last executing test programs: 16m20.915085952s ago: executing program 0 (id=729): sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000040)=0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) 16m19.465822176s ago: executing program 0 (id=732): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008040) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4014) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x2bc67543}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, r7, 0x1, 0x0, 0x10, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16m17.662655203s ago: executing program 0 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) 16m16.539486353s ago: executing program 0 (id=735): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() iopl(0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = syz_io_uring_setup(0xd7, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 16m14.479683065s ago: executing program 0 (id=742): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x308020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0xc000003, 0xf, &(0x7f0000000180)=[0x138d, 0xa, 0xc, 0x7, 0xc0000080, 0xffffffff, 0x7, 0xffffffff, 0x8f0, 0xe, 0x4, 0x200006, 0x85, 0x8811, 0x10503], 0x1, 0x4000007}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)='}', 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x24000000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') syz_usb_connect(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6"], 0x0) 16m10.677449751s ago: executing program 0 (id=750): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x584, 0x0, 0xfff}]}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x1, 0x6, 0x200}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdb) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000ec0)="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", 0xd39, r4}, 0x38) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 15m56.13381351s ago: executing program 32 (id=750): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x584, 0x0, 0xfff}]}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x1, 0x6, 0x200}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdb) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000ec0)="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", 0xd39, r4}, 0x38) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 11m45.868928825s ago: executing program 4 (id=1299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) 11m44.373873137s ago: executing program 4 (id=1301): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) 11m43.241859462s ago: executing program 4 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4000000) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x80) r4 = socket(0x29, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xa00, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r7, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0x3f00}], 0x2) 11m40.379404719s ago: executing program 4 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) 11m38.989255284s ago: executing program 4 (id=1313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11m38.358297742s ago: executing program 4 (id=1315): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_pidfd_open(r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0x3, 0x0, 0x0, r6}) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f00000000c0)={0x3, 0xff}) 11m23.446061033s ago: executing program 33 (id=1315): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_pidfd_open(r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0x3, 0x0, 0x0, r6}) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f00000000c0)={0x3, 0xff}) 2m53.867531791s ago: executing program 3 (id=2435): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1411, 0x301, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x24048041}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000200)={0xcd, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2m52.332212925s ago: executing program 3 (id=2439): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x488c0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0xe8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_RULES={0xc4, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x78c3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x810) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r6 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) 2m47.24608794s ago: executing program 3 (id=2450): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x102, 0x6, {0x5, 0x9, 0xd, 0x58}}) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xba}], 0x1}, 0x40) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000100), 0x6, 0x2002c0) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 2m46.010466936s ago: executing program 3 (id=2452): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) 2m44.970175848s ago: executing program 3 (id=2454): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000001180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b40)={0xffffffffffffffff, &(0x7f0000001ac0), 0x0, 0x4}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) fcntl$setlease(r4, 0x400, 0x0) close(0x3) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m43.809305809s ago: executing program 3 (id=2457): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sync() sync() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x50, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x40000) unshare(0x22020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.464282087s ago: executing program 34 (id=2457): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sync() sync() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x50, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x40000) unshare(0x22020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 18.907655256s ago: executing program 1 (id=2774): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0x1}, &(0x7f0000000280)=0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x1, 0x3, 0x47, 0x100, 0x1, 0x3, 0x5}, 0x1c) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r10 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$CEC_ADAP_S_PHYS_ADDR(r10, 0x40026102, &(0x7f0000000200)=0x7d03) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 17.797525024s ago: executing program 6 (id=2777): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) 14.385223673s ago: executing program 6 (id=2782): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x33a, 0xf9, 0xff, 0x8, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb0}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xb4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r6, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r7 = socket(0x10, 0x3, 0x1000) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x4, 0x804, 0x1, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x1, 0x0, 0x1}, 0x1, @can={{0x2}, 0x1, 0x1, 0x0, 0x0, "eaae41b7a7ad9d15"}}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x8800) io_setup(0x2, &(0x7f0000000000)=0x0) r9 = eventfd(0x0) io_submit(r8, 0x2, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r9, 0x0, 0x0, 0x79f, 0x0, 0x1, r9}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xfffe, r9, 0x0, 0x0, 0x7, 0x0, 0x3, r9}]) 13.323162316s ago: executing program 6 (id=2786): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640), &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff00000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9", 0x7e}, {&(0x7f0000002700)="d6f4de", 0x3}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 12.867688908s ago: executing program 1 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000008000000181100", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) 11.705939318s ago: executing program 6 (id=2789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x33) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0xf00, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b398adda1"], 0x1000f) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 10.891624239s ago: executing program 1 (id=2791): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/80, 0x50}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, &(0x7f0000000100)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) 9.917606366s ago: executing program 5 (id=2793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x2, 0x0, 0x7) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0x400, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 9.212078594s ago: executing program 1 (id=2794): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) lstat(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, r5, &(0x7f0000000880)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xfffffffffffffff2, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e6, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x4, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r7, 0x24, &(0x7f0000000080)={0x2, 0x1, 0xbb7, 0x800}) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x18}, 0x18) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000040)=r8, 0x4b) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x13, 0x14}, 0x80, 0x0}, 0x14000805) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg(r9, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 9.061796216s ago: executing program 2 (id=2795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="07000000010001", 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r4, 0x1000000, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r7, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000040)={{@any, 0x4}, 0x1, 0x0, 0x3}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 7.512145288s ago: executing program 1 (id=2797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400000000000475000000", @ANYRES32], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x83, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xcd}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x4000003, &(0x7f00000000c0)) ioctl$VIDIOC_S_PRIORITY(r5, 0x40045644, 0x2) 7.074513405s ago: executing program 2 (id=2798): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = getpgrp(0x0) kcmp(0x0, r2, 0x4, r0, r1) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x230) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010102}}, 0x24) listen(r5, 0x4) close_range(r4, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000007aac00000002000000300004802c000180090001007866"], 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x1000000d}) socket$nl_route(0x10, 0x3, 0x0) 6.850968014s ago: executing program 7 (id=2799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0xff, {0xc7, 0xfffffffd, 0xf, 0x2, 0x4, 0x101}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x54, r7, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x24004800) 6.079906519s ago: executing program 5 (id=2800): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40087447, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace000000000000000021"], 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') read$FUSE(r4, &(0x7f0000005380)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5.989461901s ago: executing program 7 (id=2801): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0xc8, r6}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x688}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.881811244s ago: executing program 6 (id=2802): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) syz_open_dev$cec(0x0, 0x0, 0xc4c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x2000000000002, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x3, 0x990a23, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r6 = dup2(r4, r5) close_range(r6, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x228, 0x158, 0x228, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x3, 0x5, 0x5}, {{0x9}, 0xcd}, {{0x84}, 0x9}, 0x10001}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0x0, 0xffffffff, 0xff000000], 0x4e23, 0x4e21, 0x4e24, 0x4e21, 0x7, 0x7, 0x200000, 0xf, 0x10100}}}, {{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xffffff00], 'netpci0\x00', 'team_slave_1\x00', {}, {}, 0x16, 0x3, 0xf42d40bbbe9e9925, 0x20}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x43}, 'veth0_virt_wifi\x00', {0x81}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$swradio(0x0, 0x1, 0x2) 5.641777129s ago: executing program 5 (id=2803): fchdir(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x6, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r7, 0x1, 0x0, 0xfffffffd, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x20000000) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x3) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000340)) sched_setaffinity(r9, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x2, 0xfffffff7, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}}, 0x4000000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x1, r2}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 4.921360555s ago: executing program 7 (id=2804): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000011c0)=0x5, 0x12) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x0, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000140), &(0x7f0000001180)) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) 4.880394975s ago: executing program 5 (id=2805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x91a5, 0x6}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f00000000c0)=@abs, 0x6e, 0x0}, 0x12120) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, 0x0, 0x0, 0x1c2a) socket$nl_netfilter(0x10, 0x3, 0xc) capget(&(0x7f0000000180)={0x19980330, r4}, &(0x7f0000000640)={0x2, 0x7fffffff, 0x6, 0x77d, 0x80000000, 0xc8}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000080102, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() 4.080993797s ago: executing program 2 (id=2806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.873658766s ago: executing program 5 (id=2807): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000400)='ocfs2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x8800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) ftruncate(r6, 0x200004) sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) 3.629578133s ago: executing program 1 (id=2808): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x1800) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000065ffff080000000604395032"], 0x13) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) socket$netlink(0x10, 0x3, 0x15) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) truncate(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x7) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r5, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRESOCT=r4, @ANYRESDEC=0x0]) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1000, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "e50001000082"}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0xb31c, 0x4) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0x6) 3.50828059s ago: executing program 2 (id=2809): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r1, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb000009080001400000"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x9, {{0x2, 0x4e22, @local}}, 0x0, 0x38}, 0x90) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000000)={0xf, 0x2d, 0x0, 0x3a, 0x2, 0x2c}, 0x48) 2.813539601s ago: executing program 5 (id=2810): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="99199e70fdbd9eb9c582cf9799a67fb701cbc79443e2c9514990dc451cf91a2a5b33d1c8bbcb1339be50f2b12446c65c7e3b7b866dc8362d0837a2595e2dc2626535fb9fdb37edca1bada74e96d1e8468d0d3ba3608eb60e"]) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x2, 0x0, 0x7) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0x400, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 2.319972224s ago: executing program 7 (id=2811): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) 2.189563711s ago: executing program 6 (id=2812): keyctl$dh_compute(0x17, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000680)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x32, 0x2, 0x0, 0x62, @mcast2, @private1, 0x8, 0x7, 0x8, 0x1}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x700101, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x101000, &(0x7f0000000380)={@_ha_fsid={[0x40, 0x100]}, {0x3, 0x40, 0x374a, 0x1}}, 0x9, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x80000001}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x189440, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x2, '\x00', 0xab}, {0x7, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x55, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x6, '\x00', 0x6}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x84, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x6, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x8}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000180), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="dc91005f00"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysinfo(&(0x7f0000000080)=""/98) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040), 0x4) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r9, 0x0, 0x20040000) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbbb, 0x0, 0x0, 0x0, 0x1000}, [@alu={0x3, 0x0, 0x9, 0x7, 0x9, 0xfffffffffffffff8, 0x1b}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0xc, 0x2, 0xb, 0x80, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x88, &(0x7f0000000100)=""/136, 0x0, 0x6d, '\x00', r0, 0x17, r1, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0x6, 0x40}, 0x10, 0x266a4, r2, 0x5, 0x0, &(0x7f0000000480)=[{0x0, 0x5, 0x8, 0x7}, {0x4, 0x4, 0x4, 0x9}, {0x0, 0x1, 0xd, 0xc}, {0x5, 0x5, 0x0, 0x3}, {0x1, 0x5, 0x8, 0xd}], 0x10, 0x2}, 0x94) 1.176345522s ago: executing program 2 (id=2813): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000001180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b40)={0xffffffffffffffff, &(0x7f0000001ac0), 0x0, 0x4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) fcntl$setlease(r6, 0x400, 0x0) close(0x3) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.097593646s ago: executing program 7 (id=2814): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000"], 0x122}}, 0x0) 173.351604ms ago: executing program 7 (id=2815): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0xc8, r6}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x688}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 0s ago: executing program 2 (id=2816): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0xff, 0x4, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18) utimensat(r5, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x15, 0x5, 0x0) getpeername$llc(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES64=r6, @ANYRES32=r6], 0x50) kernel console output (not intermixed with test programs): acklog [ 1183.540416][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.548799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.559298][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.567537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.878160][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1183.878175][ T29] audit: type=1400 audit(1772174242.238:1610): avc: denied { unmount } for pid=12182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1184.142826][T15135] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1184.304412][T16966] ceph: No mds server is up or the cluster is laggy [ 1184.388874][T15135] usb 3-1: Using ep0 maxpacket: 8 [ 1184.775939][T15135] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1184.802705][T15135] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1184.833337][T15135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1184.880304][T15135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1184.931009][T15135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1184.973225][T17006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.985395][T15135] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1185.010706][T15135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1185.049432][T15135] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1185.554720][T15135] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1185.592047][T15135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.032776][T15135] usb 3-1: Product: syz [ 1186.037030][T15135] usb 3-1: Manufacturer: syz [ 1186.041665][T15135] usb 3-1: SerialNumber: syz [ 1186.052316][T15135] usb 3-1: config 0 descriptor?? [ 1186.062280][T16983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1186.075602][T15135] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1186.424546][T17025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2352'. [ 1186.460265][T15135] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1186.473099][T17025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2352'. [ 1186.580689][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2354'. [ 1186.753924][T17029] hpfs: Bad magic ... probably not HPFS [ 1187.088069][ T7351] udevd[7351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1187.601204][T17043] lo speed is unknown, defaulting to 1000 [ 1188.239804][T15135] usb 3-1: USB disconnect, device number 52 [ 1188.560434][T17060] netlink: 'syz.2.2358': attribute type 3 has an invalid length. [ 1188.659384][ T29] audit: type=1400 audit(1772174246.644:1611): avc: denied { connect } for pid=17050 comm="syz.2.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1189.381053][ T66] net_ratelimit: 2 callbacks suppressed [ 1189.381066][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.394963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.750019][T17069] ceph: No mds server is up or the cluster is laggy [ 1190.425502][T17079] IPVS: Error connecting to the multicast addr [ 1190.463566][ T29] audit: type=1400 audit(1772174248.402:1612): avc: denied { write } for pid=17068 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1190.506785][T17086] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1190.574884][T17087] ceph: No mds server is up or the cluster is laggy [ 1191.426747][ T1308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.435100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.505113][T17096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.378767][T17103] siw: device registration error -23 [ 1193.311611][ T29] audit: type=1400 audit(1772174250.236:1613): avc: denied { bind } for pid=17097 comm="syz.1.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1193.825526][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.919911][T17110] infiniband syz2: set down [ 1194.925349][T17110] infiniband syz2: added ipvlan0 [ 1195.371259][T17110] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1195.372240][T17110] infiniband syz2: Couldn't open port 1 [ 1195.401483][T17110] RDS/IB: syz2: added [ 1195.405542][T17110] smc: adding ib device syz2 with port count 1 [ 1195.411858][T17110] smc: ib device syz2 port 1 has pnetid (user defined) [ 1195.531545][ T1308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.539805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.557661][T17117] Device name cannot be null; rc = [-22] [ 1197.035526][ T1308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.043742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.748176][T17135] CUSE: info not properly terminated [ 1198.351312][T17138] netlink: 'syz.5.2375': attribute type 10 has an invalid length. [ 1198.369388][T17138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.420144][T17138] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1198.429308][T15064] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 1199.168488][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1199.978573][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1200.071045][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1200.106189][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.128027][T12480] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1200.201282][ T24] usb 3-1: Product: syz [ 1200.205940][ T24] usb 3-1: Manufacturer: syz [ 1200.272373][T17156] netlink: 'syz.5.2379': attribute type 4 has an invalid length. [ 1200.430618][ T24] usb 3-1: SerialNumber: syz [ 1200.436179][T12480] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1200.470195][T12480] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.513537][T12480] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1200.524276][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1200.568535][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 1200.598164][T12480] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1200.598215][ T24] r8152-cfgselector 3-1: can't set config #0, error -71 [ 1200.681956][T12480] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1200.691526][T12480] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1200.722774][T12480] usb 7-1: Product: syz [ 1200.722774][ T24] r8152-cfgselector 3-1: USB disconnect, device number 53 [ 1200.769217][T12480] usb 7-1: Manufacturer: syz [ 1200.810897][T12480] cdc_wdm 7-1:1.0: skipping garbage [ 1200.817645][T12480] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1201.549364][T17167] CUSE: info not properly terminated [ 1201.689954][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.698260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.061017][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.069207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.289998][T12480] usb 7-1: USB disconnect, device number 25 [ 1203.744065][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.216628][ T29] audit: type=1326 audit(1772174261.236:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1204.432191][ T29] audit: type=1326 audit(1772174261.236:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1204.711408][ T29] audit: type=1326 audit(1772174261.236:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1205.027280][ T29] audit: type=1326 audit(1772174261.245:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.1.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1206.888577][T17230] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 1206.896416][T17230] netlink: 'syz.2.2393': attribute type 3 has an invalid length. [ 1206.904175][T17230] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2393'. [ 1207.014673][T17230] lo speed is unknown, defaulting to 1000 [ 1207.341277][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.349565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.814697][ T2728] block nbd1: Possible stuck request ffff888027e48000: control (read@0,1024B). Runtime 30 seconds [ 1208.830201][ T2728] block nbd1: Possible stuck request ffff888027e48200: control (read@1024,1024B). Runtime 30 seconds [ 1208.831416][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.841138][ T2728] block nbd1: Possible stuck request ffff888027e48400: control (read@2048,1024B). Runtime 30 seconds [ 1208.849292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.860014][ T2728] block nbd1: Possible stuck request ffff888027e48600: control (read@3072,1024B). Runtime 30 seconds [ 1209.474235][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2398'. [ 1209.483575][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2398'. [ 1210.261115][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 1212.907200][T14099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.915598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.015284][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.694246][ T2728] block nbd0: Possible stuck request ffff888027dd0000: control (read@0,1024B). Runtime 90 seconds [ 1214.705365][ T2728] block nbd0: Possible stuck request ffff888027dd0200: control (read@1024,1024B). Runtime 90 seconds [ 1214.716305][ T2728] block nbd0: Possible stuck request ffff888027dd0400: control (read@2048,1024B). Runtime 90 seconds [ 1214.727183][ T2728] block nbd0: Possible stuck request ffff888027dd0600: control (read@3072,1024B). Runtime 90 seconds [ 1215.079607][T17291] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2406'. [ 1215.385443][T14099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.393742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.610778][T17294] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2408'. [ 1215.622440][T17294] Invalid source name [ 1215.627032][ T29] audit: type=1400 audit(1772174271.946:1618): avc: denied { setattr } for pid=17293 comm="syz.5.2408" name="file0" dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1215.970631][T17298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.794292][T17307] Device name cannot be null; rc = [-22] [ 1218.483815][T12480] Process accounting resumed [ 1221.482623][T17350] CIFS mount error: No usable UNC path provided in device string! [ 1221.482623][T17350] [ 1221.492708][T17350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1221.827142][T15838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.835457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.914403][T17348] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2418'. [ 1221.999788][T17348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.008193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.022658][ T29] audit: type=1400 audit(1772174277.858:1619): avc: denied { create } for pid=17341 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1222.268382][ T29] audit: type=1400 audit(1772174277.858:1620): avc: denied { write } for pid=17341 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1222.718792][ T29] audit: type=1400 audit(1772174277.877:1621): avc: denied { setopt } for pid=17341 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1222.739705][ T29] audit: type=1400 audit(1772174278.251:1622): avc: denied { ioctl } for pid=17351 comm="syz.6.2420" path="socket:[50305]" dev="sockfs" ino=50305 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1223.039358][T17359] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2422'. [ 1223.555041][T17360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.406921][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.665710][T17377] CUSE: info not properly terminated [ 1225.058524][ T29] audit: type=1326 audit(1772174280.739:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1225.604151][ T29] audit: type=1326 audit(1772174280.739:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1225.863929][ T29] audit: type=1326 audit(1772174280.739:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1226.416497][ T29] audit: type=1326 audit(1772174280.739:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1226.448094][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 1226.540603][ T29] audit: type=1326 audit(1772174280.739:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1226.801068][ T29] audit: type=1326 audit(1772174280.739:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f191a59c799 code=0x7ffc0000 [ 1227.612051][T17407] ceph: No mds server is up or the cluster is laggy [ 1227.858265][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1227.865737][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1227.881658][T15838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.889877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.385160][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.393439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.513164][T17416] ceph: No mds server is up or the cluster is laggy [ 1228.778045][T12750] libceph: connect (1)[c::]:6789 error -101 [ 1228.785365][T12750] libceph: mon0 (1)[c::]:6789 connect error [ 1228.865611][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1228.865627][ T29] audit: type=1400 audit(1772174284.331:1655): avc: denied { read } for pid=17414 comm="syz.6.2434" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1229.159551][T17426] CIFS mount error: No usable UNC path provided in device string! [ 1229.159551][T17426] [ 1229.169612][T17426] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1229.526493][ T29] audit: type=1400 audit(1772174284.331:1656): avc: denied { open } for pid=17414 comm="syz.6.2434" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1229.551381][ T29] audit: type=1400 audit(1772174284.359:1657): avc: denied { ioctl } for pid=17414 comm="syz.6.2434" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1229.577707][ T29] audit: type=1400 audit(1772174284.574:1658): avc: denied { create } for pid=17421 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1229.627589][ T29] audit: type=1400 audit(1772174284.574:1659): avc: denied { write } for pid=17421 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1229.693991][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1229.903419][ T29] audit: type=1400 audit(1772174284.574:1660): avc: denied { setopt } for pid=17421 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1230.381007][ T29] audit: type=1400 audit(1772174284.584:1661): avc: denied { shutdown } for pid=17421 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1230.381167][ T29] audit: type=1400 audit(1772174284.584:1662): avc: denied { map_create } for pid=17421 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1230.381289][ T29] audit: type=1400 audit(1772174284.584:1663): avc: denied { bpf } for pid=17421 comm="syz.1.2432" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1230.381327][ T29] audit: type=1400 audit(1772174284.584:1664): avc: denied { map_read map_write } for pid=17421 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1231.430083][T17448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17448 comm=syz.3.2439 [ 1233.030775][ T24] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1233.312782][ T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1233.348079][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1233.477257][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1233.486376][ T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1233.497444][ T24] usb 4-1: Product: syz [ 1233.503027][ T24] usb 4-1: Manufacturer: syz [ 1233.518174][ T24] usb 4-1: SerialNumber: syz [ 1233.989094][ T7852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.997422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.317359][ T24] usb 4-1: config 0 descriptor?? [ 1234.971961][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.000900][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 1235.000919][ T29] audit: type=1400 audit(1772174289.700:1708): avc: denied { bind } for pid=17475 comm="syz.6.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1235.196645][ T1308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.204966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.290636][T15838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.325264][T12750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.336128][ T29] audit: type=1400 audit(1772174289.710:1709): avc: denied { name_bind } for pid=17475 comm="syz.6.2445" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1235.401816][ T29] audit: type=1400 audit(1772174289.710:1710): avc: denied { node_bind } for pid=17475 comm="syz.6.2445" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1235.425645][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.535913][ T29] audit: type=1400 audit(1772174289.710:1711): avc: denied { connect } for pid=17475 comm="syz.6.2445" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1235.558789][ T9551] libceph: connect (1)[c::]:6789 error -101 [ 1235.570983][ T9551] libceph: mon0 (1)[c::]:6789 connect error [ 1235.572091][T17487] ceph: No mds server is up or the cluster is laggy [ 1235.727873][ T29] audit: type=1400 audit(1772174289.719:1712): avc: denied { name_connect } for pid=17475 comm="syz.6.2445" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1235.825942][T15135] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1235.845871][ T9551] libceph: connect (1)[c::]:6789 error -101 [ 1235.851967][ T9551] libceph: mon0 (1)[c::]:6789 connect error [ 1236.017215][T15135] usb 7-1: Using ep0 maxpacket: 32 [ 1236.103424][T15135] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1236.144444][T15135] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1236.156885][ T24] usb 4-1: can't set config #0, error -71 [ 1236.166270][T15135] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1236.187653][T15135] usb 7-1: Product: syz [ 1236.202842][T15135] usb 7-1: Manufacturer: syz [ 1236.207470][T15135] usb 7-1: SerialNumber: syz [ 1236.220817][ T24] usb 4-1: USB disconnect, device number 62 [ 1236.249389][T15135] usb 7-1: config 0 descriptor?? [ 1236.260102][T17486] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1236.276950][ T29] audit: type=1400 audit(1772174291.262:1713): avc: denied { write } for pid=17495 comm="syz.3.2450" name="vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1236.635627][ T29] audit: type=1400 audit(1772174291.562:1714): avc: denied { mount } for pid=17484 comm="syz.6.2447" name="/" dev="ramfs" ino=50527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1236.636686][ T24] usb 7-1: USB disconnect, device number 26 [ 1236.847480][ T29] audit: type=1400 audit(1772174291.796:1715): avc: denied { read } for pid=17505 comm="syz.2.2451" dev="nsfs" ino=4026533096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1236.918098][ T29] audit: type=1400 audit(1772174291.814:1716): avc: denied { open } for pid=17505 comm="syz.2.2451" path="net:[4026533096]" dev="nsfs" ino=4026533096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1236.944286][ T29] audit: type=1400 audit(1772174291.814:1717): avc: denied { create } for pid=17505 comm="syz.2.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1237.144213][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1237.441187][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1237.458211][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.509222][ T24] usb 7-1: config 0 descriptor?? [ 1237.533796][ T24] cp210x 7-1:0.0: cp210x converter detected [ 1238.134763][ T24] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1238.142565][ T24] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1238.150296][ T24] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1238.204022][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1238.222950][ T24] usb 7-1: USB disconnect, device number 27 [ 1238.323535][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1238.368740][ T24] cp210x 7-1:0.0: device disconnected [ 1238.799758][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'. [ 1239.991434][T17545] /dev/nullb0: Can't lookup blockdev [ 1240.040704][T15838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.048968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.273953][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 1240.763690][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1240.763707][ T29] audit: type=1400 audit(1772174295.453:1747): avc: denied { add_name } for pid=17517 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1240.913124][ T29] audit: type=1400 audit(1772174295.453:1748): avc: denied { create } for pid=17517 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1241.190770][T17563] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1242.097476][ T7852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.105814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.309327][ T2728] block nbd1: Possible stuck request ffff888027e48000: control (read@0,1024B). Runtime 60 seconds [ 1242.356024][ T2728] block nbd1: Possible stuck request ffff888027e48200: control (read@1024,1024B). Runtime 60 seconds [ 1242.368029][ T2728] block nbd1: Possible stuck request ffff888027e48400: control (read@2048,1024B). Runtime 60 seconds [ 1242.380359][ T2728] block nbd1: Possible stuck request ffff888027e48600: control (read@3072,1024B). Runtime 60 seconds [ 1242.393620][ T29] audit: type=1400 audit(1772174295.453:1749): avc: denied { write } for pid=17517 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=9548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1242.420189][ T29] audit: type=1400 audit(1772174295.462:1750): avc: denied { append } for pid=17517 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=9548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1242.465198][ T29] audit: type=1400 audit(1772174295.771:1751): avc: denied { write } for pid=17555 comm="syz.1.2469" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1242.601718][ T29] audit: type=1400 audit(1772174296.716:1752): avc: denied { remove_name } for pid=17561 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=9548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1243.090743][ T29] audit: type=1400 audit(1772174296.716:1753): avc: denied { unlink } for pid=17561 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=9548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1243.161255][ T29] audit: type=1400 audit(1772174297.342:1754): avc: denied { ioctl } for pid=17569 comm="syz.6.2460" path="socket:[50619]" dev="sockfs" ino=50619 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1244.116823][T17595] ceph: No mds server is up or the cluster is laggy [ 1245.180029][ T29] audit: type=1400 audit(1772174299.597:1755): avc: denied { create } for pid=17611 comm="syz.1.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1245.282315][ T29] audit: type=1400 audit(1772174299.681:1756): avc: denied { ioctl } for pid=17614 comm="syz.2.2468" path="socket:[49664]" dev="sockfs" ino=49664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1246.284981][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.316471][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.324690][ T29] audit: type=1400 audit(1772174300.083:1757): avc: denied { mount } for pid=17614 comm="syz.2.2468" name="/" dev="rpc_pipefs" ino=50662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1246.324904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.994130][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.002897][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.011418][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.019995][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.028402][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.036805][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.045461][T17616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.518377][ T29] audit: type=1400 audit(1772174300.925:1758): avc: denied { bind } for pid=17611 comm="syz.1.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1247.555102][ T29] audit: type=1400 audit(1772174301.281:1759): avc: denied { connect } for pid=17611 comm="syz.1.2467" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1248.246280][ T2728] block nbd0: Possible stuck request ffff888027dd0000: control (read@0,1024B). Runtime 120 seconds [ 1248.257640][ T2728] block nbd0: Possible stuck request ffff888027dd0200: control (read@1024,1024B). Runtime 120 seconds [ 1248.268705][ T2728] block nbd0: Possible stuck request ffff888027dd0400: control (read@2048,1024B). Runtime 120 seconds [ 1248.279772][ T2728] block nbd0: Possible stuck request ffff888027dd0600: control (read@3072,1024B). Runtime 120 seconds [ 1248.387382][ T29] audit: type=1400 audit(1772174301.281:1760): avc: denied { write } for pid=17611 comm="syz.1.2467" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1248.418698][ T29] audit: type=1400 audit(1772174301.776:1761): avc: denied { setopt } for pid=17611 comm="syz.1.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1248.575510][ T29] audit: type=1400 audit(1772174301.776:1762): avc: denied { ioctl } for pid=17611 comm="syz.1.2467" path="socket:[49658]" dev="sockfs" ino=49658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1248.601071][ T29] audit: type=1400 audit(1772174301.776:1763): avc: denied { write } for pid=17611 comm="syz.1.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1248.631378][ T1956] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1248.729851][T17633] Device name cannot be null; rc = [-22] [ 1248.774637][ T29] audit: type=1400 audit(1772174302.889:1764): avc: denied { create } for pid=17626 comm="syz.5.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1248.888063][ T1956] usb 2-1: Using ep0 maxpacket: 16 [ 1249.711134][T12480] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1249.917307][T12480] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.930336][T12480] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1250.015053][ T1956] usb 2-1: device descriptor read/all, error -71 [ 1250.203210][T12480] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1250.223831][ T29] audit: type=1400 audit(1772174304.302:1765): avc: denied { ioctl } for pid=17638 comm="syz.5.2474" path="socket:[50694]" dev="sockfs" ino=50694 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1250.249143][T12480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.257215][T12480] usb 3-1: Product: syz [ 1250.264069][T12480] usb 3-1: Manufacturer: syz [ 1250.273359][T12480] usb 3-1: SerialNumber: syz [ 1250.474455][T12480] usb 3-1: config 0 descriptor?? [ 1250.502480][ T29] audit: type=1400 audit(1772174304.564:1766): avc: denied { read write } for pid=17641 comm="syz.1.2475" name="sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1251.021972][ T9551] usb 3-1: USB disconnect, device number 54 [ 1251.642011][T17656] ceph: No mds server is up or the cluster is laggy [ 1251.848539][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1251.848550][ T29] audit: type=1400 audit(1772174305.827:1772): avc: denied { write } for pid=17660 comm="syz.2.2478" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1252.942216][ T29] audit: type=1400 audit(1772174306.855:1773): avc: denied { mounton } for pid=17665 comm="syz.6.2480" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1253.602920][ T66] net_ratelimit: 1264 callbacks suppressed [ 1253.602937][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.617158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.308242][ T29] audit: type=1400 audit(1772174308.062:1774): avc: denied { ioctl } for pid=17674 comm="syz.6.2484" path="socket:[49763]" dev="sockfs" ino=49763 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1254.518446][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.526769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.738534][T17682] ceph: No mds server is up or the cluster is laggy [ 1255.004953][T17687] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2485'. [ 1255.036350][ T29] audit: type=1400 audit(1772174308.810:1775): avc: denied { create } for pid=17688 comm="syz.2.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1255.175336][T17687] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1255.699030][ T29] audit: type=1400 audit(1772174308.810:1776): avc: denied { listen } for pid=17688 comm="syz.2.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1256.131164][T17699] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2486'. [ 1256.903814][ T29] audit: type=1400 audit(1772174309.549:1777): avc: denied { sqpoll } for pid=17686 comm="syz.6.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1256.961755][ T29] audit: type=1400 audit(1772174310.578:1778): avc: denied { map } for pid=17686 comm="syz.6.2485" path="/dev/vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1257.007687][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.280004][ T29] audit: type=1400 audit(1772174310.896:1779): avc: denied { ioctl } for pid=17704 comm="syz.2.2488" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=50785 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1257.464753][T17710] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1257.853695][ T29] audit: type=1400 audit(1772174311.439:1780): avc: denied { create } for pid=17711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1257.888750][T10682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1257.896973][ T29] audit: type=1400 audit(1772174311.467:1781): avc: denied { read } for pid=17711 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1257.913893][T10682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1257.929698][T10682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1257.936863][ T29] audit: type=1400 audit(1772174311.467:1782): avc: denied { open } for pid=17711 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1257.936912][ T29] audit: type=1400 audit(1772174311.476:1783): avc: denied { ioctl } for pid=17711 comm="syz-executor" path="socket:[50792]" dev="sockfs" ino=50792 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1257.998338][T10682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1258.006660][T10682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1258.019151][ T29] audit: type=1400 audit(1772174311.598:1784): avc: denied { mounton } for pid=17711 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1258.052105][T17711] lo speed is unknown, defaulting to 1000 [ 1258.457596][ T29] audit: type=1400 audit(1772174311.907:1785): avc: denied { override_creds } for pid=17714 comm="syz.6.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1258.696800][ T29] audit: type=1400 audit(1772174312.066:1786): avc: denied { connect } for pid=17720 comm="syz.1.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1258.843078][ T29] audit: type=1400 audit(1772174312.374:1787): avc: denied { unmount } for pid=17704 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1259.073747][T17718] ceph: No mds server is up or the cluster is laggy [ 1259.172564][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.180847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.247137][T17733] loop7: detected capacity change from 0 to 128 [ 1259.407546][ T9551] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1259.582017][T17711] chnl_net:caif_netlink_parms(): no params data found [ 1259.622337][ T9551] usb 3-1: Using ep0 maxpacket: 32 [ 1259.633203][ T9551] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1259.643777][ T9551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.659898][ T9551] usb 3-1: config 0 descriptor?? [ 1259.686023][T17735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=17735 comm=syz.6.2494 [ 1259.939132][ T9551] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1259.946416][T17711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.960967][T17711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.968886][ T9551] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1260.081158][T17711] bridge_slave_0: entered allmulticast mode [ 1260.116040][ T9551] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1260.123243][ T9551] usb 3-1: media controller created [ 1260.130108][T17748] /dev/nullb0: Can't lookup blockdev [ 1260.192870][T10682] Bluetooth: hci4: command tx timeout [ 1260.193779][T17711] bridge_slave_0: entered promiscuous mode [ 1260.298233][T17752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2493'. [ 1260.331072][ T29] audit: type=1400 audit(1772174313.731:1788): avc: denied { write } for pid=17730 comm="syz.2.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1260.353266][ T9551] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1260.413452][T17711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.463126][T17711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.507184][T17711] bridge_slave_1: entered allmulticast mode [ 1260.530568][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.538771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.593903][T17711] bridge_slave_1: entered promiscuous mode [ 1260.778550][T17711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.824074][T17711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.893038][T17711] team0: Port device team_slave_0 added [ 1260.900857][T17711] team0: Port device team_slave_1 added [ 1260.924134][T17711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.931208][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.970607][T17711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.992282][T17711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.000789][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.055717][T17711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.114676][T17711] hsr_slave_0: entered promiscuous mode [ 1261.317034][T17711] hsr_slave_1: entered promiscuous mode [ 1261.373291][T17711] debugfs: 'hsr0' already exists in 'hsr' [ 1261.389444][T17711] Cannot create hsr debugfs directory [ 1261.728682][T17759] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1262.666546][T10682] Bluetooth: hci4: command tx timeout [ 1262.851508][ T9551] az6027: usb out operation failed. (-110) [ 1262.860614][ T9551] az6027: usb out operation failed. (-32) [ 1262.871181][ T9551] stb0899_attach: Driver disabled by Kconfig [ 1262.877272][ T9551] az6027: no front-end attached [ 1262.877272][ T9551] [ 1262.917447][ T9551] az6027: usb out operation failed. (-32) [ 1262.923175][ T9551] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1262.975231][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1262.975244][ T29] audit: type=1400 audit(1772174316.228:1792): avc: denied { create } for pid=17761 comm="syz.5.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1263.140191][ T9551] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input74 [ 1263.196549][ T9551] dvb-usb: schedule remote query interval to 400 msecs. [ 1263.203839][ T29] audit: type=1400 audit(1772174316.443:1793): avc: denied { read } for pid=5164 comm="acpid" name="event4" dev="devtmpfs" ino=3347 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1263.253985][ T9551] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1263.354519][ T29] audit: type=1400 audit(1772174316.443:1794): avc: denied { open } for pid=5164 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3347 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1263.360512][T17711] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1263.381635][ T9551] usb 3-1: USB disconnect, device number 55 [ 1263.415596][ T29] audit: type=1400 audit(1772174316.443:1795): avc: denied { ioctl } for pid=5164 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3347 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1263.571875][T17768] fuse: Unknown parameter 'płϗǔCQIE*[3Ȼ9P$F\~;{m6-7Y^-be57NF;`' [ 1263.597116][ T29] audit: type=1400 audit(1772174316.789:1796): avc: denied { read write } for pid=17764 comm="syz.6.2500" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1263.686799][ T29] audit: type=1400 audit(1772174316.789:1797): avc: denied { open } for pid=17764 comm="syz.6.2500" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1263.690299][T17711] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1263.747884][ T29] audit: type=1400 audit(1772174316.948:1798): avc: denied { write } for pid=17771 comm="syz.2.2501" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1263.806583][ T9551] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1263.855994][T17711] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1263.892618][T17711] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1264.035065][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1264.048580][ T29] audit: type=1400 audit(1772174317.229:1799): avc: denied { create } for pid=17780 comm="syz.2.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1264.069056][ T29] audit: type=1400 audit(1772174317.229:1800): avc: denied { setopt } for pid=17780 comm="syz.2.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1264.175557][ T24] usb 7-1: device descriptor read/64, error -71 [ 1264.243775][ T29] audit: type=1400 audit(1772174317.426:1801): avc: denied { execute_no_trans } for pid=17780 comm="syz.2.2503" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1264.249606][T17711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.638951][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.647336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.760435][T17786] CUSE: info not properly terminated [ 1264.792383][T17787] IPVS: Error connecting to the multicast addr [ 1264.814735][T17711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.834665][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.841860][ T7852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.871951][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.879107][ T7852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.881068][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1264.898636][T10682] Bluetooth: hci4: command tx timeout [ 1265.047426][T17711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1265.083594][ T24] usb 7-1: device descriptor read/64, error -71 [ 1265.084947][T17711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1265.090367][ T9551] Process accounting resumed [ 1265.301153][ T24] usb usb7-port1: attempt power cycle [ 1265.757727][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1265.875765][ T24] usb 7-1: device descriptor read/8, error -71 [ 1266.112034][T17711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.144732][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1266.207180][ T24] usb 7-1: device descriptor read/8, error -71 [ 1266.324637][ T24] usb usb7-port1: unable to enumerate USB device [ 1266.695438][ T7852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.703706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.770284][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.791828][T17824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2510'. [ 1267.707516][T10682] Bluetooth: hci4: command tx timeout [ 1267.787865][T17711] veth0_vlan: entered promiscuous mode [ 1267.871718][T17711] veth1_vlan: entered promiscuous mode [ 1267.953689][T17821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=17821 comm=syz.2.2507 [ 1267.989000][T17821] netlink: 584 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1267.995674][T17711] veth0_macvtap: entered promiscuous mode [ 1268.053326][T17821] qnx6: unable to read the first superblock [ 1268.070818][T17711] veth1_macvtap: entered promiscuous mode [ 1268.325158][T17711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.511650][T17836] CIFS mount error: No usable UNC path provided in device string! [ 1268.511650][T17836] [ 1268.539850][T17711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.579162][T14099] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.588903][T14099] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.599158][T17836] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1268.703613][T14099] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.722999][T14099] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.875214][T15830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.894454][T15830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.071820][T15832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.080661][T15832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.099349][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1269.099364][ T29] audit: type=1400 audit(1772174321.962:1811): avc: denied { mounton } for pid=17711 comm="syz-executor" path="/root/syzkaller.eemr3f/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1269.549116][ T29] audit: type=1400 audit(1772174321.972:1812): avc: denied { mount } for pid=17711 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1269.571399][ T29] audit: type=1400 audit(1772174321.972:1813): avc: denied { mounton } for pid=17711 comm="syz-executor" path="/root/syzkaller.eemr3f/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1269.599606][ T29] audit: type=1400 audit(1772174321.972:1814): avc: denied { mounton } for pid=17711 comm="syz-executor" path="/root/syzkaller.eemr3f/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1269.627546][ T29] audit: type=1400 audit(1772174321.990:1815): avc: denied { unmount } for pid=17711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1269.658437][ T29] audit: type=1400 audit(1772174322.000:1816): avc: denied { mounton } for pid=17711 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1269.706652][ T29] audit: type=1400 audit(1772174322.000:1817): avc: denied { mount } for pid=17711 comm="syz-executor" name="/" dev="gadgetfs" ino=7396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1269.790778][ T29] audit: type=1400 audit(1772174322.018:1818): avc: denied { mount } for pid=17711 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1270.038433][ T29] audit: type=1400 audit(1772174322.018:1819): avc: denied { mounton } for pid=17711 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1270.063153][ T29] audit: type=1400 audit(1772174322.018:1820): avc: denied { mount } for pid=17711 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1270.423788][T17866] mac80211_hwsim hwsim5 : renamed from wlan1 [ 1270.595798][T17859] CUSE: info not properly terminated [ 1270.797045][ T1308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.805394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.060086][T17872] fuse: Unknown parameter 'płϗǔCQIE*[3Ȼ9P$F\~;{m6-7Y^-be57NF;`' [ 1272.480406][T17896] CUSE: info not properly terminated [ 1273.953312][T17904] lo speed is unknown, defaulting to 1000 [ 1274.027525][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.035895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.407186][T17909] CIFS mount error: No usable UNC path provided in device string! [ 1274.407186][T17909] [ 1274.463903][T17909] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1275.019524][ T2728] block nbd1: Possible stuck request ffff888027e48000: control (read@0,1024B). Runtime 90 seconds [ 1275.030224][ T2728] block nbd1: Possible stuck request ffff888027e48200: control (read@1024,1024B). Runtime 90 seconds [ 1275.044366][ T2728] block nbd1: Possible stuck request ffff888027e48400: control (read@2048,1024B). Runtime 90 seconds [ 1275.055311][ T2728] block nbd1: Possible stuck request ffff888027e48600: control (read@3072,1024B). Runtime 90 seconds [ 1275.382739][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1275.382755][ T29] audit: type=1400 audit(1772174327.837:1828): avc: denied { create } for pid=17912 comm="syz.7.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1275.412082][T17921] macvlan0: entered promiscuous mode [ 1275.535352][T17921] netlink: 'syz.5.2529': attribute type 1 has an invalid length. [ 1275.549631][T17921] netlink: 'syz.5.2529': attribute type 2 has an invalid length. [ 1275.567651][T17925] CUSE: info not properly terminated [ 1276.361824][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.370052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.773516][T15135] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1276.964253][ T1956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.005712][T15135] usb 2-1: Using ep0 maxpacket: 8 [ 1277.029190][T15135] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1277.506247][T15135] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1277.555754][T15135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1277.573724][T15135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1277.597708][T15135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1277.665954][T15135] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1277.695607][T15135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1277.753240][T15135] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1277.773392][T15135] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1277.859632][T15135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.867650][T15135] usb 2-1: Product: syz [ 1277.871927][T15135] usb 2-1: Manufacturer: syz [ 1277.889064][T15135] usb 2-1: SerialNumber: syz [ 1277.899159][T15135] usb 2-1: config 0 descriptor?? [ 1277.904722][T17928] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1277.956310][T15135] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1278.354741][T17957] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2536'. [ 1278.373614][ T29] audit: type=1400 audit(1772174330.615:1829): avc: denied { bind } for pid=17949 comm="syz.5.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1278.448852][T17959] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1278.521635][T17959] hpfs: Bad magic ... probably not HPFS [ 1278.569445][T15135] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1278.821636][T17950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1278.849111][ T29] audit: type=1400 audit(1772174330.774:1830): avc: denied { mounton } for pid=17927 comm="syz.1.2531" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1278.975376][ T29] audit: type=1400 audit(1772174331.054:1831): avc: denied { nlmsg_read } for pid=17946 comm="syz.2.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1278.980964][ T7332] udevd[7332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1279.234471][ T29] audit: type=1400 audit(1772174331.092:1832): avc: denied { ioctl } for pid=17946 comm="syz.2.2535" path="socket:[51947]" dev="sockfs" ino=51947 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1279.292084][ T1956] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1279.475657][ T1956] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1279.484113][ T1956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.507490][ T1956] usb 3-1: config 0 has no interfaces? [ 1279.537238][ T1956] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1279.558422][ T1956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.588453][ T1956] usb 3-1: config 0 descriptor?? [ 1280.732075][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.740352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.296793][ T2728] block nbd0: Possible stuck request ffff888027dd0000: control (read@0,1024B). Runtime 150 seconds [ 1281.307654][ T9551] usb 2-1: USB disconnect, device number 47 [ 1281.321491][ T2728] block nbd0: Possible stuck request ffff888027dd0200: control (read@1024,1024B). Runtime 150 seconds [ 1281.332567][ T2728] block nbd0: Possible stuck request ffff888027dd0400: control (read@2048,1024B). Runtime 150 seconds [ 1281.343574][ T2728] block nbd0: Possible stuck request ffff888027dd0600: control (read@3072,1024B). Runtime 150 seconds [ 1281.451310][T17979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.459724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.761738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.773570][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.868530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.892859][T17978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.901131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.161914][T17986] CUSE: info not properly terminated [ 1282.358564][T17992] CIFS mount error: No usable UNC path provided in device string! [ 1282.358564][T17992] [ 1282.368652][T17992] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1282.427793][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.436064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.056746][T18000] ceph: No mds server is up or the cluster is laggy [ 1283.224335][T17999] CIFS mount error: No usable UNC path provided in device string! [ 1283.224335][T17999] [ 1283.260792][T17999] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1283.356916][ T1956] usb 3-1: USB disconnect, device number 56 [ 1283.433264][ T29] audit: type=1400 audit(1772174335.376:1833): avc: denied { create } for pid=18007 comm="syz.6.2548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1284.026206][T18012] CIFS mount error: No usable UNC path provided in device string! [ 1284.026206][T18012] [ 1284.036300][T18012] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1286.347584][T18033] CUSE: info not properly terminated [ 1286.797042][ T29] audit: type=1400 audit(1772174338.509:1834): avc: denied { watch_reads } for pid=18039 comm="syz.2.2557" path="/499" dev="tmpfs" ino=2725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1287.302480][T14099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.310784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.402430][ T29] audit: type=1400 audit(1772174338.940:1835): avc: denied { create } for pid=18045 comm="syz.1.2559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 1287.483907][T18048] block device autoloading is deprecated and will be removed. [ 1287.486441][ T1956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.752704][ T29] audit: type=1400 audit(1772174339.417:1836): avc: denied { map } for pid=18051 comm="syz.5.2560" path="socket:[52135]" dev="sockfs" ino=52135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1287.816124][ T29] audit: type=1400 audit(1772174339.417:1837): avc: denied { read accept } for pid=18051 comm="syz.5.2560" path="socket:[52135]" dev="sockfs" ino=52135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1287.878878][T18058] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2560'. [ 1288.005640][T18059] CIFS mount error: No usable UNC path provided in device string! [ 1288.005640][T18059] [ 1288.015697][T18059] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1288.033819][ T29] audit: type=1400 audit(1772174339.538:1838): avc: denied { connect } for pid=18051 comm="syz.5.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1288.054684][ T29] audit: type=1400 audit(1772174339.557:1839): avc: denied { write } for pid=18051 comm="syz.5.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1288.132238][T18062] fuse: Bad value for 'fd' [ 1288.146869][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2561'. [ 1288.268497][T18063] CIFS mount error: No usable UNC path provided in device string! [ 1288.268497][T18063] [ 1288.278525][T18063] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1288.583319][ T7852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.591566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.958053][ T29] audit: type=1400 audit(1772174340.539:1840): avc: denied { setopt } for pid=18072 comm="syz.7.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1289.095973][ T29] audit: type=1400 audit(1772174340.661:1841): avc: denied { bind } for pid=18069 comm="syz.1.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1289.115510][ T29] audit: type=1400 audit(1772174340.661:1842): avc: denied { write } for pid=18069 comm="syz.1.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1289.616637][T18081] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1289.630197][ T29] audit: type=1400 audit(1772174341.157:1843): avc: denied { getopt } for pid=18069 comm="syz.1.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1290.695233][T18097] 9pnet_virtio: no channels available for device syz [ 1290.706600][ T29] audit: type=1400 audit(1772174342.167:1844): avc: denied { bind } for pid=18094 comm="syz.5.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1290.893539][ T29] audit: type=1400 audit(1772174342.167:1845): avc: denied { connect } for pid=18094 comm="syz.5.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1290.953806][T18101] CUSE: info not properly terminated [ 1291.417198][ T29] audit: type=1400 audit(1772174342.831:1846): avc: denied { bind } for pid=18102 comm="syz.6.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1292.648863][T18075] lo speed is unknown, defaulting to 1000 [ 1292.967449][T14099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.975681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.977970][ T29] audit: type=1400 audit(1772174343.982:1847): avc: denied { remount } for pid=18072 comm="syz.7.2564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1293.164777][ T29] audit: type=1400 audit(1772174344.431:1848): avc: denied { associate } for pid=18107 comm="syz.1.2571" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1293.725970][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2573'. [ 1293.755750][ T29] audit: type=1400 audit(1772174344.954:1849): avc: denied { create } for pid=18114 comm="syz.1.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1293.787017][T18122] CIFS mount error: No usable UNC path provided in device string! [ 1293.787017][T18122] [ 1293.911624][T18122] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1294.426190][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2576'. [ 1294.908522][T18132] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2575'. [ 1295.735613][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.743795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.873175][T18127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18127 comm=syz.7.2576 [ 1296.371951][T18139] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 1296.474681][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1296.474699][ T29] audit: type=1400 audit(1772174347.461:1852): avc: denied { ioctl } for pid=18134 comm="syz.2.2572" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1297.559969][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.819859][T18146] trusted_key: encrypted_key: insufficient parameters specified [ 1298.145724][T18139] team0: Device gtp0 is of different type [ 1298.283255][T18141] macsec1: left promiscuous mode [ 1298.288298][T18141] veth5: left promiscuous mode [ 1298.861561][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.869857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.727028][ T29] audit: type=1326 audit(1772174351.446:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18167 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1301.031802][ T29] audit: type=1326 audit(1772174351.455:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18167 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1301.202436][ T29] audit: type=1326 audit(1772174351.455:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18167 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1301.237693][ T29] audit: type=1326 audit(1772174351.455:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18167 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1301.329214][ T29] audit: type=1326 audit(1772174351.465:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18167 comm="syz.7.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1301.582219][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.590472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.822188][ T29] audit: type=1400 audit(1772174352.232:1858): avc: denied { bind } for pid=18180 comm="syz.2.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1301.881354][ T29] audit: type=1400 audit(1772174352.232:1859): avc: denied { create } for pid=18180 comm="syz.2.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1302.080809][ T29] audit: type=1400 audit(1772174352.232:1860): avc: denied { setopt } for pid=18180 comm="syz.2.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1302.782453][T18190] ceph: No mds server is up or the cluster is laggy [ 1302.789323][ T9551] libceph: connect (1)[c::]:6789 error -101 [ 1302.795682][ T9551] libceph: mon0 (1)[c::]:6789 connect error [ 1303.020153][T18196] CUSE: info not properly terminated [ 1303.488114][T18203] CIFS mount error: No usable UNC path provided in device string! [ 1303.488114][T18203] [ 1303.937010][T18203] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1304.399874][T18212] netlink: 'syz.7.2592': attribute type 10 has an invalid length. [ 1304.435071][T18212] team0: Device ipvlan1 failed to register rx_handler [ 1304.759438][T18213] ceph: No mds server is up or the cluster is laggy [ 1304.775355][ T1956] libceph: connect (1)[c::]:6789 error -101 [ 1304.795342][ T1956] libceph: mon0 (1)[c::]:6789 connect error [ 1305.021477][ T1308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.029839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.038627][T12480] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1305.368185][T12480] usb 7-1: Using ep0 maxpacket: 16 [ 1305.377748][T12480] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.572746][T12480] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.582934][T12480] usb 7-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1305.592216][T12480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.606255][T12480] usb 7-1: config 0 descriptor?? [ 1306.469552][T18236] 9p: Bad value for 'rfdno' [ 1306.905180][ T29] audit: type=1400 audit(1772174356.899:1861): avc: denied { read write } for pid=18231 comm="syz.1.2597" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1307.066301][ T29] audit: type=1400 audit(1772174356.899:1862): avc: denied { open } for pid=18231 comm="syz.1.2597" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1307.164658][ T29] audit: type=1400 audit(1772174356.909:1863): avc: denied { ioctl } for pid=18231 comm="syz.1.2597" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1307.226950][ T7852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.235269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.579027][T18246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=18246 comm=syz.5.2599 [ 1307.595234][T18246] netlink: 584 bytes leftover after parsing attributes in process `syz.5.2599'. [ 1307.606480][T18246] /dev/nullb0: Can't lookup blockdev [ 1307.736158][T18243] block device autoloading is deprecated and will be removed. [ 1307.820582][ T2728] block nbd1: Possible stuck request ffff888027e48000: control (read@0,1024B). Runtime 120 seconds [ 1307.836223][ T1956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.886319][ T2728] block nbd1: Possible stuck request ffff888027e48200: control (read@1024,1024B). Runtime 120 seconds [ 1307.891414][T18251] netlink: 'syz.6.2594': attribute type 4 has an invalid length. [ 1307.900120][ T2728] block nbd1: Possible stuck request ffff888027e48400: control (read@2048,1024B). Runtime 120 seconds [ 1307.916363][ T2728] block nbd1: Possible stuck request ffff888027e48600: control (read@3072,1024B). Runtime 120 seconds [ 1308.043866][T15832] smc: removing ib device syz2 [ 1308.092658][ T5875] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1308.101387][T18253] netlink: 'syz.6.2594': attribute type 4 has an invalid length. [ 1308.360245][ T29] audit: type=1400 audit(1772174358.602:1864): avc: denied { cmd } for pid=18223 comm="syz.7.2595" path="socket:[52761]" dev="sockfs" ino=52761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1308.446943][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1308.523071][ T5875] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1308.542246][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.574273][ T5875] usb 3-1: Product: syz [ 1308.615530][ T5875] usb 3-1: Manufacturer: syz [ 1308.626120][ T5875] usb 3-1: SerialNumber: syz [ 1308.662032][ T5875] usb 3-1: config 0 descriptor?? [ 1308.725352][ T5875] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 1309.175782][ T9551] usb 3-1: USB disconnect, device number 57 [ 1310.040138][T18261] Cannot find add_set index 0 as target [ 1310.163410][T18262] overlayfs: overlapping lowerdir path [ 1310.245129][ T29] audit: type=1400 audit(1772174360.445:1865): avc: denied { mount } for pid=18254 comm="syz.7.2600" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1310.556482][ T29] audit: type=1400 audit(1772174360.744:1866): avc: denied { unmount } for pid=17711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1310.860776][T18267] CUSE: info not properly terminated [ 1311.057571][T12480] usbhid 7-1:0.0: can't add hid device: -71 [ 1311.063560][T12480] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1311.079443][T12480] usb 7-1: USB disconnect, device number 33 [ 1311.164519][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.172781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.307133][T18271] CUSE: info not properly terminated [ 1312.395302][ T29] audit: type=1400 audit(1772174362.456:1867): avc: denied { read } for pid=18285 comm="syz.2.2607" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1312.479890][T18289] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2608'. [ 1312.514844][T18290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2607'. [ 1312.567839][T18290] tipc: Enabled bearer , priority 10 [ 1312.589845][ T29] audit: type=1400 audit(1772174362.456:1868): avc: denied { open } for pid=18285 comm="syz.2.2607" path="/dev/input/event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1312.617805][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.626248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.872451][ T29] audit: type=1400 audit(1772174362.633:1869): avc: denied { ioctl } for pid=18285 comm="syz.2.2607" path="/dev/input/event3" dev="devtmpfs" ino=924 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1312.915245][ T29] audit: type=1400 audit(1772174362.699:1870): avc: denied { getopt } for pid=18287 comm="syz.5.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1313.201791][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2609'. [ 1313.493725][T18301] bridge_slave_1: left allmulticast mode [ 1313.510983][T18301] bridge_slave_1: left promiscuous mode [ 1313.533702][T18301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.259132][T18301] bridge_slave_0: left allmulticast mode [ 1314.265130][T18301] bridge_slave_0: left promiscuous mode [ 1314.273071][ T2728] block nbd0: Possible stuck request ffff888027dd0000: control (read@0,1024B). Runtime 180 seconds [ 1314.291226][ T2728] block nbd0: Possible stuck request ffff888027dd0200: control (read@1024,1024B). Runtime 180 seconds [ 1314.301854][T18301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.302351][ T2728] block nbd0: Possible stuck request ffff888027dd0400: control (read@2048,1024B). Runtime 180 seconds [ 1314.321894][ T2728] block nbd0: Possible stuck request ffff888027dd0600: control (read@3072,1024B). Runtime 180 seconds [ 1314.661639][ T29] audit: type=1400 audit(1772174364.579:1871): avc: denied { unmount } for pid=17711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1315.308760][T12750] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1315.929054][T18333] CUSE: info not properly terminated [ 1316.437819][T12750] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1316.957676][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.965950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.020614][T12750] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1317.042403][T12750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.222323][T12750] usb 7-1: Product: syz [ 1317.226694][T12750] usb 7-1: Manufacturer: syz [ 1317.231287][T12750] usb 7-1: SerialNumber: syz [ 1317.264119][T12750] usb 7-1: config 0 descriptor?? [ 1317.309629][T12750] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 1317.408673][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1317.448467][T18351] fuse: Unknown parameter 'płϗǔCQIE*[3Ȼ9P$F\~;{m6-7Y^-be57NF;`' [ 1318.120812][T14099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.129046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.138690][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.143188][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1318.166467][T18358] netlink: 35 bytes leftover after parsing attributes in process `syz.7.2620'. [ 1318.193205][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1318.205466][ T9551] usb 7-1: USB disconnect, device number 34 [ 1318.271527][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1318.286519][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.613014][ T1956] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1318.723193][ T24] usb 3-1: Product: syz [ 1318.733683][ T24] usb 3-1: Manufacturer: syz [ 1318.745100][ T24] usb 3-1: SerialNumber: syz [ 1318.783137][ T1956] usb 2-1: device descriptor read/64, error -71 [ 1318.869403][T18364] random: crng reseeded on system resumption [ 1318.894685][ T29] audit: type=1400 audit(1772174368.526:1872): avc: denied { read write } for pid=18361 comm="syz.6.2622" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1318.924993][ T29] audit: type=1400 audit(1772174368.526:1873): avc: denied { ioctl open } for pid=18361 comm="syz.6.2622" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1318.950462][ T24] usb 3-1: config 0 descriptor?? [ 1319.087526][ T1956] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1319.445675][ T24] usb 3-1: USB disconnect, device number 58 [ 1319.489002][ T1956] usb 2-1: device descriptor read/64, error -71 [ 1319.496192][ T7577] udevd[7577]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.566134][T18371] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 1319.706691][ T1956] usb usb2-port1: attempt power cycle [ 1319.840723][T18372] batman_adv: batadv0: Adding interface: macvtap1 [ 1319.847449][T18372] batman_adv: batadv0: Interface activated: macvtap1 [ 1320.279895][ T1956] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1320.313812][ T1956] usb 2-1: device descriptor read/8, error -71 [ 1320.696100][T18383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.704952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.189312][T18394] lo speed is unknown, defaulting to 1000 [ 1322.319014][T18404] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1322.437471][T18407] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1322.988956][T15838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.997294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.263117][T18417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.553289][ T29] audit: type=1400 audit(1772174372.895:1874): avc: denied { read } for pid=18423 comm="syz.7.2639" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1323.774119][ T29] audit: type=1400 audit(1772174372.895:1875): avc: denied { open } for pid=18423 comm="syz.7.2639" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1323.809301][T18430] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1323.836461][T18437] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2644'. [ 1324.164839][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.173239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.233881][T18433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2643'. [ 1324.289248][ T9551] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1325.148666][ T29] audit: type=1400 audit(1772174372.941:1876): avc: denied { ioctl } for pid=18423 comm="syz.7.2639" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1325.256446][ T9551] usb 7-1: Using ep0 maxpacket: 16 [ 1325.277485][ T29] audit: type=1400 audit(1772174372.970:1877): avc: denied { block_suspend } for pid=18423 comm="syz.7.2639" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1325.329780][ T9551] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.371393][ T9551] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.882493][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2646'. [ 1325.891678][T18456] bridge_slave_1: left allmulticast mode [ 1325.897465][T18456] bridge_slave_1: left promiscuous mode [ 1325.903730][T18456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.957169][T18456] bridge_slave_0: left allmulticast mode [ 1325.962936][T18456] bridge_slave_0: left promiscuous mode [ 1325.969298][T18456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.999887][ T9551] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1326.013064][ T9551] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1326.025945][ T9551] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.038665][ T9551] usb 7-1: config 0 descriptor?? [ 1326.078298][T18458] lo speed is unknown, defaulting to 1000 [ 1326.777441][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1326.798182][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1326.832559][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1326.865358][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1326.907977][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1326.954344][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1327.025249][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1327.076580][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1327.097619][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1327.140208][ T9551] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1327.219946][ T9551] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0008/input/input77 [ 1327.292711][ T9551] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1327.448271][T18479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.022246][T18485] tmpfs: Bad value for 'mpol' [ 1328.266402][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.985384][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.993723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.206677][ T1956] usb 7-1: USB disconnect, device number 35 [ 1330.500417][ T7852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.508740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.809399][T18511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=18511 comm=syz.1.2659 [ 1331.023984][ T29] audit: type=1400 audit(1772174379.798:1878): avc: denied { kexec_image_load } for pid=18509 comm="syz.7.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1332.988016][T18537] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1333.552102][T18550] CUSE: info not properly terminated [ 1333.894791][ T29] audit: type=1400 audit(1772174382.567:1879): avc: denied { ioctl } for pid=18541 comm="syz.6.2666" path="/dev/binderfs/binder0" dev="binder" ino=31 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1333.964517][ T29] audit: type=1400 audit(1772174382.567:1880): avc: denied { set_context_mgr } for pid=18541 comm="syz.6.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1333.999993][ T29] audit: type=1400 audit(1772174382.567:1881): avc: denied { map } for pid=18541 comm="syz.6.2666" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1334.083886][ T29] audit: type=1400 audit(1772174382.688:1882): avc: denied { append } for pid=18543 comm="syz.7.2668" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1334.126177][ T29] audit: type=1400 audit(1772174382.707:1883): avc: denied { write } for pid=18543 comm="syz.7.2668" name="rt_acct" dev="proc" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1334.415279][ T29] audit: type=1400 audit(1772174382.744:1884): avc: denied { call } for pid=18541 comm="syz.6.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1334.447322][ T29] audit: type=1400 audit(1772174382.744:1885): avc: denied { transfer } for pid=18541 comm="syz.6.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1334.912834][ T29] audit: type=1400 audit(1772174382.754:1886): avc: denied { getopt } for pid=18541 comm="syz.6.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1335.113756][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.122084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.399614][T18575] bridge1: entered promiscuous mode [ 1336.404968][T18575] bridge1: entered allmulticast mode [ 1336.761498][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.769916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.095833][T18578] overlayfs: failed to clone upperpath [ 1337.522581][T18585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.530926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.791093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.878174][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.940888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.993791][T18584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.173429][ T29] audit: type=1400 audit(1772175154.574:1887): avc: denied { read append } for pid=18580 comm="syz.7.2674" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1338.672592][ T29] audit: type=1400 audit(1772175154.574:1888): avc: denied { open } for pid=18580 comm="syz.7.2674" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1338.701356][ T29] audit: type=1400 audit(1772175154.574:1889): avc: denied { ioctl } for pid=18580 comm="syz.7.2674" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1338.845271][ T29] audit: type=1400 audit(1772175155.078:1890): avc: denied { mount } for pid=18587 comm="syz.6.2676" name="/" dev="autofs" ino=54591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1338.930657][ T29] audit: type=1400 audit(1772175155.099:1891): avc: denied { shutdown } for pid=18587 comm="syz.6.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1339.973953][T18613] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2681'. [ 1340.691439][ T2728] block nbd1: Possible stuck request ffff888027e48000: control (read@0,1024B). Runtime 150 seconds [ 1340.706643][ T2728] block nbd1: Possible stuck request ffff888027e48200: control (read@1024,1024B). Runtime 150 seconds [ 1340.718921][ T2728] block nbd1: Possible stuck request ffff888027e48400: control (read@2048,1024B). Runtime 150 seconds [ 1340.732053][ T2728] block nbd1: Possible stuck request ffff888027e48600: control (read@3072,1024B). Runtime 150 seconds [ 1340.759328][T18616] net_ratelimit: 3 callbacks suppressed [ 1340.759339][T18616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1340.957399][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.965762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.416153][T18628] lo: entered allmulticast mode [ 1341.838746][ T29] audit: type=1400 audit(1772175158.353:1892): avc: denied { connect } for pid=18622 comm="syz.2.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1341.977641][ T29] audit: type=1400 audit(1772175158.574:1893): avc: denied { unmount } for pid=12182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1342.146779][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.155094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.458402][T18650] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2687'. [ 1344.238570][T18661] macsec1: entered promiscuous mode [ 1344.243944][T18661] macsec1: entered allmulticast mode [ 1345.956495][ T2728] block nbd0: Possible stuck request ffff888027dd0000: control (read@0,1024B). Runtime 210 seconds [ 1345.968015][ T2728] block nbd0: Possible stuck request ffff888027dd0200: control (read@1024,1024B). Runtime 210 seconds [ 1345.994744][ T2728] block nbd0: Possible stuck request ffff888027dd0400: control (read@2048,1024B). Runtime 210 seconds [ 1346.015553][ T2728] block nbd0: Possible stuck request ffff888027dd0600: control (read@3072,1024B). Runtime 210 seconds [ 1346.048518][T18682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1346.140586][T18681] fuse: Bad value for 'fd' [ 1346.186069][T18681] netlink: 'syz.7.2696': attribute type 3 has an invalid length. [ 1346.332021][ T5875] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1346.423243][T14099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.431564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.541819][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 1346.553292][ T5875] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1346.563564][ T5875] usb 2-1: config 1 has no interface number 1 [ 1346.571032][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1346.790092][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1346.803415][ T5875] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1346.850838][T18689] fuse: Unknown parameter 'euid<00000000000000000000' [ 1346.895876][ T5875] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1346.923236][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.950519][ T5875] usb 2-1: Product: syz [ 1346.954713][ T5875] usb 2-1: Manufacturer: syz [ 1347.024227][T18694] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1347.194942][ T5875] usb 2-1: SerialNumber: syz [ 1347.220212][ T29] audit: type=1326 audit(1772175164.075:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.6.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26159c799 code=0x7ffc0000 [ 1347.737504][T18694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.764471][ T1956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.954974][ T29] audit: type=1326 audit(1772175164.075:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.6.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26159c799 code=0x7ffc0000 [ 1348.051504][ T29] audit: type=1326 audit(1772175164.075:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.6.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb26159c799 code=0x7ffc0000 [ 1348.570726][ T5875] usb 2-1: failed to enable PITCH for EP 0x82 [ 1348.584434][ T29] audit: type=1326 audit(1772175164.075:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.6.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26159c799 code=0x7ffc0000 [ 1348.622506][ T5875] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1348.659118][ T29] audit: type=1326 audit(1772175164.075:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.6.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26159c799 code=0x7ffc0000 [ 1348.742915][ T5875] usb 2-1: USB disconnect, device number 52 [ 1348.922124][ T29] audit: type=1400 audit(1772175164.600:1899): avc: denied { create } for pid=18690 comm="syz.2.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1348.944004][ T29] audit: type=1400 audit(1772175165.146:1900): avc: denied { append } for pid=18703 comm="syz.7.2702" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1349.033852][ T7577] udevd[7577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.141578][T18724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.149398][T18724] batadv_slave_0: entered promiscuous mode [ 1350.396763][T18738] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1350.916464][T18755] CUSE: info not properly terminated [ 1351.900297][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.908654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.413359][T18776] 9pnet_virtio: no channels available for device syz [ 1352.466721][T18776] overlayfs: missing 'lowerdir' [ 1352.481423][ T29] audit: type=1400 audit(1772175169.577:1901): avc: denied { mount } for pid=18769 comm="syz.5.2712" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1353.793099][T18781] ceph: No mds server is up or the cluster is laggy [ 1353.802028][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1354.061676][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1355.598578][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.606859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.064874][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.386643][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.395035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.916680][ T29] audit: type=1400 audit(1772175176.244:1902): avc: denied { bind } for pid=18825 comm="syz.7.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1358.978850][ T29] audit: type=1400 audit(1772175176.244:1903): avc: denied { listen } for pid=18825 comm="syz.7.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1359.002740][ T29] audit: type=1400 audit(1772175176.276:1904): avc: denied { getopt } for pid=18825 comm="syz.7.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1359.203361][T18833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.211752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.576007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.584265][ T29] audit: type=1326 audit(1772175176.737:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18830 comm="syz.7.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1359.769016][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.814447][ T29] audit: type=1326 audit(1772175176.737:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18830 comm="syz.7.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1359.846114][T18832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.851090][ T29] audit: type=1326 audit(1772175176.737:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18830 comm="syz.7.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1359.854456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.878319][ T29] audit: type=1326 audit(1772175176.737:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18830 comm="syz.7.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1359.910445][ T29] audit: type=1326 audit(1772175176.737:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18830 comm="syz.7.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1360.291402][ T29] audit: type=1326 audit(1772175176.737:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18830 comm="syz.7.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1360.752196][ T29] audit: type=1326 audit(1772175176.748:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18830 comm="syz.7.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33da39c799 code=0x7ffc0000 [ 1361.052588][ T1130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.662083][T12750] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1362.970475][T15830] net_ratelimit: 1 callbacks suppressed [ 1362.970494][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.984350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.012853][T18865] tipc: Started in network mode [ 1363.017949][T18865] tipc: Node identity 7f000001, cluster identity 4711 [ 1363.029058][T18865] tipc: Enabled bearer , priority 10 [ 1363.081178][T12750] usb 2-1: Using ep0 maxpacket: 16 [ 1363.091824][T12750] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1363.100927][T12750] usb 2-1: config 1 has no interface number 1 [ 1363.108113][T12750] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1363.118864][T12750] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1363.245930][T12750] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1363.376879][T12750] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1363.543375][T12750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.712471][ T9551] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1363.976399][ T1956] tipc: Node number set to 2130706433 [ 1364.005600][ T9551] usb 3-1: Using ep0 maxpacket: 16 [ 1364.020015][T12750] usb 2-1: Product: syz [ 1364.057604][T12750] usb 2-1: Manufacturer: syz [ 1364.063810][ T9551] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1364.079252][T12750] usb 2-1: SerialNumber: syz [ 1364.091611][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 1364.091629][ T29] audit: type=1400 audit(1772175181.788:1989): avc: denied { setattr } for pid=18863 comm="syz.6.2732" name="NETLINK" dev="sockfs" ino=55583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1364.158930][ T9551] usb 3-1: config 1 has no interface number 1 [ 1364.181155][ T9551] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1364.198078][T12750] usb 2-1: can't set config #1, error -71 [ 1364.214669][T12750] usb 2-1: USB disconnect, device number 53 [ 1364.226782][ T9551] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1364.240115][ T9551] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1364.447487][ T9551] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1364.464379][ T9551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.670751][ T9551] usb 3-1: Product: syz [ 1364.686735][ T9551] usb 3-1: Manufacturer: syz [ 1364.700540][ T9551] usb 3-1: SerialNumber: syz [ 1365.293006][T18890] netlink: 'syz.5.2737': attribute type 13 has an invalid length. [ 1365.300962][T18890] netlink: 'syz.5.2737': attribute type 17 has an invalid length. [ 1365.328761][ T1956] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1365.339258][T18890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1365.496232][ T9551] usb 3-1: failed to enable PITCH for EP 0x82 [ 1365.519492][ T1956] usb 2-1: Using ep0 maxpacket: 16 [ 1365.559096][ T9551] usb 3-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1365.567235][ T1956] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1365.579591][ T1956] usb 2-1: config 1 has no interface number 1 [ 1365.586824][T18896] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2738'. [ 1365.666114][ T1956] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1365.731481][ T29] audit: type=1400 audit(1772175183.478:1990): avc: denied { mac_admin } for pid=18895 comm="syz.6.2738" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1365.961553][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.970244][ T1956] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1365.972790][ T9551] usb 3-1: USB disconnect, device number 59 [ 1366.043513][ T1956] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1366.079994][ T1956] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1366.099874][ T1956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.216343][T18901] netlink: 'syz.5.2739': attribute type 1 has an invalid length. [ 1366.240688][ T1956] usb 2-1: Product: syz [ 1366.272036][ T1956] usb 2-1: Manufacturer: syz [ 1366.277172][ T1956] usb 2-1: SerialNumber: syz [ 1366.535658][ T1130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.544033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.870691][T18901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1367.140757][T18913] 9p: Bad value for 'rfdno' [ 1367.966443][ T29] audit: type=1400 audit(1772175185.357:1991): avc: denied { map } for pid=18915 comm="syz.6.2742" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1367.991036][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.084223][ T29] audit: type=1400 audit(1772175185.357:1992): avc: denied { execute } for pid=18915 comm="syz.6.2742" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1368.363146][T14099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.371405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.829292][ T1956] usb 2-1: failed to enable PITCH for EP 0x82 [ 1368.838947][ T1956] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1368.983556][ T1956] usb 2-1: USB disconnect, device number 54 [ 1369.402528][ T7577] udevd[7577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1369.579715][ T2728] block nbd1: Possible stuck request ffff888027e48000: control (read@0,1024B). Runtime 180 seconds [ 1369.590752][ T2728] block nbd1: Possible stuck request ffff888027e48200: control (read@1024,1024B). Runtime 180 seconds [ 1369.605552][ T2728] block nbd1: Possible stuck request ffff888027e48400: control (read@2048,1024B). Runtime 180 seconds [ 1369.616975][ T2728] block nbd1: Possible stuck request ffff888027e48600: control (read@3072,1024B). Runtime 180 seconds [ 1370.028219][T18948] netlink: 'syz.2.2747': attribute type 13 has an invalid length. [ 1372.018538][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.027101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.207958][T18948] batadv0: left promiscuous mode [ 1372.476377][T18948] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1372.584021][ T66] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.592554][ T66] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.604554][ T66] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.627507][ T66] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.892885][T18974] fuse: Unknown parameter 'płϗǔCQIE*[3Ȼ9P$F\~;{m6-7Y^-be57NF;`' [ 1374.387268][T12480] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1375.132926][ T2728] block nbd0: Possible stuck request ffff888027dd0000: control (read@0,1024B). Runtime 240 seconds [ 1375.145933][ T2728] block nbd0: Possible stuck request ffff888027dd0200: control (read@1024,1024B). Runtime 240 seconds [ 1375.157272][ T2728] block nbd0: Possible stuck request ffff888027dd0400: control (read@2048,1024B). Runtime 240 seconds [ 1375.168617][ T2728] block nbd0: Possible stuck request ffff888027dd0600: control (read@3072,1024B). Runtime 240 seconds [ 1375.171687][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.187872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.197752][T12480] usb 2-1: device descriptor read/64, error -71 [ 1375.455953][T12480] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1376.895487][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.511421][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.519731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.060347][T19015] No such timeout policy "syz0" [ 1378.924304][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.932466][ T29] audit: type=1400 audit(1772175196.959:1993): avc: denied { write } for pid=19012 comm="syz.2.2762" path="socket:[55226]" dev="sockfs" ino=55226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1378.948100][ T1308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.965711][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.334035][T15135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.890433][T19006] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1379.893134][T19017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2761'. [ 1380.026878][T19018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2761'. [ 1381.173118][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.181501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.198905][ T29] audit: type=1400 audit(1772175199.699:1994): avc: denied { connect } for pid=19021 comm="syz.7.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1381.221192][T19029] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 1381.444308][ T29] audit: type=1400 audit(1772175199.699:1995): avc: denied { shutdown } for pid=19021 comm="syz.7.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1381.751379][T19041] fuse: Unknown parameter 'płϗǔCQIE*[3Ȼ9P$F\~;{m6-7Y^-be57NF;`' [ 1382.022972][T19046] CUSE: info not properly terminated [ 1382.341550][T19051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2769'. [ 1383.257738][T19059] overlayfs: failed lookup in lower (newroot/556, name='file0', err=-40): overlapping layers [ 1383.493423][ T29] audit: type=1400 audit(1772175201.852:1996): avc: denied { unlink } for pid=19055 comm="syz.1.2770" name="#2d" dev="tmpfs" ino=3064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1383.754493][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.762879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.828015][T19052] Bluetooth: hci0: command 0x0406 tx timeout [ 1383.835732][T10682] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1383.852239][ T29] audit: type=1400 audit(1772175201.862:1997): avc: denied { mount } for pid=19055 comm="syz.1.2770" name="/" dev="overlay" ino=3059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1384.265587][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.277551][ T9551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.312774][ T29] audit: type=1400 audit(1772175202.881:1998): avc: denied { read } for pid=19065 comm="syz.2.2772" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1384.443131][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.467078][ T29] audit: type=1400 audit(1772175202.881:1999): avc: denied { open } for pid=19065 comm="syz.2.2772" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1384.505105][ T29] audit: type=1400 audit(1772175202.891:2000): avc: denied { ioctl } for pid=19065 comm="syz.2.2772" path="/dev/usbmon5" dev="devtmpfs" ino=731 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1384.535172][T10682] Bluetooth: hci4: command 0x0406 tx timeout [ 1384.708255][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.726951][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.451598][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.623609][ T29] audit: type=1400 audit(1772175204.382:2001): avc: denied { connect } for pid=19071 comm="syz.1.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1385.902543][T19085] ceph: No mds server is up or the cluster is laggy [ 1385.912033][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1386.077781][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1386.190572][T19077] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1386.199604][T19077] team0: Port device batadv3 added [ 1386.215191][T19077] net_ratelimit: 1 callbacks suppressed [ 1386.215209][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.229402][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.238130][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.248948][ T29] audit: type=1400 audit(1772175204.980:2002): avc: denied { setopt } for pid=19071 comm="syz.1.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1386.325849][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.334366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.376831][ T1130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.385220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.792368][T19102] ceph: No mds server is up or the cluster is laggy [ 1388.218119][ T9551] libceph: connect (1)[c::]:6789 error -101 [ 1388.224221][ T9551] libceph: mon0 (1)[c::]:6789 connect error [ 1388.264736][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.273202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.421131][T19109] futex_wake_op: syz.7.2780 tries to shift op by 32; fix this program [ 1388.478689][T19115] CIFS mount error: No usable UNC path provided in device string! [ 1388.478689][T19115] [ 1388.488762][T19115] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1388.511840][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1388.518069][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1388.562466][T19077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.623969][ T29] audit: type=1400 audit(1772175207.521:2003): avc: denied { read } for pid=19108 comm="syz.7.2780" path="socket:[56130]" dev="sockfs" ino=56130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1389.312252][T19116] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1389.607204][ T29] audit: type=1400 audit(1772175208.288:2004): avc: denied { append } for pid=19119 comm="syz.6.2782" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1389.698019][ T29] audit: type=1400 audit(1772175208.477:2005): avc: denied { connect } for pid=19119 comm="syz.6.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1390.231637][T19134] SELinux: truncated policydb string identifier [ 1390.238280][T19134] SELinux: failed to load policy [ 1390.550022][ T29] audit: type=1400 audit(1772175209.233:2006): avc: denied { load_policy } for pid=19128 comm="syz.7.2785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1391.853386][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1392.489811][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1392.625208][ T29] audit: type=1400 audit(1772175211.731:2007): avc: denied { create } for pid=19149 comm="syz.1.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1392.758251][ T1308] net_ratelimit: 108 callbacks suppressed [ 1392.758270][ T1308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.772800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.846743][T19153] netlink: 'syz.1.2791': attribute type 23 has an invalid length. [ 1393.373548][ T24] usb 3-1: device descriptor read/all, error -71 [ 1393.408656][ T29] audit: type=1400 audit(1772175212.571:2008): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1393.621239][T19160] CIFS mount error: No usable UNC path provided in device string! [ 1393.621239][T19160] [ 1393.631313][T19160] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1393.789641][T19162] CUSE: info not properly terminated [ 1393.905283][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.913636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.409694][ T29] audit: type=1400 audit(1772175213.611:2009): avc: denied { bind } for pid=19165 comm="syz.1.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1394.639162][ T29] audit: type=1400 audit(1772175213.863:2010): avc: denied { lock } for pid=19165 comm="syz.1.2794" path="socket:[56475]" dev="sockfs" ino=56475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1395.242508][T19179] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1395.488456][ T66] Bluetooth: hci6: Frame reassembly failed (-84) [ 1396.411801][ T42] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1396.507135][T19191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2798'. [ 1396.516295][T19191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2798'. [ 1396.607760][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 1396.624406][ T42] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1396.637163][ T42] usb 2-1: config 1 has no interface number 1 [ 1396.646809][ T42] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1397.151499][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1397.164880][ T42] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1397.205938][ T29] audit: type=1400 audit(1772175215.984:2011): avc: denied { write } for pid=19192 comm="syz.7.2799" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1397.304633][ T42] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1397.321726][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.353039][ T42] usb 2-1: Product: syz [ 1397.357688][ T42] usb 2-1: Manufacturer: syz [ 1397.363225][ T42] usb 2-1: SerialNumber: syz [ 1397.465212][T19048] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1398.375079][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.383480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.413291][ T2728] block nbd1: Possible stuck request ffff888027e48000: control (read@0,1024B). Runtime 210 seconds [ 1398.424103][ T2728] block nbd1: Possible stuck request ffff888027e48200: control (read@1024,1024B). Runtime 210 seconds [ 1398.435167][ T2728] block nbd1: Possible stuck request ffff888027e48400: control (read@2048,1024B). Runtime 210 seconds [ 1398.446881][ T2728] block nbd1: Possible stuck request ffff888027e48600: control (read@3072,1024B). Runtime 210 seconds [ 1398.583778][ T42] usb 2-1: failed to enable PITCH for EP 0x82 [ 1398.598125][ T42] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1398.652532][ T42] usb 2-1: USB disconnect, device number 57 [ 1398.714941][ T7577] udevd[7577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1398.855574][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.456100][ T29] audit: type=1400 audit(1772175218.902:2012): avc: denied { execute } for pid=19211 comm="syz.7.2804" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=57432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1399.483879][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.492246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.593605][ T29] audit: type=1400 audit(1772175219.060:2013): avc: denied { write } for pid=19219 comm="syz.2.2806" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1400.421809][T19230] uprobe: syz.5.2807:19230 failed to unregister, leaking uprobe [ 1400.885268][T19233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2809'. [ 1400.960770][T19239] kernel profiling enabled (shift: 15) [ 1401.026091][T19241] fuse: Unknown parameter 'płϗǔCQIE*[3Ȼ9P$F\~;{m6-7Y^-be57NF;`' [ 1401.899857][T19252] ceph: No mds server is up or the cluster is laggy [ 1401.909491][T12750] libceph: connect (1)[c::]:6789 error -101 [ 1401.925006][T12750] libceph: mon0 (1)[c::]:6789 connect error [ 1404.250112][ T29] audit: type=1400 audit(1772175223.270:2014): avc: denied { mount } for pid=19269 comm="syz.2.2816" name="/" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1404.290277][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.298586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.608570][ T30] INFO: task syz.3.2457:17542 blocked for more than 143 seconds. [ 1404.616293][ T30] Tainted: G L syzkaller #0 [ 1404.622822][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1404.631973][ T30] task:syz.3.2457 state:D stack:26360 pid:17542 tgid:17534 ppid:5814 task_flags:0x400140 flags:0x00080802 [ 1404.644020][ T30] Call Trace: [ 1404.647345][ T30] [ 1404.650282][ T30] __schedule+0xfee/0x60e0 [ 1404.654749][ T2728] block nbd0: Possible stuck request ffff888027dd0000: control (read@0,1024B). Runtime 270 seconds [ 1404.666148][ T2728] block nbd0: Possible stuck request ffff888027dd0200: control (read@1024,1024B). Runtime 270 seconds [ 1404.677173][ T2728] block nbd0: Possible stuck request ffff888027dd0400: control (read@2048,1024B). Runtime 270 seconds [ 1404.688155][ T2728] block nbd0: Possible stuck request ffff888027dd0600: control (read@3072,1024B). Runtime 270 seconds [ 1404.699517][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1404.704764][ T30] ? __pfx___schedule+0x10/0x10 [ 1404.709636][ T30] ? find_held_lock+0x2b/0x80 [ 1404.714639][ T30] ? schedule+0x2bf/0x390 [ 1404.718997][ T30] schedule+0xdd/0x390 [ 1404.724415][ T30] schedule_preempt_disabled+0x13/0x30 [ 1404.729893][ T30] __mutex_lock+0xc9a/0x1b90 [ 1404.734548][ T30] ? sync_bdevs+0x153/0x480 [ 1404.739104][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1404.744418][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1404.750078][ T30] ? iput.part.0+0x1a0/0xf50 [ 1404.755798][ T30] ? sync_bdevs+0x153/0x480 [ 1404.760335][ T30] sync_bdevs+0x153/0x480 [ 1404.764757][ T30] ksys_sync+0xb0/0xf0 [ 1404.768854][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1404.774658][ T30] ? do_syscall_64+0x95/0xf80 [ 1404.779337][ T30] __do_sys_sync+0xe/0x20 [ 1404.783778][ T30] do_syscall_64+0x106/0xf80 [ 1404.788772][ T30] ? clear_bhb_loop+0x40/0x90 [ 1404.793913][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.800397][ T30] RIP: 0033:0x7f4cc8d9c799 [ 1404.805733][ T30] RSP: 002b:00007f4cc9c4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1404.816420][ T30] RAX: ffffffffffffffda RBX: 00007f4cc9015fa0 RCX: 00007f4cc8d9c799 [ 1404.824480][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1404.833477][ T30] RBP: 00007f4cc9015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.842415][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.850705][ T30] R13: 00007f4cc9016038 R14: 00007f4cc9015fa0 R15: 00007ffc40f8e2a8 [ 1404.859590][ T30] [ 1404.953427][ T29] audit: type=1400 audit(1772175224.687:2015): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1404.953977][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.981850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.999660][ T30] INFO: task syz.3.2457:17548 blocked for more than 144 seconds. [ 1405.007495][ T30] Tainted: G L syzkaller #0 [ 1405.051425][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1405.060254][ T30] task:syz.3.2457 state:D stack:28136 pid:17548 tgid:17534 ppid:5814 task_flags:0x400040 flags:0x00080002 [ 1405.076747][ T30] Call Trace: [ 1405.081585][ T30] [ 1405.094141][ T30] __schedule+0xfee/0x60e0 [ 1405.098596][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1405.103716][ T30] ? __pfx___schedule+0x10/0x10 [ 1405.109009][ T30] ? find_held_lock+0x2b/0x80 [ 1405.114833][ T30] ? schedule+0x2bf/0x390 [ 1405.121375][ T30] schedule+0xdd/0x390 [ 1405.125602][ T30] schedule_preempt_disabled+0x13/0x30 [ 1405.131147][ T30] __mutex_lock+0xc9a/0x1b90 [ 1405.136489][ T30] ? sync_bdevs+0x153/0x480 [ 1405.141942][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1405.148443][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1405.155295][ T30] ? iput.part.0+0x1a0/0xf50 [ 1405.160330][ T30] ? sync_bdevs+0x153/0x480 [ 1405.164971][ T30] sync_bdevs+0x153/0x480 [ 1405.169910][ T30] ksys_sync+0xb0/0xf0 [ 1405.174136][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1405.179456][ T30] ? kcov_ioctl+0x16a/0x720 [ 1405.185278][ T30] ? do_syscall_64+0x95/0xf80 [ 1405.191141][ T30] __do_sys_sync+0xe/0x20 [ 1405.196100][ T30] do_syscall_64+0x106/0xf80 [ 1405.201878][ T30] ? clear_bhb_loop+0x40/0x90 [ 1405.207982][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.214866][ T30] RIP: 0033:0x7f4cc8d9c799 [ 1405.219572][ T30] RSP: 002b:00007f4cc9c2b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1405.228359][ T30] RAX: ffffffffffffffda RBX: 00007f4cc9016090 RCX: 00007f4cc8d9c799 [ 1405.240435][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1405.249848][ T30] RBP: 00007f4cc9016090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.258539][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1405.267803][ T30] R13: 00007f4cc9016128 R14: 00007f4cc9016090 R15: 00007ffc40f8e2a8 [ 1405.276477][ T30] [ 1405.287173][ T30] [ 1405.287173][ T30] Showing all locks held in the system: [ 1405.299217][ T30] 1 lock held by khungtaskd/30: [ 1405.305289][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1405.315435][ T30] 3 locks held by kworker/u8:4/66: [ 1405.320767][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1405.334209][ T30] #1: ffffc9000214fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1405.345738][ T30] #2: ffffffff9060f7e8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1405.363141][ T30] 2 locks held by getty/5570: [ 1405.368525][ T30] #0: ffff8880392910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1405.383248][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1405.394536][ T30] 1 lock held by syz-executor/5787: [ 1405.401141][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1405.411989][ T30] 1 lock held by udevd/7331: [ 1405.417287][ T30] #0: ffff888027d57358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1405.428286][ T30] 1 lock held by udevd/7448: [ 1405.433593][ T30] #0: ffff888027d53358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1405.449817][ T30] 1 lock held by syz.3.2457/17542: [ 1405.456594][ T30] #0: ffff888027d57358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1405.468256][ T30] 1 lock held by syz.3.2457/17548: [ 1405.475138][ T30] #0: ffff888027d57358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1405.485302][ T30] 2 locks held by syz.6.2802/19210: [ 1405.490585][ T30] 2 locks held by syz.6.2812/19248: [ 1405.497198][ T30] #0: ffffffff9060f7e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1405.506874][ T30] #1: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1405.517666][ T30] [ 1405.520006][ T30] ============================================= [ 1405.520006][ T30] [ 1405.528825][ T30] NMI backtrace for cpu 1 [ 1405.528836][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.528852][ T30] Tainted: [L]=SOFTLOCKUP [ 1405.528856][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1405.528862][ T30] Call Trace: [ 1405.528866][ T30] [ 1405.528871][ T30] dump_stack_lvl+0x100/0x190 [ 1405.528892][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1405.528905][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1405.528924][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1405.528942][ T30] sys_info+0x141/0x190 [ 1405.528956][ T30] watchdog+0xd25/0x1050 [ 1405.528975][ T30] ? __pfx_watchdog+0x10/0x10 [ 1405.528990][ T30] ? __kthread_parkme+0x18c/0x230 [ 1405.529008][ T30] ? kthread+0x13a/0x450 [ 1405.529017][ T30] ? __pfx_watchdog+0x10/0x10 [ 1405.529031][ T30] kthread+0x370/0x450 [ 1405.529041][ T30] ? __pfx_kthread+0x10/0x10 [ 1405.529052][ T30] ret_from_fork+0x754/0xd80 [ 1405.529063][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1405.529075][ T30] ? __switch_to+0x7b4/0x1120 [ 1405.529089][ T30] ? __pfx_kthread+0x10/0x10 [ 1405.529100][ T30] ret_from_fork_asm+0x1a/0x30 [ 1405.529120][ T30] [ 1405.529124][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1405.655653][ C0] NMI backtrace for cpu 0 [ 1405.655669][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.655688][ C0] Tainted: [L]=SOFTLOCKUP [ 1405.655693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1405.655701][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1405.655719][ C0] Code: d8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 fc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1405.655736][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1405.655748][ C0] RAX: 000000000729041f RBX: ffffffff8e4975c0 RCX: ffffffff8b8f8c75 [ 1405.655757][ C0] RDX: 0000000000000000 RSI: ffffffff8de72961 RDI: ffffffff8c1af120 [ 1405.655766][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1405.655774][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1405.655783][ C0] R13: 0000000000000000 R14: ffffffff90d97010 R15: 0000000000000000 [ 1405.655792][ C0] FS: 0000000000000000(0000) GS:ffff888124347000(0000) knlGS:0000000000000000 [ 1405.655807][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1405.655816][ C0] CR2: 0000555584cf94e8 CR3: 000000002f540000 CR4: 00000000003526f0 [ 1405.655825][ C0] Call Trace: [ 1405.655830][ C0] [ 1405.655835][ C0] default_idle+0x9/0x10 [ 1405.655851][ C0] default_idle_call+0x6c/0xb0 [ 1405.655866][ C0] do_idle+0x35b/0x4b0 [ 1405.655884][ C0] ? __pfx_do_idle+0x10/0x10 [ 1405.655901][ C0] ? do_idle+0x2bb/0x4b0 [ 1405.655917][ C0] cpu_startup_entry+0x4f/0x60 [ 1405.655936][ C0] rest_init+0x251/0x260 [ 1405.655953][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1405.655973][ C0] start_kernel+0x47f/0x480 [ 1405.655990][ C0] x86_64_start_reservations+0x24/0x30 [ 1405.656007][ C0] x86_64_start_kernel+0x12b/0x130 [ 1405.656023][ C0] common_startup_64+0x13e/0x148 [ 1405.656048][ C0] [ 1405.847061][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1405.853907][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.864568][ T30] Tainted: [L]=SOFTLOCKUP [ 1405.868873][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1405.878906][ T30] Call Trace: [ 1405.882164][ T30] [ 1405.885082][ T30] dump_stack_lvl+0x100/0x190 [ 1405.889752][ T30] vpanic+0x552/0x970 [ 1405.893719][ T30] ? __pfx_vpanic+0x10/0x10 [ 1405.898220][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1405.904374][ T30] panic+0xd1/0xe0 [ 1405.908086][ T30] ? __pfx_panic+0x10/0x10 [ 1405.912486][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1405.918624][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1405.924761][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1405.930895][ T30] ? watchdog.cold+0x198/0x1ca [ 1405.935652][ T30] ? watchdog+0xd35/0x1050 [ 1405.940052][ T30] watchdog.cold+0x1a9/0x1ca [ 1405.944630][ T30] ? __pfx_watchdog+0x10/0x10 [ 1405.949290][ T30] ? __kthread_parkme+0x18c/0x230 [ 1405.954299][ T30] ? kthread+0x13a/0x450 [ 1405.958523][ T30] ? __pfx_watchdog+0x10/0x10 [ 1405.963181][ T30] kthread+0x370/0x450 [ 1405.967228][ T30] ? __pfx_kthread+0x10/0x10 [ 1405.971798][ T30] ret_from_fork+0x754/0xd80 [ 1405.976369][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1405.981459][ T30] ? __switch_to+0x7b4/0x1120 [ 1405.986121][ T30] ? __pfx_kthread+0x10/0x10 [ 1405.990689][ T30] ret_from_fork_asm+0x1a/0x30 [ 1405.995443][ T30] [ 1405.998781][ T30] Kernel Offset: disabled [ 1406.003080][ T30] Rebooting in 86400 seconds..