last executing test programs: 19.536738885s ago: executing program 2 (id=18): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000900)={0x0, 0x0, r4, r5, 0x3, 0x3, 0x7f, 0x8000ffd, {0xfffffffe, 0x2, 0x7, 0x9, 0x8000, 0x7, 0x5, 0x1, 0x8001, 0xd24, 0x1000, 0x600000, 0x7, 0x2, "774f1b1330d057b122d1558fb7445442c528a974ff0f0000bb3500"}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x20008800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 18.320127366s ago: executing program 2 (id=22): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0xffffffffffffff43, 0x0}) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x8970, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 15.068366801s ago: executing program 0 (id=31): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800030000000000000000000f00000079100800000000009500000000000000a1068f2a437c9aa1d6956b1ccf2faa0e6f311a39c834aefab5a982e25c198cf13dcb50d18ef80bd8321e4d43dada18e5a9694caadaf2487f8897a1e6"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = epoll_create(0x14800000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x80000011}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x335, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xba, 0xf0, 0xc2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0xe74}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x3, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x20, 0x8, 0x1, 0x20, 0xf6}, 0x14c, &(0x7f0000000440)={0x5, 0xf, 0x14c, 0x5, [@generic={0x91, 0x10, 0x3, "0135fb63af5885d3873a2537738ce9d5f0d208ddef50d2188c75a8988e6ff93a4403a7f32c56e159f7f456487842f23d67ad92a292336ea129e43af43d97ba071e54a18de3dfb47ba515869d71f9cc6a47637d353f6185b0dc06af9aaa21330cabdcdae04c5d285e883f87c1ceeb15f629b1c30cb22edba1abf8c5973a8d92f04392cd950f9bac5207db8a84cb44"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd, 0x0, 0xffff}, @generic={0x74, 0x10, 0xe, "ceeb09561086eb1c238da5c92148186bb70480f9c38bb41490e775bfcaf142918d89d1184b7427e5fcd35cc50a7d339a68987885e86c26edc21d0b756b1b7d4b6589f6757205158e9415f02bfd6c359014d36092a5987ebc49c809283bade98f98f7e455f756233be2bfc335fd7f385798"}, @ssp_cap={0x24, 0x10, 0xa, 0xa, 0x6, 0x10001, 0xf, 0x8, [0xc0c0, 0x3f00, 0xcf, 0xffc030, 0xf, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e8eef35a4c8c1cc60fa687a9ae45d1ad"}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x861}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x44, &(0x7f0000000640)=@string={0x44, 0x3, "41d5f9e898ffa2737b0650f05d651b7d328c9fe819132db3b2f208a24f33680b80515241c17259cdf2407a80fe129a147ba631c2ffc2f887f3e6520bb484f75a32d7"}}]}) shutdown(r3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e0000002080001040a0101020800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x24040840}, 0x815) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) close(r5) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x39, 0x1a, r5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fcntl$setlease(r8, 0x400, 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) 14.961498098s ago: executing program 3 (id=32): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340), &(0x7f0000000380)=0x4) recvmmsg(r2, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b588880", 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1ca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1668e5b309efda177b827c14e1e59e57a59774d9a207d394f8b262cb974444d941c9401556676af700fd38224908adba4b8aee34bca25112816982b78c0be11782e21f26b871d9870f08d7834856d8a5dc7b179af4e0195037bf8f88583e76883590a3b12847f967a26b34ee3189936", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db4235", 0x7d}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca53", 0xbf}, {0x0}, {&(0x7f00000008c0)="54586bae", 0x4}], 0x4}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 13.618996622s ago: executing program 3 (id=33): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r2, 0x2, 0x27, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000208205b20040000102030109028e0003010f10fa080b00020101300309040000"], 0x0) io_getevents(r2, 0x7, 0x0, &(0x7f00000000c0), 0x0) io_destroy(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffefffb) rt_sigtimedwait(&(0x7f0000001980)={[0x8000000000000001]}, 0x0, 0xffffffffffffffff, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare(0x20000400) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r4, 0x8010aebb, &(0x7f0000000040)={0x10000, 0x2000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r5, 0x0, 0x60042, 0x18f) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, &(0x7f0000000280)) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000198000/0x3000)=nil, 0x2) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x40000) read$FUSE(r6, &(0x7f0000009780)={0x2020}, 0x2020) pipe(&(0x7f0000000040)) 13.076558509s ago: executing program 4 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0), 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d000100000000000000000407000000", @ANYRES32=r4, @ANYBLOB="000016040a001800aaaaaaaaaa0c0000d014c728462b3c54127fe1333afe4c64d91300ba08e79fe95e3fcc17e41bb9e5a46f2d326c6bb7a2975ee4f08bc3e1f8f7a806ed4dac75c8109ae3ba315d74d1f1733910b81244f02ba1a17f35fb000498a8d2165361a17746ec87fb096da3378f8a6ffc72c73d7344eb302f87ac6198aad0fb7e230bfaff5c6fecd735da7a688e0672aa9cd052ae04437cd420e3332fd42253d0af968daf2b2657db3e2d3265eb8563a4"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) 13.068420879s ago: executing program 0 (id=36): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f00000002c0)={0x0, 0x7, 0x40000, 0xffffffff, 0xffffffff, 0x0, 0x3, 0x6}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.838959815s ago: executing program 2 (id=37): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="00000000000200001800128008000100736974000c00028008000100", @ANYRES32=r3, @ANYRES64, @ANYRES8=r1, @ANYBLOB="4976d600000000000000b7fb506cc6034f5d8e37cb57b9bf7843160d99daf2480d3e582171d3b496679a3f6300cc7c4e9ffe"], 0x40}, 0x1, 0xd, 0x0, 0x4c000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x1000}) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpriority(0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 9.792319356s ago: executing program 0 (id=39): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000000, 0x402000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x7f00, 0x6, 0x4, {{0x3c, 0x4, 0x0, 0x2, 0xf0, 0x64, 0x0, 0xf8, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0xf, 0x96, [@multicast2, @multicast1, @remote]}, @timestamp={0x44, 0x28, 0xb6, 0x0, 0x0, [0xffffffff, 0x6, 0xf, 0x5, 0x480, 0x9, 0x7, 0x4, 0x5]}, @timestamp={0x44, 0x1c, 0xb3, 0x0, 0x0, [0x3, 0x2, 0x6433, 0x3, 0x3, 0x4]}, @timestamp={0x44, 0x8, 0xe0, 0x0, 0x9, [0x80000001]}, @timestamp_addr={0x44, 0x2c, 0x21, 0x1, 0x7, [{@empty, 0x3}, {@local, 0x2}, {@private=0xa010102, 0x8000}, {@broadcast, 0x5}, {@broadcast, 0x44}]}, @timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x3, [{@loopback, 0x8}, {@broadcast, 0xffffffce}]}, @lsrr={0x83, 0xb, 0x30, [@rand_addr=0x64010101, @loopback]}, @timestamp={0x44, 0x28, 0xac, 0x0, 0x9, [0x0, 0x8, 0x81, 0x7235, 0xa84, 0x4, 0x7000, 0x4, 0x2]}, @timestamp_prespec={0x44, 0xc, 0x8d, 0x3, 0x3, [{@multicast2, 0x8001}]}]}}}}}) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f00000000c0)="6f448f13cdb98e976270128cef6ac39708d08df0cb5a31af61537122d0a376f34d5b7e05238dbfa0036aa1") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 9.676491345s ago: executing program 3 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r3 = gettid() syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_emit_ethernet(0x96, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)={0x1, 0x2, [0x129, 0x70f, 0x2d5, 0xfe]}) syz_io_uring_setup(0xf04, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r6 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x40040) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000840)=0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)) poll(&(0x7f0000001200)=[{r7, 0x132}], 0x1, 0x2) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) 9.319514774s ago: executing program 0 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r1, &(0x7f0000000080), 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x2000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x1000000) 8.53091324s ago: executing program 1 (id=42): r0 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xff) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x3, 0x0, @empty}}}, 0x108) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x78, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000010) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={"724548d4", 0xc0, 0x5, 0x9, 0xc6, 0x1, "9b6e1aef7949293f143ea9995f3363", '\x00', '^\"?`', "bce7538e", ["a770111d296dd09060da8f60", "ecdb3a90b3ee6dfc7a4be42b", "136f79db1416f3b26b6484e1", "0250667f4bc50f000000a396"]}) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000005e8e74af96cef7f56052ae76378fd6b1", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000000000000000bb"], 0x30}}, 0x0) 8.384392536s ago: executing program 2 (id=43): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x8002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x7, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9faf, 0xe, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x147c40, 0x0) setpgid(0x0, 0x0) setpgid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x6}, &(0x7f0000000040)) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000000000)) 6.928553637s ago: executing program 1 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x108, 0xffffffffffffffff, 0x1000000}, 0x38) 6.817697296s ago: executing program 2 (id=45): r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x9}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000440)={0x0, 0x0, 0x5d5, 0x4, 0x2, 0x4}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x202002, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3fffff) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200000, 0x50) renameat(r5, &(0x7f0000000340)='./file0\x00', r7, &(0x7f00000003c0)='./file0\x00') connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) 6.177859217s ago: executing program 4 (id=46): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x8002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x7, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9faf, 0xe, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x147c40, 0x0) setpgid(0x0, 0x0) setpgid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x6}, &(0x7f0000000040)) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000000000)) 6.019562208s ago: executing program 0 (id=47): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000e8c500010400"/20, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000003c0)={0x7, 0x1, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x4, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffffe00}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.725022482s ago: executing program 1 (id=48): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a661", 0x3f}, {&(0x7f0000000500)="f02ec70a0e8900b151d826894f", 0xd}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) r5 = dup2(r4, r4) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x2103, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="147504002a3ff09521c569028a3a3bb4f6bbc52523081c9ecb214e94cffbe4b1239790149b4bf7a9253d665863fb81e8c72b16f74180f2d0056bad83dd45047cde73395b65622d80a8a894011e0e1eaf6de73086af6b0714d88847e0dd40b0c53ed3ba456dd1111088931e", @ANYRES16=r3, @ANYBLOB="e34328bd70000800000010000000"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300, 0x0, 0x6, 0x0, @private=0xa210104, @broadcast, {[@timestamp_addr={0x44, 0xfffffffffffffd09, 0x8, 0x1, 0x0, [{@remote, 0x4}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000100), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) 3.885652213s ago: executing program 4 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/11], 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)={&(0x7f0000003480)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) creat(&(0x7f0000000300)='./file0\x00', 0x5000000) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) 3.732382905s ago: executing program 3 (id=50): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f00000002c0)={0x0, 0x7, 0x40000, 0xffffffff, 0xffffffff, 0x0, 0x3, 0x6}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.533580527s ago: executing program 1 (id=51): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 3.030294187s ago: executing program 4 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000440)={0x0, 0x0, 0x5d5, 0x4, 0x2, 0x4}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x202002, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3fffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200000, 0x50) renameat(r4, &(0x7f0000000340)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00') connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) 1.542484728s ago: executing program 3 (id=53): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340), &(0x7f0000000380)=0x4) recvmmsg(r2, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1ca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5707be06bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a2e2a151d9aa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1668e5b309efda177b827c14e1e59e57a59774d9a207d394f8b262cb974444d941c9401556676af700fd38224908adba4b8aee34bca25112816982b78c0be11782e21f26b871d9870f08d7834856d8a5dc7b179af4e0195037bf8f88583e76883590a3b12847f967a26b34ee3189936", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db4235", 0x7d}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca53", 0xbf}, {0x0}, {&(0x7f00000008c0)="54586bae", 0x4}], 0x4}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 1.120243624s ago: executing program 0 (id=54): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000900)={0x0, 0x0, r4, r5, 0x3, 0x3, 0x7f, 0x8000ffd, {0xfffffffe, 0x2, 0x7, 0x9, 0x8000, 0x7, 0x5, 0x1, 0x8001, 0xd24, 0x1000, 0x600000, 0x7, 0x2, "774f1b1330d057b122d1558fb7445442c528a974ff0f0000bb3500"}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x20008800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0xf00) 1.087407778s ago: executing program 4 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x6, &(0x7f0000000000)=0x3a) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r2, 0x0, 0xe9, 0x8, &(0x7f00000006c0)="d8968607ce19e45b32a822425dc6818041ad5cfe1b051fbc1a85057df48d992949cb4ff76fa9c25b4e6283becc42c15f057c81e01121274711069144269d8c2a63f491a4477571043210b4fce4cec79d561753f1e5a08acecb3cdb9c1d07756c3aeab2112479aa06f3f7ca4de41953c260c459bdf0682cde7b82e0aee128599912d11aa2d0c79ffbe4fe14fb8ab0247f369ca87a91ad4942c99cd70e7ac30feafdc1db6f228bab8d44e0e9f2369dff8bc8268b20af91d111e3896799e242107d0157382be630115f325269c38cac7506f2ac61f2f4c3a16cfb9259e71c5dea47c88be59b971b973cff", &(0x7f00000007c0)=""/8, 0x4b, 0x0, 0x1000, 0x94, &(0x7f0000000e40)="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", &(0x7f0000001e40)="bc4b275af8571caa5baf8e2ddd6d834916334a3d28b180b789a42f4a9ad9f938ee22d8b86cbc8b4e8511d1dd8b777de6b5d720464582780e67b3250e28275bfb289e40528c60de1b8b45b7279d293a0e5ff9c54b1547f23a432d792ff022dfe3aa913b0887571a16c7bce7fd5052abde35422dcda8504de54e0edc5815e1f46da51f19e34ac32c0b5fcfba1e35430ae6895bb2bd", 0x0, 0x0, 0x8}, 0x50) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c) ppoll(&(0x7f0000000040)=[{r8, 0x1380}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f00000030c0), 0x400000000000181, 0x20004050) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100a}) syz_open_procfs(0x0, 0x0) fanotify_init(0x40, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 589.747287ms ago: executing program 1 (id=56): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r3 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x108, r4, 0x1000000}, 0x38) 223.088118ms ago: executing program 3 (id=57): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000240)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f00000002c0)={r5, 0x7, 0x40000, 0xffffffff, 0xffffffff, 0x0, 0x3, 0x6}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=59): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0xffffffffffffff43, 0x0}) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x8970, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 59.566581][ T30] audit: type=1400 audit(1777365668.885:62): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.590474][ T30] audit: type=1400 audit(1777365668.905:63): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.593130][ T5592] cgroup: Unknown subsys name 'net' [ 59.620478][ T30] audit: type=1400 audit(1777365668.935:64): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.757306][ T5592] cgroup: Unknown subsys name 'cpuset' [ 59.764918][ T5592] cgroup: Unknown subsys name 'rlimit' [ 59.864512][ T30] audit: type=1400 audit(1777365669.175:65): avc: denied { setattr } for pid=5592 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.897184][ T30] audit: type=1400 audit(1777365669.175:66): avc: denied { create } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.941966][ T30] audit: type=1400 audit(1777365669.175:67): avc: denied { write } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.956984][ T5594] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.971104][ T30] audit: type=1400 audit(1777365669.175:68): avc: denied { read } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.991727][ T30] audit: type=1400 audit(1777365669.175:69): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.016557][ T30] audit: type=1400 audit(1777365669.175:70): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.039801][ T30] audit: type=1400 audit(1777365669.285:71): avc: denied { relabelto } for pid=5594 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.940760][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.824387][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.826610][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.832876][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.845007][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.847867][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.853763][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.867366][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.874636][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.874656][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.882878][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.890031][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.898093][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.903705][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.912792][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.918478][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.929599][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.931847][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.939759][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.947398][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.953221][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.959055][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.968068][ T4929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.982761][ T4929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.996756][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.008130][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.187310][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.195665][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.202845][ T5607] bridge_slave_0: entered allmulticast mode [ 64.212943][ T5607] bridge_slave_0: entered promiscuous mode [ 64.243527][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.251010][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.258203][ T5607] bridge_slave_1: entered allmulticast mode [ 64.264941][ T5607] bridge_slave_1: entered promiscuous mode [ 64.289782][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.296964][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.304063][ T5605] bridge_slave_0: entered allmulticast mode [ 64.311321][ T5605] bridge_slave_0: entered promiscuous mode [ 64.343371][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.350533][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.357738][ T5604] bridge_slave_0: entered allmulticast mode [ 64.364490][ T5604] bridge_slave_0: entered promiscuous mode [ 64.379532][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.386685][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.393787][ T5604] bridge_slave_1: entered allmulticast mode [ 64.401016][ T5604] bridge_slave_1: entered promiscuous mode [ 64.407615][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.414663][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.422019][ T5605] bridge_slave_1: entered allmulticast mode [ 64.428897][ T5605] bridge_slave_1: entered promiscuous mode [ 64.444165][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.479601][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.504964][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.528640][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.539182][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.563051][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.579903][ T5607] team0: Port device team_slave_0 added [ 64.612043][ T5607] team0: Port device team_slave_1 added [ 64.636730][ T5605] team0: Port device team_slave_0 added [ 64.648534][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.655711][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.662772][ T5612] bridge_slave_0: entered allmulticast mode [ 64.669663][ T5612] bridge_slave_0: entered promiscuous mode [ 64.676566][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.683628][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.691339][ T5606] bridge_slave_0: entered allmulticast mode [ 64.698163][ T5606] bridge_slave_0: entered promiscuous mode [ 64.706274][ T5604] team0: Port device team_slave_0 added [ 64.713568][ T5605] team0: Port device team_slave_1 added [ 64.734067][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.741223][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.748497][ T5612] bridge_slave_1: entered allmulticast mode [ 64.755235][ T5612] bridge_slave_1: entered promiscuous mode [ 64.761747][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.769069][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.776263][ T5606] bridge_slave_1: entered allmulticast mode [ 64.782904][ T5606] bridge_slave_1: entered promiscuous mode [ 64.790487][ T5604] team0: Port device team_slave_1 added [ 64.810904][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.817957][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.843890][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.873643][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.880700][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.906626][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.918059][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.925013][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.950937][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.975006][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.982007][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.007945][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.019192][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.026288][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.053338][ T5618] Bluetooth: hci1: command tx timeout [ 65.059103][ T4929] Bluetooth: hci4: command tx timeout [ 65.059131][ T5611] Bluetooth: hci0: command tx timeout [ 65.064713][ T5610] Bluetooth: hci3: command tx timeout [ 65.064960][ T5613] Bluetooth: hci2: command tx timeout [ 65.065359][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.102117][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.113058][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.125803][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.135493][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.142437][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.168491][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.197048][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.222024][ T5606] team0: Port device team_slave_0 added [ 65.229652][ T5606] team0: Port device team_slave_1 added [ 65.242913][ T5612] team0: Port device team_slave_0 added [ 65.268566][ T5612] team0: Port device team_slave_1 added [ 65.315716][ T5607] hsr_slave_0: entered promiscuous mode [ 65.321873][ T5607] hsr_slave_1: entered promiscuous mode [ 65.331740][ T5605] hsr_slave_0: entered promiscuous mode [ 65.337758][ T5605] hsr_slave_1: entered promiscuous mode [ 65.343563][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 65.349599][ T5605] Cannot create hsr debugfs directory [ 65.355964][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.362967][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.388882][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.410694][ T5604] hsr_slave_0: entered promiscuous mode [ 65.416706][ T5604] hsr_slave_1: entered promiscuous mode [ 65.422541][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 65.428362][ T5604] Cannot create hsr debugfs directory [ 65.444903][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.451893][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.478040][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.489388][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.496480][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.522451][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.534377][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.541379][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.567475][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.705150][ T5606] hsr_slave_0: entered promiscuous mode [ 65.711200][ T5606] hsr_slave_1: entered promiscuous mode [ 65.717177][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 65.722914][ T5606] Cannot create hsr debugfs directory [ 65.735882][ T5612] hsr_slave_0: entered promiscuous mode [ 65.742004][ T5612] hsr_slave_1: entered promiscuous mode [ 65.748347][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 65.754058][ T5612] Cannot create hsr debugfs directory [ 65.836645][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.844725][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.025190][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.035279][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.042992][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.051957][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.063152][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.073234][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.086340][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.096317][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.146611][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.160967][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.168988][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.177427][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.192197][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.201813][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.209424][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.220133][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.316379][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.325580][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.333681][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.343225][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.352990][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.362824][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.377462][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.387953][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.459245][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.491985][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.503798][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.511978][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.521459][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.544494][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.560174][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.572378][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.581406][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.603660][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.633219][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.647150][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.654339][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.676453][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.683593][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.717290][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.727180][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.738554][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.750925][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.760051][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.777009][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.784101][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.794388][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.803918][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.812130][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.821590][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.844671][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.864126][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.871255][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.950906][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.998015][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.005202][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.026357][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.051305][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.058495][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.104250][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.118374][ T5611] Bluetooth: hci4: command tx timeout [ 67.118402][ T5618] Bluetooth: hci2: command tx timeout [ 67.124353][ T5611] Bluetooth: hci3: command tx timeout [ 67.126907][ T5613] Bluetooth: hci0: command tx timeout [ 67.131150][ T4929] Bluetooth: hci1: command tx timeout [ 67.177648][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.184855][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.211916][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.249421][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.256585][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.304374][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.340895][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.348046][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.379320][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.386499][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.631924][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.876762][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.038262][ T5605] veth0_vlan: entered promiscuous mode [ 68.083409][ T5605] veth1_vlan: entered promiscuous mode [ 68.131135][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.222515][ T5605] veth0_macvtap: entered promiscuous mode [ 68.262384][ T5607] veth0_vlan: entered promiscuous mode [ 68.273159][ T5605] veth1_macvtap: entered promiscuous mode [ 68.288143][ T5604] veth0_vlan: entered promiscuous mode [ 68.296105][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.319144][ T5604] veth1_vlan: entered promiscuous mode [ 68.332129][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.339519][ T5607] veth1_vlan: entered promiscuous mode [ 68.359892][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.392442][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.430964][ T5612] veth0_vlan: entered promiscuous mode [ 68.437892][ T3321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.447471][ T3321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.462800][ T5607] veth0_macvtap: entered promiscuous mode [ 68.469906][ T5604] veth0_macvtap: entered promiscuous mode [ 68.478598][ T3321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.488147][ T3321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.511769][ T5607] veth1_macvtap: entered promiscuous mode [ 68.522426][ T5604] veth1_macvtap: entered promiscuous mode [ 68.532347][ T5612] veth1_vlan: entered promiscuous mode [ 68.573663][ T5606] veth0_vlan: entered promiscuous mode [ 68.603347][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.626935][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.634509][ T5606] veth1_vlan: entered promiscuous mode [ 68.642048][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.653925][ T5612] veth0_macvtap: entered promiscuous mode [ 68.668540][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.681572][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.692314][ T5612] veth1_macvtap: entered promiscuous mode [ 68.693396][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.720196][ T1022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.729951][ T1022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.751128][ T1022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.759953][ T1022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.783314][ T1022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.792344][ T1022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.803959][ T5606] veth0_macvtap: entered promiscuous mode [ 68.822483][ T1022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.831321][ T1022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.855852][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.866402][ T5606] veth1_macvtap: entered promiscuous mode [ 68.866858][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.881975][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.901087][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.926703][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 68.926717][ T30] audit: type=1400 audit(1777365678.245:87): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.iGyrDu/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.968080][ T30] audit: type=1400 audit(1777365678.275:88): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.973595][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.002508][ T30] audit: type=1400 audit(1777365678.275:89): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.iGyrDu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.016883][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.031387][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.044329][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.051319][ T1022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.054331][ T30] audit: type=1400 audit(1777365678.275:90): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.083528][ T1022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.098690][ T5605] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.118865][ T30] audit: type=1400 audit(1777365678.315:91): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.iGyrDu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.147760][ T30] audit: type=1400 audit(1777365678.315:92): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/root/syzkaller.iGyrDu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.180164][ T30] audit: type=1400 audit(1777365678.315:93): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.181129][ T1022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.207606][ T4929] Bluetooth: hci2: command tx timeout [ 69.209632][ T5618] Bluetooth: hci0: command tx timeout [ 69.214255][ T4929] Bluetooth: hci3: command tx timeout [ 69.220286][ T5618] Bluetooth: hci4: command tx timeout [ 69.229643][ T4929] Bluetooth: hci1: command tx timeout [ 69.237021][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.254382][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.263152][ T30] audit: type=1400 audit(1777365678.355:94): avc: denied { mounton } for pid=5605 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.263821][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.293978][ T30] audit: type=1400 audit(1777365678.355:95): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="gadgetfs" ino=8274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.349571][ T1153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.377830][ T30] audit: type=1400 audit(1777365678.355:96): avc: denied { mount } for pid=5605 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.425682][ T1153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.436040][ T1153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.461984][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.470664][ T1153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.480846][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.483466][ T5798] faux_driver vgem: [drm] Unknown color mode 135163; guessing buffer size. [ 69.546390][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.561570][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.653095][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.672343][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.861996][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.893965][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.874881][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.912739][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.016728][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.030936][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.198852][ T5663] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.275603][ T4929] Bluetooth: hci1: command tx timeout [ 71.281128][ T4929] Bluetooth: hci4: command tx timeout [ 71.286580][ T4929] Bluetooth: hci3: command tx timeout [ 71.292497][ T4929] Bluetooth: hci0: command tx timeout [ 71.298002][ T4929] Bluetooth: hci2: command tx timeout [ 71.408586][ T5663] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 71.660581][ T5663] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.783638][ T5663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.828290][ T5663] usb 5-1: Product: syz [ 71.845114][ T5663] usb 5-1: Manufacturer: syz [ 71.859556][ T5663] usb 5-1: SerialNumber: syz [ 72.123846][ T5812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 72.306121][ T5732] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.442659][ T803] libceph: connect (1)[c::]:6789 error -101 [ 72.477122][ T5835] Zero length message leads to an empty skb [ 72.487650][ T803] libceph: mon0 (1)[c::]:6789 connect error [ 72.780554][ T10] libceph: connect (1)[c::]:6789 error -101 [ 72.816754][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 72.886959][ T5812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 73.173321][ T5828] ceph: No mds server is up or the cluster is laggy [ 73.277431][ T5663] cdc_ncm 5-1:1.0: failed to get mac address [ 73.285813][ T5663] cdc_ncm 5-1:1.0: bind() failure [ 73.313714][ T5663] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 73.326048][ T5663] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 73.346209][ T5663] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 73.374362][ T5663] usb 5-1: USB disconnect, device number 2 [ 73.550352][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12'. [ 73.666096][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.733574][ T5848] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 73.746801][ T5848] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 73.874851][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 73.898096][ T5848] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 73.900726][ T24] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 73.948229][ T24] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.970291][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 73.970307][ T30] audit: type=1400 audit(1777365683.285:137): avc: denied { name_bind } for pid=5846 comm="syz.3.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 74.001652][ T24] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 74.019341][ T24] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.052274][ T24] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 74.079599][ T24] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.116618][ T24] usb 1-1: string descriptor 0 read error: -22 [ 74.138064][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 74.167476][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.244550][ T24] adutux 1-1:168.0: interrupt endpoints not found [ 74.386901][ T5852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=5852 comm=syz.4.15 [ 74.606432][ T30] audit: type=1400 audit(1777365683.915:138): avc: denied { write } for pid=5841 comm="syz.0.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.672034][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.753529][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.776737][ T30] audit: type=1400 audit(1777365683.995:139): avc: denied { create } for pid=5859 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.837454][ T30] audit: type=1400 audit(1777365684.015:140): avc: denied { name_bind } for pid=5857 comm="syz.3.17" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.879316][ T10] usb 1-1: USB disconnect, device number 2 [ 74.917125][ T30] audit: type=1400 audit(1777365684.015:141): avc: denied { node_bind } for pid=5857 comm="syz.3.17" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.943265][ T5863] bridge_slave_0: left allmulticast mode [ 74.975217][ T5863] bridge_slave_0: left promiscuous mode [ 74.982859][ T30] audit: type=1400 audit(1777365684.095:142): avc: denied { create } for pid=5857 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.015942][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.044843][ T30] audit: type=1400 audit(1777365684.095:143): avc: denied { bind } for pid=5857 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.091612][ T30] audit: type=1400 audit(1777365684.105:144): avc: denied { setopt } for pid=5857 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.112079][ T5863] bridge_slave_1: left allmulticast mode [ 75.150378][ T5863] bridge_slave_1: left promiscuous mode [ 75.157767][ T5867] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 75.165521][ T30] audit: type=1400 audit(1777365684.105:145): avc: denied { accept } for pid=5857 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.174991][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.202289][ T5867] UDF-fs: Scanning with blocksize 512 failed [ 75.223912][ T30] audit: type=1400 audit(1777365684.105:146): avc: denied { write } for pid=5857 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.260555][ T5867] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 75.274185][ T5867] UDF-fs: Scanning with blocksize 1024 failed [ 75.324513][ T5867] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 75.332185][ T5867] UDF-fs: Scanning with blocksize 2048 failed [ 75.344686][ T5867] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 75.346620][ T5868] netlink: 'syz.3.19': attribute type 2 has an invalid length. [ 75.362999][ T5863] bond0: (slave bond_slave_0): Releasing backup interface [ 75.366770][ T5867] UDF-fs: Scanning with blocksize 4096 failed [ 75.377202][ T5868] netlink: 'syz.3.19': attribute type 2 has an invalid length. [ 75.535008][ T5863] bond0: (slave bond_slave_1): Releasing backup interface [ 75.594094][ T5863] team0: Port device team_slave_0 removed [ 75.641061][ T5863] team0: Port device team_slave_1 removed [ 75.660155][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.687703][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.713604][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.737061][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.752673][ T5863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.827137][ T5730] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.009671][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 76.072443][ T5730] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 76.124776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.278234][ T5730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 76.327690][ T5730] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 76.419371][ T5730] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 76.477660][ T5889] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 76.491036][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.521008][ T5889] UDF-fs: Scanning with blocksize 512 failed [ 76.533920][ T5889] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 76.550406][ T5889] UDF-fs: Scanning with blocksize 1024 failed [ 76.566828][ T5889] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 76.594984][ T5889] UDF-fs: Scanning with blocksize 2048 failed [ 76.595202][ T5890] netlink: 'syz.2.22': attribute type 2 has an invalid length. [ 76.623977][ T5730] usb 1-1: Product: syz [ 76.646726][ T5730] usb 1-1: Manufacturer: syz [ 76.669489][ T5730] usb 1-1: SerialNumber: syz [ 76.714667][ T5890] netlink: 'syz.2.22': attribute type 2 has an invalid length. [ 76.744674][ T5730] usb 1-1: config 0 descriptor?? [ 76.779543][ T5730] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 76.948043][ T5889] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 76.962642][ T5889] UDF-fs: Scanning with blocksize 4096 failed [ 77.676449][ T5613] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 77.684970][ T5613] Bluetooth: hci1: Injecting HCI hardware error event [ 77.692981][ T5613] Bluetooth: hci1: hardware error 0x00 [ 77.967126][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 77.984776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.023069][ T5899] netlink: 'syz.1.25': attribute type 11 has an invalid length. [ 78.036632][ T5901] netlink: 92 bytes leftover after parsing attributes in process `syz.4.26'. [ 78.141492][ T5904] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 78.251713][ T3321] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.251941][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 78.303359][ T3321] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.337344][ T5730] scsi host1: usb-storage 1-1:0.0 [ 78.356080][ T5899] netlink: 'syz.1.25': attribute type 11 has an invalid length. [ 78.377999][ T3321] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.416676][ T5730] usb 1-1: USB disconnect, device number 3 [ 78.477416][ T3321] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.044855][ T5732] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.237245][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 79.265208][ T5732] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 79.281070][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 79.281087][ T30] audit: type=1400 audit(1777365688.595:168): avc: denied { create } for pid=5916 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.317729][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.335270][ T5732] usb 2-1: Product: syz [ 79.342818][ T30] audit: type=1400 audit(1777365688.625:169): avc: denied { setopt } for pid=5916 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.364854][ T5732] usb 2-1: Manufacturer: syz [ 79.372263][ T5732] usb 2-1: SerialNumber: syz [ 79.404114][ T5732] usb 2-1: config 0 descriptor?? [ 79.412517][ T30] audit: type=1400 audit(1777365688.685:170): avc: denied { map_read map_write } for pid=5918 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.450786][ T5732] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 79.466732][ T5732] dvb-usb: bulk message failed: -22 (2/0) [ 79.491036][ T5732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.501021][ T5715] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.520282][ T5732] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 79.531744][ T5732] usb 2-1: media controller created [ 79.565105][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 79.581544][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.612036][ T5732] usb 2-1: selecting invalid altsetting 7 [ 79.620484][ T5732] cxusb: set interface failed [ 79.626710][ T5732] dvb-usb: bulk message failed: -22 (1/0) [ 79.666644][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.687917][ T30] audit: type=1400 audit(1777365689.005:171): avc: denied { ioctl } for pid=5908 comm="syz.1.27" path="socket:[8923]" dev="sockfs" ino=8923 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.694084][ T5909] syzkaller1: entered promiscuous mode [ 79.722909][ T5715] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 79.738588][ T5715] usb 5-1: config 114 has no interface number 0 [ 79.752406][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 79.763624][ T5732] DVB: Unable to find symbol lgdt330x_attach() [ 79.770772][ T5715] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 79.775273][ T30] audit: type=1400 audit(1777365689.085:172): avc: denied { append } for pid=5908 comm="syz.1.27" name="i2c-1" dev="devtmpfs" ino=2793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.784181][ T5732] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 79.813508][ T5909] syzkaller1: entered allmulticast mode [ 79.821413][ T5922] cxusb: i2c wr: len=80 is too big! [ 79.821413][ T5922] [ 79.822112][ T5715] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 79.847234][ T10] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.859715][ T5613] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 79.869676][ T10] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 79.881537][ T5715] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 79.892547][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 79.900180][ T5715] usb 5-1: config 114 interface 240 has no altsetting 0 [ 79.913870][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.40 [ 79.935759][ T5715] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 79.953862][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.966984][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.984816][ T10] usb 1-1: Product: 핁ﾘ玢ٻ敝紛谲ጙ댭ꈈ㍏୨冀䅒狁쵙䃲聺ዾᒚꙻ숱싿蟸୒蒴嫷휲 [ 79.999429][ T5715] usb 5-1: Product: ӿ [ 80.005035][ T5715] usb 5-1: Manufacturer: ࠝ [ 80.010966][ T10] usb 1-1: SerialNumber: syz [ 80.018044][ T5915] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 80.029381][ T5915] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 80.036597][ T5732] rc_core: IR keymap rc-dvico-portable not found [ 80.048645][ T5917] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 80.052636][ T5732] Registered IR keymap rc-empty [ 80.073122][ T5732] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 80.100540][ T5732] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 80.116492][ T5732] dvb-usb: schedule remote query interval to 100 msecs. [ 80.124001][ T5732] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 80.219032][ T5705] usb 2-1: USB disconnect, device number 3 [ 80.226202][ T5732] dvb-usb: bulk message failed: -22 (1/0) [ 80.286968][ T5917] netlink: 43 bytes leftover after parsing attributes in process `syz.0.31'. [ 80.318037][ T5715] ir_usb 5-1:114.240: IR Dongle converter detected [ 80.334323][ T30] audit: type=1400 audit(1777365689.645:173): avc: denied { bind } for pid=5916 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.336308][ T5917] Bluetooth: MGMT ver 1.23 [ 80.363987][ T5715] usb 5-1: IRDA class descriptor not found, device not bound [ 80.389726][ T5917] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 80.411437][ T5715] usb 5-1: USB disconnect, device number 3 [ 80.441609][ T30] audit: type=1400 audit(1777365689.645:174): avc: denied { write } for pid=5916 comm="syz.0.31" path="socket:[8944]" dev="sockfs" ino=8944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.520899][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 80.553418][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 80.583695][ T5705] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 80.603253][ T10] usb 1-1: USB disconnect, device number 4 [ 81.125775][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.230189][ T29] cfg80211: failed to load regulatory.db [ 82.637743][ T5941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 82.663331][ T30] audit: type=1400 audit(1777365691.975:175): avc: denied { create } for pid=5936 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.785611][ T30] audit: type=1400 audit(1777365691.975:176): avc: denied { bind } for pid=5936 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.915121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 83.934772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 84.054774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 84.234772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 84.274783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 84.354774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.500963][ T30] audit: type=1400 audit(1777365693.815:177): avc: denied { create } for pid=5934 comm="syz.4.35" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.583072][ T5944] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 84.592221][ T5944] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 84.601357][ T5944] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 84.692107][ T5946] netlink: 92 bytes leftover after parsing attributes in process `syz.1.38'. [ 85.318147][ T30] audit: type=1400 audit(1777365694.625:178): avc: denied { map } for pid=5951 comm="syz.3.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.396306][ T5959] ======================================================= [ 85.396306][ T5959] WARNING: The mand mount option has been deprecated and [ 85.396306][ T5959] and is ignored by this kernel. Remove the mand [ 85.396306][ T5959] option from the mount to silence this warning. [ 85.396306][ T5959] ======================================================= [ 85.439528][ T30] audit: type=1400 audit(1777365694.635:179): avc: denied { read write } for pid=5951 comm="syz.3.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.543374][ T30] audit: type=1400 audit(1777365694.715:180): avc: denied { mounton } for pid=5951 comm="syz.3.40" path="/10/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.611602][ T30] audit: type=1400 audit(1777365694.845:181): avc: denied { mount } for pid=5951 comm="syz.3.40" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.792184][ T5957] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.155216][ T30] audit: type=1400 audit(1777365695.105:182): avc: denied { mounton } for pid=5951 comm="syz.3.40" path="/10/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 86.469161][ T5965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36446 sclass=netlink_route_socket pid=5965 comm=syz.1.42 [ 86.790722][ T30] audit: type=1400 audit(1777365696.105:183): avc: denied { mount } for pid=5951 comm="syz.3.40" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.571690][ T5613] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 88.582666][ T5613] Bluetooth: hci0: Injecting HCI hardware error event [ 88.593977][ T5613] Bluetooth: hci0: hardware error 0x00 [ 89.214761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.274760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.433610][ T30] audit: type=1400 audit(1777365697.875:184): avc: denied { create } for pid=5973 comm="syz.1.44" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.574288][ T30] audit: type=1400 audit(1777365698.795:185): avc: denied { unlink } for pid=5606 comm="syz-executor" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.951890][ T30] audit: type=1400 audit(1777365699.265:186): avc: denied { connect } for pid=5984 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.059691][ T30] audit: type=1400 audit(1777365699.315:187): avc: denied { write } for pid=5984 comm="syz.1.48" path="socket:[9030]" dev="sockfs" ino=9030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.139350][ T30] audit: type=1400 audit(1777365699.355:188): avc: denied { ioctl } for pid=5979 comm="syz.0.47" path="socket:[9382]" dev="sockfs" ino=9382 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.278822][ T5989] tipc: Started in network mode [ 90.305163][ T5989] tipc: Node identity a6be410c53df, cluster identity 4711 [ 90.358789][ T5989] tipc: Enabled bearer , priority 0 [ 90.400981][ T5991] syzkaller0: entered promiscuous mode [ 90.436427][ T5991] syzkaller0: entered allmulticast mode [ 90.518332][ T30] audit: type=1400 audit(1777365699.805:189): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.538224][ T6002] capability: warning: `syz.4.49' uses deprecated v2 capabilities in a way that may be insecure [ 90.614289][ T5985] tipc: Resetting bearer [ 90.689632][ T30] audit: type=1400 audit(1777365699.925:190): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.834811][ T6002] binder: 6000:6002 ioctl 8100587e 200000000340 returned -22 [ 90.942949][ T5979] tipc: Resetting bearer [ 91.155697][ T5979] tipc: Disabling bearer [ 91.261304][ T6007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.685469][ T5613] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 93.133583][ T30] audit: type=1400 audit(1777365702.445:191): avc: denied { write } for pid=6011 comm="syz.1.51" name="file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.254603][ T30] audit: type=1400 audit(1777365702.445:192): avc: denied { open } for pid=6011 comm="syz.1.51" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.410617][ T30] audit: type=1400 audit(1777365702.485:193): avc: denied { ioctl } for pid=6011 comm="syz.1.51" path="/10/file0" dev="tmpfs" ino=71 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.449491][ T30] audit: type=1400 audit(1777365702.595:194): avc: denied { map } for pid=6020 comm="syz.4.55" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.543521][ T6024] binder: BINDER_SET_CONTEXT_MGR already set [ 93.550124][ T6024] binder: 6020:6024 ioctl 4018620d 2000000002c0 returned -16 [ 93.602626][ T6021] bridge_slave_0: left allmulticast mode [ 93.634839][ T6021] bridge_slave_0: left promiscuous mode [ 93.661950][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.731504][ T6021] bridge_slave_1: left allmulticast mode [ 93.742497][ T6021] bridge_slave_1: left promiscuous mode [ 93.754099][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.815583][ T6021] bond0: (slave bond_slave_0): Releasing backup interface [ 93.857721][ T6021] bond0: (slave bond_slave_1): Releasing backup interface [ 93.971956][ T6021] team0: Port device team_slave_0 removed [ 94.020678][ T6021] team0: Port device team_slave_1 removed [ 94.046569][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.195933][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.404200][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.412092][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.454259][ T6021] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.549639][ T6038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.562030][ T6038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.544721][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 199.551728][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6027/1:b..l [ 199.559894][ C1] rcu: (detected by 1, t=10506 jiffies, g=13049, q=595 ncpus=2) [ 199.567599][ C1] task:syz.1.56 state:R running task stack:26024 pid:6027 tgid:6026 ppid:5606 task_flags:0x400040 flags:0x00080000 [ 199.581398][ C1] Call Trace: [ 199.584671][ C1] [ 199.587599][ C1] __schedule+0x10e9/0x6820 [ 199.592129][ C1] ? __pfx___schedule+0x10/0x10 [ 199.596970][ C1] ? mark_held_locks+0x40/0x70 [ 199.601732][ C1] preempt_schedule_irq+0x50/0x90 [ 199.606748][ C1] irqentry_exit+0x1fe/0x790 [ 199.611333][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.617305][ C1] RIP: 0010:lock_release+0x19e/0x310 [ 199.622584][ C1] Code: ff 65 0f c1 05 9b 3e 26 12 83 f8 01 0f 85 28 01 00 00 9c 58 f6 c4 02 0f 85 13 01 00 00 41 f7 c6 00 02 00 00 0f 85 c0 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ed f6 25 12 0f 85 4e 01 00 00 48 83 c4 [ 199.642180][ C1] RSP: 0018:ffffc90003f87490 EFLAGS: 00000206 [ 199.648236][ C1] RAX: 0000000000000046 RBX: ffffffff8e7e54e0 RCX: ffffc90003f8749c [ 199.656200][ C1] RDX: 0000000000000001 RSI: ffffffff8def932e RDI: ffffffff8c1c3480 [ 199.664158][ C1] RBP: ffffffff824536ed R08: 0000000000000001 R09: 0000000000000000 [ 199.672117][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a6e4a00 [ 199.680082][ C1] R13: ffffc90003f87500 R14: 0000000000000202 R15: 0000000000000002 [ 199.688046][ C1] ? filemap_get_entry+0x22d/0x450 [ 199.693170][ C1] filemap_get_entry+0x232/0x450 [ 199.698108][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 199.703562][ C1] ? do_raw_spin_lock+0x128/0x260 [ 199.708587][ C1] ? xas_find+0x32c/0x8e0 [ 199.712910][ C1] shmem_get_folio_gfp+0x221/0x1900 [ 199.718111][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 199.723743][ C1] ? filemap_map_pages+0x9c1/0x2140 [ 199.728943][ C1] shmem_fault+0x1f9/0xa20 [ 199.733361][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 199.738300][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 199.743758][ C1] ? find_held_lock+0x2b/0x80 [ 199.748429][ C1] __do_fault+0x10b/0x440 [ 199.752753][ C1] do_fault+0xa99/0x1750 [ 199.756995][ C1] __handle_mm_fault+0x187d/0x2a00 [ 199.762105][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 199.767479][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 199.772934][ C1] ? pte_offset_map_lock+0x174/0x320 [ 199.778213][ C1] ? find_held_lock+0x2b/0x80 [ 199.782972][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 199.787997][ C1] handle_mm_fault+0x36d/0xa20 [ 199.792764][ C1] __get_user_pages+0x1178/0x32a0 [ 199.797793][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 199.803164][ C1] populate_vma_page_range+0x267/0x3f0 [ 199.808620][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 199.814594][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 199.820392][ C1] ? do_mmap+0x93f/0x12f0 [ 199.824721][ C1] __mm_populate+0x107/0x3a0 [ 199.829307][ C1] ? __pfx___mm_populate+0x10/0x10 [ 199.834418][ C1] ? up_write+0x28c/0x4f0 [ 199.838745][ C1] vm_mmap_pgoff+0x37f/0x470 [ 199.843344][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 199.848454][ C1] ? do_futex+0x192/0x350 [ 199.852781][ C1] ? __pfx_do_futex+0x10/0x10 [ 199.857476][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 199.862146][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 199.867084][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 199.872360][ C1] ? xfd_validate_state+0x129/0x190 [ 199.877569][ C1] __x64_sys_mmap+0x125/0x190 [ 199.882243][ C1] do_syscall_64+0x10b/0xf80 [ 199.886827][ C1] ? clear_bhb_loop+0x40/0x90 [ 199.891499][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.897380][ C1] RIP: 0033:0x7fe057f9cdd9 [ 199.901788][ C1] RSP: 002b:00007fe058e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 199.910190][ C1] RAX: ffffffffffffffda RBX: 00007fe058215fa0 RCX: 00007fe057f9cdd9 [ 199.918147][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 199.926103][ C1] RBP: 00007fe058032d69 R08: ffffffffffffffff R09: 00000000c8b93000 [ 199.934060][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 199.942028][ C1] R13: 00007fe058216038 R14: 00007fe058215fa0 R15: 00007fffca614538 [ 199.950020][ C1] [ 199.953041][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g13049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 199.964224][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 199.974178][ C1] rcu: RCU grace-period kthread stack dump: [ 199.980048][ C1] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 199.993530][ C1] Call Trace: [ 199.996799][ C1] [ 199.999723][ C1] __schedule+0x10e9/0x6820 [ 200.004243][ C1] ? __pfx___schedule+0x10/0x10 [ 200.009086][ C1] ? find_held_lock+0x2b/0x80 [ 200.013757][ C1] ? schedule+0x2bf/0x390 [ 200.018082][ C1] schedule+0xdd/0x390 [ 200.022140][ C1] schedule_timeout+0x127/0x280 [ 200.026989][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 200.032359][ C1] ? __pfx_process_timeout+0x10/0x10 [ 200.037646][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 200.043441][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 200.048904][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 200.053664][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 200.058944][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 200.064401][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 200.069347][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 200.074563][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 200.080380][ C1] rcu_gp_kthread+0x179/0x230 [ 200.085059][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 200.090249][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 200.096051][ C1] ? __kthread_parkme+0x18c/0x230 [ 200.101073][ C1] ? kthread+0x13a/0x450 [ 200.105305][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 200.110494][ C1] kthread+0x370/0x450 [ 200.114555][ C1] ? __pfx_kthread+0x10/0x10 [ 200.119138][ C1] ret_from_fork+0x72b/0xd50 [ 200.123725][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 200.128832][ C1] ? __switch_to+0x800/0x1100 [ 200.133508][ C1] ? __pfx_kthread+0x10/0x10 [ 200.138092][ C1] ret_from_fork_asm+0x1a/0x30 [ 200.142866][ C1] [ 200.145874][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 200.152194][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 200.161120][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.171166][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 200.176791][ C1] Code: 96 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 e0 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 200.196395][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 200.202456][ C1] RAX: 00000000003bdf8f RBX: ffff88801e2c2500 RCX: ffffffff8b89b045 [ 200.210417][ C1] RDX: 0000000000000000 RSI: ffffffff8df1e844 RDI: ffffffff8c1c3480 [ 200.218384][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 200.226344][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 200.234302][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d78850 [ 200.242259][ C1] FS: 0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 200.251178][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.257750][ C1] CR2: 0000001b332fdff8 CR3: 000000005fa8d000 CR4: 00000000003526f0 [ 200.265714][ C1] Call Trace: [ 200.268980][ C1] [ 200.271898][ C1] default_idle+0x9/0x10 [ 200.276133][ C1] default_idle_call+0x6c/0xb0 [ 200.280891][ C1] do_idle+0x464/0x590 [ 200.284951][ C1] ? __pfx_do_idle+0x10/0x10 [ 200.289530][ C1] ? do_idle+0x30c/0x590 [ 200.293769][ C1] cpu_startup_entry+0x4f/0x60 [ 200.298524][ C1] start_secondary+0x21d/0x2d0 [ 200.303278][ C1] ? __pfx_start_secondary+0x10/0x10 [ 200.308561][ C1] common_startup_64+0x13e/0x148 [ 200.313508][ C1]