last executing test programs: 2m53.117915394s ago: executing program 3 (id=2106): r0 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x128}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x400c4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000fef000/0x3000)=nil) close(r0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x8, 0x4, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x19}, {0x5000, 0x2000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xdddd0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x4, 0x81}, {0x80a0000, 0xe000, 0xb, 0x6, 0x4, 0x5c, 0xb, 0xff, 0x8, 0xf7, 0xe}, {0x10000, 0xd000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x7, 0xf7, 0x83}, {0x1000, 0x41000, 0xc, 0x8, 0xb1, 0x8, 0x11, 0xa0, 0x80, 0xf, 0x1}, {0x1000, 0x8000000, 0xb, 0x5, 0x7, 0x5, 0x5, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x80a0000, 0x1000, 0x8, 0xf5, 0xf, 0x7, 0xf6, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x4205e, 0x3, 0x0, 0x3000, [0xaffe, 0x4, 0x3, 0xff]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) poll(&(0x7f0000000100)=[{r5, 0x201}], 0x1, 0x80000001) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCSETA(r5, 0x5406, &(0x7f00000013c0)={0x4, 0x7, 0xfffd, 0x7f, 0x14, "40999f49f937a4fd"}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x110, r3, 0x2b455000) ppoll(&(0x7f00000003c0)=[{r6, 0x2000}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 2m52.211779286s ago: executing program 3 (id=2108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r4, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) read$msr(r0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 2m49.333530948s ago: executing program 3 (id=2113): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x1000, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) r7 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=ANY=[@ANYRES16=r5], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002000000000000050400000006001500050000002800168024000100010000dd"], 0x4c}}, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) renameat2(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000021c0)='./cgroup\x00', 0x2) 2m47.131993206s ago: executing program 3 (id=2116): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = socket(0x23, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(r4, r5, 0x0) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x44, &(0x7f0000000140)=0x2004, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000002940)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000014c0)=')', 0x1}], 0x1}, 0x0) symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, 0x0) 2m45.760713533s ago: executing program 3 (id=2120): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000240)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r1) io_uring_setup(0x3ef, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000004400), 0x6, 0x402) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000004480)={0x0, 0x7, 0xc, '\x00', &(0x7f0000004440)=0x5b}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x9, &(0x7f0000000000)={0x8000000000000001}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x1c}, 0x94) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000140), 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 2m41.86219643s ago: executing program 3 (id=2127): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB="f5ca61890623b8e5c07473c01ef9e19c6fc1e30e4bf37a4b05fdfc71ee98b278b6dddd83f386f47aae45e3c892123e86b8bdb2e4a50b66161665869e588406fd5b5b6e47685e8b8760e109ba8d921b1876edae706cfbcb7c7c52d9332a9178479dc096ad036ba7e9aeadb45426e6c0e02d787c90fbbae0f2b072cca7a229ee661d4ca402cc07f7f207d9c01bddd0e15fadff6dd17686aaf6cfe08825e5ffb64a099295c88fd7bd39ed074c6e0df1cc86da36481a894d35ebc14ca71c8651db456956abc894c4752679b8b0f82a9259457f98bd5654b280a039ad44960937afd58e1c89cfa7b21229b742312400"/248], 0x3c}}, 0x0) 2m25.592070558s ago: executing program 32 (id=2127): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB="f5ca61890623b8e5c07473c01ef9e19c6fc1e30e4bf37a4b05fdfc71ee98b278b6dddd83f386f47aae45e3c892123e86b8bdb2e4a50b66161665869e588406fd5b5b6e47685e8b8760e109ba8d921b1876edae706cfbcb7c7c52d9332a9178479dc096ad036ba7e9aeadb45426e6c0e02d787c90fbbae0f2b072cca7a229ee661d4ca402cc07f7f207d9c01bddd0e15fadff6dd17686aaf6cfe08825e5ffb64a099295c88fd7bd39ed074c6e0df1cc86da36481a894d35ebc14ca71c8651db456956abc894c4752679b8b0f82a9259457f98bd5654b280a039ad44960937afd58e1c89cfa7b21229b742312400"/248], 0x3c}}, 0x0) 21.49222429s ago: executing program 2 (id=2411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TCSETS(r3, 0x404c4701, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) 18.919467175s ago: executing program 2 (id=2414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r4, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) read$msr(r0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 15.075594342s ago: executing program 4 (id=2423): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x4, 0xf}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) unshare(0x62000280) 15.073759828s ago: executing program 0 (id=2433): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=']) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5414, &(0x7f0000000000)) msgsnd(0x0, 0x0, 0xff, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) 15.004928237s ago: executing program 2 (id=2424): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffffff, 0x0, 0x3100, 0x40, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xe2}]}, @nested={0x4, 0x2}, @typed={0x8, 0x4e, 0x0, 0x0, @uid=r8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r9, 0x2f, 0x0, 0x0, @void, @value=r10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 14.346946508s ago: executing program 2 (id=2425): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x0, 0x0, 0x16) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000000680)=""/246, 0xf6}, {0x0}], 0x4}, 0x7ff}], 0x1, 0x42, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000340), 0x8, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12.921804959s ago: executing program 5 (id=2426): socket$caif_stream(0x25, 0x1, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x75, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) listen(r5, 0x1) 12.037933208s ago: executing program 2 (id=2427): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0xb, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000240)=@raw={0xfe, 0x6, "00fcffffff00"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) 11.873713941s ago: executing program 5 (id=2428): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0xfffffffffffffecb}, {0xb4, 0xc8}}}, 0x6) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = getegid() setgroups(0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r2]) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 11.630303917s ago: executing program 4 (id=2429): openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) epoll_pwait2(r3, &(0x7f0000000340)=[{}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f00000003c0)={[0x2]}, 0x8) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x610) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000028120700080004008100000008001b0000000000"], 0x30}}, 0x4004090) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f00000000c0)) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000100), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40) 11.614045736s ago: executing program 0 (id=2440): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x8d}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r1, r6, 0x0) 9.596450256s ago: executing program 4 (id=2431): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=']) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5414, &(0x7f0000000000)) msgsnd(0x0, 0x0, 0xff, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) 9.573266849s ago: executing program 0 (id=2432): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x0, 0x0, 0x16) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000000680)=""/246, 0xf6}, {0x0}], 0x4}, 0x7ff}], 0x1, 0x42, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000340), 0x8, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 9.281663614s ago: executing program 0 (id=2434): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB="f5ca61890623b8e5c07473c01ef9e19c6fc1e30e4bf37a4b05fdfc71ee98b278b6dddd83f386f47aae45e3c892123e86b8bdb2e4a50b66161665869e588406fd5b5b6e47685e8b8760e109ba8d921b1876edae706cfbcb7c7c52d9332a9178479dc096ad036ba7e9aeadb45426e6c0e02d787c90fbbae0f2b072cca7a229ee661d4ca402cc07f7f207d9c01bddd0e15fadff6dd17686aaf6cfe08825e5ffb64a099295c88fd7bd39ed074c6e0df1cc86da36481a894d35ebc14ca71c8651db456956abc894c4752679b8b0f82a9259457f98bd5654b280a039ad44960937afd58e1c89cfa7b21229b742312400"/248], 0x3c}}, 0x0) 9.116754966s ago: executing program 5 (id=2435): prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) close(r2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f00000001c0)={0x20071026, r0}, &(0x7f0000000280)={0x0, 0x9, 0x3, 0x0, 0x4, 0x3}) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 8.093375391s ago: executing program 1 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r5, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x4e14, 0x913a, 0x41, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005a40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/21, 0x15}], 0x8, &(0x7f00000005c0)}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/157, 0x9d}], 0x2, &(0x7f0000000c00)=""/4096, 0x1000}, 0x37a}, {{&(0x7f0000000800)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/244, 0xf4}], 0x1, &(0x7f0000000a00)=""/11, 0xb}, 0xf60}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000ac0)=""/198, 0xc6}, {&(0x7f0000001c00)=""/20, 0x14}, {&(0x7f0000001c40)=""/73, 0x49}], 0x3, &(0x7f0000001d00)=""/194, 0xc2}, 0x3}, {{&(0x7f0000001e00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003200)=[{&(0x7f0000001e80)=""/164, 0xa4}, {&(0x7f0000001f40)=""/137, 0x89}, {&(0x7f0000002000)=""/120, 0x78}, {&(0x7f0000002080)=""/5, 0x5}, {&(0x7f00000020c0)=""/111, 0x6f}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/123, 0x7b}, {&(0x7f00000031c0)=""/62, 0x3e}], 0x8, &(0x7f0000003280)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004300)=""/217, 0xd9}, {&(0x7f0000004400)=""/227, 0xe3}, {&(0x7f0000004500)=""/248, 0xf8}], 0x3, &(0x7f0000004640)=""/145, 0x91}, 0x2}, {{&(0x7f0000004700)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/10, 0xa}, 0x634}, {{&(0x7f0000005800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005880)=""/213, 0xd5}], 0x1}, 0x6}], 0x8, 0x40, &(0x7f0000005c40)) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r8 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000009}) 7.786777765s ago: executing program 5 (id=2437): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB="f5ca61890623b8e5c07473c01ef9e19c6fc1e30e4bf37a4b05fdfc71ee98b278b6dddd83f386f47aae45e3c892123e86b8bdb2e4a50b66161665869e588406fd5b5b6e47685e8b8760e109ba8d921b1876edae706cfbcb7c7c52d9332a9178479dc096ad036ba7e9aeadb45426e6c0e02d787c90fbbae0f2b072cca7a229ee661d4ca402cc07f7f207d9c01bddd0e15fadff6dd17686aaf6cfe08825e5ffb64a099295c88fd7bd39ed074c6e0df1cc86da36481a894d35ebc14ca71c8651db456956abc894c4752679b8b0f82a9259457f98bd5654b280a039ad44960937afd58e1c89cfa7b21229b742312400"/248], 0x3c}}, 0x0) 6.477354954s ago: executing program 1 (id=2438): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xa3020000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r6, 0x25, 0x0, @void}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') lseek(r7, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r9, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {0x0}, {0x0}], 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300230a07002c0012800e00010069703667726574617000000018000280140007000002000000000000000000000000000108001f000800000008000d"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/56, 0x38}], 0x1) 5.422335131s ago: executing program 4 (id=2439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000011c0)=0x5, 0x12) lseek(0xffffffffffffffff, 0x0, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000140), &(0x7f0000001180)) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000001880)=""/4083, 0xff3}], 0x1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) 5.340134712s ago: executing program 1 (id=2441): socket$caif_stream(0x25, 0x1, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x75, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) listen(r5, 0x1) 3.973531353s ago: executing program 1 (id=2442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capget(&(0x7f00000021c0)={0x19980330}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r2, 0x0, 0x0, 0x111, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x61b, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="302306f1a1d00722bf903be5f1b37b0cad0ca185a8aa66cbd6087bcd443c28b07e644e6b84ca8f5dc1729fa4e08dcecd100c859e6f5d736305960d93d9e5b147394a2890b7efe5b1d2d965f40b54c0080c27376437d2a68b941a1767e88ac8be6a740852a60558efa4838fe2f946093644bb90d56751465b917753413656d97cfb02ee5d52b1e0c65f8d1dd5d2489d0024b5577985274e888ce274f9ed5482a81cf15f7a2b5628f048b9"], &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="2001f1000000f0c05394b770a0ea22e829526450f04083c31070bd4bb8525f753441ce07dd9fa0f8b8eaacd283e0cf186c228e3945c87285d9072f3946f469a2fb99a167f0bfd7a670568b40ae3302bf7641a4dff9e6c0ace9ae6fe66aeb9ebe4771deb5cae4ea563e1b8144dec920c0549d42d98a8dac0e7baa26c216eb6fa125638294a9d18a8803cccfa21268d6d4ddac4c63d8279c71243ec639bb1b6f66e930f755d54e8280cd1d812a4bcae984df863cf19c4aa59c65f72a95ca9c5da7b5a5ddfe0bd59f26b978bebaf746b47bfaffc1074dca33b9ff6074c26589fad4e3ebcde98635147b65204c9b451bdbf69c488b"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xe4}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x3403, 0x3, 0x7, 0x6, 0x7, 0x9, 0x1, 0x7fff, 0x0, 0xf10f, 0x7bc2, 0x2}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) lseek(r8, 0xb, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.542874974s ago: executing program 0 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) write$P9_RSTATu(r6, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) socket$nl_route(0x10, 0x3, 0x0) 2.649427121s ago: executing program 4 (id=2444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x114) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000000c0)=0x10008e, 0x180000504) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x0, r8, 0x0}]) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) 2.588347493s ago: executing program 2 (id=2445): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000240)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r1) io_uring_setup(0x3ef, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000004400), 0x6, 0x402) ioctl$VIDIOC_SUBDEV_G_EDID(r5, 0xc0285628, &(0x7f0000004480)={0x0, 0x7, 0xc, '\x00', &(0x7f0000004440)=0x5b}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x9, &(0x7f0000000000)={0x8000000000000001}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x1c}, 0x94) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 1.875353545s ago: executing program 5 (id=2446): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = epoll_create(0xb) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000005e00)={0x30000014}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x204, 0x10100, 0x0, 0x189}, &(0x7f00000000c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x3, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x2}, 0x0, 0xfe}, {0x1, 0x3, {0x1, 0x1}, {0x0, 0x0, 0xfec87424b25e630d}, 0x2}], 0x40) sendto(r6, 0x0, 0x0, 0x1c015, 0x0, 0x0) io_uring_enter(r5, 0x46f6, 0x0, 0x0, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000140)=@id, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0xfff) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 1.412550685s ago: executing program 1 (id=2447): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) open(0x0, 0x185d43, 0x17c) accept4$alg(r0, 0x0, 0x0, 0x80000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r3, 0x29, 0xca, 0x0, 0xfffffffffffffffe) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5e22, 0x0, @local, 0xb}, 0x4b4201fa7233a9f9) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) lseek(r4, 0x40, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = add_key(0x0, &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="8500599e00001000000000000000a8b94f881dc63208a5eb1a080000000000000000000000003a5a9cf5324c4525b78d8581f49f95a1cf1869e16e32f2fa1dc46b2725dfd45ccc35217b008404e45518a212ebaafc77b51bc8e6785aaa423b5373201bee754e688de4890e5dae04d23b8db943221633f38e1bd66faabb14440943345e4bd225e816e741a169921fb6d609397e6969a729d2cddb2b079afd0ed9b0e40d057e0a1e58e2189e7249216664786928ba22906d008eeb4311b326a38516e565680d26", 0xc6, 0x0) keyctl$read(0xb, r6, &(0x7f00000010c0)=""/4096, 0x1000) mount(&(0x7f00000001c0)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x12009d0, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x100000000) vmsplice(r1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) 297.730554ms ago: executing program 4 (id=2448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cb762400", @ANYRES16=r3, @ANYBLOB="b3af0000000000000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x200, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x3}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xc5}, {0x8, 0x15, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xceb}, {0x6, 0x11, 0xcfb5}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd312}, {0x6, 0x11, 0x5ed}, {0x8, 0x15, 0xf228}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1601}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0xe}, {0x8, 0x15, 0x6}}]}, 0x200}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x100, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x100000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@user_kmaddress={0x2c, 0x13, {@in6=@empty, @in=@empty, 0x0, 0xa}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 196.678559ms ago: executing program 0 (id=2449): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e4000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x10000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@arm64={0x8, 0x0, 0x6, '\x00', 0x9}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r9, 0x11, 0x2, &(0x7f0000000340)=""/41, &(0x7f00000003c0)=0x29) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) 148.070302ms ago: executing program 5 (id=2450): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x4e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1000000000000000, 0x7, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x200000010000, 0x6, 0x6, 0x20000001], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@x86={0x9, 0x0, 0xb, 0x0, 0x5, 0x8, 0xe, 0x4, 0x9, 0x3c, 0x2, 0x2, 0x0, 0x6, 0x9, 0xd, 0x4, 0xc2, 0x98, '\x00', 0xbc, 0x901c835}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x401}}, './file0/file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0xc0ed0000, 0x0) 0s ago: executing program 1 (id=2451): r0 = socket(0x10, 0x803, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff1}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000f1411042abd7000fcdbdf2509004500756a6164000000000800010001000000edb9dbefadebbc83ae38d8003c7c8bb48ad6919e293d1e946f2cefeb62b027686e9dfcf5b8a89314c61510a02dae57cb41"], 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x0) kernel console output (not intermixed with test programs): etSize 0 [ 913.934018][ T1205] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 914.165533][ T29] audit: type=1326 audit(1771938470.104:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 914.191191][ T1205] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 914.255246][T14265] siw: device registration error -23 [ 914.263192][T14265] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 914.318536][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.327862][ T29] audit: type=1326 audit(1771938470.104:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 914.353095][ T29] audit: type=1326 audit(1771938470.104:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 914.378833][ T1205] usb 4-1: config 0 descriptor?? [ 914.385397][ T29] audit: type=1326 audit(1771938470.104:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 914.410048][ T29] audit: type=1326 audit(1771938470.104:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 914.439523][ T1205] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 914.656024][ T29] audit: type=1326 audit(1771938470.104:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 916.519724][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.741922][ T1205] Process accounting resumed [ 917.056735][ T1205] usb 4-1: USB disconnect, device number 17 [ 917.303036][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 917.303048][ T29] audit: type=1400 audit(1771938473.536:1701): avc: denied { create } for pid=14290 comm="syz.0.1834" name="#1f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 917.852714][T14303] tipc: New replicast peer: 255.255.255.255 [ 917.861550][T14303] tipc: Enabled bearer , priority 10 [ 919.431234][ T29] audit: type=1400 audit(1771938473.536:1702): avc: denied { link } for pid=14290 comm="syz.0.1834" name="#1f" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 919.454200][ T29] audit: type=1400 audit(1771938473.536:1703): avc: denied { rename } for pid=14290 comm="syz.0.1834" name="#20" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 920.701274][ T29] audit: type=1400 audit(1771938476.726:1704): avc: denied { associate } for pid=14305 comm="syz.3.1835" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 920.980557][ T29] audit: type=1400 audit(1771938476.988:1705): avc: denied { read } for pid=14305 comm="syz.3.1835" lport=49204 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 921.378412][ T29] audit: type=1400 audit(1771938477.063:1706): avc: denied { setopt } for pid=14305 comm="syz.3.1835" lport=49204 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 921.398584][T14312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=14312 comm=syz.1.1836 [ 922.008515][T14318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1838'. [ 922.237926][T14325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.894469][T14333] tmpfs: Bad value for 'mpol' [ 923.145066][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 923.182717][T14337] IPVS: sed: FWM 3 0x00000003 - no destination available [ 923.192277][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 923.988769][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1844'. [ 924.018599][ T29] audit: type=1400 audit(1771938479.813:1707): avc: denied { ioctl } for pid=14343 comm="syz.1.1844" path="socket:[45568]" dev="sockfs" ino=45568 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 924.348878][ T5895] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 924.743295][ T5895] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 925.038227][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.052709][ T5895] usb 2-1: config 0 has no interfaces? [ 925.058525][ T5895] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 925.089799][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.129056][ T5895] usb 2-1: config 0 descriptor?? [ 925.541701][T14364] netlink: 'syz.3.1849': attribute type 2 has an invalid length. [ 925.553707][T14364] hmaÓË224): entered promiscuous mode [ 925.566519][ T5895] IPVS: starting estimator thread 0... [ 925.897244][T14365] IPVS: using max 48 ests per chain, 115200 per kthread [ 926.510973][T14374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=14374 comm=syz.3.1852 [ 926.615835][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.719428][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 926.730137][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 927.455788][T12048] usb 2-1: USB disconnect, device number 20 [ 928.048544][T14398] tmpfs: Bad value for 'mpol' [ 928.608617][T14404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.643097][ T5895] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 929.824368][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 929.870251][T14420] netlink: 'syz.1.1861': attribute type 4 has an invalid length. [ 929.961419][ T5895] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 929.971478][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 929.996431][T14423] netlink: 'syz.1.1861': attribute type 4 has an invalid length. [ 930.124894][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.136072][T14412] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 930.150257][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 930.246958][ T5895] lo speed is unknown, defaulting to 1000 [ 930.254909][ T5895] lo speed is unknown, defaulting to 1000 [ 931.161760][ T29] audit: type=1400 audit(1771938486.043:1708): avc: denied { setopt } for pid=14411 comm="syz.3.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 931.311338][T14431] netlink: 'syz.0.1863': attribute type 21 has an invalid length. [ 931.320328][T14431] IPv6: NLM_F_CREATE should be specified when creating new route [ 931.338852][T14431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1863'. [ 931.428246][T14431] lo speed is unknown, defaulting to 1000 [ 931.440426][T14431] vxcan1 speed is unknown, defaulting to 1000 [ 931.806052][ T29] audit: type=1400 audit(1771938486.698:1709): avc: denied { ioctl } for pid=14427 comm="syz.0.1863" path="socket:[45717]" dev="sockfs" ino=45717 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 931.983250][ T29] audit: type=1400 audit(1771938487.287:1710): avc: denied { block_suspend } for pid=14433 comm="syz.2.1864" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 932.399764][T12048] usb 4-1: USB disconnect, device number 18 [ 932.493968][T14438] bridge0: port 3(syz_tun) entered blocking state [ 932.539509][T14438] bridge0: port 3(syz_tun) entered disabled state [ 932.560666][T14438] syz_tun: entered promiscuous mode [ 935.606514][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.622206][ T29] audit: type=1326 audit(1771938490.664:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 935.646300][ T29] audit: type=1326 audit(1771938490.682:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 935.670012][ T29] audit: type=1326 audit(1771938490.682:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 935.696503][ T29] audit: type=1326 audit(1771938490.682:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 935.724271][ T29] audit: type=1326 audit(1771938490.776:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 936.259357][T14473] netlink: 'syz.4.1871': attribute type 1 has an invalid length. [ 936.319457][T14474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=14474 comm=syz.1.1873 [ 936.416807][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1871'. [ 936.483290][T14473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.888676][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.130028][T14486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1875'. [ 937.150912][ T29] audit: type=1400 audit(1771938492.085:1716): avc: denied { ioctl } for pid=14482 comm="syz.0.1875" path="socket:[45821]" dev="sockfs" ino=45821 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 937.301095][ T29] audit: type=1400 audit(1771938492.085:1717): avc: denied { shutdown } for pid=14482 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 937.684929][T14492] siw: device registration error -23 [ 938.572604][T14496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 938.607094][T14496] IPVS: sed: FWM 3 0x00000003 - no destination available [ 938.614631][T14496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.625501][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 938.792476][T13615] IPVS: starting estimator thread 0... [ 938.900643][T14497] IPVS: using max 80 ests per chain, 192000 per kthread [ 940.647595][T14511] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 940.655487][T14511] netlink: 'syz.1.1880': attribute type 3 has an invalid length. [ 940.663947][T14511] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1880'. [ 940.772511][T14511] lo speed is unknown, defaulting to 1000 [ 940.783494][T14511] vxcan1 speed is unknown, defaulting to 1000 [ 941.815561][ T29] audit: type=1400 audit(1771938496.463:1718): avc: denied { setopt } for pid=14522 comm="syz.0.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 944.845771][T14565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=14565 comm=syz.4.1891 [ 945.156709][T14566] tmpfs: Bad value for 'mpol' [ 945.877611][ T29] audit: type=1400 audit(1771938500.270:1719): avc: denied { append } for pid=14572 comm="syz.0.1895" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 946.274208][ T29] audit: type=1326 audit(1771938500.635:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14581 comm="syz.2.1896" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f827899c629 code=0x0 [ 947.141566][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.420768][T13615] libceph: connect (1)[c::]:6789 error -13 [ 948.431323][T13615] libceph: mon0 (1)[c::]:6789 connect error [ 948.565512][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 948.703136][T14598] ceph: No mds server is up or the cluster is laggy [ 948.749697][T13615] libceph: connect (1)[c::]:6789 error -13 [ 948.884527][T13615] libceph: mon0 (1)[c::]:6789 connect error [ 948.903338][T14613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=14613 comm=syz.3.1903 [ 949.141065][ T29] audit: type=1400 audit(1771938503.226:1721): avc: denied { read write } for pid=14615 comm="syz.2.1904" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 949.185913][ T29] audit: type=1400 audit(1771938503.226:1722): avc: denied { open } for pid=14615 comm="syz.2.1904" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 949.277745][T14621] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 949.946918][T14627] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 952.800209][T14657] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 953.106285][T14659] lo speed is unknown, defaulting to 1000 [ 953.118741][T14659] vxcan1 speed is unknown, defaulting to 1000 [ 954.173144][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 955.227916][T14684] team0: Device vxcan1 is of different type [ 955.285083][T14689] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 955.527192][T14692] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 955.553640][T14692] CIFS mount error: No usable UNC path provided in device string! [ 955.553640][T14692] [ 955.564920][T14692] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 957.279560][T14708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=14708 comm=syz.2.1924 [ 957.410616][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.657087][ T29] audit: type=1400 audit(1771938512.234:1723): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=44058 daddr=10.128.1.192 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 963.200883][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 963.221121][T14767] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1938'. [ 963.541907][ T29] audit: type=1326 audit(1771938516.733:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.0.1940" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f688cb9c629 code=0x0 [ 964.826302][ T29] audit: type=1400 audit(1771938518.005:1725): avc: denied { lock } for pid=14774 comm="syz.3.1942" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 965.105782][T14776] comedi: valid board names for 8255 driver are: [ 965.112157][T14776] 8255 [ 965.114906][T14776] comedi: valid board names for vmk80xx driver are: [ 965.121473][T14776] vmk80xx [ 965.125111][T14776] comedi: valid board names for usbduxsigma driver are: [ 965.132057][T14776] usbduxsigma [ 965.135452][T14776] comedi: valid board names for usbduxfast driver are: [ 965.142283][T14776] usbduxfast [ 965.145675][T14776] comedi: valid board names for usbdux driver are: [ 965.152157][T14776] usbdux [ 965.155636][T14776] comedi: valid board names for ni6501 driver are: [ 965.162138][T14776] ni6501 [ 965.165059][T14776] comedi: valid board names for dt9812 driver are: [ 965.171566][T14776] dt9812 [ 965.174478][T14776] comedi: valid board names for ni_labpc_cs driver are: [ 965.181764][T14776] ni_labpc_cs [ 965.185120][T14776] comedi: valid board names for ni_daq_700 driver are: [ 965.192675][T14776] ni_daq_700 [ 965.195946][T14776] comedi: valid board names for labpc_pci driver are: [ 965.202807][T14776] labpc_pci [ 965.205988][T14776] comedi: valid board names for adl_pci9118 driver are: [ 965.212939][T14776] pci9118dg [ 965.216111][T14776] pci9118hg [ 965.219835][T14776] pci9118hr [ 965.223007][T14776] comedi: valid board names for 8255_pci driver are: [ 965.229655][T14776] 8255_pci [ 965.232768][T14776] comedi: valid board names for s526 driver are: [ 965.239065][T14776] s526 [ 965.241824][T14776] comedi: valid board names for multiq3 driver are: [ 965.248382][T14776] multiq3 [ 965.252026][T14776] comedi: valid board names for pcmuio driver are: [ 965.258513][T14776] pcmuio48 [ 965.261620][T14776] pcmuio96 [ 965.264756][T14776] comedi: valid board names for pcmmio driver are: [ 965.271243][T14776] pcmmio [ 965.274425][T14776] comedi: valid board names for pcmda12 driver are: [ 965.281104][T14776] pcmda12 [ 965.285050][T14776] comedi: valid board names for pcmad driver are: [ 965.291458][T14776] pcmad12 [ 965.294505][T14776] pcmad16 [ 965.297500][T14776] comedi: valid board names for ni_labpc driver are: [ 965.304264][T14776] lab-pc-1200 [ 965.307634][T14776] lab-pc-1200ai [ 965.311204][T14776] lab-pc+ [ 965.314219][T14776] comedi: valid board names for atmio16 driver are: [ 965.321495][T14776] atmio16 [ 965.324505][T14776] atmio16d [ 965.327609][T14776] comedi: valid board names for ni_at_ao driver are: [ 965.334253][T14776] at-ao-6 [ 965.337285][T14776] at-ao-10 [ 965.340376][T14776] comedi: valid board names for ni_at_a2150 driver are: [ 965.347868][T14776] ni_at_a2150 [ 965.351213][T14776] comedi: valid board names for adq12b driver are: [ 965.357783][T14776] adq12b [ 965.360743][T14776] comedi: valid board names for mpc624 driver are: [ 965.367233][T14776] mpc624 [ 965.370318][T14776] comedi: valid board names for c6xdigio driver are: [ 965.376968][T14776] c6xdigio [ 965.380622][T14776] comedi: valid board names for aio_iiro_16 driver are: [ 965.387525][T14776] aio_iiro_16 [ 965.390932][T14776] comedi: valid board names for aio_aio12_8 driver are: [ 965.397834][T14776] aio_aio12_8 [ 965.401211][T14776] aio_ai12_8 [ 965.404461][T14776] aio_ao12_4 [ 965.407722][T14776] comedi: valid board names for fl512 driver are: [ 965.414687][T14776] fl512 [ 965.417524][T14776] comedi: valid board names for dmm32at driver are: [ 965.424112][T14776] dmm32at [ 965.427114][T14776] comedi: valid board names for dt282x driver are: [ 965.433632][T14776] dt2821 [ 965.436570][T14776] dt2821-f [ 965.439662][T14776] dt2821-g [ 965.442771][T14776] dt2823 [ 965.446495][T14776] dt2824-pgh [ 965.449772][T14776] dt2824-pgl [ 965.453039][T14776] dt2825 [ 965.456062][T14776] dt2827 [ 965.459002][T14776] dt2828 [ 965.461967][T14776] dt2829 [ 965.464948][T14776] dt21-ez [ 965.468033][T14776] dt23-ez [ 965.471039][T14776] dt24-ez [ 965.474039][T14776] dt24-ez-pgl [ 965.477985][T14776] comedi: valid board names for dt2817 driver are: [ 965.484464][T14776] dt2817 [ 965.487454][T14776] comedi: valid board names for dt2815 driver are: [ 965.493944][T14776] dt2815 [ 965.496858][T14776] comedi: valid board names for dt2814 driver are: [ 965.503361][T14776] dt2814 [ 965.506273][T14776] comedi: valid board names for dt2811 driver are: [ 965.513343][T14776] dt2811-pgh [ 965.516641][T14776] dt2811-pgl [ 965.519947][T14776] comedi: valid board names for dt2801 driver are: [ 965.526418][T14776] dt2801 [ 965.529634][T14776] comedi: valid board names for das6402 driver are: [ 965.536215][T14776] das6402-12 [ 965.539503][T14776] das6402-16 [ 965.543372][T14776] comedi: valid board names for das1800 driver are: [ 965.549944][T14776] das-1701st [ 965.553235][T14776] das-1701st-da [ 965.556750][T14776] das-1702st [ 965.560001][T14776] das-1702st-da [ 965.563546][T14776] das-1702hr [ 965.566800][T14776] das-1702hr-da [ 965.570312][T14776] das-1701ao [ 965.574157][T14776] das-1702ao [ 965.577411][T14776] das-1801st [ 965.580663][T14776] das-1801st-da [ 965.584194][T14776] das-1802st [ 965.587448][T14776] das-1802st-da [ 965.590960][T14776] das-1802hr [ 965.594258][T14776] das-1802hr-da [ 965.597771][T14776] das-1801hc [ 965.601060][T14776] das-1802hc [ 965.604888][T14776] das-1801ao [ 965.608145][T14776] das-1802ao [ 965.611413][T14776] comedi: valid board names for das800 driver are: [ 965.617990][T14776] das-800 [ 965.620984][T14776] cio-das800 [ 965.624246][T14776] das-801 [ 965.627260][T14776] cio-das801 [ 965.630518][T14776] das-802 [ 965.633520][T14776] cio-das802 [ 965.637360][T14776] cio-das802/16 [ 965.640876][T14776] comedi: valid board names for isa-das08 driver are: [ 965.647616][T14776] isa-das08 [ 965.650786][T14776] das08-pgm [ 965.653950][T14776] das08-pgh [ 965.657123][T14776] das08-pgl [ 965.660327][T14776] das08-aoh [ 965.663503][T14776] das08-aol [ 965.666668][T14776] das08-aom [ 965.670414][T14776] das08/jr-ao [ 965.673761][T14776] das08jr-16-ao [ 965.677273][T14776] pc104-das08 [ 965.680647][T14776] das08jr/16 [ 965.683905][T14776] comedi: valid board names for das16m1 driver are: [ 965.690483][T14776] das16m1 [ 965.693485][T14776] comedi: valid board names for dac02 driver are: [ 965.699865][T14776] dac02 [ 965.703242][T14776] comedi: valid board names for rti802 driver are: [ 965.709710][T14776] rti802 [ 965.712648][T14776] comedi: valid board names for rti800 driver are: [ 965.719115][T14776] rti800 [ 965.722054][T14776] rti815 [ 965.724974][T14776] comedi: valid board names for pcm3724 driver are: [ 965.731529][T14776] pcm3724 [ 965.735085][T14776] comedi: valid board names for pcl818 driver are: [ 965.741551][T14776] pcl818l [ 965.744570][T14776] pcl818h [ 965.747564][T14776] pcl818hd [ 965.750649][T14776] pcl818hg [ 965.753742][T14776] pcl818 [ 965.756653][T14776] pcl718 [ 965.759587][T14776] pcm3718 [ 965.762611][T14776] comedi: valid board names for pcl816 driver are: [ 965.769692][T14776] pcl816 [ 965.772623][T14776] pcl814b [ 965.775672][T14776] comedi: valid board names for pcl812 driver are: [ 965.782144][T14776] pcl812 [ 965.785058][T14776] pcl812pg [ 965.788207][T14776] acl8112pg [ 965.791381][T14776] acl8112dg [ 965.794570][T14776] acl8112hg [ 965.798347][T14776] a821pgl [ 965.801355][T14776] a821pglnda [ 965.804615][T14776] a821pgh [ 965.807659][T14776] a822pgl [ 965.810661][T14776] a822pgh [ 965.813672][T14776] a823pgl [ 965.816687][T14776] a823pgh [ 965.819715][T14776] pcl813 [ 965.822621][T14776] pcl813b [ 965.825611][T14776] acl8113 [ 965.829186][T14776] iso813 [ 965.832233][T14776] acl8216 [ 965.835241][T14776] a826pg [ 965.838154][T14776] comedi: valid board names for pcl730 driver are: [ 965.844659][T14776] pcl730 [ 965.847577][T14776] iso730 [ 965.850521][T14776] acl7130 [ 965.853515][T14776] pcm3730 [ 965.856506][T14776] pcl725 [ 965.859411][T14776] p8r8dio [ 965.862994][T14776] acl7225b [ 965.866078][T14776] p16r16dio [ 965.869255][T14776] pcl733 [ 965.872457][T14776] pcl734 [ 965.875375][T14776] opmm-1616-xt [ 965.878831][T14776] pearl-mm-p [ 965.882120][T14776] ir104-pbf [ 965.885287][T14776] comedi: valid board names for pcl726 driver are: [ 965.891752][T14776] pcl726 [ 965.895234][T14776] pcl727 [ 965.898142][T14776] pcl728 [ 965.901062][T14776] acl6126 [ 965.904084][T14776] acl6128 [ 965.907134][T14776] comedi: valid board names for pcl724 driver are: [ 965.913620][T14776] pcl724 [ 965.916571][T14776] pcl722 [ 965.919487][T14776] pcl731 [ 965.922397][T14776] acl7122 [ 965.925968][T14776] acl7124 [ 965.929053][T14776] pet48dio [ 965.932142][T14776] pcmio48 [ 965.935155][T14776] onyx-mm-dio [ 965.938520][T14776] comedi: valid board names for pcl711 driver are: [ 965.945169][T14776] pcl711 [ 965.948085][T14776] pcl711b [ 965.951074][T14776] acl8112hg [ 965.954237][T14776] acl8112dg [ 965.958437][T14776] comedi: valid board names for amplc_pc263 driver are: [ 965.965383][T14776] pc263 [ 965.968257][T14776] comedi: valid board names for amplc_pc236 driver are: [ 965.975161][T14776] pc36at [ 965.978122][T14776] comedi: valid board names for amplc_dio200 driver are: [ 965.985159][T14776] pc212e [ 965.988070][T14776] pc214e [ 965.991564][T14776] pc215e [ 965.994489][T14776] pc218e [ 965.997415][T14776] pc272e [ 966.000358][T14776] comedi: valid board names for comedi_parport driver are: [ 966.007521][T14776] comedi_parport [ 966.011162][T14776] comedi: valid board names for comedi_test driver are: [ 966.018158][T14776] comedi_test [ 966.022202][T14776] comedi: valid board names for comedi_bond driver are: [ 966.029126][T14776] comedi_bond [ 966.146055][ T29] audit: type=1400 audit(1771938519.231:1726): avc: denied { setopt } for pid=14781 comm="syz.2.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 966.652172][T14789] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 966.661118][T14789] team0: Port device batadv3 added [ 966.684665][T14796] tipc: Started in network mode [ 966.689616][T14796] tipc: Node identity ac1414aa, cluster identity 4711 [ 966.764932][T14796] tipc: New replicast peer: 100.1.1.1 [ 966.771286][T14796] tipc: Enabled bearer , priority 10 [ 968.059898][ T5895] tipc: Node number set to 2886997162 [ 968.065608][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.920572][T14840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.581573][T14856] siw: device registration error -23 [ 973.292356][T14847] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.299556][T14847] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.614250][T14847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.640543][T14847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.776859][T14866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=14866 comm=syz.0.1961 [ 973.822394][ T5895] lo speed is unknown, defaulting to 1000 [ 973.938684][ T5895] syz0: Port: 1 Link DOWN [ 973.949432][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.117413][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.127007][T14873] openvswitch: netlink: IP tunnel TTL not specified. [ 974.135629][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.162466][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.203840][T14876] tmpfs: Bad value for 'mpol' [ 976.841193][T14911] siw: device registration error -23 [ 977.994847][ T29] audit: type=1400 audit(1771938530.306:1727): avc: denied { ioctl } for pid=14913 comm="syz.1.1973" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 978.021047][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.433586][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1979'. [ 979.485854][T14939] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1979'. [ 980.363794][T14947] batman_adv: batadv0: Adding interface: geneve2 [ 980.370278][T14947] batman_adv: batadv0: The MTU of interface geneve2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.403789][T14947] batman_adv: batadv0: Interface activated: geneve2 [ 980.945645][ T29] audit: type=1400 audit(1771938533.056:1728): avc: denied { ioctl } for pid=14953 comm="syz.4.1983" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 981.288537][T12048] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 981.544979][T12048] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.573691][T12048] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 981.659953][T12048] usb 5-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 981.851945][T12048] usb 5-1: Product: syz [ 981.887221][T12048] usb 5-1: Manufacturer: syz [ 981.939776][T12048] usb 5-1: config 0 descriptor?? [ 981.985124][T12048] pwc: Askey VC010 type 2 USB webcam detected. [ 982.343311][T14968] tmpfs: Bad value for 'mpol' [ 982.379966][T14978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=14978 comm=syz.3.1987 [ 982.525404][ T29] audit: type=1400 audit(1771938534.431:1729): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.000464][ T29] audit: type=1400 audit(1771938534.553:1730): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.047345][ T29] audit: type=1400 audit(1771938534.553:1731): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.082051][ T29] audit: type=1400 audit(1771938534.553:1732): avc: denied { read } for pid=5473 comm="dhcpcd" name="n116" dev="tmpfs" ino=7109 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 983.146345][ T29] audit: type=1400 audit(1771938534.553:1733): avc: denied { open } for pid=5473 comm="dhcpcd" path="/run/udev/data/n116" dev="tmpfs" ino=7109 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 983.173477][ T29] audit: type=1400 audit(1771938534.553:1734): avc: denied { getattr } for pid=5473 comm="dhcpcd" path="/run/udev/data/n116" dev="tmpfs" ino=7109 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 983.274306][ T29] audit: type=1400 audit(1771938535.254:1735): avc: denied { read open } for pid=14989 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.325045][ T29] audit: type=1400 audit(1771938535.282:1736): avc: denied { getattr } for pid=14989 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.417703][T12048] pwc: recv_control_msg error -32 req 02 val 2b00 [ 983.457697][T12048] pwc: recv_control_msg error -32 req 02 val 2700 [ 983.479780][T12048] pwc: recv_control_msg error -32 req 02 val 2c00 [ 984.442461][T15004] team0: Device vxcan1 is of different type [ 984.656364][T12048] pwc: recv_control_msg error -71 req 04 val 1000 [ 984.696297][T12048] pwc: recv_control_msg error -71 req 04 val 1300 [ 984.710265][T12048] pwc: recv_control_msg error -71 req 04 val 1400 [ 984.717121][T12048] pwc: recv_control_msg error -71 req 02 val 2000 [ 984.724123][T12048] pwc: recv_control_msg error -71 req 02 val 2100 [ 984.734599][T12048] pwc: recv_control_msg error -71 req 04 val 1500 [ 984.741970][T12048] pwc: recv_control_msg error -71 req 02 val 2500 [ 984.752480][T12048] pwc: recv_control_msg error -71 req 02 val 2400 [ 984.760254][T12048] pwc: recv_control_msg error -71 req 02 val 2600 [ 984.899237][T12048] pwc: recv_control_msg error -71 req 02 val 2900 [ 984.912113][T12048] pwc: recv_control_msg error -71 req 02 val 2800 [ 984.919196][T12048] pwc: recv_control_msg error -71 req 04 val 1100 [ 984.928792][T12048] pwc: recv_control_msg error -71 req 04 val 1200 [ 984.946111][T12048] pwc: Registered as video103. [ 984.960983][T12048] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 985.055173][T12048] usb 5-1: USB disconnect, device number 17 [ 985.851010][T14896] udevd[14896]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 986.529878][ T29] audit: type=1400 audit(1771938538.304:1737): avc: denied { add_name } for pid=14986 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.713777][ T29] audit: type=1400 audit(1771938538.304:1738): avc: denied { create } for pid=14986 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 986.771514][ T29] audit: type=1400 audit(1771938538.304:1739): avc: denied { write } for pid=14986 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=7147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 986.843383][ T29] audit: type=1400 audit(1771938538.304:1740): avc: denied { append } for pid=14986 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=7147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 986.883358][ T29] audit: type=1400 audit(1771938538.594:1741): avc: denied { remove_name } for pid=15035 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=7147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.910948][ T29] audit: type=1400 audit(1771938538.594:1742): avc: denied { unlink } for pid=15035 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=7147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 987.037547][T15039] tmpfs: Bad value for 'mpol' [ 988.217123][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.859973][ T29] audit: type=1400 audit(1771938540.941:1743): avc: denied { mount } for pid=15073 comm="syz.1.2007" name="/" dev="hugetlbfs" ino=48117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 990.015886][T15080] team0: Device vxcan1 is of different type [ 990.041480][ T1205] vxcan1 speed is unknown, defaulting to 1000 [ 990.048700][ T1205] vxcan1 speed is unknown, defaulting to 1000 [ 990.521749][ T5895] vxcan1 speed is unknown, defaulting to 1000 [ 991.221880][ T29] audit: type=1326 audit(1771938542.560:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 991.263822][T15101] team0: Device vxcan1 is of different type [ 991.462757][ T29] audit: type=1326 audit(1771938542.560:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 991.588088][ T29] audit: type=1326 audit(1771938542.560:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 992.123528][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 992.123546][ T29] audit: type=1326 audit(1771938543.523:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 992.372915][ T29] audit: type=1326 audit(1771938543.766:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 993.300864][T15119] tmpfs: Bad value for 'mpol' [ 993.567271][T15130] binder: BINDER_SET_CONTEXT_MGR already set [ 993.573430][T15130] binder: 15129:15130 ioctl 4018620d 200000004a80 returned -16 [ 993.638226][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 993.795201][T15134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=15134 comm=syz.0.2019 [ 994.487469][ T191] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 995.214219][T15147] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 997.010308][T15171] team0: Device vxcan1 is of different type [ 998.477238][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.691552][T15196] tmpfs: Bad value for 'mpol' [ 1000.074302][ T29] audit: type=1400 audit(1771938550.969:1752): avc: denied { read } for pid=15204 comm="syz.4.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1001.261856][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.142134][T15229] tmpfs: Bad value for 'mpol' [ 1002.439303][T15232] lo speed is unknown, defaulting to 1000 [ 1002.454166][T15232] vxcan1 speed is unknown, defaulting to 1000 [ 1002.712312][ T29] audit: type=1400 audit(1771938552.989:1753): avc: denied { create } for pid=15227 comm="syz.0.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1002.829543][ T29] audit: type=1400 audit(1771938553.008:1754): avc: denied { write } for pid=15227 comm="syz.0.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1002.851015][ T29] audit: type=1326 audit(1771938553.008:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1002.878196][ T29] audit: type=1326 audit(1771938553.008:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1002.918719][ T29] audit: type=1326 audit(1771938553.008:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1003.251601][ T29] audit: type=1326 audit(1771938553.635:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1003.464286][ T5895] Process accounting resumed [ 1003.476294][ T29] audit: type=1326 audit(1771938553.635:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1004.972717][T15272] fuse: Bad value for 'fd' [ 1006.274368][T15273] tmpfs: Bad value for 'mpol' [ 1006.422317][T15280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=15280 comm=syz.1.2050 [ 1008.723310][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.847947][T15300] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1008.858172][ T29] audit: type=1400 audit(1771938559.182:1760): avc: denied { getopt } for pid=15295 comm="syz.0.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1010.345851][ T29] audit: type=1400 audit(1771938560.557:1761): avc: denied { mount } for pid=15314 comm="syz.3.2059" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1012.365577][T15325] Bluetooth: hci0: unsupported parameter 255 [ 1012.371634][T15325] Bluetooth: hci0: unsupported parameter 255 [ 1013.639612][T15347] FAT-fs (loop7): unable to read boot sector [ 1013.687214][ T29] audit: type=1400 audit(1771938563.653:1762): avc: denied { mounton } for pid=15343 comm="syz.3.2066" path="/415/file0" dev="tmpfs" ino=2242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1016.253277][ T29] audit: type=1400 audit(1771938566.019:1763): avc: denied { connect } for pid=15372 comm="syz.4.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1016.407204][T15381] netlink: 'syz.2.2070': attribute type 10 has an invalid length. [ 1016.420576][T15381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.430942][T15381] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1017.066629][T15374] kAFS: No cell specified [ 1018.982568][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.305281][T15404] siw: device registration error -23 [ 1019.320327][T15404] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1019.781420][T15407] xt_TCPMSS: Only works on TCP SYN packets [ 1019.858298][T15407] sit1: entered allmulticast mode [ 1020.534183][T15420] netlink: zone id is out of range [ 1020.543517][T15420] netlink: zone id is out of range [ 1020.548655][T15420] netlink: zone id is out of range [ 1020.557574][T15420] netlink: zone id is out of range [ 1020.562919][T15420] netlink: zone id is out of range [ 1020.572511][T15420] netlink: zone id is out of range [ 1020.577979][T15420] netlink: zone id is out of range [ 1020.583136][T15420] netlink: zone id is out of range [ 1021.067006][T15420] batman_adv: batadv0: Adding interface: macvtap1 [ 1021.091569][T15420] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.192402][T15420] batman_adv: batadv0: Interface activated: macvtap1 [ 1023.630056][T15452] netlink: 'syz.2.2085': attribute type 16 has an invalid length. [ 1023.961017][T15458] fuse: Bad value for 'fd' [ 1027.941097][ T29] audit: type=1400 audit(1771938577.029:1764): avc: denied { write } for pid=15513 comm="syz.0.2097" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1027.970956][T15514] program syz.0.2097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1029.310372][T13615] net_ratelimit: 12 callbacks suppressed [ 1029.310391][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.250167][T15535] block device autoloading is deprecated and will be removed. [ 1030.699202][ C0] af_packet: tpacket_rcv: packet too big, clamped from 148 to 4294967272. macoff=96 [ 1035.496080][T15587] nbd0: detected capacity change from 0 to 63 [ 1035.912991][T15603] loop5: detected capacity change from 0 to 7 [ 1035.996003][T15605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1036.366077][ T29] audit: type=1326 audit(1771938584.475:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1036.398114][T15603] Dev loop5: unable to read RDB block 7 [ 1036.410189][T15603] loop5: unable to read partition table [ 1036.425978][T15603] loop5: partition table beyond EOD, truncated [ 1036.439498][T15603] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1036.449257][ T5823] block nbd0: Receive control failed (result -104) [ 1036.460045][ T29] audit: type=1326 audit(1771938584.475:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1036.484496][ T29] audit: type=1326 audit(1771938584.475:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1036.508195][ T29] audit: type=1326 audit(1771938584.475:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1036.532312][ T29] audit: type=1326 audit(1771938584.475:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1036.599665][T15607] netlink: 'syz.0.2111': attribute type 1 has an invalid length. [ 1036.845484][ T29] audit: type=1326 audit(1771938584.475:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1036.923575][ T29] audit: type=1326 audit(1771938584.475:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1036.949518][ T29] audit: type=1326 audit(1771938584.475:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1037.005946][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2111'. [ 1037.008670][T15607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1037.040209][ T29] audit: type=1326 audit(1771938584.475:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1037.132289][ T29] audit: type=1326 audit(1771938584.475:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15592 comm="syz.3.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b739c629 code=0x7ffc0000 [ 1041.295113][T15656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1042.496849][T15673] netlink: 'syz.1.2126': attribute type 21 has an invalid length. [ 1042.504853][T15673] IPv6: NLM_F_CREATE should be specified when creating new route [ 1042.525762][T15673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2126'. [ 1042.616299][T15673] lo speed is unknown, defaulting to 1000 [ 1042.629978][T15673] vxcan1 speed is unknown, defaulting to 1000 [ 1043.842986][T15689] team0: Device vxcan1 is of different type [ 1045.708779][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1045.708797][ T29] audit: type=1400 audit(1771938592.950:1817): avc: denied { connect } for pid=15697 comm="syz.2.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1045.966033][T15705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.398322][T15705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.013031][T15705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.143458][T15705] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1047.218840][T15705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.726536][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.767783][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.082461][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.095480][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.390142][ T29] audit: type=1400 audit(1771938596.130:1818): avc: denied { mount } for pid=15729 comm="syz.1.2134" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1049.689232][ T29] audit: type=1400 audit(1771938597.327:1819): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1050.380971][T13615] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1050.776097][T13615] usb 3-1: Using ep0 maxpacket: 8 [ 1050.790875][T13615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.030315][T13615] usb 3-1: config 0 has no interfaces? [ 1051.051609][ T29] audit: type=1400 audit(1771938598.497:1820): avc: denied { remove_name } for pid=15746 comm="syz.0.2140" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1051.172771][ T29] audit: type=1400 audit(1771938598.497:1821): avc: denied { unlink } for pid=15746 comm="syz.0.2140" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1051.205974][T13615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.225166][T13615] usb 3-1: config 0 has no interfaces? [ 1051.306056][T13615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.329937][T13615] usb 3-1: config 0 has no interfaces? [ 1051.628753][T13615] usb 3-1: unable to read config index 3 descriptor/start: -71 [ 1051.681990][T13615] usb 3-1: can't read configurations, error -71 [ 1055.600792][T15790] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[15790] [ 1056.617869][ T9209] wlan0: Trigger new scan to find an IBSS to join [ 1056.758507][T15800] tmpfs: Bad value for 'mpol' [ 1057.447445][ T29] audit: type=1400 audit(1771938604.586:1822): avc: denied { map } for pid=15806 comm="syz.0.2149" path="socket:[51780]" dev="sockfs" ino=51780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1057.800447][ T29] audit: type=1400 audit(1771938604.586:1823): avc: denied { accept } for pid=15806 comm="syz.0.2149" path="socket:[51780]" dev="sockfs" ino=51780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1059.900951][ T29] audit: type=1400 audit(1771938606.794:1824): avc: denied { setopt } for pid=15826 comm="syz.4.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1060.741998][T15844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.762574][T15844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.901982][ T191] wlan0: Trigger new scan to find an IBSS to join [ 1061.026958][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1061.037561][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1061.047413][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1061.058164][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1061.115863][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1061.331881][ T29] audit: type=1400 audit(1771938608.253:1825): avc: denied { mounton } for pid=15846 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1061.423054][T15846] lo speed is unknown, defaulting to 1000 [ 1061.435747][T12048] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 1061.492957][T15846] vxcan1 speed is unknown, defaulting to 1000 [ 1061.757249][T12048] usb 5-1: config 15 has an invalid interface number: 154 but max is 0 [ 1061.927089][T12048] usb 5-1: config 15 has no interface number 0 [ 1061.933371][T12048] usb 5-1: config 15 interface 154 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 8 [ 1061.972259][T12048] usb 5-1: config 15 interface 154 altsetting 7 endpoint 0xB has invalid maxpacket 43051, setting to 8 [ 1062.019491][T12048] usb 5-1: config 15 interface 154 has no altsetting 0 [ 1062.339681][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.393638][T12048] usb 5-1: string descriptor 0 read error: -22 [ 1062.403946][T12048] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 1062.439947][T12048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.481808][T15855] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1062.509731][T12048] ati_remote 5-1:15.154: ati_remote_probe: Unexpected endpoint_in [ 1062.630373][T15873] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2163'. [ 1063.594217][ T29] audit: type=1400 audit(1771938610.086:1826): avc: denied { mount } for pid=15876 comm="syz.1.2164" name="/" dev="rpc_pipefs" ino=51906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1063.627044][ T5824] Bluetooth: hci5: command tx timeout [ 1064.063490][T15885] affs: No valid root block on device nullb0 [ 1064.629165][T15846] chnl_net:caif_netlink_parms(): no params data found [ 1064.733200][ T792] usb 5-1: USB disconnect, device number 18 [ 1065.297358][T15846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.327388][T15846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.338428][ T29] audit: type=1400 audit(1771938612.013:1827): avc: denied { create } for pid=15904 comm="syz.1.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1065.359242][T15846] bridge_slave_0: entered allmulticast mode [ 1065.386697][T15846] bridge_slave_0: entered promiscuous mode [ 1065.406561][T15846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.411883][T15846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.412051][T15846] bridge_slave_1: entered allmulticast mode [ 1065.413987][ T29] audit: type=1400 audit(1771938612.022:1828): avc: denied { bind } for pid=15904 comm="syz.1.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1065.414030][ T29] audit: type=1400 audit(1771938612.022:1829): avc: denied { listen } for pid=15904 comm="syz.1.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1065.414066][ T29] audit: type=1400 audit(1771938612.022:1830): avc: denied { accept } for pid=15904 comm="syz.1.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1065.415787][T15846] bridge_slave_1: entered promiscuous mode [ 1065.546386][T15909] netlink: 'syz.1.2170': attribute type 1 has an invalid length. [ 1065.562993][T15846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.588681][T15846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.675958][T15846] team0: Port device team_slave_0 added [ 1065.681634][T15846] team0: Port device team_slave_1 added [ 1065.699008][T15846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.699020][T15846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.699035][T15846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.699918][T15846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.699925][T15846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.699939][T15846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.769111][T15846] hsr_slave_0: entered promiscuous mode [ 1065.769576][T15846] hsr_slave_1: entered promiscuous mode [ 1065.769877][T15846] debugfs: 'hsr0' already exists in 'hsr' [ 1065.769889][T15846] Cannot create hsr debugfs directory [ 1065.871293][ T5824] Bluetooth: hci5: command tx timeout [ 1066.877990][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1066.987055][T15846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1067.018614][T15846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1067.356175][T15846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1067.386253][T15846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1067.734456][T15846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.800768][T15846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.827435][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.834648][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.929697][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.936904][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.095135][T15949] hub 9-0:1.0: USB hub found [ 1068.102449][T15949] hub 9-0:1.0: 1 port detected [ 1068.438295][ T5824] Bluetooth: hci5: command tx timeout [ 1068.795788][T15846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1068.835206][ T9706] block nbd0: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 30 seconds [ 1068.850669][ T9706] block nbd0: Possible stuck request ffff888027d10200: control (read@1024,1024B). Runtime 30 seconds [ 1068.862274][ T9706] block nbd0: Possible stuck request ffff888027d10400: control (read@2048,1024B). Runtime 30 seconds [ 1068.873373][ T9706] block nbd0: Possible stuck request ffff888027d10600: control (read@3072,1024B). Runtime 30 seconds [ 1069.257359][T15969] set match dimension is over the limit! [ 1069.584921][T15977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'. [ 1069.605188][T15846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.650831][ T5823] Bluetooth: hci5: command tx timeout [ 1070.709330][T15846] veth0_vlan: entered promiscuous mode [ 1070.801164][T15846] veth1_vlan: entered promiscuous mode [ 1070.891932][T15846] veth0_macvtap: entered promiscuous mode [ 1071.005494][T15846] veth1_macvtap: entered promiscuous mode [ 1071.040031][T15846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.164212][T15846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.296545][T16009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2183'. [ 1071.306370][ T7580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.331572][ T7580] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.379041][ T7580] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.527554][ T7580] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.623972][ T7575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.631928][ T7575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.796090][ T42] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1071.818530][ T9209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.826980][ T9209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.851935][ T29] audit: type=1400 audit(1771938618.103:1831): avc: denied { mounton } for pid=15846 comm="syz-executor" path="/root/syzkaller.S4fJOe/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1071.892718][ T29] audit: type=1400 audit(1771938618.112:1832): avc: denied { mounton } for pid=15846 comm="syz-executor" path="/root/syzkaller.S4fJOe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1072.043298][ T29] audit: type=1400 audit(1771938618.112:1833): avc: denied { mounton } for pid=15846 comm="syz-executor" path="/root/syzkaller.S4fJOe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1072.072155][ T29] audit: type=1400 audit(1771938618.140:1834): avc: denied { mounton } for pid=15846 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1072.125069][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 1072.679359][ T42] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 1072.717016][ T42] usb 3-1: config 0 has no interface number 0 [ 1072.782738][ T29] audit: type=1400 audit(1771938618.140:1835): avc: denied { mount } for pid=15846 comm="syz-executor" name="/" dev="gadgetfs" ino=8241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1072.831107][ T42] usb 3-1: config 0 interface 167 has no altsetting 0 [ 1072.978964][ T29] audit: type=1400 audit(1771938618.140:1836): avc: denied { mounton } for pid=15846 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1073.025760][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1073.050289][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.130875][ T42] usb 3-1: Product: syz [ 1073.151674][ T42] usb 3-1: Manufacturer: syz [ 1073.173427][ T42] usb 3-1: SerialNumber: syz [ 1073.227281][ T42] usb 3-1: config 0 descriptor?? [ 1073.463178][ T42] usbtest 3-1:0.167: couldn't get endpoints, -22 [ 1073.470530][T16026] xt_hashlimit: max too large, truncated to 1048576 [ 1073.525107][ T42] usbtest 3-1:0.167: probe with driver usbtest failed with error -22 [ 1073.582800][T16029] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2186'. [ 1073.600719][ T42] usb 3-1: USB disconnect, device number 21 [ 1074.396170][T16033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'. [ 1074.806862][T16040] overlayfs: failed to resolve './file2': -2 [ 1075.186650][ T29] audit: type=1400 audit(1771938621.236:1837): avc: denied { read } for pid=16036 comm="syz.4.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1075.580662][ T42] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1075.831780][T16052] tmpfs: Bad value for 'mpol' [ 1075.851943][ T42] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1075.862410][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1075.876267][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1075.898389][ T42] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1075.916875][ T42] usb 1-1: Product: syz [ 1075.922107][ T42] usb 1-1: Manufacturer: syz [ 1075.926835][ T42] usb 1-1: SerialNumber: syz [ 1076.315696][T16061] team0: Device vxcan1 is of different type [ 1077.034341][ T42] usb 1-1: config 0 descriptor?? [ 1077.102217][ T42] usb 1-1: selecting invalid altsetting 0 [ 1077.525280][T16060] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1077.715854][T16060] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1077.874694][ T29] audit: type=1400 audit(1771938623.584:1838): avc: denied { map } for pid=16032 comm="syz.0.2187" path="/dev/snd/pcmC3D0p" dev="devtmpfs" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1078.234970][ T42] usb 1-1: USB disconnect, device number 24 [ 1078.578310][T14896] udevd[14896]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.147406][ T29] audit: type=1400 audit(1771938625.876:1839): avc: denied { watch watch_reads } for pid=16081 comm="syz.1.2199" path="/457" dev="tmpfs" ino=2492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1080.330372][T16088] loop9: detected capacity change from 0 to 7 [ 1080.895568][T16088] Dev loop9: unable to read RDB block 7 [ 1080.901230][T16088] loop9: AHDI p1 p2 p3 [ 1080.905640][T16088] loop9: partition table partially beyond EOD, truncated [ 1081.751078][T16102] vivid-000: disconnect [ 1081.766072][T16088] loop9: p1 start 1601398130 is beyond EOD, truncated [ 1081.773186][T16088] loop9: p2 start 1702059890 is beyond EOD, truncated [ 1081.791611][T16098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.827118][T16103] netlink: 'syz.1.2201': attribute type 12 has an invalid length. [ 1082.609130][T16084] vivid-000: reconnect [ 1084.242298][T16110] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.560688][T16110] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.638188][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 1084.673345][T16110] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.780575][T16110] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.051308][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.554137][ T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.567248][ T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.577277][ T49] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.992897][T16136] team0: Device vxcan1 is of different type [ 1086.068924][T13615] vxcan1 speed is unknown, defaulting to 1000 [ 1086.225273][T16138] lo speed is unknown, defaulting to 1000 [ 1086.296346][T13615] vxcan1 speed is unknown, defaulting to 1000 [ 1086.674467][ T5895] vxcan1 speed is unknown, defaulting to 1000 [ 1086.721047][T16145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=16145 comm=syz.1.2211 [ 1086.741586][T16144] tmpfs: Bad value for 'mpol' [ 1086.869874][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 1086.894009][T16138] vxcan1 speed is unknown, defaulting to 1000 [ 1087.397806][T16150] tmpfs: Bad value for 'mpol' [ 1089.097817][T16167] lo speed is unknown, defaulting to 1000 [ 1089.111429][T16167] vxcan1 speed is unknown, defaulting to 1000 [ 1092.402069][T16193] loop9: detected capacity change from 0 to 7 [ 1092.412520][ T29] audit: type=1326 audit(1771938637.250:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16188 comm="syz.5.2221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d1679c629 code=0x0 [ 1092.456602][T16193] Dev loop9: unable to read RDB block 7 [ 1092.604599][T16193] loop9: unable to read partition table [ 1093.105382][ T29] audit: type=1400 audit(1771938637.989:1841): avc: denied { append } for pid=16197 comm="syz.1.2224" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1093.137933][T16193] loop9: partition table beyond EOD, truncated [ 1093.156381][T16193] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1093.218120][T16204] tmpfs: Bad value for 'mpol' [ 1093.388442][ T29] audit: type=1400 audit(1771938638.055:1842): avc: denied { create } for pid=16197 comm="syz.1.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1094.385159][T16219] fuse: Bad value for 'fd' [ 1095.022528][T16225] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1095.293820][ T29] audit: type=1400 audit(1771938640.038:1843): avc: denied { read write } for pid=16228 comm="syz.5.2230" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1095.323220][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 1095.347723][T16231] input: syz1 as /devices/virtual/input/input11 [ 1095.404960][ T29] audit: type=1400 audit(1771938640.038:1844): avc: denied { ioctl open } for pid=16228 comm="syz.5.2230" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1095.455138][T16233] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2230'. [ 1095.837639][ T29] audit: type=1400 audit(1771938640.440:1845): avc: denied { getopt } for pid=16238 comm="syz.2.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1095.900214][T16241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2231'. [ 1096.589889][T16247] netlink: 'syz.5.2233': attribute type 10 has an invalid length. [ 1096.599001][T16247] veth0_vlan: entered allmulticast mode [ 1096.687740][T16247] veth0_vlan: left promiscuous mode [ 1096.694772][T16247] veth0_vlan: entered promiscuous mode [ 1096.704423][T16247] team0: Device veth0_vlan failed to register rx_handler [ 1097.678127][ T191] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1099.529287][T16284] fuse: Bad value for 'fd' [ 1100.357056][ T5808] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1100.375041][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 1101.418341][ T9706] block nbd0: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 60 seconds [ 1101.430494][ T9706] block nbd0: Possible stuck request ffff888027d10200: control (read@1024,1024B). Runtime 60 seconds [ 1101.445627][ T9706] block nbd0: Possible stuck request ffff888027d10400: control (read@2048,1024B). Runtime 60 seconds [ 1101.459109][ T9706] block nbd0: Possible stuck request ffff888027d10600: control (read@3072,1024B). Runtime 60 seconds [ 1101.646085][ T5808] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1101.673904][ T5808] usb 6-1: config 1 has no interface number 0 [ 1101.692735][ T5808] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1101.712313][ T5808] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 1101.727948][ T5808] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1101.753685][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.782027][ T5808] usb 6-1: Product: syz [ 1101.791826][ T5808] usb 6-1: Manufacturer: syz [ 1101.796493][ T5808] usb 6-1: SerialNumber: syz [ 1101.815632][T16277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1101.823022][T16277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1101.831709][ T5808] usb 6-1: Error in usbnet_get_endpoints (-22) [ 1102.058723][ T5808] usb 6-1: USB disconnect, device number 2 [ 1102.327743][T16307] team0: Device vxcan1 is of different type [ 1102.340997][T16309] loop9: detected capacity change from 0 to 7 [ 1102.363633][T16309] Dev loop9: unable to read RDB block 7 [ 1102.371756][T16309] loop9: AHDI p1 p2 p3 [ 1102.519204][T16309] loop9: partition table partially beyond EOD, truncated [ 1102.526501][T16309] loop9: p1 start 1601398130 is beyond EOD, truncated [ 1102.537599][T12048] vxcan1 speed is unknown, defaulting to 1000 [ 1102.854276][T12048] vxcan1 speed is unknown, defaulting to 1000 [ 1102.862172][ T1205] vxcan1 speed is unknown, defaulting to 1000 [ 1102.906482][T16309] loop9: p2 start 1702059890 is beyond EOD, truncated [ 1103.172700][T16313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.406766][T16323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16323 comm=syz.1.2242 [ 1103.429469][T16323] qnx6: unable to read the first superblock [ 1103.509630][T16309] vivid-001: disconnect [ 1103.799746][T16305] vivid-001: reconnect [ 1103.996487][T16333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=16333 comm=syz.4.2247 [ 1107.073171][ T29] audit: type=1400 audit(1771938650.421:1846): avc: denied { setopt } for pid=16342 comm="syz.5.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1107.543742][ T29] audit: type=1400 audit(1771938650.421:1847): avc: denied { map } for pid=16342 comm="syz.5.2262" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1108.335345][T16368] team0: Device vxcan1 is of different type [ 1110.084607][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1110.151114][T13615] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1110.290286][T13615] usb 2-1: device descriptor read/64, error -71 [ 1110.973588][T13615] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1111.697116][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2259'. [ 1111.721542][T13615] usb 2-1: device descriptor read/64, error -71 [ 1111.873660][T16387] syz_tun: entered promiscuous mode [ 1111.989064][ T29] audit: type=1326 audit(1771938911.640:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.5.2263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d1679c629 code=0x0 [ 1112.014909][T13615] usb usb2-port1: attempt power cycle [ 1112.294850][T16387] macvtap2: entered promiscuous mode [ 1112.326553][T16387] macvtap2: entered allmulticast mode [ 1112.343184][T16387] syz_tun: entered allmulticast mode [ 1112.737684][T13615] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1112.868880][T16216] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1112.875552][T13615] usb 2-1: device descriptor read/8, error -71 [ 1112.936018][ T29] audit: type=1400 audit(1771938912.548:1849): avc: denied { create } for pid=16409 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1112.939870][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2264'. [ 1113.008179][ T29] audit: type=1400 audit(1771938912.548:1850): avc: denied { create } for pid=16409 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1113.077981][ T29] audit: type=1400 audit(1771938912.548:1851): avc: denied { write } for pid=16409 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1113.103943][T16216] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1113.131896][T13615] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1113.156520][T16216] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.164574][ T29] audit: type=1400 audit(1771938912.604:1852): avc: denied { ioctl } for pid=16407 comm="syz.4.2265" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1113.210418][T13615] usb 2-1: device descriptor read/8, error -71 [ 1113.287265][ T29] audit: type=1400 audit(1771938912.613:1853): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.192 dest=40808 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1113.338476][ T29] audit: type=1400 audit(1771938912.763:1854): avc: denied { bind } for pid=16409 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1113.374773][T16216] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1113.390273][T13615] usb usb2-port1: unable to enumerate USB device [ 1113.458170][ T29] audit: type=1400 audit(1771938912.763:1855): avc: denied { create } for pid=16409 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1113.548018][T16216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.816104][T16216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.922182][T16216] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1113.974832][T16216] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1114.053876][T16216] usb 5-1: Product: syz [ 1114.099084][T16216] usb 5-1: Manufacturer: syz [ 1114.226815][T16216] cdc_wdm 5-1:1.0: skipping garbage [ 1114.259226][T16216] cdc_wdm 5-1:1.0: skipping garbage [ 1114.267441][ T29] audit: type=1400 audit(1771938912.763:1856): avc: denied { write } for pid=16409 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1114.331000][T16216] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1114.410916][T16216] cdc_wdm 5-1:1.0: Unknown control protocol [ 1114.552737][ T29] audit: type=1400 audit(1771938912.763:1857): avc: denied { read } for pid=16409 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1114.584572][T16216] usb 5-1: USB disconnect, device number 19 [ 1115.023703][ T29] audit: type=1400 audit(1771938912.800:1858): avc: denied { read write } for pid=5814 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1115.314691][ T1205] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1115.385051][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 1115.427034][T16439] /dev/nullb0: Can't open blockdev [ 1115.461206][ T1205] usb 1-1: device descriptor read/64, error -71 [ 1116.065983][ T1205] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1116.080564][T16448] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 1116.209734][ T1205] usb 1-1: device descriptor read/64, error -71 [ 1116.339983][ T1205] usb usb1-port1: attempt power cycle [ 1116.780790][ T1205] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1116.808217][ T1205] usb 1-1: device descriptor read/8, error -71 [ 1117.428734][ T1205] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1117.460669][ T1205] usb 1-1: device descriptor read/8, error -71 [ 1117.580429][ T1205] usb usb1-port1: unable to enumerate USB device [ 1118.301619][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 1118.301636][ T29] audit: type=1400 audit(1771938917.564:1932): avc: denied { create } for pid=16473 comm="syz.2.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1118.319404][ T29] audit: type=1400 audit(1771938917.583:1933): avc: denied { setopt } for pid=16473 comm="syz.2.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1118.324146][ T29] audit: type=1400 audit(1771938917.583:1934): avc: denied { connect } for pid=16473 comm="syz.2.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1118.441192][ T29] audit: type=1400 audit(1771938917.695:1935): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1118.591860][ T29] audit: type=1400 audit(1771938917.826:1936): avc: denied { execute } for pid=16476 comm="syz.5.2279" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1118.710397][ T29] audit: type=1400 audit(1771938917.901:1937): avc: denied { read } for pid=16476 comm="syz.5.2279" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1118.710465][ T29] audit: type=1400 audit(1771938917.901:1938): avc: denied { open } for pid=16476 comm="syz.5.2279" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1118.710502][ T29] audit: type=1400 audit(1771938917.901:1939): avc: denied { ioctl } for pid=16476 comm="syz.5.2279" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1119.675827][ T29] audit: type=1400 audit(1771938918.856:1940): avc: denied { create } for pid=16484 comm="syz.5.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1119.675860][ T29] audit: type=1400 audit(1771938918.856:1941): avc: denied { read } for pid=16484 comm="syz.5.2281" dev="nsfs" ino=4026534030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1119.687737][T16487] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.687762][T16487] binder: 16486:16487 ioctl 4018620d 200000004a80 returned -16 [ 1119.693516][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 1120.138503][T16496] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1120.607158][T16507] xt_TCPMSS: Only works on TCP SYN packets [ 1121.125613][T16507] sit1: entered allmulticast mode [ 1124.016672][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1124.016691][ T29] audit: type=1400 audit(1771938922.309:1963): avc: denied { write } for pid=16521 comm="syz.4.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1124.477980][ T29] audit: type=1400 audit(1771938923.320:1964): avc: denied { read write } for pid=16526 comm="syz.5.2294" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1125.011337][ T29] audit: type=1400 audit(1771938923.320:1965): avc: denied { open } for pid=16526 comm="syz.5.2294" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1125.095368][ T29] audit: type=1400 audit(1771938923.329:1966): avc: denied { mount } for pid=16526 comm="syz.5.2294" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1125.227907][ T29] audit: type=1400 audit(1771938924.003:1967): avc: denied { unmount } for pid=15846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1125.697108][ T29] audit: type=1400 audit(1771938924.480:1968): avc: denied { ioctl } for pid=16536 comm="syz.2.2296" path="socket:[55009]" dev="sockfs" ino=55009 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1125.960881][ T29] audit: type=1400 audit(1771938924.480:1969): avc: denied { read } for pid=16536 comm="syz.2.2296" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1126.170583][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2298'. [ 1126.189976][T16548] random: crng reseeded on system resumption [ 1127.515107][ T29] audit: type=1400 audit(1771938924.480:1970): avc: denied { open } for pid=16536 comm="syz.2.2296" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1127.786232][ T29] audit: type=1400 audit(1771938924.480:1971): avc: denied { ioctl } for pid=16536 comm="syz.2.2296" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1128.207128][ T29] audit: type=1400 audit(1771938924.939:1972): avc: denied { write } for pid=16544 comm="syz.1.2298" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1128.887521][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 1129.092917][T16216] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1129.780857][T16572] lo speed is unknown, defaulting to 1000 [ 1129.790198][T16572] vxcan1 speed is unknown, defaulting to 1000 [ 1130.276358][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1130.276376][ T29] audit: type=1400 audit(1771938928.243:1978): avc: denied { bind } for pid=16565 comm="syz.0.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1130.307879][ T29] audit: type=1400 audit(1771938928.243:1979): avc: denied { listen } for pid=16565 comm="syz.0.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1130.501894][ T29] audit: type=1400 audit(1771938928.252:1980): avc: denied { accept } for pid=16565 comm="syz.0.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1131.950080][ T29] audit: type=1400 audit(1771938928.252:1981): avc: denied { write } for pid=16565 comm="syz.0.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1132.051579][T16216] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1132.086682][T16216] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1132.093025][ T29] audit: type=1400 audit(1771938928.252:1982): avc: denied { read } for pid=16565 comm="syz.0.2303" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1132.096478][T16216] usb 1-1: can't read configurations, error -71 [ 1132.520869][ T29] audit: type=1400 audit(1771938928.252:1983): avc: denied { open } for pid=16565 comm="syz.0.2303" path="/dev/input/event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1132.582801][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1132.584392][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1132.683689][T16582] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1132.693939][T16582] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1132.709480][T16582] ovl_remap_lower_ino: 8 callbacks suppressed [ 1132.709492][T16582] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1132.724062][T16582] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1132.732423][T16582] overlayfs: d_ino too big (485, ino=9223372036854778421, xinobits=3) [ 1132.740825][T16582] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1132.750480][T16582] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1132.759545][T16582] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1132.767930][T16582] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1132.776667][T16582] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1132.785516][T16582] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1132.793953][T16582] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1132.834881][ T29] audit: type=1400 audit(1771938928.261:1984): avc: denied { ioctl } for pid=16565 comm="syz.0.2303" path="/dev/input/event2" dev="devtmpfs" ino=920 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1132.862115][ T29] audit: type=1400 audit(1771938930.966:1985): avc: denied { ioctl } for pid=16581 comm="syz.0.2306" path="socket:[55259]" dev="sockfs" ino=55259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1132.887478][ T29] audit: type=1400 audit(1771938931.022:1986): avc: denied { mount } for pid=16581 comm="syz.0.2306" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1132.911831][ T29] audit: type=1400 audit(1771938931.022:1987): avc: denied { mounton } for pid=16581 comm="syz.0.2306" path="/485/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1132.956441][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2306'. [ 1133.198928][T16594] xt_TCPMSS: Only works on TCP SYN packets [ 1133.737648][T16594] sit1: entered allmulticast mode [ 1133.945763][T12769] block nbd0: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 90 seconds [ 1133.997871][T12769] block nbd0: Possible stuck request ffff888027d10200: control (read@1024,1024B). Runtime 90 seconds [ 1134.015700][T12769] block nbd0: Possible stuck request ffff888027d10400: control (read@2048,1024B). Runtime 90 seconds [ 1134.027100][T12769] block nbd0: Possible stuck request ffff888027d10600: control (read@3072,1024B). Runtime 90 seconds [ 1135.388019][T16606] can0: slcan on ptm0. [ 1135.743778][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1135.743791][ T29] audit: type=1400 audit(1771938933.830:2000): avc: denied { write } for pid=16603 comm="syz.0.2311" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1135.845335][ T29] audit: type=1400 audit(1771938933.830:2001): avc: denied { open } for pid=16603 comm="syz.0.2311" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1135.945754][T16597] can0 (unregistered): slcan off ptm0. [ 1136.080170][ T29] audit: type=1400 audit(1771938934.204:2002): avc: denied { read open } for pid=16620 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.215226][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2314'. [ 1136.246936][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2314'. [ 1136.286103][ T29] audit: type=1400 audit(1771938934.204:2003): avc: denied { getattr } for pid=16620 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.408826][T16619] bond0: (slave team0): Releasing backup interface [ 1136.531487][T16632] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2315'. [ 1136.786567][ T29] audit: type=1400 audit(1771938934.476:2004): avc: denied { create } for pid=16617 comm="syz.5.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1136.824066][T16619] bridge_slave_0: left allmulticast mode [ 1136.832354][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 1136.843413][T16619] bridge_slave_0: left promiscuous mode [ 1136.849245][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.905509][ T29] audit: type=1400 audit(1771938934.654:2005): avc: denied { bind } for pid=16627 comm="syz.2.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1137.027510][ T29] audit: type=1400 audit(1771938934.663:2006): avc: denied { node_bind } for pid=16627 comm="syz.2.2315" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1137.120585][ T5895] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1137.162414][ T29] audit: type=1400 audit(1771938935.140:2007): avc: denied { execute } for pid=16613 comm="syz.1.2313" path="/483/cpuacct.usage_percpu" dev="tmpfs" ino=2651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1137.255078][T16619] bridge_slave_1: left allmulticast mode [ 1137.261036][T16619] bridge_slave_1: left promiscuous mode [ 1137.267385][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.287986][T16619] bond0: (slave bond_slave_0): Releasing backup interface [ 1137.303232][T16619] bond0: (slave bond_slave_1): Releasing backup interface [ 1137.316052][T16619] team0: Port device team_slave_0 removed [ 1137.330144][T16619] team0: Port device team_slave_1 removed [ 1137.337510][T16619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.405320][ T5895] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1137.459562][T16619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.473979][T16619] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1137.536205][ T29] audit: type=1400 audit(1771938935.543:2008): avc: denied { add_name } for pid=16616 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1137.537004][T16624] team0: No ports can be present during mode change [ 1137.586011][ T5895] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1137.617784][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1137.644091][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.707362][T16634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1137.744202][ T29] audit: type=1400 audit(1771938935.543:2009): avc: denied { create } for pid=16616 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1137.746314][ T5895] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1137.930359][T16633] team0 (unregistering): Port device batadv1 removed [ 1138.328134][ T5895] usb 5-1: USB disconnect, device number 20 [ 1140.224650][T16668] block device autoloading is deprecated and will be removed. [ 1141.164605][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1141.165696][ T29] audit: type=1400 audit(1771938938.968:2016): avc: denied { bind } for pid=16678 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1141.231768][ T29] audit: type=1400 audit(1771938938.968:2017): avc: denied { name_bind } for pid=16678 comm="syz.4.2323" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1141.405908][ T29] audit: type=1400 audit(1771938938.968:2018): avc: denied { node_bind } for pid=16678 comm="syz.4.2323" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1141.679171][ T29] audit: type=1400 audit(1771938939.417:2019): avc: denied { ioctl } for pid=16685 comm="syz.1.2324" path="socket:[57576]" dev="sockfs" ino=57576 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1141.778777][ T29] audit: type=1400 audit(1771938939.427:2020): avc: denied { setopt } for pid=16678 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1141.950142][ T29] audit: type=1400 audit(1771938939.427:2021): avc: denied { ioctl } for pid=16678 comm="syz.4.2323" path="socket:[57578]" dev="sockfs" ino=57578 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1142.027747][T16666] openvswitch: netlink: IP tunnel dst address not specified [ 1142.114558][ T29] audit: type=1400 audit(1771938939.679:2022): avc: denied { write } for pid=16678 comm="syz.4.2323" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1143.044438][ T29] audit: type=1400 audit(1771938940.728:2023): avc: denied { name_bind } for pid=16700 comm="syz.2.2327" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1143.077500][ T29] audit: type=1400 audit(1771938940.728:2024): avc: denied { node_bind } for pid=16700 comm="syz.2.2327" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1144.106601][ T29] audit: type=1400 audit(1771938941.710:2025): avc: denied { read } for pid=16709 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1147.037613][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1147.037632][ T29] audit: type=1400 audit(1771938944.387:2029): avc: denied { create } for pid=16739 comm="syz.1.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1147.637002][T16754] team0: Device vxcan1 is of different type [ 1149.632327][ T191] wlan0: Trigger new scan to find an IBSS to join [ 1150.732078][ T29] audit: type=1400 audit(1771938947.120:2030): avc: denied { create } for pid=16757 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1150.810074][ T29] audit: type=1400 audit(1771938947.129:2031): avc: denied { ioctl } for pid=16757 comm="syz.4.2341" path="socket:[56825]" dev="sockfs" ino=56825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1152.427615][T16780] capability: warning: `syz.1.2346' uses 32-bit capabilities (legacy support in use) [ 1152.723975][ T29] audit: type=1400 audit(1771938949.525:2032): avc: denied { create } for pid=16775 comm="syz.1.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1153.129592][T16786] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1153.503767][ T1781] Bluetooth: hci6: Frame reassembly failed (-84) [ 1153.617204][T16787] fuse: Unknown parameter 'euid<00000000000000000000' [ 1153.657267][ T29] audit: type=1400 audit(1771938950.620:2033): avc: denied { bind } for pid=16773 comm="syz.0.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1153.863621][ T29] audit: type=1400 audit(1771938950.648:2034): avc: denied { name_bind } for pid=16773 comm="syz.0.2345" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1153.924685][ T29] audit: type=1326 audit(1771938950.657:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.0.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1153.997323][ T29] audit: type=1326 audit(1771938950.657:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.0.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1154.178234][ T29] audit: type=1326 audit(1771938950.657:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.0.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1154.268810][ T29] audit: type=1326 audit(1771938950.657:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.0.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688cb9c629 code=0x7ffc0000 [ 1155.027723][ T1781] wlan0: Trigger new scan to find an IBSS to join [ 1155.198047][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'. [ 1155.313928][ T29] audit: type=1400 audit(1771938952.071:2039): avc: denied { read } for pid=16806 comm="syz.0.2351" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1155.383791][ T29] audit: type=1400 audit(1771938952.089:2040): avc: denied { create } for pid=16806 comm="syz.0.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1155.420587][ T5823] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1155.514168][ T29] audit: type=1400 audit(1771938952.089:2041): avc: denied { bind } for pid=16806 comm="syz.0.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1156.884563][T16824] vxcan1: left promiscuous mode [ 1156.897977][T16824] macvtap2: left promiscuous mode [ 1157.797031][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.676170][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1159.676188][ T29] audit: type=1400 audit(1771938956.029:2043): avc: denied { create } for pid=16826 comm="syz.4.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1159.705561][ T29] audit: type=1400 audit(1771938956.029:2044): avc: denied { ioctl } for pid=16826 comm="syz.4.2354" path="socket:[58173]" dev="sockfs" ino=58173 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1160.286793][T16865] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1161.930127][ T5895] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1162.519736][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.542503][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.564489][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1162.593016][ T5895] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1162.612758][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.684429][ T5895] usb 3-1: config 0 descriptor?? [ 1163.398009][T16867] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 1163.531500][ T5895] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1164.293943][ T29] audit: type=1400 audit(1771938960.241:2045): avc: denied { open } for pid=16891 comm="syz.1.2369" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1164.374119][ T29] audit: type=1400 audit(1771938960.372:2046): avc: denied { write } for pid=16891 comm="syz.1.2369" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1164.400885][ T29] audit: type=1400 audit(1771938960.372:2047): avc: denied { open } for pid=16891 comm="syz.1.2369" path="/497/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1164.457552][T16897] team0: Device vxcan1 is of different type [ 1164.463590][ T29] audit: type=1400 audit(1771938960.381:2048): avc: denied { write } for pid=16891 comm="syz.1.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1164.763779][ T5895] vxcan1 speed is unknown, defaulting to 1000 [ 1164.770036][ T5895] vxcan1 speed is unknown, defaulting to 1000 [ 1164.842776][T13615] vxcan1 speed is unknown, defaulting to 1000 [ 1165.407918][ T5895] usb 3-1: USB disconnect, device number 22 [ 1165.514736][ T29] audit: type=1400 audit(1771938961.757:2049): avc: denied { shutdown } for pid=16907 comm="syz.2.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1165.536229][T16908] loop7: detected capacity change from 0 to 16384 [ 1165.664470][T16909] loop7: detected capacity change from 16384 to 0 [ 1165.664518][ C1] blk_print_req_error: 136 callbacks suppressed [ 1165.664530][ C1] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 14 prio class 2 [ 1165.688302][ C1] I/O error, dev loop7, sector 272 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 1166.067177][T12769] block nbd0: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 120 seconds [ 1166.078860][T12769] block nbd0: Possible stuck request ffff888027d10200: control (read@1024,1024B). Runtime 120 seconds [ 1166.193687][T12769] block nbd0: Possible stuck request ffff888027d10400: control (read@2048,1024B). Runtime 120 seconds [ 1166.205428][ T29] audit: type=1400 audit(1771938962.384:2050): avc: denied { write } for pid=16907 comm="syz.2.2372" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1166.205431][T12769] block nbd0: Possible stuck request ffff888027d10600: control (read@3072,1024B). Runtime 120 seconds [ 1166.669281][T16921] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1167.492685][ T29] audit: type=1400 audit(1771938963.601:2051): avc: denied { write } for pid=16922 comm="syz.1.2376" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1167.629488][ T29] audit: type=1400 audit(1771938963.685:2052): avc: denied { mount } for pid=16922 comm="syz.1.2376" name="/" dev="ramfs" ino=57330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1167.993551][ T29] audit: type=1400 audit(1771938964.041:2053): avc: denied { getopt } for pid=16933 comm="syz.2.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1168.112861][ T1781] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1169.206256][ T29] audit: type=1400 audit(1771938965.192:2054): avc: denied { mount } for pid=16944 comm="syz.0.2382" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1169.274732][ T29] audit: type=1400 audit(1771938965.192:2055): avc: denied { ioctl } for pid=16944 comm="syz.0.2382" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=58352 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1169.353415][ T29] audit: type=1400 audit(1771938965.239:2056): avc: denied { write } for pid=16946 comm="syz.1.2383" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1169.682456][ T29] audit: type=1400 audit(1771938965.651:2057): avc: denied { unmount } for pid=16944 comm="syz.0.2382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1170.296075][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1170.448846][ T5895] usb 6-1: device descriptor read/64, error -71 [ 1170.658343][ T29] audit: type=1400 audit(1771938966.568:2058): avc: denied { getopt } for pid=16963 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1170.809490][T13615] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1170.819644][ T9902] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1170.927142][ T5895] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1170.980140][ T9902] usb 1-1: Using ep0 maxpacket: 16 [ 1170.992578][T13615] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1171.050685][T13615] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.067854][ T9902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.079978][T13615] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1171.100044][ T5895] usb 6-1: device descriptor read/64, error -71 [ 1171.107318][ T9902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.120023][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1171.132599][T13615] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.143831][ T9902] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1171.159009][T13615] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.171610][ T9902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.199767][T13615] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1171.210941][T13615] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1171.226147][ T9902] usb 1-1: config 0 descriptor?? [ 1171.237105][ T5895] usb usb6-port1: attempt power cycle [ 1171.264182][ T1205] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1171.266545][T13615] usb 2-1: Product: syz [ 1171.325612][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1171.355999][T13615] usb 2-1: Manufacturer: syz [ 1171.363028][ T10] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1171.377886][ T10] usb 5-1: config 0 has no interface number 0 [ 1171.385048][ T10] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1171.398889][T13615] cdc_wdm 2-1:1.0: skipping garbage [ 1171.404114][T13615] cdc_wdm 2-1:1.0: skipping garbage [ 1171.411162][ T10] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1171.420290][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.428279][ T10] usb 5-1: Product: syz [ 1171.433053][ T10] usb 5-1: Manufacturer: syz [ 1171.438016][T13615] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1171.444768][ T10] usb 5-1: SerialNumber: syz [ 1171.450035][T13615] cdc_wdm 2-1:1.0: Unknown control protocol [ 1171.458871][ T10] usb 5-1: config 0 descriptor?? [ 1171.480298][ T1205] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1171.505044][ T1205] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1171.514625][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1171.522685][ T1205] usb 3-1: SerialNumber: syz [ 1171.607438][T16972] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 1171.642874][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1171.675067][ T5895] usb 6-1: device descriptor read/8, error -71 [ 1171.687345][T16973] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 1171.718886][T16957] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 1171.726059][ T29] audit: type=1400 audit(1771938967.560:2059): avc: denied { read write } for pid=16956 comm="syz.1.2385" name="cdc-wdm0" dev="devtmpfs" ino=3186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1171.769602][T13615] usb 2-1: USB disconnect, device number 25 [ 1171.793434][ T29] audit: type=1400 audit(1771938967.560:2060): avc: denied { open } for pid=16956 comm="syz.1.2385" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1171.952463][ T5895] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1171.974960][ T5895] usb 6-1: device descriptor read/8, error -71 [ 1172.091951][ T5895] usb usb6-port1: unable to enumerate USB device [ 1172.112934][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input13 [ 1172.131639][ T29] audit: type=1400 audit(1771938967.943:2061): avc: denied { read } for pid=5163 comm="acpid" name="mouse1" dev="devtmpfs" ino=3191 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1172.191255][ T29] audit: type=1400 audit(1771938967.943:2062): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3191 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1172.290253][ T1205] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1172.330400][ T1205] usb 5-1: USB disconnect, device number 21 [ 1172.956722][ T5895] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1173.225819][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 1173.311919][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1173.347796][ T5895] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1173.365904][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.392085][ T5895] usb 2-1: Product: syz [ 1173.493735][ T5895] usb 2-1: Manufacturer: syz [ 1173.498510][ T5895] usb 2-1: SerialNumber: syz [ 1173.562192][T17000] trusted_key: syz.5.2391 sent an empty control message without MSG_MORE. [ 1173.588296][ T29] audit: type=1400 audit(1771939225.284:2063): avc: denied { ioctl } for pid=16988 comm="syz.5.2391" path="socket:[59460]" dev="sockfs" ino=59460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1173.667920][ T5895] usb 2-1: config 0 descriptor?? [ 1173.934196][ T9902] usbhid 1-1:0.0: can't add hid device: -71 [ 1173.959382][ T9902] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1174.011221][ T9902] usb 1-1: USB disconnect, device number 31 [ 1174.091847][T13615] usb 3-1: USB disconnect, device number 23 [ 1174.109807][T13615] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1174.504393][ T5895] gs_usb 2-1:0.0: Configuring for 41 interfaces [ 1174.722270][ T5895] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1174.788344][ T5895] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 1176.081557][T17038] fuse: Unknown parameter 'euid<00000000000000000000' [ 1176.145463][ T29] audit: type=1326 audit(1771939227.670:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.4.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 1176.325933][ T29] audit: type=1326 audit(1771939227.670:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.4.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 1176.468583][ T29] audit: type=1326 audit(1771939227.670:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.4.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 1176.937180][ T29] audit: type=1326 audit(1771939227.670:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.4.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4239c629 code=0x7ffc0000 [ 1176.977499][ T29] audit: type=1400 audit(1771939227.839:2068): avc: denied { setopt } for pid=17024 comm="syz.2.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1177.145468][T13615] usb 2-1: USB disconnect, device number 26 [ 1177.634868][ T29] audit: type=1400 audit(1771939228.999:2069): avc: denied { execute_no_trans } for pid=17049 comm="syz.1.2401" path="/504/file0" dev="tmpfs" ino=2764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1177.697365][ T29] audit: type=1400 audit(1771939229.018:2070): avc: denied { append } for pid=17049 comm="syz.1.2401" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1177.770736][ T29] audit: type=1400 audit(1771939229.018:2071): avc: denied { remount } for pid=17049 comm="syz.1.2401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1177.841885][ T29] audit: type=1400 audit(1771939229.093:2072): avc: denied { write } for pid=17049 comm="syz.1.2401" name="anycast6" dev="proc" ino=4026533445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1178.228079][ T29] audit: type=1400 audit(1771939229.636:2073): avc: denied { mounton } for pid=17064 comm="syz.4.2404" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1178.476807][ T49] wlan0: Trigger new scan to find an IBSS to join [ 1179.994380][T17079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2405'. [ 1180.235167][T17078] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2405'. [ 1183.997667][ T49] wlan0: Trigger new scan to find an IBSS to join [ 1186.228067][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.261774][T17109] tmpfs: Bad value for 'mpol' [ 1186.985922][T17129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2416'. [ 1187.003276][T17129] random: crng reseeded on system resumption [ 1188.302569][T17131] vxcan1: entered promiscuous mode [ 1188.367513][T17131] team0: Device vxcan1 is of different type [ 1189.002284][T17125] hub 9-0:1.0: USB hub found [ 1189.008886][T17125] hub 9-0:1.0: 1 port detected [ 1189.575038][T17144] program syz.0.2421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1189.624195][ T29] audit: type=1400 audit(1771939240.314:2074): avc: denied { write } for pid=17143 comm="syz.0.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1189.982751][T17153] tmpfs: Bad value for 'mpol' [ 1190.178437][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2424'. [ 1190.302838][ T1205] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1191.032976][T17162] lo speed is unknown, defaulting to 1000 [ 1191.045347][T17162] vxcan1 speed is unknown, defaulting to 1000 [ 1192.792732][ T9209] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1193.264672][ T1205] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1193.275016][ T1205] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1193.282933][ T1205] usb 5-1: can't read configurations, error -71 [ 1193.389007][ T29] audit: type=1400 audit(1771939243.843:2075): avc: denied { ioctl } for pid=17179 comm="syz.1.2430" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1193.640074][T17186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2429'. [ 1193.654209][T17186] random: crng reseeded on system resumption [ 1195.102238][ T29] audit: type=1400 audit(1771939243.861:2076): avc: denied { setattr } for pid=17179 comm="syz.1.2430" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1195.126272][ T29] audit: type=1400 audit(1771939244.554:2077): avc: denied { bind } for pid=17178 comm="syz.0.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1195.141217][T15850] Bluetooth: hci5: command 0x0406 tx timeout [ 1195.313038][ T29] audit: type=1400 audit(1771939244.601:2078): avc: denied { listen } for pid=17178 comm="syz.0.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1195.686513][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1195.911669][ T5895] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1195.921326][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.512445][ T5895] usb 2-1: Product: syz [ 1196.517654][ T5895] usb 2-1: Manufacturer: syz [ 1196.522273][ T5895] usb 2-1: SerialNumber: syz [ 1196.540844][ T29] audit: type=1400 audit(1771939246.426:2079): avc: denied { write } for pid=17208 comm="syz.5.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1196.589724][ T29] audit: type=1400 audit(1771939246.426:2080): avc: denied { read } for pid=17208 comm="syz.5.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1196.679470][ T29] audit: type=1400 audit(1771939246.650:2081): avc: denied { connect } for pid=17208 comm="syz.5.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1196.788943][T17213] can0: slcan on ttyS3. [ 1196.869140][ T5895] usb 2-1: config 0 descriptor?? [ 1196.895609][ T5895] usb 2-1: can't set config #0, error -71 [ 1196.934382][T17214] can0 (unregistered): slcan off ttyS3. [ 1196.940264][ T5895] usb 2-1: USB disconnect, device number 27 [ 1196.945490][T17218] can0: slcan on ttyS3. [ 1197.075025][T17219] team0: Device vxcan1 is of different type [ 1198.339744][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1198.430723][T12769] block nbd0: Possible stuck request ffff888027d10000: control (read@0,1024B). Runtime 150 seconds [ 1198.441574][T12769] block nbd0: Possible stuck request ffff888027d10200: control (read@1024,1024B). Runtime 150 seconds [ 1198.453791][T12769] block nbd0: Possible stuck request ffff888027d10400: control (read@2048,1024B). Runtime 150 seconds [ 1198.465386][T12769] block nbd0: Possible stuck request ffff888027d10600: control (read@3072,1024B). Runtime 150 seconds [ 1198.476452][ T29] audit: type=1400 audit(1771939247.596:2082): avc: denied { mount } for pid=17221 comm="syz.1.2436" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1198.579544][T16216] vxcan1 speed is unknown, defaulting to 1000 [ 1198.586137][T17229] futex_wake_op: syz.1.2438 tries to shift op by 32; fix this program [ 1198.835561][T17234] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1199.261963][ T5808] vxcan1 speed is unknown, defaulting to 1000 [ 1199.268618][ T1205] vxcan1 speed is unknown, defaulting to 1000 [ 1199.322115][T17173] can0 (unregistered): slcan off ttyS3. [ 1200.561110][T17257] team0: Device vxcan1 is of different type [ 1202.299936][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1202.434553][ T29] audit: type=1400 audit(1771939252.303:2083): avc: denied { append } for pid=17278 comm="syz.2.2445" name="v4l-subdev6" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1202.642143][T17284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=17284 comm=syz.2.2445 [ 1202.708705][ T29] audit: type=1400 audit(1771939252.500:2084): avc: denied { create } for pid=17278 comm="syz.2.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1202.809890][ T29] audit: type=1400 audit(1771939252.612:2085): avc: denied { unlink } for pid=17276 comm="syz.4.2444" name="#31" dev="tmpfs" ino=2558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1202.851957][ T29] audit: type=1400 audit(1771939252.621:2086): avc: denied { ioctl } for pid=17276 comm="syz.4.2444" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1202.929306][ T29] audit: type=1400 audit(1771939252.640:2087): avc: denied { mount } for pid=17276 comm="syz.4.2444" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1203.470836][ T29] audit: type=1400 audit(1771939253.174:2088): avc: denied { block_suspend } for pid=17291 comm="syz.5.2446" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1204.142671][ T29] audit: type=1400 audit(1771939253.529:2089): avc: denied { setopt } for pid=17291 comm="syz.5.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1204.164706][ T29] audit: type=1400 audit(1771939253.529:2090): avc: denied { connect } for pid=17291 comm="syz.5.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1204.187384][ T29] audit: type=1400 audit(1771939253.548:2091): avc: denied { ioctl } for pid=17291 comm="syz.5.2446" path="socket:[59328]" dev="sockfs" ino=59328 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1204.237287][ T29] audit: type=1400 audit(1771939253.997:2092): avc: denied { create } for pid=17295 comm="syz.1.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1204.825496][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 1204.874622][T17304] netlink: 'syz.0.2449': attribute type 1 has an invalid length. [ 1205.357548][T17313] binder: BINDER_SET_CONTEXT_MGR already set [ 1205.421381][T17313] binder: 17311:17313 ioctl 4018620d 200000004a80 returned -16 [ 1205.675246][T17320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2451'. [ 1206.047068][T17319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1206.400521][ T30] INFO: task syz.3.2127:15686 blocked for more than 143 seconds. [ 1206.430642][ T30] Tainted: G L syzkaller #0 [ 1206.452315][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1206.463111][ T30] task:syz.3.2127 state:D stack:24184 pid:15686 tgid:15676 ppid:5804 task_flags:0x400040 flags:0x00080002 [ 1207.644112][ T30] Call Trace: [ 1207.659556][ T30] [ 1207.664292][ T30] __schedule+0xfee/0x60e0 [ 1207.681886][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1207.701803][ T30] ? __pfx___schedule+0x10/0x10 [ 1207.719145][ T30] ? find_held_lock+0x2b/0x80 [ 1207.736094][ T30] ? schedule+0x2bf/0x390 [ 1207.742080][ T30] schedule+0xdd/0x390 [ 1207.755422][ T30] io_schedule+0x8a/0xf0 [ 1207.769746][ T30] folio_wait_bit_common+0x414/0xa70 [ 1207.787568][ T30] ? folio_wait_bit_common+0x2a0/0xa70 [ 1207.800008][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1207.811751][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1207.817386][ T30] ? __pfx___might_resched+0x10/0x10 [ 1207.834542][ T30] ? compaction_free+0x182/0x430 [ 1207.844615][ T30] migrate_pages_batch+0x1b85/0x4530 [ 1207.849938][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 1207.856037][ T30] ? __pfx_compaction_free+0x10/0x10 [ 1207.861344][ T30] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1207.867110][ T30] ? trace_sched_exit_tp+0x13a/0x180 [ 1207.872493][ T30] ? __schedule+0x1000/0x60e0 [ 1207.878083][ T30] ? __schedule+0x1000/0x60e0 [ 1207.883239][ T30] migrate_pages_sync+0x4db/0x880 [ 1207.888984][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 1207.894366][ T30] ? __pfx_compaction_free+0x10/0x10 [ 1207.899693][ T30] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1207.905267][ T30] migrate_pages+0x1aae/0x28a0 [ 1207.910129][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 1207.915695][ T30] ? __pfx_compaction_free+0x10/0x10 [ 1207.921666][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 1207.926790][ T30] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1207.933101][ T30] ? __nr_to_section+0xaa/0x100 [ 1207.937971][ T30] ? pfn_to_online_page+0x178/0x4c0 [ 1207.943281][ T30] compact_zone+0x2464/0x44c0 [ 1207.948016][ T30] ? debug_object_free+0x295/0x550 [ 1207.953804][ T30] ? __pfx_debug_object_free+0x10/0x10 [ 1207.959283][ T30] ? __pfx_compact_zone+0x10/0x10 [ 1207.964340][ T30] ? __flush_work+0x928/0xcb0 [ 1207.969035][ T30] ? __flush_work+0x928/0xcb0 [ 1207.973762][ T30] compact_node+0x17f/0x2c0 [ 1207.978286][ T30] ? __pfx_compact_node+0x10/0x10 [ 1207.984072][ T30] ? __lru_add_drain_all+0x43c/0x650 [ 1207.989390][ T30] ? __lru_add_drain_all+0x441/0x650 [ 1207.994738][ T30] sysctl_compaction_handler+0x141/0x210 [ 1208.000500][ T30] proc_sys_call_handler+0x47f/0x5a0 [ 1208.005853][ T30] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1208.011680][ T30] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1208.017851][ T30] iter_file_splice_write+0x830/0x10a0 [ 1208.023363][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1208.029547][ T30] ? __pfx_copy_splice_read+0x10/0x10 [ 1208.035009][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1208.040964][ T30] direct_splice_actor+0x192/0x6c0 [ 1208.046755][ T30] splice_direct_to_actor+0x345/0xa30 [ 1208.052140][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 1208.057828][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1208.063744][ T30] do_splice_direct+0x174/0x240 [ 1208.068661][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 1208.074093][ T30] ? avc_policy_seqno+0x9/0x20 [ 1208.079535][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1208.085476][ T30] ? rw_verify_area+0xce/0x6d0 [ 1208.090296][ T30] do_sendfile+0xadc/0xe20 [ 1208.094733][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 1208.099874][ T30] __x64_sys_sendfile64+0x154/0x220 [ 1208.105095][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1208.112156][ T30] do_syscall_64+0x106/0xf80 [ 1208.116800][ T30] ? clear_bhb_loop+0x40/0x90 [ 1208.121536][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.127438][ T30] RIP: 0033:0x7f35b739c629 [ 1208.131887][ T30] RSP: 002b:00007f35b8279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1208.140571][ T30] RAX: ffffffffffffffda RBX: 00007f35b7616270 RCX: 00007f35b739c629 [ 1208.149268][ T30] RDX: 00002000000000c0 RSI: 000000000000000a RDI: 000000000000000b [ 1208.157323][ T30] RBP: 00007f35b7432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1208.165344][ T30] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 1208.173356][ T30] R13: 00007f35b7616308 R14: 00007f35b7616270 R15: 00007ffc77fbe708 [ 1208.182092][ T30] [ 1208.185222][ T30] [ 1208.185222][ T30] Showing all locks held in the system: [ 1208.196157][ T30] 1 lock held by ksoftirqd/0/15: [ 1208.201792][T17307] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 1208.208846][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1208.224416][ T30] 1 lock held by khungtaskd/30: [ 1208.230545][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1208.246078][ T30] 2 locks held by getty/5564: [ 1208.260536][ T30] #0: ffff8880391480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1208.272665][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1208.283978][ T30] 1 lock held by syz-executor/5814: [ 1208.289245][ T30] 2 locks held by kworker/u8:27/9209: [ 1208.294926][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1208.306556][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 1208.316619][ T30] 1 lock held by udevd/15521: [ 1208.321364][ T30] #0: ffff888027c1e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1208.330799][ T30] 1 lock held by syz.3.2127/15686: [ 1208.336225][ T30] #0: ffff888034a3c420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1208.347005][ T30] 1 lock held by syz.0.2449/17308: [ 1208.352129][ T30] #0: ffffffff8e7f4ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1208.362319][ T30] 1 lock held by syz.5.2450/17316: [ 1208.367494][ T30] #0: ffffffff8e7f4ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1208.378441][ T30] [ 1208.380815][ T30] ============================================= [ 1208.380815][ T30] [ 1208.389319][ T30] NMI backtrace for cpu 1 [ 1208.389339][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.389363][ T30] Tainted: [L]=SOFTLOCKUP [ 1208.389369][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1208.389379][ T30] Call Trace: [ 1208.389385][ T30] [ 1208.389392][ T30] dump_stack_lvl+0x100/0x190 [ 1208.389426][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1208.389445][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1208.389472][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1208.389496][ T30] sys_info+0x141/0x190 [ 1208.389516][ T30] watchdog+0xd25/0x1050 [ 1208.389546][ T30] ? __pfx_watchdog+0x10/0x10 [ 1208.389569][ T30] ? __kthread_parkme+0x18c/0x230 [ 1208.389596][ T30] ? kthread+0x13a/0x450 [ 1208.389611][ T30] ? __pfx_watchdog+0x10/0x10 [ 1208.389631][ T30] kthread+0x370/0x450 [ 1208.389646][ T30] ? __pfx_kthread+0x10/0x10 [ 1208.389663][ T30] ret_from_fork+0x754/0xd80 [ 1208.389680][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1208.389699][ T30] ? __switch_to+0x7b4/0x1120 [ 1208.389720][ T30] ? __pfx_kthread+0x10/0x10 [ 1208.389737][ T30] ret_from_fork_asm+0x1a/0x30 [ 1208.389770][ T30] [ 1208.389776][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1208.518651][ C0] NMI backtrace for cpu 0 [ 1208.518669][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.518688][ C0] Tainted: [L]=SOFTLOCKUP [ 1208.518692][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1208.518700][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1208.518728][ C0] Code: d8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 0c 1c 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1208.518740][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1208.518752][ C0] RAX: 0000000005835d19 RBX: ffffffff8e4975c0 RCX: ffffffff8b8f7c75 [ 1208.518761][ C0] RDX: 0000000000000000 RSI: ffffffff8de71ed4 RDI: ffffffff8c1aefa0 [ 1208.518770][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1208.518778][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1208.518786][ C0] R13: 0000000000000000 R14: ffffffff90d96410 R15: 0000000000000000 [ 1208.518795][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 1208.518809][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1208.518817][ C0] CR2: 0000555594fed4e8 CR3: 0000000032f9c000 CR4: 00000000003526f0 [ 1208.518826][ C0] Call Trace: [ 1208.518831][ C0] [ 1208.518836][ C0] default_idle+0x9/0x10 [ 1208.518851][ C0] default_idle_call+0x6c/0xb0 [ 1208.518865][ C0] do_idle+0x35b/0x4b0 [ 1208.518886][ C0] ? __pfx_do_idle+0x10/0x10 [ 1208.518904][ C0] cpu_startup_entry+0x4f/0x60 [ 1208.518920][ C0] rest_init+0x251/0x260 [ 1208.518935][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1208.518955][ C0] start_kernel+0x47f/0x480 [ 1208.518971][ C0] x86_64_start_reservations+0x24/0x30 [ 1208.518987][ C0] x86_64_start_kernel+0x12b/0x130 [ 1208.519003][ C0] common_startup_64+0x13e/0x148 [ 1208.519023][ C0] [ 1208.710331][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1208.717182][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.727837][ T30] Tainted: [L]=SOFTLOCKUP [ 1208.732140][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1208.742439][ T30] Call Trace: [ 1208.745707][ T30] [ 1208.748618][ T30] dump_stack_lvl+0x100/0x190 [ 1208.753290][ T30] vpanic+0x552/0x970 [ 1208.757342][ T30] ? __pfx_vpanic+0x10/0x10 [ 1208.761826][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1208.767967][ T30] panic+0xd1/0xe0 [ 1208.771666][ T30] ? __pfx_panic+0x10/0x10 [ 1208.776125][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1208.782272][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1208.788414][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1208.794646][ T30] ? watchdog.cold+0x198/0x1ca [ 1208.799408][ T30] ? watchdog+0xd35/0x1050 [ 1208.803827][ T30] watchdog.cold+0x1a9/0x1ca [ 1208.808411][ T30] ? __pfx_watchdog+0x10/0x10 [ 1208.813085][ T30] ? __kthread_parkme+0x18c/0x230 [ 1208.818529][ T30] ? kthread+0x13a/0x450 [ 1208.822756][ T30] ? __pfx_watchdog+0x10/0x10 [ 1208.827414][ T30] kthread+0x370/0x450 [ 1208.831460][ T30] ? __pfx_kthread+0x10/0x10 [ 1208.836041][ T30] ret_from_fork+0x754/0xd80 [ 1208.840617][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1208.845714][ T30] ? __switch_to+0x7b4/0x1120 [ 1208.850372][ T30] ? __pfx_kthread+0x10/0x10 [ 1208.854940][ T30] ret_from_fork_asm+0x1a/0x30 [ 1208.859705][ T30] [ 1208.862987][ T30] Kernel Offset: disabled [ 1208.867286][ T30] Rebooting in 86400 seconds..