171): avc: denied { append } for pid=21729 comm="syz.5.4450" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1363.323643][ T5822] Bluetooth: hci14: command 0x040f tx timeout [ 1363.323658][T15658] Bluetooth: hci11: command 0x0c1a tx timeout [ 1363.409950][T21647] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.630256][ T9645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.679451][ T9645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.769247][T21647] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.778495][T15658] Bluetooth: hci5: command 0x0c1a tx timeout [ 1364.889929][ T5822] Bluetooth: hci7: command 0x0c1a tx timeout [ 1364.893859][ T8179] Bluetooth: hci9: command 0x0c1a tx timeout [ 1364.903174][T19559] Bluetooth: hci8: command 0x0c1a tx timeout [ 1364.921066][ T5822] Bluetooth: hci12: command 0x0c1a tx timeout [ 1364.921530][ T8179] Bluetooth: hci13: command 0x0c1a tx timeout [ 1365.137300][T21647] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.351642][T21742] Bluetooth: hci11: command 0x0c1a tx timeout [ 1365.880653][T20820] Bluetooth: hci14: command 0x040f tx timeout [ 1366.811633][ T30] audit: type=1400 audit(3915824066.789:1172): avc: denied { map } for pid=21751 comm="syz.0.4455" path="socket:[90907]" dev="sockfs" ino=90907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1366.875244][T21647] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.216215][T21757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4456'. [ 1367.458561][T21647] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1367.518682][T21647] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1367.609868][T21647] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1367.668201][T21761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4457'. [ 1367.748984][T21764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4457'. [ 1367.993681][T21742] Bluetooth: hci14: command 0x040f tx timeout [ 1368.574796][T21647] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1369.800022][T21647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.927949][T21647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.964075][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.971223][T17269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.020841][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.027940][T17269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.073537][T21742] Bluetooth: hci14: command 0x040f tx timeout [ 1370.472214][T21647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.768495][T21795] ptrace attach of "./syz-executor exec"[21601] was attempted by ""[21795] [ 1370.781860][T21795] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4462'. [ 1372.707775][T21742] Bluetooth: hci14: command 0x040f tx timeout [ 1373.932160][ T31] INFO: task syz.2.4226:20549 blocked for more than 144 seconds. [ 1373.947775][ T31] Tainted: G L syzkaller #0 [ 1373.978255][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1373.992038][ T30] audit: type=1400 audit(3915824074.349:1173): avc: denied { write } for pid=5798 comm="syz-executor" path="pipe:[3865]" dev="pipefs" ino=3865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1374.015325][ T31] task:syz.2.4226 state:D stack:27944 pid:20549 tgid:20542 ppid:19554 task_flags:0x400140 flags:0x00080006 [ 1374.027897][ T31] Call Trace: [ 1374.031183][ T31] [ 1374.035999][ T31] ? __schedule+0x10b9/0x6150 [ 1374.041577][ T31] __schedule+0x1139/0x6150 [ 1374.046644][ T31] ? __lock_acquire+0x436/0x2890 [ 1374.077793][ T31] ? __pfx___schedule+0x10/0x10 [ 1374.097061][ T31] ? find_held_lock+0x2b/0x80 [ 1374.230147][ T31] ? schedule+0x2d7/0x3a0 [ 1374.239990][ T31] schedule+0xe7/0x3a0 [ 1374.742505][ T31] schedule_preempt_disabled+0x13/0x30 [ 1374.751713][ T31] __mutex_lock+0xc69/0x1ca0 [ 1374.756336][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1374.762844][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1374.771402][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1374.778183][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1374.781590][ T30] audit: type=1400 audit(3915824075.129:1174): avc: denied { node_bind } for pid=21813 comm="syz.0.4466" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1374.784962][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1374.817359][T20813] usb 4-1: new high-speed USB device number 12 using dummy_hcd SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1375.081604][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1375.087081][ T31] nfnetlink_rcv_msg+0x8d6/0x1200 [ 1375.093321][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1375.098823][ T31] ? __lock_acquire+0x436/0x2890 [ 1375.132129][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1375.137571][ T31] netlink_rcv_skb+0x158/0x420 [ 1375.172021][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1375.177549][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1375.192699][ T31] ? ns_capable+0xd7/0x110 [ 1375.197173][ T31] nfnetlink_rcv+0x1b3/0x430 [ 1375.222468][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1375.241630][ T31] netlink_unicast+0x5aa/0x870 [ 1375.247156][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1375.261979][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1375.266801][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1375.282090][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 1375.286929][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1375.301549][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1375.306886][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1375.328698][ T31] ? try_to_wake_up+0xa67/0x1860 [ 1375.337395][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1375.342353][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1375.347672][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 1375.354819][ T31] __sys_sendmsg+0x16d/0x220 [ 1375.359457][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1375.365072][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1375.370076][ T31] do_syscall_64+0xcd/0xf80 [ 1375.375016][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.381821][ T31] RIP: 0033:0x7f6fbc18f749 [ 1375.386253][ T31] RSP: 002b:00007f6fbd0ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1375.395287][ T31] RAX: ffffffffffffffda RBX: 00007f6fbc3e6180 RCX: 00007f6fbc18f749 [ 1375.403527][ T31] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 1375.411808][ T31] RBP: 00007f6fbc213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1375.422615][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.430643][ T31] R13: 00007f6fbc3e6218 R14: 00007f6fbc3e6180 R15: 00007ffec1f5e248 [ 1375.440653][ T31] [ 1375.454313][ T31] INFO: task syz.5.4227:20558 blocked for more than 146 seconds. [ 1375.463174][ T31] Tainted: G L syzkaller #0 [ 1375.469696][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1375.479124][ T31] task:syz.5.4227 state:D stack:27464 pid:20558 tgid:20554 ppid:18590 task_flags:0x400140 flags:0x00080002 [ 1375.491503][ T31] Call Trace: [ 1375.494805][ T31] [ 1375.497744][ T31] ? __schedule+0x10b9/0x6150 [ 1375.504281][ T31] __schedule+0x1139/0x6150 [ 1375.508818][ T31] ? __lock_acquire+0x436/0x2890 [ 1375.516564][ T31] ? __pfx___schedule+0x10/0x10 [ 1375.524232][ T31] ? find_held_lock+0x2b/0x80 [ 1375.528943][ T31] ? schedule+0x2d7/0x3a0 [ 1375.533773][ T31] schedule+0xe7/0x3a0 [ 1375.537883][ T31] schedule_preempt_disabled+0x13/0x30 [ 1375.544680][ T31] __mutex_lock+0xc69/0x1ca0 [ 1375.549459][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1375.561346][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1375.567056][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1375.572399][ T31] ? find_held_lock+0x2b/0x80 [ 1375.577104][ T31] ? nfnetlink_rcv_msg+0x8a5/0x1200 [ 1375.582940][ T31] ? nfnetlink_rcv_msg+0x8d6/0x1200 [ 1375.588154][ T31] nfnetlink_rcv_msg+0x8d6/0x1200 [ 1375.594926][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1375.600420][ T31] ? __lock_acquire+0x436/0x2890 [ 1375.605910][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1375.611392][ T31] netlink_rcv_skb+0x158/0x420 [ 1375.616632][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1375.626388][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1375.631997][ T31] ? ns_capable+0xd7/0x110 [ 1375.636457][ T31] nfnetlink_rcv+0x1b3/0x430 [ 1375.641056][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1375.646855][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1375.653794][ T31] netlink_unicast+0x5aa/0x870 [ 1375.666085][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1375.671445][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1375.676903][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1375.682570][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 1375.687368][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1375.693706][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1375.699037][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1375.704899][ T31] ? try_to_wake_up+0xa67/0x1860 [ 1375.709864][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1375.714886][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1375.720107][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 1375.727655][ T31] __sys_sendmsg+0x16d/0x220 [ 1375.734484][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1375.739651][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1375.745129][ T31] do_syscall_64+0xcd/0xf80 [ 1375.749660][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.756674][ T31] RIP: 0033:0x7f3fe3d8f749 [ 1375.764400][ T31] RSP: 002b:00007f3fe1fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1375.773732][ T31] RAX: ffffffffffffffda RBX: 00007f3fe3fe6180 RCX: 00007f3fe3d8f749 [ 1375.782004][ T31] RDX: 0000000004000080 RSI: 0000200000000640 RDI: 000000000000000b [ 1375.789992][ T31] RBP: 00007f3fe3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1375.798492][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.806894][ T31] R13: 00007f3fe3fe6218 R14: 00007f3fe3fe6180 R15: 00007ffc36ff9a48 [ 1375.815191][ T31] [ 1375.988194][ T31] [ 1375.988194][ T31] Showing all locks held in the system: [ 1376.061583][ T31] 3 locks held by kworker/0:0/9: [ 1376.067197][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1376.121629][ T31] #1: ffffc900000e7c90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1376.142697][ T31] #2: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1376.202660][ T31] 1 lock held by khungtaskd/31: [ 1376.207551][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1376.241649][ T31] 2 locks held by kworker/u8:6/1009: [ 1376.261651][ T31] #0: ffff888145291948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1376.292525][ T31] #1: ffffc90003edfc90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1376.351610][ T31] 1 lock held by syz.2.2700/14235: [ 1376.356743][ T31] 4 locks held by kworker/1:0/16875: [ 1376.408832][ T31] 2 locks held by getty/19216: [ 1376.421643][ T31] #0: ffff8880325920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1376.431449][ T31] #1: ffffc90003f262f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 1376.477621][ T31] 1 lock held by syz.2.4226/20549: [ 1376.483176][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.521955][ T31] 1 lock held by syz.5.4227/20558: [ 1376.527121][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.537387][ T31] 1 lock held by syz.3.4252/20680: [ 1376.547750][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: ip_set_nfnl_get_byindex+0x7c/0x290 [ 1376.562598][ T31] 1 lock held by syz.1.4259/20716: [ 1376.567739][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.579432][ T31] 5 locks held by kworker/1:6/20813: [ 1376.584970][ T31] #0: ffff8881432c0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1376.596061][ T31] #1: ffffc9000401fc90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1376.607954][ T31] #2: ffff88814477c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 1376.618438][ T31] #3: ffff88814477f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 1376.632043][ T31] #4: ffff888142ba4068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 1376.646255][ T31] 1 lock held by syz.9.4277/20832: [ 1376.651383][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.664399][ T31] 1 lock held by syz.9.4277/20833: [ 1376.669554][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.680971][ T31] 1 lock held by syz.7.4288/20895: [ 1376.686508][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.696961][ T31] 1 lock held by syz.7.4288/20899: [ 1376.702343][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.713072][ T31] 1 lock held by syz.7.4288/20900: [ 1376.718273][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.729705][ T31] 1 lock held by syz.7.4288/20901: [ 1376.737765][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.753152][ T31] 1 lock held by syz-executor/20974: [ 1376.758479][ T31] #0: ffffffff90142328 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1376.770588][ T31] 1 lock held by syz.6.4323/21091: [ 1376.777947][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.789563][ T31] 1 lock held by syz.4.4360/21268: [ 1376.795101][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.805551][ T31] 1 lock held by syz.4.4360/21270: [ 1376.810833][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.821394][ T31] 3 locks held by kworker/u8:21/21482: [ 1376.827588][ T31] #0: ffff88814c814948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1376.839814][ T31] #1: ffffc9000d9f7c90 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1376.858239][ T31] #2: ffffffff90142328 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1376.868806][ T31] 1 lock held by syz.8.4413/21526: [ 1376.876016][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.889138][ T31] 1 lock held by syz.8.4413/21527: [ 1376.894373][ T31] #0: ffffffff9b0a4118 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8d6/0x1200 [ 1376.904557][ T31] 4 locks held by syz-executor/21647: [ 1376.909934][ T31] #0: ffff888048730ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0 [ 1376.919923][ T31] #1: ffff8880487300c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260 [ 1376.929657][ T31] #2: ffffffff903bf608 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290 [ 1376.940305][ T31] #3: ffff888146b1bb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 1376.953593][ T31] 1 lock held by syz.5.4458/21774: [ 1376.958727][ T31] #0: ffffffff90142328 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1376.973483][ T31] 1 lock held by syz.3.4465/21811: [ 1376.978630][ T31] #0: ffffffff90142328 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1376.990851][ T31] [ 1376.995167][ T31] ============================================= [ 1376.995167][ T31] [ 1377.003702][ T31] NMI backtrace for cpu 1 [ 1377.003721][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.003744][ T31] Tainted: [L]=SOFTLOCKUP [ 1377.003750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.003759][ T31] Call Trace: [ 1377.003765][ T31] [ 1377.003772][ T31] dump_stack_lvl+0x116/0x1f0 [ 1377.003799][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1377.003820][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1377.003841][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1377.003860][ T31] sys_info+0x133/0x180 [ 1377.003884][ T31] watchdog+0xe66/0x1180 [ 1377.003907][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.003923][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.003939][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1377.003960][ T31] ? __kthread_parkme+0x19e/0x250 [ 1377.003975][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.003990][ T31] kthread+0x3c5/0x780 [ 1377.004007][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.004025][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.004038][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.004055][ T31] ret_from_fork+0x983/0xb10 [ 1377.004070][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1377.004085][ T31] ? __switch_to+0x7af/0x10d0 [ 1377.004102][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.004117][ T31] ret_from_fork_asm+0x1a/0x30 [ 1377.004144][ T31] [ 1377.004166][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1377.148420][ C0] NMI backtrace for cpu 0 [ 1377.148439][ C0] CPU: 0 UID: 0 PID: 14235 Comm: syz.2.2700 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.148457][ C0] Tainted: [L]=SOFTLOCKUP [ 1377.148462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.148469][ C0] RIP: 0010:__lock_acquire+0x6e0/0x2890 [ 1377.148490][ C0] Code: 04 80 48 8d 04 c5 60 9a b9 95 48 83 78 40 00 75 04 90 0f 0b 90 44 89 d0 8b 7c 24 08 c1 e0 0d 09 d0 98 44 29 c8 44 31 c0 89 c2 <29> c1 01 f8 c1 c2 06 31 d1 29 cf 89 ca 01 c1 c1 c2 08 41 89 ff 41 [ 1377.148503][ C0] RSP: 0018:ffffc9000f6d6a18 EFLAGS: 00000082 [ 1377.148514][ C0] RAX: 00000000f8f90ed6 RBX: 0000000000000002 RCX: 00000000702d7f99 [ 1377.148522][ C0] RDX: 00000000f8f90ed6 RSI: 0000000000000000 RDI: 000000000a1c0b41 [ 1377.148531][ C0] RBP: 0000000000000002 R08: 000000009ee8ba89 R09: 0000000099ee8ba8 [ 1377.148541][ C0] R10: 0000000000000002 R11: ffff8880347f0b30 R12: ffff8880347f0000 [ 1377.148550][ C0] R13: 0000000000000001 R14: ffff8880347f0b80 R15: 99ee8ba8702d7f99 [ 1377.148558][ C0] FS: 00007f71c38df6c0(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000 [ 1377.148572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1377.148581][ C0] CR2: 0000000000000000 CR3: 00000000a5961000 CR4: 00000000003526f0 [ 1377.148589][ C0] DR0: ffffffffffffffff DR1: 00002000000001f8 DR2: 0000000000000083 [ 1377.148597][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1377.148605][ C0] Call Trace: [ 1377.148610][ C0] [ 1377.148617][ C0] ? lock_acquire+0x179/0x330 [ 1377.148633][ C0] lock_acquire+0x179/0x330 [ 1377.148646][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 1377.148665][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 1377.148682][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1377.148697][ C0] unwind_next_frame+0xd1/0x20b0 [ 1377.148712][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 1377.148727][ C0] ? __sys_sendmsg+0x16d/0x220 [ 1377.148742][ C0] ? kernel_text_address+0x8d/0x100 [ 1377.148759][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1377.148773][ C0] arch_stack_walk+0x94/0x100 [ 1377.148790][ C0] ? __sys_sendmsg+0x16d/0x220 [ 1377.148804][ C0] stack_trace_save+0x8e/0xc0 [ 1377.148819][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1377.148833][ C0] ? __lock_acquire+0x436/0x2890 [ 1377.148847][ C0] kasan_save_stack+0x33/0x60 [ 1377.148862][ C0] ? kasan_save_stack+0x33/0x60 [ 1377.148875][ C0] ? kasan_save_track+0x14/0x30 [ 1377.148887][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1377.148898][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1377.148912][ C0] ? kfree+0x2f8/0x6e0 [ 1377.148922][ C0] ? hash_ipport4_resize+0xd4b/0x1b90 [ 1377.148941][ C0] ? call_ad.constprop.0+0x36d/0x940 [ 1377.148954][ C0] ? ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 1377.148968][ C0] ? nfnetlink_rcv_msg+0x9fc/0x1200 [ 1377.148980][ C0] ? netlink_rcv_skb+0x158/0x420 [ 1377.148995][ C0] ? nfnetlink_rcv+0x1b3/0x430 [ 1377.149006][ C0] ? netlink_unicast+0x5aa/0x870 [ 1377.149019][ C0] ? netlink_sendmsg+0x8c8/0xdd0 [ 1377.149033][ C0] ? ____sys_sendmsg+0xa5d/0xc30 [ 1377.149048][ C0] ? ___sys_sendmsg+0x134/0x1d0 [ 1377.149059][ C0] ? __sys_sendmsg+0x16d/0x220 [ 1377.149082][ C0] kasan_save_track+0x14/0x30 [ 1377.149097][ C0] kasan_save_free_info+0x3b/0x60 [ 1377.149107][ C0] __kasan_slab_free+0x5f/0x80 [ 1377.149122][ C0] kfree+0x2f8/0x6e0 [ 1377.149132][ C0] ? hash_ipport4_resize+0xd4b/0x1b90 [ 1377.149150][ C0] ? hash_ipport4_resize+0xd4b/0x1b90 [ 1377.149167][ C0] hash_ipport4_resize+0xd4b/0x1b90 [ 1377.149188][ C0] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 1377.149207][ C0] call_ad.constprop.0+0x36d/0x940 [ 1377.149221][ C0] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 1377.149239][ C0] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 1377.149250][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 1377.149275][ C0] ? __nla_parse+0x40/0x60 [ 1377.149289][ C0] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 1377.149303][ C0] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 1377.149317][ C0] ? trace_contention_end+0xdd/0x110 [ 1377.149331][ C0] ? __mutex_lock+0x27b/0x1ca0 [ 1377.149357][ C0] ? find_held_lock+0x2b/0x80 [ 1377.149376][ C0] nfnetlink_rcv_msg+0x9fc/0x1200 [ 1377.149391][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1377.149404][ C0] ? __lock_acquire+0x436/0x2890 [ 1377.149424][ C0] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1377.149439][ C0] netlink_rcv_skb+0x158/0x420 [ 1377.149453][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1377.149466][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1377.149485][ C0] ? ns_capable+0xd7/0x110 [ 1377.149503][ C0] nfnetlink_rcv+0x1b3/0x430 [ 1377.149514][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1377.149525][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 1377.149541][ C0] netlink_unicast+0x5aa/0x870 [ 1377.149557][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1377.149575][ C0] netlink_sendmsg+0x8c8/0xdd0 [ 1377.149591][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1377.149609][ C0] ____sys_sendmsg+0xa5d/0xc30 [ 1377.149625][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 1377.149639][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1377.149654][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1377.149669][ C0] ? try_to_wake_up+0xa67/0x1860 [ 1377.149688][ C0] ___sys_sendmsg+0x134/0x1d0 [ 1377.149701][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1377.149714][ C0] ? futex_private_hash_put+0x160/0x1b0 [ 1377.149739][ C0] __sys_sendmsg+0x16d/0x220 [ 1377.149752][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 1377.149766][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 1377.149787][ C0] do_syscall_64+0xcd/0xf80 [ 1377.149804][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.149816][ C0] RIP: 0033:0x7f71c298f749 [ 1377.149828][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.149839][ C0] RSP: 002b:00007f71c38df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1377.149850][ C0] RAX: ffffffffffffffda RBX: 00007f71c2be5fa0 RCX: 00007f71c298f749 [ 1377.149858][ C0] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1377.149866][ C0] RBP: 00007f71c2a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1377.149873][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.149881][ C0] R13: 00007f71c2be6038 R14: 00007f71c2be5fa0 R15: 00007ffec69dbea8 [ 1377.149894][ C0] [ 1377.900155][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1377.907044][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.917733][ T31] Tainted: [L]=SOFTLOCKUP [ 1377.922058][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.932107][ T31] Call Trace: [ 1377.935386][ T31] [ 1377.938324][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1377.942905][ T31] vpanic+0x640/0x6f0 [ 1377.946869][ T31] panic+0xca/0xd0 [ 1377.950566][ T31] ? __pfx_panic+0x10/0x10 [ 1377.954963][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1377.960924][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1377.967053][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 1377.973185][ T31] ? watchdog+0xe83/0x1180 [ 1377.977586][ T31] ? watchdog+0xe76/0x1180 [ 1377.981984][ T31] watchdog+0xe94/0x1180 [ 1377.986218][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.990958][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.995612][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1378.000801][ T31] ? __kthread_parkme+0x19e/0x250 [ 1378.005803][ T31] ? __pfx_watchdog+0x10/0x10 [ 1378.010464][ T31] kthread+0x3c5/0x780 [ 1378.014517][ T31] ? __pfx_kthread+0x10/0x10 [ 1378.019089][ T31] ? rcu_is_watching+0x12/0xc0 [ 1378.023833][ T31] ? __pfx_kthread+0x10/0x10 [ 1378.028402][ T31] ret_from_fork+0x983/0xb10 [ 1378.032997][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.038089][ T31] ? __switch_to+0x7af/0x10d0 [ 1378.042758][ T31] ? __pfx_kthread+0x10/0x10 [ 1378.047328][ T31] ret_from_fork_asm+0x1a/0x30 [ 1378.052091][ T31] [ 1378.055393][ T31] Kernel Offset: disabled [ 1378.059691][ T31] Rebooting in 86400 seconds..