last executing test programs: 13m4.060729465s ago: executing program 2 (id=980): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13m3.447431161s ago: executing program 4 (id=983): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) 13m3.281644565s ago: executing program 2 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 13m2.285553063s ago: executing program 4 (id=986): sched_setscheduler(0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x0, 0x0, [{{r0}}]}) 13m1.868542416s ago: executing program 4 (id=989): socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 13m1.813109063s ago: executing program 1 (id=990): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x44090}, 0x0) 13m1.262424566s ago: executing program 2 (id=991): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1) 13m0.681698242s ago: executing program 1 (id=993): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"t']) 13m0.43577282s ago: executing program 0 (id=994): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20000080) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000480)=[{}, {}], &(0x7f0000000300)={0x77359400}, &(0x7f0000000400)={&(0x7f0000000380)={[0x546]}, 0x8}) 12m59.500114236s ago: executing program 1 (id=995): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) 12m58.926959601s ago: executing program 0 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 12m57.820976125s ago: executing program 1 (id=998): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) 12m57.769719438s ago: executing program 4 (id=999): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) shutdown(r0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x0, 0x51, 0x7, 0x20000000, 0xfff, 0xffffffffffffffff, 0xc0000000000000, 0x800, 0x6}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 12m57.768011267s ago: executing program 2 (id=1000): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000040)='./bus\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x40, &(0x7f00000003c0)={'trans=unix,', {[{@uname={'uname', 0x3d, '802.15.4 MAC\x00'}}]}}) 12m57.461516958s ago: executing program 2 (id=1002): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet(0x2, 0x800, 0xffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x3, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf250000", @ANYRES32=r6, @ANYBLOB="50880000000000001c001280090001006970a300000000000c00028008000300ac1414bb"], 0x3c}}, 0x40848c0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x3c}}, 0x20004000) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @remote, 'lo\x00'}}) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12m57.162276871s ago: executing program 1 (id=1003): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0xfffffffe) 12m57.039958094s ago: executing program 0 (id=1004): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000240)={0x0}) 12m56.539206595s ago: executing program 3 (id=1005): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 12m56.310082722s ago: executing program 0 (id=1006): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x13, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='bpf\x00', 0x2204c96, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0xfffd, 0x0) 12m56.202235965s ago: executing program 3 (id=1007): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) 12m55.951610905s ago: executing program 3 (id=1008): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12m55.937861727s ago: executing program 0 (id=1009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000040)="c1188e99b95d02ff4284599645", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x20}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_emit_ethernet(0x7c9, &(0x7f00000039c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x793, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x6, "aaec6abdff6416cba74b557103b4927a9e49165dfec922450543fb23d9d61c30b64c09c4b3625b9b1e657a5e2a03f9c7b8b984abaa"}, {0x1f, 0x8, "1ea1632e7462658b10ee8c2f81a9240269a881b952d2c3655d113710cceaf6b52faec679403f0eff49b930f990a43b0fe6c47c9f47a1583521914500c77c"}, {0x18}, {0x1f, 0xe2, "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"}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7753646e6fad", @ANYRESHEX, @ANYBLOB=',\x00']) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='syscall\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000380)={0x0, 'pim6reg0\x00', {0x1}, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000801010000000000010000e90008070600024088630000040004800900010073797a3000000000050003002f000000da0dd02f800fe392cebf3fc9230f4b926183f3512d6834350317cb864e157ae644ad405703178bac4bb23d3e505c1aa328b15d7a8017e520121cd673a14f84bc568804a7f9c349bf716aa807fb6ae7071f67eaabac61df95d2606ff601ba3a76452268fcbb6d19743c1a1e78268e4ef73dda0152dab5b40c60c5d9ab67badc6cb423dfb96466a14aea666eb77b0f7e553d7a5a43e783193cdf6db913bce6dc7a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) syz_emit_ethernet(0x82, &(0x7f0000000480)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x7, 0x1, [@multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@broadcast}, {@dev}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc) 12m55.828140758s ago: executing program 3 (id=1010): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a313, 0xec63, 0xff, 0x8, 0x98b9, 0xfff, 0x0, 0x100000000000004, 0x10000, 0x200100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x3, 0x9, 0x400, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff6, 0x4, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x4, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0x11, 0x8000000000000000, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0x39790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r2, 0x0, 0xd8) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12m55.748834185s ago: executing program 4 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465c, 0x800, 0x3, 0x287}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) close_range(r0, 0xffffffffffffffff, 0x0) 12m55.640998782s ago: executing program 3 (id=1012): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r2, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054) 12m55.317239065s ago: executing program 2 (id=1013): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)='A', 0x1}], 0x1}}], 0x1, 0x4000001) 12m47.25932208s ago: executing program 3 (id=1014): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7", 0x1, 0xc001, 0x0, 0x0) 12m36.217267446s ago: executing program 0 (id=1015): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 12m35.436345359s ago: executing program 1 (id=1016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0xfbe0, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 12m24.016819238s ago: executing program 4 (id=1017): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 12m0.245752259s ago: executing program 32 (id=1013): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)='A', 0x1}], 0x1}}], 0x1, 0x4000001) 8m10.005908008s ago: executing program 33 (id=1014): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7", 0x1, 0xc001, 0x0, 0x0) 8m5.505094265s ago: executing program 34 (id=1015): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8m5.414138656s ago: executing program 35 (id=1016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0xfbe0, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 8m5.179510969s ago: executing program 36 (id=1017): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 16.113292724s ago: executing program 6 (id=2266): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x6, 0x1, 0x3, 0x0, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 13.101042056s ago: executing program 6 (id=2273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 11.651156294s ago: executing program 7 (id=2275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) 11.124210295s ago: executing program 6 (id=2277): syz_usbip_server_init(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x20044000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) r4 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r4, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x200, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r5) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 10.990497722s ago: executing program 7 (id=2279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001fff0000000000000000000000008ef36ccc2013111705da58ce0447bfb277634fe154733ffe271f5ad0e791d3a5f467d3ff9b6e9590470c", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c000000"], 0x44}}, 0x20048010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r7 = socket(0xa, 0x3, 0x87) sendto(r7, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000000)=0x1000000, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804}) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)) 9.953419205s ago: executing program 8 (id=2281): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) socket$pptp(0x18, 0x1, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000000)='\\', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 9.718139551s ago: executing program 7 (id=2282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000380)={{0x5, 0x4, 0x9, 0x1000, 'syz0\x00', 0x1}, 0x5, 0x1, 0x9, 0x0, 0x9, 0x8, 'syz1\x00', &(0x7f0000000340)=['\x00', 'GPL\x00', 'GPL\x00', 'bridge0\x00', 'GPL\x00', '.#&\x00', ':\x06\x00', 'macvlan\x00', '/dev/autofs\x00'], 0x30}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x14000000001, 0x0, 0x2, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x4) 9.532788324s ago: executing program 5 (id=2284): rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) socket(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x814) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r5], 0x118) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e21, @broadcast}}) 9.417274113s ago: executing program 9 (id=2285): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b553c0006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x20000001, 0x8, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000b40)={0x250, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000c40) 7.875556532s ago: executing program 7 (id=2286): syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4301, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x8}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) 7.874037679s ago: executing program 5 (id=2287): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x51, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f0000000100)=@ethtool_gfeatures}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x7fff, 0x8, 0xfffffffffffffffa, 0x2, 0x0, 0x6], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x20000000) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 7.821546262s ago: executing program 9 (id=2288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f0000000000)={0x19971634}, &(0x7f0000000280)={0x6, 0xb, 0x5398795c, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7.67196056s ago: executing program 6 (id=2289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="c1188e99b95d02ff4284599645f0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xb0, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_emit_ethernet(0x7c9, &(0x7f00000039c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x793, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x6, "aaec6abdff6416cba74b557103b4927a9e49165dfec922450543fb23d9d61c30b64c09c4b3625b9b1e657a5e2a03f9c7b8b984abaa"}, {0x1f, 0x8, "1ea1632e7462658b10ee8c2f81a9240269a881b952d2c3655d113710cceaf6b52faec679403f0eff49b930f990a43b0fe6c47c9f47a1583521914500c77c"}, {0x18}, {0x1f, 0xe2, "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"}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7753646e6fad", @ANYRESHEX, @ANYBLOB=',\x00']) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='syscall\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000380)={0x0, 'pim6reg0\x00', {0x1}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000801010000000000010000e90008070600024088630000040004800900010073797a3000000000050003002f000000da0dd02f800fe392cebf3fc9230f4b926183f3512d6834350317cb864e157ae644ad405703178bac4bb23d3e505c1aa328b15d7a8017e520121cd673a14f84bc568804a7f9c349bf716aa807fb6ae7071f67eaabac61df95d2606ff601ba3a76452268fcbb6d19743c1a1e78268e4ef73dda0152dab5b40c60c5d9ab67badc6cb423dfb96466a14aea666eb77b0f7e553d7a5a43e783193cdf6db913bce6dc7a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) syz_emit_ethernet(0x7a, &(0x7f0000000480)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x7, 0x1, [@multicast1]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@broadcast}, {@dev}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r10}, 0xc) 6.296113584s ago: executing program 5 (id=2290): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timerfd_create(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, 0x0, 0x4, 0x0) clock_gettime(0x6, &(0x7f0000000380)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) 6.245421483s ago: executing program 8 (id=2291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000780)=[@decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3d298e7cc1ca36b0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 5.717083664s ago: executing program 8 (id=2292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e31, 0x100659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000100), 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002540)={0x2020}, 0x2020) 5.378262587s ago: executing program 9 (id=2293): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x11) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) kcmp(0x0, 0x0, 0x1, r2, r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.079802902s ago: executing program 5 (id=2294): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x9362, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 5.074486996s ago: executing program 7 (id=2295): setfsgid(0xee00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x300, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b030c0d185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d3e2e006a251e095ed496a5552fbf256eb2f643df539bad7e9d72146c7ac03fdba4ce87cb39600feede00000000000000000000000000000616e811ea5c31696a5bc384e7f0005667204385829db5b251", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}], 0x4, 0x400c0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000001c0), 0x1004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="7961040000007e0000007e000000"], 0x14}}, 0x0) 4.446402232s ago: executing program 6 (id=2296): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000040)) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x0, @loopback, 0x4}, {0xa, 0x4e20, 0x52, @empty, 0x2}, 0xffffffffffffffff, {[0x6, 0x80000000, 0xe560, 0x9, 0x100, 0x3, 0x4, 0x83]}}, 0x5c) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) shmat(0x0, &(0x7f00005e6000/0x1000)=nil, 0x4000) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'xfrm0\x00', 0x400}) shmctl$IPC_RMID(0x0, 0x0) 4.265667926s ago: executing program 8 (id=2297): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0xc0044dff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000140)={0xc, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r2, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18fdfd7f000000000020"]) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) 2.865814876s ago: executing program 5 (id=2298): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000", @ANYRES32, @ANYBLOB="0001008000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) io_pgetevents(0x0, 0x91, 0xb, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)={0x77359400}, 0x0) sched_setparam(0x0, &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c1) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0x2, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.696271032s ago: executing program 8 (id=2299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "0c0200002000"}}}, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @val={@val={0x88a8, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}, "3e3e63bd"}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000240), &(0x7f0000000340)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000107000/0x1000)=nil, 0x1000, 0x800000, 0x50, r4, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f00004b6000/0x1000)=nil, 0x1000, 0x3000002, 0x2010, r4, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.696031147s ago: executing program 9 (id=2300): dup(0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(r1, &(0x7f0000000040)={[0x4]}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xe0480, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) close_range(r3, 0xffffffffffffffff, 0x0) 2.695077574s ago: executing program 7 (id=2309): syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') socket$rxrpc(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) sync() 2.574187158s ago: executing program 6 (id=2301): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80180, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ustat(0x801, &(0x7f0000000300)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/7, 0x0, &(0x7f00000005c0)="1c0f4c2d9e466f707ad2aa6c44e3778bb62e2d77a78b3ff5824686b6455aebca6a84e7c401d6514a0f56a3365b96a14b6da2f52d8faef3b0dbad602fca11a27a4b274dc4135dd023fc121f326ecf7657cc3cfcad218554bf3dc658ca3a6f430be33e61ff73d9db823c2e5fc3952996c6e030c65380671355313f02ce5902ad7fd2a9335f56c63a7846355b2ff616aec5b2bbc40f3eb9b4b2de3f6e85037aae4666dce71e9c7069e536c632f34e87540b3bfbb3fb44892a79d596c35be91d3763e938aa8225bb187c0e106cba48cb9a830229befcc1fcb643cb823f9ffac2b4eae12918f797", 0x81, r5}, 0x38) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)={0x30, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 1.570642022s ago: executing program 9 (id=2302): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20000040) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d14, 0x0) 237.544781ms ago: executing program 5 (id=2303): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x31}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x101}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084000000000001000002000000000000050000000000000006020000000000"], 0x0, 0x3e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f0000050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 14.449321ms ago: executing program 9 (id=2304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000000)=0x4, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') landlock_restrict_self(r1, 0x0) connect$inet6(r0, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x80}, 0x50) 0s ago: executing program 8 (id=2305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000020000000000000000000b708000000000000778af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070000f800800000bb00000000005dfa0b7ef11f73949493a8eb67480007040000f0ffff517d3d36b9ef3043a0b1ed8f79673872826196d75717ff1fa4ec45e903efd4812f39f02be8cf0c187c4241ae4daae498150096dc9e5902a7cc3d7af5e0692c2e5e01eaa33671cd862081c16524b92ff52ce18ae4d1d2ab82666101d716a447a68d7eaf7a1f9e4f076dc5cf544b", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000480)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.387075][ T8903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.394514][ T8903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.420926][ T8903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.445247][ T8902] hsr_slave_0: entered promiscuous mode [ 616.451315][ T8902] hsr_slave_1: entered promiscuous mode [ 616.457490][ T8902] debugfs: 'hsr0' already exists in 'hsr' [ 616.463196][ T8902] Cannot create hsr debugfs directory [ 616.478690][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.486538][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.512602][ T8896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.527792][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.535597][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.562591][ T8896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.659233][ T8903] hsr_slave_0: entered promiscuous mode [ 616.666241][ T8903] hsr_slave_1: entered promiscuous mode [ 616.672491][ T8903] debugfs: 'hsr0' already exists in 'hsr' [ 616.678624][ T8903] Cannot create hsr debugfs directory [ 616.758034][ T8899] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 616.813491][ T8896] hsr_slave_0: entered promiscuous mode [ 616.820051][ T8896] hsr_slave_1: entered promiscuous mode [ 616.826630][ T8896] debugfs: 'hsr0' already exists in 'hsr' [ 616.832360][ T8896] Cannot create hsr debugfs directory [ 616.845869][ T8899] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 616.867319][ T8899] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 616.890508][ T8899] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 617.098395][ T8875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.200589][ T8875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.215483][ T8909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.226389][ T8909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 617.258707][ T8909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.279155][ T8875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.299797][ T8909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 617.360248][ T8875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.451027][ T8902] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 617.496389][ T8902] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 617.539057][ T8902] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 617.571938][ T8897] Bluetooth: hci3: command tx timeout [ 617.601502][ T8899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.613135][ T8902] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 617.644829][ T8897] Bluetooth: hci0: command tx timeout [ 617.644842][ T8904] Bluetooth: hci4: command tx timeout [ 617.644870][ T8904] Bluetooth: hci1: command tx timeout [ 617.650219][ T8897] Bluetooth: hci2: command tx timeout [ 617.742538][ T8899] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.759073][ T8903] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 617.797305][ T8875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.834494][ T8903] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 617.846292][ T8903] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 617.902183][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.909328][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.920436][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.927585][ T8885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.946248][ T8903] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 617.974401][ T8875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.022699][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.047703][ T8875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.073896][ T8896] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 618.084587][ T8896] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 618.115757][ T8896] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 618.128313][ T8896] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.138932][ T8909] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.159461][ T8875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.200031][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.207170][ T8878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.232959][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.240091][ T8878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.359224][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.552140][ T8902] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.585562][ T8875] bridge_slave_1: left allmulticast mode [ 618.591234][ T8875] bridge_slave_1: left promiscuous mode [ 618.613728][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.629445][ T8875] bridge_slave_0: left allmulticast mode [ 618.638312][ T8875] bridge_slave_0: left promiscuous mode [ 618.645278][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.656670][ T8875] bond0: left allmulticast mode [ 618.661545][ T8875] bond_slave_0: left allmulticast mode [ 618.669194][ T8875] bond_slave_1: left allmulticast mode [ 618.674931][ T8875] bond0: left promiscuous mode [ 618.679713][ T8875] bond_slave_0: left promiscuous mode [ 618.686726][ T8875] bond_slave_1: left promiscuous mode [ 618.692388][ T8875] bridge0: port 3(bond0) entered disabled state [ 618.701016][ T8875] bridge_slave_1: left allmulticast mode [ 618.706941][ T8875] bridge_slave_1: left promiscuous mode [ 618.712643][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.722003][ T8875] bridge_slave_0: left allmulticast mode [ 618.729253][ T8875] bridge_slave_0: left promiscuous mode [ 618.737922][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.750790][ T8875] batman_adv: batadv0: Interface deactivated: gretap1 [ 618.759028][ T8875] batman_adv: batadv0: Interface deactivated: gretap1 [ 618.767253][ T8875] batman_adv: batadv0: Interface deactivated: gretap1 [ 618.947923][ T8875] batman_adv: batadv0: Removing interface: gretap1 [ 619.041845][ T8875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.052315][ T8875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.062469][ T8875] bond0 (unregistering): Released all slaves [ 619.132432][ T8875] batman_adv: batadv0: Removing interface: gretap1 [ 619.240696][ T8875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.251234][ T8875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.261340][ T8875] bond0 (unregistering): Released all slaves [ 619.341396][ T8875] batman_adv: batadv0: Removing interface: gretap1 [ 619.491412][ T8875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.501640][ T8875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.512627][ T8875] bond0 (unregistering): Released all slaves [ 619.527076][ T8903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.556739][ T8899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.575700][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.582806][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.643143][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.652477][ T8897] Bluetooth: hci3: command tx timeout [ 619.675151][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.682274][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.710610][ T8896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.724199][ T8875] tipc: Left network mode [ 619.727505][ T8897] Bluetooth: hci1: command tx timeout [ 619.728565][ T5829] Bluetooth: hci0: command tx timeout [ 619.733989][ T8904] Bluetooth: hci4: command tx timeout [ 619.739463][ T5829] Bluetooth: hci2: command tx timeout [ 619.778105][ T8903] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.807900][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.815032][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.848396][ T8875] IPVS: stopping master sync thread 7811 ... [ 619.852973][ T8896] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.888943][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.896095][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.940436][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.947557][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.035370][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.042497][ T8885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.215507][ T8903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.241836][ T8899] veth0_vlan: entered promiscuous mode [ 620.315840][ T8899] veth1_vlan: entered promiscuous mode [ 620.328171][ T8909] veth0_vlan: entered promiscuous mode [ 620.551197][ T8902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.569463][ T8909] veth1_vlan: entered promiscuous mode [ 620.602389][ T8899] veth0_macvtap: entered promiscuous mode [ 620.726131][ T8899] veth1_macvtap: entered promiscuous mode [ 620.753459][ T8903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.819100][ T8875] hsr_slave_0: left promiscuous mode [ 620.825431][ T8875] hsr_slave_1: left promiscuous mode [ 620.833211][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.843754][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.856665][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.868147][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.879164][ T8875] hsr_slave_0: left promiscuous mode [ 620.886302][ T8875] hsr_slave_1: left promiscuous mode [ 620.891960][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.901299][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.909612][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.917079][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.927973][ T8875] hsr_slave_0: left promiscuous mode [ 620.933929][ T8875] hsr_slave_1: left promiscuous mode [ 620.939592][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.947196][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.954974][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.962354][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.990828][ T8875] veth1_macvtap: left promiscuous mode [ 620.997442][ T8875] veth0_macvtap: left promiscuous mode [ 621.004207][ T8875] veth1_vlan: left promiscuous mode [ 621.009458][ T8875] veth0_vlan: left promiscuous mode [ 621.016052][ T8875] veth1_macvtap: left promiscuous mode [ 621.021520][ T8875] veth0_macvtap: left promiscuous mode [ 621.027211][ T8875] veth1_vlan: left promiscuous mode [ 621.032444][ T8875] veth0_vlan: left promiscuous mode [ 621.039494][ T8875] veth1_macvtap: left promiscuous mode [ 621.045057][ T8875] veth0_macvtap: left promiscuous mode [ 621.050554][ T8875] veth1_vlan: left promiscuous mode [ 621.055842][ T8875] veth0_vlan: left promiscuous mode [ 621.396207][ T8875] team0 (unregistering): Port device team_slave_1 removed [ 621.430792][ T8875] team0 (unregistering): Port device team_slave_0 removed [ 621.676286][ T8875] pim6reg (unregistering): left allmulticast mode [ 621.892948][ T8875] team0 (unregistering): Port device team_slave_1 removed [ 621.921142][ T8875] team0 (unregistering): Port device team_slave_0 removed [ 622.166525][ T8875] pim6reg (unregistering): left allmulticast mode [ 622.377732][ T8875] team0 (unregistering): Port device team_slave_1 removed [ 622.402345][ T8875] team0 (unregistering): Port device team_slave_0 removed [ 622.704319][ T8899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.713384][ T8896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.738834][ T8909] veth0_macvtap: entered promiscuous mode [ 622.763611][ T8899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.811087][ T8909] veth1_macvtap: entered promiscuous mode [ 622.836352][ T8885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.870299][ T8885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.908783][ T8885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.966623][ T8885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.997402][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.055385][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.128442][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.148725][ T8902] veth0_vlan: entered promiscuous mode [ 623.191503][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.216014][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.251623][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.269271][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.278033][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.289142][ T8902] veth1_vlan: entered promiscuous mode [ 623.396118][ T8903] veth0_vlan: entered promiscuous mode [ 623.454305][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.460224][ T8903] veth1_vlan: entered promiscuous mode [ 623.473029][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.476058][ T8902] veth0_macvtap: entered promiscuous mode [ 623.492889][ T8902] veth1_macvtap: entered promiscuous mode [ 623.556781][ T8885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.598426][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.606190][ T8885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.632141][ T8896] veth0_vlan: entered promiscuous mode [ 623.660078][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.673097][ T8903] veth0_macvtap: entered promiscuous mode [ 623.745279][ T8885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.760849][ T8885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.766588][ T8896] veth1_vlan: entered promiscuous mode [ 623.788261][ T8903] veth1_macvtap: entered promiscuous mode [ 623.814904][ T3485] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.833179][ T8875] IPVS: stop unused estimator thread 0... [ 623.879763][ T3485] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.941082][ T3485] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.961217][ T9142] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1019'. [ 623.975084][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.975138][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.035348][ T3485] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.055156][ T8903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.091694][ T8896] veth0_macvtap: entered promiscuous mode [ 624.130975][ T8903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.154459][ T8896] veth1_macvtap: entered promiscuous mode [ 624.170601][ T3485] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.181554][ T3485] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.237010][ T3485] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.299260][ T3485] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.353032][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1023'. [ 624.376232][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.387431][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.400537][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.440608][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.507514][ T8885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.557409][ T1110] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.566410][ T8885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.643500][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.666132][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.691900][ T1110] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.723417][ T1110] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.736375][ T1110] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.828398][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.854675][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.082590][ T8885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.132999][ T8885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.239297][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.291292][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.519764][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1029'. [ 630.424396][ T9227] syzkaller0: entered promiscuous mode [ 630.467466][ T9227] syzkaller0: entered allmulticast mode [ 630.599234][ T9227] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 631.268026][ T9257] hub 9-0:1.0: USB hub found [ 631.274315][ T9257] hub 9-0:1.0: 1 port detected [ 632.682354][ T9267] binder: 9266:9267 ioctl c0306201 0 returned -14 [ 633.397541][ T9291] loop5: detected capacity change from 0 to 7 [ 633.867241][ T9295] binder: 9294:9295 ioctl c0306201 0 returned -14 [ 633.936114][ T9291] Dev loop5: unable to read RDB block 7 [ 633.945559][ T9291] loop5: unable to read partition table [ 634.008502][ T9291] loop5: partition table beyond EOD, truncated [ 634.045642][ T9291] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 634.751440][ T30] audit: type=1400 audit(1763132182.953:426): avc: denied { create } for pid=9314 comm="syz.9.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 634.946747][ T30] audit: type=1400 audit(1763132183.153:427): avc: denied { write } for pid=9314 comm="syz.9.1062" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 634.969392][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.765325][ T5882] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 637.080983][ T5882] usb 7-1: config 0 has an invalid interface number: 159 but max is 0 [ 637.089316][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.120129][ T5882] usb 7-1: config 0 has no interface number 0 [ 637.126742][ T5882] usb 7-1: config 0 interface 159 has no altsetting 0 [ 637.135203][ T5882] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 637.144427][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 637.152503][ T5882] usb 7-1: Product: syz [ 637.166892][ T5882] usb 7-1: SerialNumber: syz [ 637.243494][ T5882] usb 7-1: config 0 descriptor?? [ 637.533851][ T30] audit: type=1400 audit(1763132185.733:428): avc: denied { ioctl } for pid=9380 comm="syz.9.1077" path="socket:[26152]" dev="sockfs" ino=26152 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 637.558389][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.740244][ T30] audit: type=1400 audit(1763132185.733:429): avc: denied { accept } for pid=9380 comm="syz.9.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 638.656033][ T8877] usb 7-1: USB disconnect, device number 2 [ 638.928801][ T30] audit: type=1400 audit(1763132186.743:430): avc: denied { mount } for pid=9407 comm="syz.9.1085" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 640.235685][ T9427] EXT4-fs (loop5): unable to read superblock [ 641.510362][ T30] audit: type=1400 audit(1763132189.593:431): avc: denied { mount } for pid=9447 comm="syz.5.1093" name="/" dev="configfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 642.605533][ T30] audit: type=1400 audit(1763132189.603:432): avc: denied { mounton } for pid=9447 comm="syz.5.1093" path="/17/file0" dev="configfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 642.630671][ T30] audit: type=1400 audit(1763132189.633:433): avc: denied { read } for pid=9447 comm="syz.5.1093" name="/" dev="configfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 642.653030][ T30] audit: type=1400 audit(1763132189.633:434): avc: denied { open } for pid=9447 comm="syz.5.1093" path="/17/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 642.675575][ T30] audit: type=1400 audit(1763132189.633:435): avc: denied { read } for pid=9447 comm="syz.5.1093" name="/" dev="configfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 642.700471][ T30] audit: type=1400 audit(1763132189.643:436): avc: denied { read } for pid=9447 comm="syz.5.1093" name="/" dev="configfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 642.725359][ T30] audit: type=1400 audit(1763132190.913:437): avc: denied { unmount } for pid=8909 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 643.058256][ T9466] overlayfs: overlapping lowerdir path [ 643.996658][ T9478] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 644.020339][ T30] audit: type=1326 audit(1763132192.173:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.5.1102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb85d38f6c9 code=0x0 [ 644.106921][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'. [ 644.115890][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'. [ 645.084785][ T9510] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 646.429873][ T30] audit: type=1400 audit(1763132194.633:439): avc: denied { connect } for pid=9536 comm="syz.9.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 647.787770][ T30] audit: type=1400 audit(1763132195.993:440): avc: denied { setattr } for pid=9559 comm="syz.5.1120" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 648.226958][ T3607] Bluetooth: hci5: Frame reassembly failed (-84) [ 649.397387][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1126'. [ 649.410087][ T30] audit: type=1400 audit(1763132197.623:441): avc: denied { bind } for pid=9611 comm="syz.5.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 650.284514][ T8897] Bluetooth: hci5: command 0x1003 tx timeout [ 650.303851][ T8904] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 651.749074][ T30] audit: type=1400 audit(1763132198.573:442): avc: denied { bind } for pid=9632 comm="syz.8.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 652.097398][ T30] audit: type=1400 audit(1763132198.573:443): avc: denied { connect } for pid=9632 comm="syz.8.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 652.172486][ T30] audit: type=1400 audit(1763132200.303:444): avc: denied { bind } for pid=9646 comm="syz.6.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 652.234115][ T30] audit: type=1400 audit(1763132200.303:445): avc: denied { name_bind } for pid=9646 comm="syz.6.1133" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 652.762291][ T30] audit: type=1400 audit(1763132200.303:446): avc: denied { node_bind } for pid=9646 comm="syz.6.1133" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 653.297762][ T9667] No buffer was provided with the request [ 656.350456][ T30] audit: type=1400 audit(1763132203.253:447): avc: denied { mount } for pid=9678 comm="syz.7.1143" name="/" dev="rpc_pipefs" ino=29003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 656.563040][ T30] audit: type=1400 audit(1763132203.263:448): avc: denied { create } for pid=9678 comm="syz.7.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 656.591247][ T30] audit: type=1400 audit(1763132203.283:449): avc: denied { accept } for pid=9681 comm="syz.6.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 659.565020][ T30] audit: type=1400 audit(1763132207.753:450): avc: denied { read } for pid=9728 comm="syz.6.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 661.858253][ T30] audit: type=1400 audit(1763132210.063:451): avc: denied { read } for pid=9747 comm="syz.8.1158" path="socket:[28286]" dev="sockfs" ino=28286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 663.412707][ T9781] syzkaller0: entered promiscuous mode [ 663.418234][ T9781] syzkaller0: entered allmulticast mode [ 666.042498][ T9842] syzkaller0: entered promiscuous mode [ 666.082093][ T9842] syzkaller0: entered allmulticast mode [ 667.288397][ T30] audit: type=1400 audit(1763132214.883:452): avc: denied { create } for pid=9854 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 667.404438][ T30] audit: type=1400 audit(1763132214.893:453): avc: denied { write } for pid=9854 comm="syz.5.1188" path="socket:[28669]" dev="sockfs" ino=28669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 667.946035][ T9890] kvm: pic: non byte read [ 667.974117][ T9890] kvm: pic: non byte read [ 667.978908][ T9890] kvm: pic: single mode not supported [ 667.979018][ T9890] kvm: pic: level sensitive irq not supported [ 668.039716][ T9890] kvm: pic: non byte read [ 668.149537][ T9890] kvm: pic: single mode not supported [ 668.149613][ T9890] kvm: pic: non byte read [ 668.551253][ T9890] kvm: pic: non byte read [ 668.561462][ T9890] kvm: pic: non byte read [ 668.586319][ T9890] kvm: pic: single mode not supported [ 668.586336][ T9890] kvm: pic: level sensitive irq not supported [ 668.617278][ T9890] kvm: pic: non byte read [ 668.682919][ T9890] kvm: pic: single mode not supported [ 668.682981][ T9890] kvm: pic: non byte read [ 668.767301][ T9890] kvm: pic: non byte read [ 670.853576][ T30] audit: type=1400 audit(1763132219.053:454): avc: denied { setopt } for pid=9914 comm="syz.7.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 670.901680][ T9919] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 670.951774][ T30] audit: type=1400 audit(1763132219.053:455): avc: denied { connect } for pid=9914 comm="syz.7.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 671.626924][ T9926] batman_adv: batadv0: Adding interface: gretap1 [ 671.633325][ T9926] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.659496][ T9926] batman_adv: batadv0: Interface activated: gretap1 [ 671.839999][ T9930] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 671.957561][ T9930] kvm: pic: level sensitive irq not supported [ 671.958931][ T9930] kvm: pic: non byte read [ 672.000509][ T9930] kvm: pic: level sensitive irq not supported [ 672.000805][ T9930] kvm: pic: level sensitive irq not supported [ 673.361553][ T9960] infiniband syz2: set down [ 673.372246][ T9960] infiniband syz2: added ipvlan0 [ 673.629394][ T9960] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 673.633755][ T9960] infiniband syz2: Couldn't open port 1 [ 673.662165][ T9960] RDS/IB: syz2: added [ 673.666237][ T9960] smc: adding ib device syz2 with port count 1 [ 673.672399][ T9960] smc: ib device syz2 port 1 has no pnetid [ 674.847411][ T9969] batman_adv: batadv0: Adding interface: gretap1 [ 674.856763][ T9969] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.885496][ T9969] batman_adv: batadv0: Interface activated: gretap1 [ 675.589222][ T9999] tipc: Started in network mode [ 675.594235][ T9999] tipc: Node identity f2263606e382, cluster identity 4711 [ 675.601495][ T9999] tipc: Enabled bearer , priority 0 [ 675.611171][ T9999] syzkaller0: entered promiscuous mode [ 675.835897][T10001] xt_TPROXY: Can be used only with -p tcp or -p udp [ 676.605182][ T9999] syzkaller0: entered allmulticast mode [ 676.713731][ T5934] tipc: Node number set to 295974406 [ 676.731651][T10004] tipc: Resetting bearer [ 676.802113][ T9998] tipc: Resetting bearer [ 676.859452][ T9998] tipc: Disabling bearer [ 676.967012][T10015] binder: 10006:10015 ioctl c0306201 0 returned -14 [ 677.556361][T10017] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 677.563238][T10017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 677.594017][T10017] vhci_hcd vhci_hcd.0: Device attached [ 677.622087][ T30] audit: type=1400 audit(1763132225.813:456): avc: denied { create } for pid=10020 comm="syz.9.1222" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 677.850045][T10018] vhci_hcd: connection closed [ 677.857465][T10027] binder: BINDER_SET_CONTEXT_MGR already set [ 677.868349][T10027] binder: 10020:10027 ioctl 4018620d 200000004a80 returned -16 [ 677.884194][ T9589] vhci_hcd: stop threads [ 677.903858][ T43] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 677.930094][ T9589] vhci_hcd: release socket [ 677.994811][ T9589] vhci_hcd: disconnect device [ 678.096373][T10026] batman_adv: batadv0: Adding interface: gretap1 [ 678.107197][T10026] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.113774][ T30] audit: type=1400 audit(1763132225.813:457): avc: denied { mounton } for pid=10020 comm="syz.9.1222" path="/32/file0" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 678.158341][T10026] batman_adv: batadv0: Interface activated: gretap1 [ 678.939983][ T30] audit: type=1400 audit(1763132227.143:458): avc: denied { unlink } for pid=8903 comm="syz-executor" name="file0" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 682.847750][T10087] EXT4-fs (loop8): unable to read superblock [ 682.994147][ T43] vhci_hcd: vhci_device speed not set [ 683.070499][T10099] batman_adv: batadv0: Adding interface: gretap1 [ 683.134683][T10099] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.164981][T10099] batman_adv: batadv0: Interface activated: gretap1 [ 684.068697][ T30] audit: type=1400 audit(1763132232.263:459): avc: denied { create } for pid=10108 comm="syz.8.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 684.743957][T10094] ALSA: mixer_oss: invalid OSS volume '' [ 685.079822][T10124] netlink: 'syz.8.1246': attribute type 10 has an invalid length. [ 685.209300][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.216831][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.236502][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.243839][T10124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.252234][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.259341][T10124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.278495][ T30] audit: type=1400 audit(1763132233.473:460): avc: denied { unmount } for pid=8909 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 685.422062][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.443974][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.461389][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1246'. [ 685.497679][T10133] overlayfs: failed to resolve './file1/file0': -2 [ 685.518465][T10124] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 685.546303][T10119] bridge_slave_1: left allmulticast mode [ 685.552044][T10119] bridge_slave_1: left promiscuous mode [ 685.588240][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.694259][ T30] audit: type=1400 audit(1763132233.893:461): avc: denied { module_request } for pid=10139 comm="syz.5.1250" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 685.746224][T10119] bridge_slave_0: left allmulticast mode [ 685.751894][T10119] bridge_slave_0: left promiscuous mode [ 685.959760][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.611187][T10119] bond0: (slave bridge0): Releasing backup interface [ 687.100221][T10138] tipc: Started in network mode [ 687.124773][T10138] tipc: Node identity e2b195677618, cluster identity 4711 [ 687.219311][T10138] tipc: Enabled bearer , priority 0 [ 687.301504][T10145] syzkaller0: entered promiscuous mode [ 687.317158][T10145] syzkaller0: entered allmulticast mode [ 687.857130][T10165] tipc: Resetting bearer [ 688.155777][T10165] tipc: Disabling bearer [ 688.178757][T10227] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 689.254113][T10248] veth0_to_team: entered promiscuous mode [ 689.260467][T10248] veth0_to_team: entered allmulticast mode [ 691.210170][T10272] tipc: Started in network mode [ 691.344414][T10272] tipc: Node identity 02ca1df8bffa, cluster identity 4711 [ 691.417342][T10272] tipc: Enabled bearer , priority 0 [ 691.468116][T10275] tipc: Resetting bearer [ 691.565419][T10271] tipc: Disabling bearer [ 692.873724][ T30] audit: type=1400 audit(1763132240.623:462): avc: denied { write } for pid=10288 comm="syz.9.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 693.383397][T10307] batman_adv: batadv0: Adding interface: gretap1 [ 693.389909][T10307] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.418292][T10307] batman_adv: batadv0: Interface activated: gretap1 [ 694.850524][ T30] audit: type=1400 audit(1763132243.023:463): avc: denied { getattr } for pid=10323 comm="syz.8.1277" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 697.374354][ T5824] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 697.464007][ T30] audit: type=1400 audit(1763132245.618:464): avc: denied { write } for pid=10366 comm="syz.8.1288" name="file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 697.773694][ T30] audit: type=1400 audit(1763132245.618:465): avc: denied { open } for pid=10366 comm="syz.8.1288" path="/51/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 697.839733][ T5824] usb 7-1: Using ep0 maxpacket: 8 [ 697.859383][ T5824] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 697.872369][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 697.922722][ T30] audit: type=1400 audit(1763132245.638:466): avc: denied { ioctl } for pid=10366 comm="syz.8.1288" path="/51/file0" dev="tmpfs" ino=330 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 697.930505][ T5824] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 698.252280][ T5824] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.305675][ T5824] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 698.316639][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.333679][ T5824] usb 7-1: Product: syz [ 698.348066][ T5824] usb 7-1: Manufacturer: syz [ 698.373696][ T5824] usb 7-1: SerialNumber: syz [ 698.462647][T10365] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 698.490472][ T5824] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 698.531353][ T5824] usbtest 7-1:1.0: Linux user mode ISO test driver [ 698.551466][ T5824] usbtest 7-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 698.844427][ T5895] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 698.966846][ T43] usb 7-1: USB disconnect, device number 3 [ 699.551106][ T5895] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 699.570119][ T5895] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 699.580543][ T5895] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 699.589896][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.609722][T10390] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 699.631479][ T5895] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 702.642907][ T979] usb 10-1: USB disconnect, device number 2 [ 702.870100][T10444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 702.902123][ T30] audit: type=1400 audit(1763132251.108:467): avc: denied { ioctl } for pid=10445 comm="syz.6.1305" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 704.514011][T10464] veth0_to_team: entered promiscuous mode [ 704.519762][T10464] veth0_to_team: entered allmulticast mode [ 706.861033][T10486] netlink: 'syz.8.1313': attribute type 4 has an invalid length. [ 706.883815][T10486] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1313'. [ 707.087693][T10492] syzkaller0: entered promiscuous mode [ 707.111413][T10492] syzkaller0: entered allmulticast mode [ 708.772267][T10514] veth0_to_team: entered promiscuous mode [ 708.778530][T10514] veth0_to_team: entered allmulticast mode [ 708.877328][T10522] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 711.164142][T10559] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1335'. [ 711.219215][T10559] team0: entered promiscuous mode [ 711.239812][T10559] team_slave_0: entered promiscuous mode [ 711.262093][T10559] team_slave_1: entered promiscuous mode [ 711.278810][T10559] team0: entered allmulticast mode [ 711.288749][T10559] team_slave_0: entered allmulticast mode [ 711.308679][T10559] team_slave_1: entered allmulticast mode [ 711.638028][T10574] syz2: rxe_newlink: already configured on ipvlan0 [ 713.650936][ T30] audit: type=1400 audit(1763132261.728:468): avc: denied { ioctl } for pid=10592 comm="syz.7.1345" path="socket:[32205]" dev="sockfs" ino=32205 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 714.423727][ T30] audit: type=1400 audit(1763132262.188:469): avc: denied { kexec_image_load } for pid=10595 comm="syz.9.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 716.951494][T10636] veth0_to_team: entered promiscuous mode [ 716.960280][T10636] veth0_to_team: entered allmulticast mode [ 717.041317][T10640] can0: slcan on ttyS3. [ 717.056765][T10640] capability: warning: `syz.7.1356' uses 32-bit capabilities (legacy support in use) [ 717.464994][T10640] can0 (unregistered): slcan off ttyS3. [ 717.501674][T10640] Falling back ldisc for ttyS3. [ 718.172708][T10668] syzkaller0: entered promiscuous mode [ 718.178652][T10668] syzkaller0: entered allmulticast mode [ 720.857412][T10716] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 720.910905][T10716] kvm: pic: level sensitive irq not supported [ 720.910972][T10716] picdev_read: 2 callbacks suppressed [ 720.910985][T10716] kvm: pic: non byte read [ 722.177766][T10716] kvm: pic: level sensitive irq not supported [ 722.177848][T10716] kvm: pic: non byte read [ 722.238329][T10716] kvm: pic: level sensitive irq not supported [ 722.238394][T10716] kvm: pic: non byte read [ 725.655090][T10760] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.662642][T10760] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.987854][T10750] bridge_slave_1: left allmulticast mode [ 725.994431][T10750] bridge_slave_1: left promiscuous mode [ 726.048116][T10750] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.859422][T10750] bridge_slave_0: left allmulticast mode [ 727.908607][T10750] bridge_slave_0: left promiscuous mode [ 727.923984][T10750] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.939572][ T30] audit: type=1400 audit(1763132276.148:470): avc: denied { setopt } for pid=10775 comm="syz.8.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 727.962715][T10777] siw: device registration error -23 [ 728.243774][ T5934] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 728.665622][ T5934] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.676040][ T5934] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 728.719446][ T5934] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 728.756236][ T5934] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.962933][T10793] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 728.985952][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1387'. [ 729.986659][ T5934] usb 9-1: config 0 descriptor?? [ 730.396806][ T30] audit: type=1400 audit(1763132278.478:471): avc: denied { write } for pid=10792 comm="syz.7.1386" path="socket:[33557]" dev="sockfs" ino=33557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 731.574082][ T8877] usb 9-1: USB disconnect, device number 2 [ 731.761015][T10807] tipc: Enabled bearer , priority 0 [ 731.792978][T10807] syzkaller0: entered promiscuous mode [ 731.811336][T10807] syzkaller0: entered allmulticast mode [ 731.992374][T10815] tipc: Resetting bearer [ 733.277282][T10806] tipc: Resetting bearer [ 733.540928][T10832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 733.587023][ T8911] Bluetooth: hci1: command 0x0406 tx timeout [ 733.589050][T10831] loop6: detected capacity change from 0 to 2560 [ 733.593984][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 733.606940][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 733.607910][ T8911] Bluetooth: hci4: command 0x0406 tx timeout [ 733.613003][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 733.632001][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.642512][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.652805][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 733.663654][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 734.044175][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 734.067147][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 734.107852][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 734.270602][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 735.233495][T10831] ldm_validate_partition_table(): Disk read failed. [ 735.343717][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 735.583863][T10831] Buffer I/O error on dev loop6, logical block 0, async page read [ 735.608098][T10806] tipc: Disabling bearer [ 735.618869][T10831] Dev loop6: unable to read RDB block 0 [ 735.632875][ T5824] tipc: Node number set to 2494141799 [ 735.640160][ T30] audit: type=1400 audit(1763132283.848:472): avc: denied { read } for pid=10843 comm="syz.8.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 735.643452][T10831] loop6: unable to read partition table [ 735.683381][T10831] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 736.770371][T10853] overlayfs: missing 'lowerdir' [ 739.073165][ T30] audit: type=1400 audit(1763132287.278:473): avc: denied { accept } for pid=10865 comm="syz.7.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 741.091355][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 741.196768][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 743.114563][ T30] audit: type=1400 audit(1763132290.448:474): avc: denied { bind } for pid=10892 comm="syz.7.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.169786][T10895] ceph: No mds server is up or the cluster is laggy [ 743.457887][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 743.484018][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 743.511345][ T30] audit: type=1400 audit(1763132290.448:475): avc: denied { listen } for pid=10892 comm="syz.7.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.545660][ T30] audit: type=1400 audit(1763132291.558:476): avc: denied { write } for pid=10892 comm="syz.7.1415" path="socket:[33730]" dev="sockfs" ino=33730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.870339][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 743.877243][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 746.029789][ T30] audit: type=1326 audit(1763132294.148:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.9.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 746.435070][ T30] audit: type=1326 audit(1763132294.148:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.9.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 746.493684][ T30] audit: type=1326 audit(1763132294.148:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.9.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 746.630578][ T30] audit: type=1326 audit(1763132294.148:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.9.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 746.655471][ T30] audit: type=1326 audit(1763132294.148:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.9.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 746.679710][ T30] audit: type=1326 audit(1763132294.148:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.9.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 746.861686][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.890006][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.159089][ T30] audit: type=1326 audit(1763132294.148:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.9.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 748.513708][ T5875] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 748.915225][ T5875] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 748.943788][ T5875] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 749.067158][ T5875] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 749.077700][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.091716][T10969] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 750.305859][ T5875] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 751.041318][T10999] program syz.5.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.663669][ T5934] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 752.013024][T11009] ubi0: attaching mtd0 [ 752.033297][T11009] ubi0: scanning is finished [ 752.038010][T11009] ubi0: empty MTD device detected [ 752.525939][ T979] usb 9-1: USB disconnect, device number 3 [ 752.574109][ T5934] usb 10-1: Using ep0 maxpacket: 8 [ 752.774016][ T5934] usb 10-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 752.783128][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.257109][ T5934] usb 10-1: Product: syz [ 753.363027][ T5934] usb 10-1: Manufacturer: syz [ 753.373779][ T5934] usb 10-1: SerialNumber: syz [ 753.433734][T11009] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 753.543770][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 753.543787][ T30] audit: type=1400 audit(1763132301.738:496): avc: denied { override_creds } for pid=11013 comm="syz.8.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 753.596428][ T5934] usb 10-1: config 0 descriptor?? [ 753.619335][ T5934] go7007 10-1:0.0: probe with driver go7007 failed with error -12 [ 755.112347][T11031] syz.5.1452 (11031): drop_caches: 2 [ 755.122931][T11031] syz.5.1452 (11031): drop_caches: 2 [ 756.640898][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1455'. [ 756.692149][ T30] audit: type=1326 audit(1763132304.848:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 756.813724][ T30] audit: type=1326 audit(1763132304.848:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 756.919285][ T30] audit: type=1326 audit(1763132304.848:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 757.464917][ T43] usb 10-1: USB disconnect, device number 3 [ 757.648329][ T30] audit: type=1326 audit(1763132304.848:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 757.672478][ T30] audit: type=1326 audit(1763132304.848:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 757.837088][ T30] audit: type=1326 audit(1763132304.848:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.051422][ T30] audit: type=1326 audit(1763132304.848:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.075205][ T30] audit: type=1326 audit(1763132304.848:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.132528][ T30] audit: type=1326 audit(1763132304.848:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.579871][ T30] audit: type=1326 audit(1763132304.848:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.605290][ T30] audit: type=1326 audit(1763132304.848:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.714372][ T30] audit: type=1326 audit(1763132304.848:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.739146][ T30] audit: type=1326 audit(1763132304.848:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.763007][ T30] audit: type=1326 audit(1763132304.848:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 758.963670][ T30] audit: type=1326 audit(1763132304.848:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 759.036358][ T30] audit: type=1326 audit(1763132304.848:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 759.173450][ T30] audit: type=1326 audit(1763132304.948:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 759.844236][ T30] audit: type=1326 audit(1763132304.948:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz.5.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 759.868894][ T30] audit: type=1400 audit(1763132305.648:515): avc: denied { map } for pid=11046 comm="syz.6.1456" path="socket:[35258]" dev="sockfs" ino=35258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 764.518123][T11121] hub 1-0:1.0: USB hub found [ 764.524235][T11121] hub 1-0:1.0: 1 port detected [ 767.090480][T11145] overlayfs: failed to resolve './file1/file0': -2 [ 767.700556][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 767.700587][ T30] audit: type=1400 audit(1763132315.908:526): avc: denied { getopt } for pid=11153 comm="syz.6.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 768.479986][ T30] audit: type=1400 audit(1763132316.678:527): avc: denied { block_suspend } for pid=11158 comm="syz.7.1498" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 768.701750][ T30] audit: type=1400 audit(1763132316.908:528): avc: denied { ioctl } for pid=11163 comm="syz.5.1490" path="socket:[34678]" dev="sockfs" ino=34678 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 769.040847][T11169] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 769.346863][T11173] kvm: pic: level sensitive irq not supported [ 769.346938][T11173] kvm: pic: non byte read [ 769.646290][T11173] kvm: pic: level sensitive irq not supported [ 769.646337][T11173] kvm: pic: non byte read [ 769.661683][ T30] audit: type=1400 audit(1763132317.848:529): avc: denied { setopt } for pid=11163 comm="syz.5.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 769.738294][T11173] kvm: pic: level sensitive irq not supported [ 769.738341][T11173] kvm: pic: non byte read [ 769.848656][T11180] kvm: pic: non byte read [ 769.853312][T11180] kvm: pic: non byte read [ 769.858212][T11180] kvm: pic: single mode not supported [ 769.858221][T11180] kvm: pic: level sensitive irq not supported [ 769.863820][T11180] kvm: pic: non byte read [ 769.910975][T11180] kvm: pic: single mode not supported [ 769.911041][T11180] kvm: pic: non byte read [ 769.924012][T11180] kvm: pic: non byte read [ 769.933985][T11180] kvm: pic: non byte read [ 769.941821][T11180] kvm: pic: single mode not supported [ 769.941837][T11180] kvm: pic: level sensitive irq not supported [ 769.956951][T11180] kvm: pic: non byte read [ 769.968558][T11183] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28694 sclass=netlink_xfrm_socket pid=11183 comm=syz.9.1494 [ 769.981985][T11180] kvm: pic: single mode not supported [ 770.125138][T11187] loop7: detected capacity change from 0 to 16384 [ 770.325471][T11190] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 770.887243][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1496'. [ 770.937782][ C0] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 770.987027][T11189] loop7: detected capacity change from 16384 to 0 [ 770.993616][ C0] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.002877][ C0] buffer_io_error: 11 callbacks suppressed [ 771.002892][ C0] Buffer I/O error on dev loop7, logical block 8, async page read [ 771.016683][ C0] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 774.913851][T11235] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 776.261005][T11228] Process accounting resumed [ 776.551552][T11245] kvm: pic: level sensitive irq not supported [ 776.551602][T11245] picdev_read: 2 callbacks suppressed [ 776.551616][T11245] kvm: pic: non byte read [ 776.635256][T11245] kvm: pic: level sensitive irq not supported [ 776.635322][T11245] kvm: pic: non byte read [ 776.727770][T11245] kvm: pic: level sensitive irq not supported [ 776.727834][T11245] kvm: pic: non byte read [ 778.386061][ T30] audit: type=1400 audit(1763132326.538:530): avc: denied { read append } for pid=11270 comm="syz.9.1521" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 778.733658][ T30] audit: type=1400 audit(1763132326.538:531): avc: denied { open } for pid=11270 comm="syz.9.1521" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 778.863978][ T30] audit: type=1400 audit(1763132326.538:532): avc: denied { map } for pid=11270 comm="syz.9.1521" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 778.887459][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.893788][ T30] audit: type=1400 audit(1763132326.538:533): avc: denied { write execute } for pid=11270 comm="syz.9.1521" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 778.918124][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.144180][ T30] audit: type=1400 audit(1763132326.938:534): avc: denied { create } for pid=11275 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 779.333909][ T30] audit: type=1400 audit(1763132327.378:535): avc: denied { read write } for pid=11266 comm="syz.6.1520" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 779.357128][ T30] audit: type=1400 audit(1763132327.378:536): avc: denied { open } for pid=11266 comm="syz.6.1520" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 779.565211][ T30] audit: type=1400 audit(1763132327.778:537): avc: denied { write } for pid=11279 comm="syz.7.1523" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 779.588350][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.644439][ T30] audit: type=1400 audit(1763132328.838:538): avc: denied { read write } for pid=11294 comm="syz.5.1526" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 780.904467][ T30] audit: type=1400 audit(1763132328.838:539): avc: denied { ioctl open } for pid=11294 comm="syz.5.1526" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 785.535002][T11332] syz2: rxe_newlink: already configured on ipvlan0 [ 785.698656][T11337] syz.9.1538 (11337): drop_caches: 2 [ 785.705524][T11337] syz.9.1538 (11337): drop_caches: 2 [ 787.172136][T11358] binder: 11340:11358 ioctl c0306201 0 returned -14 [ 788.948276][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 788.948290][ T30] audit: type=1400 audit(1763132337.158:543): avc: denied { create } for pid=11367 comm="syz.7.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 791.333441][ T30] audit: type=1400 audit(1763132338.198:544): avc: denied { ioctl } for pid=11376 comm="syz.6.1549" path="socket:[36296]" dev="sockfs" ino=36296 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 792.011613][ T30] audit: type=1400 audit(1763132339.908:545): avc: denied { write } for pid=11381 comm="syz.7.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 793.241961][ T30] audit: type=1400 audit(1763132341.448:546): avc: denied { read write } for pid=11408 comm="syz.6.1558" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 793.267482][ T30] audit: type=1400 audit(1763132341.448:547): avc: denied { open } for pid=11408 comm="syz.6.1558" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 794.287558][T11423] Bluetooth: MGMT ver 1.23 [ 795.541441][ T30] audit: type=1400 audit(1763132343.678:548): avc: denied { map } for pid=11424 comm="syz.5.1562" path="/proc/397/net/fib_trie" dev="proc" ino=4026533965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 795.864046][ T30] audit: type=1400 audit(1763132343.678:549): avc: denied { write } for pid=11424 comm="syz.5.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 796.562079][ T30] audit: type=1400 audit(1763132343.678:550): avc: denied { nlmsg_write } for pid=11424 comm="syz.5.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 797.370652][T11453] binder: 11449:11453 ioctl c0306201 0 returned -14 [ 797.380732][T11453] binder: 11449:11453 ioctl c0306201 0 returned -14 [ 801.971296][ T30] audit: type=1400 audit(1763132349.598:551): avc: denied { write } for pid=11475 comm="syz.5.1578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 802.054145][T11486] ubi0: attaching mtd0 [ 802.059927][T11486] ubi0: scanning is finished [ 802.396371][T11486] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 804.142572][T11508] binder: 11498:11508 ioctl c0306201 0 returned -14 [ 804.171779][T11508] binder: 11498:11508 ioctl c0306201 0 returned -14 [ 805.445875][T11525] ceph: No mds server is up or the cluster is laggy [ 805.483943][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 805.499651][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 805.765112][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 805.771131][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 806.698442][ T30] audit: type=1800 audit(1763132354.318:552): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1592" name="bus" dev="overlay" ino=673 res=0 errno=0 [ 807.424191][ T30] audit: type=1400 audit(1763132355.448:553): avc: denied { mount } for pid=11542 comm="syz.5.1595" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 807.511122][T11547] tipc: Can't bind to reserved service type 0 [ 808.433969][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.440395][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.411214][T11577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 811.438082][T11577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 811.586115][T11577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 811.592155][T11577] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 811.623089][T11577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 811.688457][T11577] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 811.771124][T11577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 811.822249][T11577] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 811.881670][T11577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 811.889211][T11577] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 813.424113][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 813.644374][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 813.650515][ T8900] Bluetooth: hci1: command 0x0406 tx timeout [ 813.803850][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 813.883675][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 814.249777][T11611] kvm: pic: level sensitive irq not supported [ 814.249827][T11611] kvm: pic: non byte read [ 814.260568][T11611] kvm: pic: level sensitive irq not supported [ 814.260610][T11611] kvm: pic: non byte read [ 814.284743][T11611] kvm: pic: level sensitive irq not supported [ 814.284811][T11611] kvm: pic: non byte read [ 815.634240][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 815.764655][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 815.771184][ T8900] Bluetooth: hci1: command 0x0406 tx timeout [ 816.040362][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 816.046494][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 816.055426][ T30] audit: type=1400 audit(1763132364.078:554): avc: denied { ioctl } for pid=11623 comm="syz.9.1617" path="socket:[37984]" dev="sockfs" ino=37984 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 816.709221][ T30] audit: type=1400 audit(1763132364.918:555): avc: denied { append } for pid=11628 comm="syz.7.1618" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 816.772863][T11639] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 817.226622][ T5824] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 817.619209][ T5824] usb 7-1: unable to get BOS descriptor or descriptor too short [ 817.692559][ T5824] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.832514][ T5824] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 817.847198][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.858839][ T5824] usb 7-1: Product: syz [ 817.863027][ T5824] usb 7-1: Manufacturer: syz [ 817.881181][ T5824] usb 7-1: SerialNumber: syz [ 817.906978][ T5824] usb 7-1: config 0 descriptor?? [ 817.925082][ T5824] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 818.561400][ T30] audit: type=1400 audit(1763132366.348:556): avc: denied { ioctl } for pid=11654 comm="syz.7.1626" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 818.586423][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.975821][T11669] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1622'. [ 820.234856][T11672] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 820.522066][ T5875] usb 7-1: USB disconnect, device number 4 [ 823.573677][ T5875] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 824.537246][ T5875] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 824.617488][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.809703][ T5875] usb 10-1: Product: syz [ 824.825792][ T5875] usb 10-1: Manufacturer: syz [ 824.866008][ T5875] usb 10-1: SerialNumber: syz [ 825.494286][ T5875] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 825.611377][ T5875] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 827.212197][ T5875] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 827.230976][ T5875] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 827.298369][ T5875] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 827.317908][ T30] audit: type=1400 audit(1763132375.488:557): avc: denied { mounton } for pid=11723 comm="syz.5.1643" path="/135/file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 827.455929][ T5875] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 827.468566][ T5875] usb 10-1: USB disconnect, device number 4 [ 828.128762][T11739] random: crng reseeded on system resumption [ 828.213648][ T30] audit: type=1400 audit(1763132632.407:558): avc: denied { bind } for pid=11738 comm="syz.9.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 830.318129][T11768] dvmrp0: entered allmulticast mode [ 830.962262][T11771] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 834.174874][T11795] omfs: Invalid superblock (0) [ 836.419487][T11809] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1665'. [ 836.419589][T11809] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1665'. [ 836.506780][T11826] comedi comedi3: dt2801: I/O port conflict (0x4f27,2) [ 837.903617][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 838.683818][T11844] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 839.562940][T11832] block device autoloading is deprecated and will be removed. [ 839.734937][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.751563][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.772002][ T43] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 840.085061][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.214126][ T43] usb 6-1: config 0 descriptor?? [ 840.398907][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 840.415743][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 840.448971][ T43] usb 6-1: USB disconnect, device number 2 [ 842.469264][T11873] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 842.635499][T11873] sg_write: data in/out 134218496/81 bytes for SCSI command 0x2f-- guessing data in; [ 842.635499][T11873] program syz.9.1685 not setting count and/or reply_len properly [ 843.789001][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1688'. [ 844.924496][T11889] ubi0: attaching mtd0 [ 844.935658][T11889] ubi0: scanning is finished [ 845.299413][T11891] netlink: 'syz.9.1690': attribute type 13 has an invalid length. [ 845.829293][T11889] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 845.902671][ T30] audit: type=1400 audit(1763132905.608:559): avc: denied { setopt } for pid=11892 comm="syz.8.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 846.383743][ T5934] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 846.511055][T11904] input: syz1 as /devices/virtual/input/input28 [ 846.864902][ T5934] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.638483][ T5934] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.648586][ T5934] usb 10-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 847.657808][ T5934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.670567][ T5934] usb 10-1: config 0 descriptor?? [ 848.524804][ T5934] hid-led 0003:1D34:0004.0015: unknown main item tag 0x0 [ 848.901354][ T5934] hid-led 0003:1D34:0004.0015: probe with driver hid-led failed with error -71 [ 848.904402][ T30] audit: type=1400 audit(1763132909.108:560): avc: denied { ioctl } for pid=11925 comm="syz.5.1700" path="socket:[38743]" dev="sockfs" ino=38743 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 848.941893][ T5934] usb 10-1: USB disconnect, device number 5 [ 850.169328][ T30] audit: type=1326 audit(1763132910.378:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.8.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 850.693639][ T30] audit: type=1326 audit(1763132910.408:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11940 comm="syz.8.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 851.213269][T11956] syz.9.1707 (11956) used greatest stack depth: 17904 bytes left [ 852.283650][ T8900] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 852.667709][T10196] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.145475][ T30] audit: type=1400 audit(1763132915.348:563): avc: denied { bind } for pid=12000 comm="syz.7.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 856.119322][ T30] audit: type=1400 audit(1763132915.348:564): avc: denied { listen } for pid=12000 comm="syz.7.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 857.483274][T12023] netlink: 'syz.6.1722': attribute type 10 has an invalid length. [ 857.657058][ T30] audit: type=1326 audit(1763132917.868:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 857.701296][ T30] audit: type=1326 audit(1763132917.868:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 857.749727][T12023] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 857.768553][ T30] audit: type=1326 audit(1763132917.868:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.5.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85d38f6c9 code=0x7ffc0000 [ 858.253482][ T30] audit: type=1400 audit(1763132918.458:568): avc: denied { mount } for pid=12032 comm="syz.7.1729" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 858.280660][T12033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 858.828568][ T30] audit: type=1400 audit(1763132918.858:569): avc: denied { create } for pid=12034 comm="syz.6.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 860.107307][ T30] audit: type=1400 audit(1763132920.318:570): avc: denied { unmount } for pid=8896 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 860.570132][ T30] audit: type=1804 audit(1763132920.498:571): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.1736" name="/newroot/142/file0" dev="tmpfs" ino=854 res=1 errno=0 [ 860.592498][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.828663][ T30] audit: type=1400 audit(1763132921.028:572): avc: denied { append } for pid=12054 comm="syz.6.1734" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 861.815241][ T8900] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 862.141175][ T30] audit: type=1400 audit(1763132922.348:573): avc: denied { create } for pid=12084 comm="syz.8.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 863.542404][T12100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 867.263192][ T8900] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 867.907294][T12147] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1757'. [ 868.044018][ T5882] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 868.548990][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 868.557405][ T5882] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 868.687209][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.699336][ T5882] usb 6-1: Product: syz [ 868.705507][ T5882] usb 6-1: Manufacturer: syz [ 869.222600][ T5882] usb 6-1: SerialNumber: syz [ 869.253626][ T5882] usb 6-1: config 0 descriptor?? [ 869.261634][ T5882] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 869.271304][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 869.396255][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 869.500412][ T30] audit: type=1326 audit(1763132929.668:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 869.905141][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.914081][ T5882] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 869.923849][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.961382][ T30] audit: type=1326 audit(1763132929.668:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 870.029284][ T5882] usb 6-1: media controller created [ 870.066409][ T30] audit: type=1326 audit(1763132929.668:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 870.102511][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 870.154189][ T30] audit: type=1326 audit(1763132929.668:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 870.177602][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.188650][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 870.390286][T12176] tipc: Started in network mode [ 870.395288][T12176] tipc: Node identity ac1414aa, cluster identity 4711 [ 870.699591][T12176] tipc: Enabled bearer , priority 10 [ 871.114414][ T5882] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 871.125383][ T30] audit: type=1326 audit(1763132929.668:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 871.150537][ T30] audit: type=1326 audit(1763132929.668:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 871.174670][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 871.191560][ T5882] dvb-usb: schedule remote query interval to 50 msecs. [ 871.198554][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 871.204407][ T5882] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 871.205901][T12179] tipc: Enabled bearer , priority 0 [ 871.306551][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 871.313739][ T30] audit: type=1326 audit(1763132929.668:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 871.333619][ T5882] dvb-usb: error while querying for an remote control event. [ 871.477539][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 871.507588][ T5882] dvb-usb: error while querying for an remote control event. [ 871.508923][ T30] audit: type=1326 audit(1763132929.678:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 871.573762][ T979] dvb-usb: bulk message failed: -22 (1/0) [ 871.579599][ T979] dvb-usb: error while querying for an remote control event. [ 871.620966][ T30] audit: type=1326 audit(1763132929.678:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 871.644370][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.656115][ T30] audit: type=1326 audit(1763132929.678:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f002bf8f6c9 code=0x7ffc0000 [ 871.679455][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.691789][ T979] dvb-usb: bulk message failed: -22 (1/0) [ 871.726900][ T979] dvb-usb: error while querying for an remote control event. [ 872.478609][ T5930] tipc: Node number set to 2886997162 [ 872.603659][ T979] dvb-usb: bulk message failed: -22 (1/0) [ 872.609472][ T979] dvb-usb: error while querying for an remote control event. [ 872.673616][ T979] dvb-usb: bulk message failed: -22 (1/0) [ 872.693569][ T979] dvb-usb: error while querying for an remote control event. [ 872.727408][ T5930] usb 6-1: USB disconnect, device number 3 [ 872.947918][ T5930] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 875.334635][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 875.334654][ T30] audit: type=1400 audit(1763132935.538:600): avc: denied { getopt } for pid=12209 comm="syz.6.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 875.360126][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.461981][T12231] netlink: 277 bytes leftover after parsing attributes in process `syz.9.1772'. [ 876.564237][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1775'. [ 876.599439][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1775'. [ 878.093542][ T30] audit: type=1400 audit(1763132938.178:601): avc: denied { module_load } for pid=12243 comm="syz.6.1778" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 878.408884][T12244] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1778'. [ 879.320742][T12269] syz2: rxe_newlink: already configured on ipvlan0 [ 882.300677][T12276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.027685][ T30] audit: type=1400 audit(1763132943.238:602): avc: denied { mounton } for pid=12290 comm="syz.9.1789" path="/155/file0/file0" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 884.134299][T12306] ip6_vti0: entered promiscuous mode [ 884.607355][T12318] lo speed is unknown, defaulting to 1000 [ 884.613157][T12318] lo speed is unknown, defaulting to 1000 [ 884.620641][T12318] lo speed is unknown, defaulting to 1000 [ 884.631372][T12318] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 884.726412][T12318] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 885.667326][ T30] audit: type=1400 audit(1763132945.848:603): avc: denied { listen } for pid=12312 comm="syz.7.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 886.067052][ T30] audit: type=1400 audit(1763132945.848:604): avc: denied { connect } for pid=12312 comm="syz.7.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 886.305318][T12318] lo speed is unknown, defaulting to 1000 [ 886.319374][ T30] audit: type=1400 audit(1763132946.528:605): avc: denied { watch_mount } for pid=12329 comm="syz.7.1799" path="/152" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 886.435291][T12318] lo speed is unknown, defaulting to 1000 [ 886.475665][T12318] lo speed is unknown, defaulting to 1000 [ 886.506672][T12318] lo speed is unknown, defaulting to 1000 [ 886.671250][T12318] lo speed is unknown, defaulting to 1000 [ 886.996412][T12318] lo speed is unknown, defaulting to 1000 [ 890.277277][T12375] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1817'. [ 890.886696][ T30] audit: type=1400 audit(1763132951.098:606): avc: denied { create } for pid=12377 comm="syz.9.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 891.083121][ T30] audit: type=1400 audit(1763132951.288:607): avc: denied { sys_admin } for pid=12377 comm="syz.9.1805" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 894.779503][ T30] audit: type=1400 audit(1763132954.958:608): avc: denied { getopt } for pid=12412 comm="syz.5.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 898.393432][T12443] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 905.035079][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1841'. [ 905.368996][T12507] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 906.651735][ T30] audit: type=1400 audit(1763132966.828:609): avc: denied { create } for pid=12508 comm="syz.8.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 907.630078][ T30] audit: type=1400 audit(1763132966.918:610): avc: denied { write } for pid=12508 comm="syz.8.1845" path="socket:[42096]" dev="sockfs" ino=42096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 907.655567][ T30] audit: type=1326 audit(1763132966.938:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.8.1845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f002bf8f6c9 code=0x0 [ 913.571361][ T30] audit: type=1400 audit(1763132973.778:612): avc: denied { listen } for pid=12570 comm="syz.9.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 916.753711][ T5930] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 917.005465][ T5930] usb 10-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 917.023255][ T5930] usb 10-1: config 0 interface 0 has no altsetting 0 [ 917.046851][ T5930] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 917.056340][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 917.186551][ T30] audit: type=1400 audit(1763132977.398:613): avc: denied { view } for pid=12588 comm="syz.8.1866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 917.206094][ T5930] usb 10-1: Product: syz [ 918.169287][ T5930] usb 10-1: Manufacturer: syz [ 918.183305][ T5930] usb 10-1: SerialNumber: syz [ 918.191825][ T5930] usb 10-1: config 0 descriptor?? [ 918.215202][ T30] audit: type=1400 audit(1763132978.378:614): avc: denied { mounton } for pid=12588 comm="syz.8.1866" path="/172/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 918.634172][ T5930] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 919.012136][ T8779] udevd[8779]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.204362][ T979] usb 10-1: USB disconnect, device number 6 [ 922.025225][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1878'. [ 922.034302][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1878'. [ 923.574228][ T30] audit: type=1400 audit(1763132983.768:615): avc: denied { map } for pid=12643 comm="syz.9.1879" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 923.680358][T12657] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 923.714637][T12657] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 925.145907][ T9] kworker/0:0 (9) used greatest stack depth: 16968 bytes left [ 925.868069][ T8885] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.250403][ T5930] IPVS: starting estimator thread 0... [ 928.353734][T12691] IPVS: using max 42 ests per chain, 100800 per kthread [ 931.468423][ T30] audit: type=1400 audit(1763132991.208:616): avc: denied { lock } for pid=12710 comm="syz.6.1894" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 931.499354][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.506284][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.653281][ T30] audit: type=1400 audit(1763132991.228:617): avc: denied { connect } for pid=12710 comm="syz.6.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 932.390301][ T8878] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.083671][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 933.432877][T12740] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1901'. [ 935.268865][T12774] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 936.461487][ T30] audit: type=1400 audit(1763132996.658:618): avc: denied { bind } for pid=12784 comm="syz.6.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 939.636840][ T30] audit: type=1400 audit(1763132999.648:619): avc: denied { name_bind } for pid=12813 comm="syz.9.1921" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 940.775511][T12824] netlink: 'syz.9.1923': attribute type 21 has an invalid length. [ 940.783407][T12824] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1923'. [ 942.003914][ T30] audit: type=1400 audit(1763133001.858:620): avc: denied { getopt } for pid=12832 comm="syz.6.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 942.023377][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.278139][T12844] comedi comedi3: dt2801: I/O port conflict (0x4f27,2) [ 945.173946][ T30] audit: type=1400 audit(1763133005.308:621): avc: denied { ioctl } for pid=12862 comm="syz.9.1933" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 947.518520][T12889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12889 comm=syz.9.1936 [ 950.618828][ T30] audit: type=1326 audit(1763133010.828:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.9.1946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f543db8f6c9 code=0x0 [ 952.347967][ T30] audit: type=1400 audit(1763133012.028:623): avc: denied { read write } for pid=12926 comm="syz.8.1949" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 952.385968][ T30] audit: type=1400 audit(1763133012.028:624): avc: denied { open } for pid=12926 comm="syz.8.1949" path="/187/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 957.549389][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1972'. [ 960.304674][T13007] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.400172][T13007] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.084831][T13007] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.148487][T13007] bond0: (slave netdevsim0): Releasing backup interface [ 961.263631][T10199] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.396716][T10199] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.406046][T10199] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.425975][T10199] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.664383][T13024] tipc: Enabled bearer , priority 10 [ 961.672190][T13024] tipc: Enabled bearer , priority 0 [ 961.752155][T13029] binder: 13016:13029 ioctl c0046209 0 returned -22 [ 962.178662][T13031] blktrace: Concurrent blktraces are not allowed on sg0 [ 962.278936][T13029] lo speed is unknown, defaulting to 1000 [ 962.666581][ T8900] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 966.851499][T13078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1984'. [ 967.027761][T13074] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 967.880301][T13086] : renamed from bridge_slave_0 (while UP) [ 968.962039][T13087] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 968.968560][T13087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 969.074787][T13088] vhci_hcd: connection closed [ 969.084915][T13087] vhci_hcd vhci_hcd.0: Device attached [ 969.167787][T10199] vhci_hcd: stop threads [ 969.204969][T10199] vhci_hcd: release socket [ 969.219103][T10199] vhci_hcd: disconnect device [ 969.264381][ T8877] vhci_hcd: vhci_device speed not set [ 971.905877][T13119] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 972.276405][ T30] audit: type=1400 audit(971.866:625): avc: denied { mounton } for pid=13112 comm="syz.8.1994" path="/196/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 972.567942][ T30] audit: type=1400 audit(971.886:626): avc: denied { read } for pid=13112 comm="syz.8.1994" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 972.613651][ T30] audit: type=1400 audit(971.886:627): avc: denied { open } for pid=13112 comm="syz.8.1994" path="/196/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 973.731470][ T30] audit: type=1400 audit(971.886:628): avc: denied { read } for pid=13112 comm="syz.8.1994" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 974.310097][ T30] audit: type=1400 audit(971.896:629): avc: denied { read } for pid=13112 comm="syz.8.1994" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 974.331159][ T30] audit: type=1400 audit(971.916:630): avc: denied { getattr } for pid=13112 comm="syz.8.1994" name="saved_tgids" dev="tracefs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 975.926554][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2000'. [ 976.413255][ T30] audit: type=1400 audit(975.976:631): avc: denied { mount } for pid=13137 comm="syz.9.2000" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 976.785285][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2002'. [ 979.542623][T13178] netlink: 'syz.5.2009': attribute type 4 has an invalid length. [ 980.814767][ T8877] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 981.176212][ T8877] usb 7-1: Using ep0 maxpacket: 32 [ 981.362251][ T8877] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 981.542240][T13196] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2012'. [ 981.911987][ T8877] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 981.929323][ T8877] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 981.960781][ T8877] usb 7-1: Product: syz [ 981.975779][ T8877] usb 7-1: Manufacturer: syz [ 981.986040][ T8877] usb 7-1: SerialNumber: syz [ 982.001976][ T8877] usb 7-1: config 0 descriptor?? [ 982.047823][T13184] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 982.340676][T13205] program syz.5.2017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 983.586746][ T5824] usb 7-1: USB disconnect, device number 5 [ 984.666130][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2024'. [ 984.962339][T13244] binder: 13235:13244 ioctl c0306201 0 returned -14 [ 989.046536][ T30] audit: type=1400 audit(989.016:632): avc: denied { read } for pid=13268 comm="syz.8.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 991.092669][ T30] audit: type=1400 audit(990.956:633): avc: denied { link } for pid=13284 comm="syz.6.2036" name="#54" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 991.183822][ T8900] Bluetooth: hci4: command 0x0406 tx timeout [ 991.214873][ T30] audit: type=1400 audit(990.966:634): avc: denied { rename } for pid=13284 comm="syz.6.2036" name="#55" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 991.487381][ T8877] IPVS: starting estimator thread 0... [ 991.772841][T13294] IPVS: using max 50 ests per chain, 120000 per kthread [ 992.614224][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.662677][T13302] lo speed is unknown, defaulting to 1000 [ 992.732562][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.886587][T13304] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2039'. [ 993.257905][T13309] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 994.223022][T13317] usb usb9: usbfs: process 13317 (syz.8.2055) did not claim interface 0 before use [ 995.328775][T13314] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.335952][T13338] SELinux: Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped). [ 996.742669][ T30] audit: type=1400 audit(996.296:635): avc: denied { relabelfrom } for pid=13333 comm="syz.7.2048" name="UNIX" dev="sockfs" ino=45625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 996.765572][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.789212][ T30] audit: type=1400 audit(996.316:636): avc: denied { relabelto } for pid=13333 comm="syz.7.2048" name="UNIX" dev="sockfs" ino=45625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 996.816730][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.869134][T13314] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.266362][ T43] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 998.373853][T13314] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.395591][ T43] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 998.405421][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.413584][ T43] usb 9-1: Product: syz [ 998.479109][T13357] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 999.959482][ T43] usb 9-1: Manufacturer: syz [ 999.974213][ T43] usb 9-1: SerialNumber: syz [ 1000.003080][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2053'. [ 1000.402456][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2053'. [ 1000.420745][ T43] usb 9-1: can't set config #1, error -71 [ 1000.472847][ T43] usb 9-1: USB disconnect, device number 4 [ 1000.484109][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2053'. [ 1000.812310][T13314] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.113488][ T9589] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.489670][ T9589] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.504623][ T9589] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.616013][ T9589] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.917332][T13420] macvtap0: entered allmulticast mode [ 1004.922759][T13420] veth0_macvtap: entered allmulticast mode [ 1006.150550][ T30] audit: type=1400 audit(1006.106:637): avc: denied { name_connect } for pid=13421 comm="syz.9.2070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1006.239287][ T30] audit: type=1400 audit(1006.166:638): avc: denied { listen } for pid=13421 comm="syz.9.2070" lport=50122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1006.421141][ T30] audit: type=1400 audit(1006.166:639): avc: denied { accept } for pid=13421 comm="syz.9.2070" lport=50122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1007.435761][ T30] audit: type=1400 audit(1007.396:640): avc: denied { read } for pid=13426 comm="syz.7.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1007.831364][T13440] Bluetooth: MGMT ver 1.23 [ 1009.886622][T13453] veth0_to_team: entered promiscuous mode [ 1009.892436][T13453] veth0_to_team: entered allmulticast mode [ 1014.451460][T13497] hub 1-0:1.0: USB hub found [ 1014.459534][T13497] hub 1-0:1.0: 1 port detected [ 1018.013461][ T30] audit: type=1400 audit(1017.976:641): avc: denied { append } for pid=13536 comm="syz.8.2104" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1018.199909][T13541] overlayfs: missing 'lowerdir' [ 1019.160247][T13553] ip6erspan0: entered promiscuous mode [ 1019.963722][ T8877] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1020.128894][ T8877] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1020.137996][ T8877] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1020.187668][ T8877] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1020.273522][ T8877] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1020.326987][ T8877] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1020.356316][ T8877] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1020.386490][ T8877] usb 9-1: Product: syz [ 1020.398402][ T8877] usb 9-1: Manufacturer: syz [ 1020.421848][ T8877] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1022.695190][ T5824] usb 9-1: USB disconnect, device number 5 [ 1023.244548][T13590] overlayfs: failed to resolve './file1': -2 [ 1023.992639][ T30] audit: type=1400 audit(1023.946:642): avc: denied { write } for pid=13589 comm="syz.8.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1025.253857][ T5824] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1026.028078][ T5824] usb 6-1: config 0 has an invalid interface number: 199 but max is 0 [ 1026.176882][ T5824] usb 6-1: config 0 has no interface number 0 [ 1026.193809][ T5824] usb 6-1: config 0 interface 199 has no altsetting 0 [ 1026.235364][T13613] new mount options do not match the existing superblock, will be ignored [ 1026.290262][ T5824] usb 6-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=1c.1b [ 1026.304890][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.320659][ T5824] usb 6-1: Product: syz [ 1026.335856][ T5824] usb 6-1: Manufacturer: syz [ 1026.354355][ T5824] usb 6-1: SerialNumber: syz [ 1026.434892][ T5824] usb 6-1: config 0 descriptor?? [ 1026.709531][ T5824] uvcvideo 6-1:0.199: Found Unit with invalid ID 0 [ 1026.724368][ T5824] uvcvideo 6-1:0.199: probe with driver uvcvideo failed with error -22 [ 1026.749242][ T5824] usb 6-1: USB disconnect, device number 4 [ 1026.847213][T13619] block nbd7: NBD_DISCONNECT [ 1027.462134][ T30] audit: type=1400 audit(1027.086:643): avc: denied { create } for pid=13620 comm="syz.6.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1028.059381][ T30] audit: type=1400 audit(1027.106:644): avc: denied { connect } for pid=13620 comm="syz.6.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1028.266076][ T30] audit: type=1400 audit(1027.516:645): avc: denied { append } for pid=13626 comm="syz.7.2127" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1028.387214][ T30] audit: type=1400 audit(1027.996:646): avc: denied { map } for pid=13629 comm="syz.6.2128" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1028.515270][ T30] audit: type=1400 audit(1028.076:647): avc: denied { execute } for pid=13629 comm="syz.6.2128" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1028.934117][T13641] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1029.861944][T13650] loop9: detected capacity change from 0 to 8 [ 1029.885058][T13650] Dev loop9: unable to read RDB block 8 [ 1029.890867][T13650] loop9: unable to read partition table [ 1029.897519][T13650] loop9: partition table beyond EOD, truncated [ 1029.903824][T13650] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1029.966823][ T30] audit: type=1400 audit(1029.846:648): avc: denied { unmount } for pid=8902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1030.848347][T13660] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1031.768344][ T30] audit: type=1400 audit(1031.716:649): avc: denied { getopt } for pid=13668 comm="syz.8.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1031.787425][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.464671][T13677] 9pnet_fd: Insufficient options for proto=fd [ 1032.487392][ T30] audit: type=1400 audit(1032.426:650): avc: denied { mounton } for pid=13672 comm="syz.9.2138" path="/syzcgroup/net/syz9/cgroup.procs" dev="cgroup" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1032.795299][T13677] Process accounting resumed [ 1032.850436][ T30] audit: type=1400 audit(1032.796:651): avc: denied { unmount } for pid=8903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1034.547220][ T30] audit: type=1400 audit(1034.496:652): avc: denied { mount } for pid=13681 comm="syz.8.2141" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1034.800962][ T30] audit: type=1400 audit(1034.536:653): avc: denied { remount } for pid=13681 comm="syz.8.2141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1034.820388][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.370469][T13697] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1035.802736][ T30] audit: type=1400 audit(1035.766:654): avc: denied { unmount } for pid=8902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1035.822263][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.977788][T13707] hub 1-0:1.0: USB hub found [ 1037.014783][T13707] hub 1-0:1.0: 1 port detected [ 1037.905317][T13720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.316629][T13722] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2150'. [ 1041.480315][T13761] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1041.916974][ T30] audit: type=1326 audit(1041.866:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1042.043138][ T30] audit: type=1326 audit(1041.866:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1042.106723][ T30] audit: type=1326 audit(1041.866:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1042.139574][ T30] audit: type=1326 audit(1041.906:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f543db8df10 code=0x7ffc0000 [ 1042.750734][ T30] audit: type=1326 audit(1041.916:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1042.876843][T13767] hub 1-0:1.0: USB hub found [ 1042.886809][T13767] hub 1-0:1.0: 1 port detected [ 1043.070221][ T30] audit: type=1326 audit(1041.916:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1043.075197][T13774] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2166'. [ 1043.516857][ T30] audit: type=1326 audit(1042.066:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1043.833466][ T30] audit: type=1326 audit(1042.066:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1043.857226][ T30] audit: type=1326 audit(1042.066:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1043.880139][ T30] audit: type=1326 audit(1042.066:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.9.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f543db8f6c9 code=0x7ffc0000 [ 1044.872271][T13787] tipc: Enabling of bearer rejected, failed to enable media [ 1052.474450][T13852] program syz.9.2190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1052.825062][T13857] netlink: 'syz.8.2186': attribute type 10 has an invalid length. [ 1053.426368][T13857] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1053.539865][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2191'. [ 1054.054643][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.074033][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.309837][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1054.309856][ T30] audit: type=1326 audit(1054.266:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1054.602505][ T30] audit: type=1326 audit(1054.276:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1055.318522][ T30] audit: type=1326 audit(1054.276:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1055.738194][ T30] audit: type=1326 audit(1054.276:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1055.965336][T13892] overlayfs: failed to resolve './file1': -2 [ 1056.111290][ T30] audit: type=1326 audit(1054.276:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1056.714845][ T30] audit: type=1326 audit(1054.276:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1057.349075][ T30] audit: type=1326 audit(1054.276:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1057.375757][ T30] audit: type=1326 audit(1054.276:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1057.458603][ T30] audit: type=1326 audit(1054.276:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1058.217103][ T30] audit: type=1326 audit(1054.286:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f77ec58f6c9 code=0x7ffc0000 [ 1058.827698][T13914] program syz.8.2203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.246971][T13918] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 1061.921076][T13951] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2213'. [ 1062.352451][ T5824] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1062.414996][T13946] netlink: 'syz.5.2214': attribute type 12 has an invalid length. [ 1062.566817][T13946] lo speed is unknown, defaulting to 1000 [ 1062.613565][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 1062.648051][ T5824] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1062.698646][ T5824] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.716605][ T5824] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1062.791129][ T5824] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1062.801820][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.811731][ T5824] usb 9-1: Product: syz [ 1062.816132][ T5824] usb 9-1: Manufacturer: syz [ 1062.820806][ T5824] usb 9-1: SerialNumber: syz [ 1062.841249][ T5824] usb 9-1: config 0 descriptor?? [ 1063.753229][T13961] ip6_vti0: Master is either lo or non-ether device [ 1063.864135][T13966] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1066.146878][T13991] trusted_key: syz.9.2224 sent an empty control message without MSG_MORE. [ 1066.843458][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1066.843475][ T30] audit: type=1400 audit(1066.617:687): avc: denied { write } for pid=13965 comm="syz.6.2218" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1067.039043][ T5868] usb 9-1: USB disconnect, device number 6 [ 1069.215405][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2232'. [ 1071.445973][ T30] audit: type=1326 audit(1071.407:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.6.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49c18f6c9 code=0x7ffc0000 [ 1071.678789][T14036] wireguard0: entered promiscuous mode [ 1071.684446][T14036] wireguard0: entered allmulticast mode [ 1071.917124][ T30] audit: type=1326 audit(1071.407:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.6.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49c18f6c9 code=0x7ffc0000 [ 1072.059448][T14041] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 1072.087318][ T30] audit: type=1400 audit(1072.047:690): avc: denied { map } for pid=14039 comm="syz.8.2238" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1073.461654][T14057] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2243'. [ 1073.482267][ T30] audit: type=1400 audit(1073.447:691): avc: denied { ioctl } for pid=14055 comm="syz.9.2243" path="socket:[49520]" dev="sockfs" ino=49520 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1073.558068][T14057] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2243'. [ 1075.494003][T14078] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2249'. [ 1076.362276][ T30] audit: type=1400 audit(1076.327:692): avc: denied { setopt } for pid=14093 comm="syz.7.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1076.794144][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2256'. [ 1077.248745][ T30] audit: type=1400 audit(1076.467:693): avc: denied { setopt } for pid=14093 comm="syz.7.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1081.434364][ T30] audit: type=1800 audit(1081.377:694): pid=14157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2269" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1081.688943][T14160] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1084.686955][ T8900] Bluetooth: hci4: command 0x0406 tx timeout [ 1084.985302][T14185] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1084.991843][T14185] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1085.563645][T14185] vhci_hcd vhci_hcd.0: Device attached [ 1085.813746][ T8877] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 1085.833302][T14186] vhci_hcd: connection closed [ 1085.834141][ T3565] vhci_hcd: stop threads [ 1085.843151][ T3565] vhci_hcd: release socket [ 1086.011424][ T3565] vhci_hcd: disconnect device [ 1087.694318][ T30] audit: type=1400 audit(1087.647:695): avc: denied { cmd } for pid=14191 comm="syz.8.2281" path="socket:[50646]" dev="sockfs" ino=50646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1088.120403][T14221] netlink: 'syz.9.2288': attribute type 10 has an invalid length. [ 1088.759970][T14221] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1090.945729][ T8877] vhci_hcd: vhci_device speed not set [ 1092.363535][ T30] audit: type=1400 audit(1092.027:696): avc: denied { firmware_load } for pid=14252 comm="syz.7.2295" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1094.804299][ T30] audit: type=1400 audit(1094.247:697): avc: denied { name_connect } for pid=14268 comm="syz.7.2309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1095.529565][T14288] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 1095.551360][T14288] ================================================================== [ 1095.559438][T14288] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 1095.567432][T14288] Read of size 8 at addr ffff888072957630 by task syz.5.2303/14288 [ 1095.575325][T14288] [ 1095.577649][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.5.2303 Not tainted syzkaller #0 PREEMPT(full) [ 1095.577674][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1095.577687][T14288] Call Trace: [ 1095.577693][T14288] [ 1095.577700][T14288] dump_stack_lvl+0x116/0x1f0 [ 1095.577733][T14288] print_report+0xcd/0x630 [ 1095.577755][T14288] ? __virt_addr_valid+0x81/0x610 [ 1095.577780][T14288] ? __phys_addr+0xe8/0x180 [ 1095.577811][T14288] ? sysfs_remove_file_ns+0x63/0x70 [ 1095.577831][T14288] kasan_report+0xe0/0x110 [ 1095.577853][T14288] ? sysfs_remove_file_ns+0x63/0x70 [ 1095.577875][T14288] sysfs_remove_file_ns+0x63/0x70 [ 1095.577895][T14288] driver_remove_file+0x4a/0x60 [ 1095.577917][T14288] bus_remove_driver+0x224/0x2c0 [ 1095.577944][T14288] driver_unregister+0x76/0xb0 [ 1095.577962][T14288] comedi_device_detach_locked+0x12f/0xa50 [ 1095.577984][T14288] comedi_device_detach+0x67/0xb0 [ 1095.578004][T14288] comedi_device_attach+0x43d/0x900 [ 1095.578026][T14288] do_devconfig_ioctl+0x1b1/0x710 [ 1095.578050][T14288] ? __mutex_lock+0x1c5/0x1060 [ 1095.578068][T14288] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1095.578099][T14288] ? find_held_lock+0x2b/0x80 [ 1095.578123][T14288] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1095.578144][T14288] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1095.578163][T14288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1095.578186][T14288] ? do_vfs_ioctl+0x128/0x14f0 [ 1095.578211][T14288] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1095.578236][T14288] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1095.578262][T14288] ? hook_file_ioctl_common+0x145/0x410 [ 1095.578289][T14288] ? selinux_file_ioctl+0x180/0x270 [ 1095.578307][T14288] ? selinux_file_ioctl+0xb4/0x270 [ 1095.578328][T14288] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1095.578347][T14288] __x64_sys_ioctl+0x18e/0x210 [ 1095.578372][T14288] do_syscall_64+0xcd/0xfa0 [ 1095.578388][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.578406][T14288] RIP: 0033:0x7fb85d38f6c9 [ 1095.578421][T14288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.578438][T14288] RSP: 002b:00007fb85e23b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.578457][T14288] RAX: ffffffffffffffda RBX: 00007fb85d5e6090 RCX: 00007fb85d38f6c9 [ 1095.578468][T14288] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000006 [ 1095.578479][T14288] RBP: 00007fb85d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1095.578490][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.578501][T14288] R13: 00007fb85d5e6128 R14: 00007fb85d5e6090 R15: 00007ffcc1bb7358 [ 1095.578520][T14288] [ 1095.578526][T14288] [ 1095.840178][T14288] Allocated by task 8902: [ 1095.844483][T14288] kasan_save_stack+0x33/0x60 [ 1095.849143][T14288] kasan_save_track+0x14/0x30 [ 1095.853797][T14288] __kasan_kmalloc+0xaa/0xb0 [ 1095.858366][T14288] __kmalloc_noprof+0x32f/0x880 [ 1095.863208][T14288] security_inode_init_security+0x13f/0x390 [ 1095.869085][T14288] shmem_mknod+0x22e/0x450 [ 1095.873483][T14288] shmem_mkdir+0x31/0x80 [ 1095.877705][T14288] vfs_mkdir+0x593/0x8c0 [ 1095.881932][T14288] do_mkdirat+0x304/0x3e0 [ 1095.886246][T14288] __x64_sys_mkdirat+0x83/0xb0 [ 1095.890997][T14288] do_syscall_64+0xcd/0xfa0 [ 1095.895477][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.901358][T14288] [ 1095.903662][T14288] Freed by task 8902: [ 1095.907619][T14288] kasan_save_stack+0x33/0x60 [ 1095.912277][T14288] kasan_save_track+0x14/0x30 [ 1095.916932][T14288] __kasan_save_free_info+0x3b/0x60 [ 1095.922122][T14288] __kasan_slab_free+0x5f/0x80 [ 1095.926863][T14288] kfree+0x2b8/0x6d0 [ 1095.930745][T14288] security_inode_init_security+0x2eb/0x390 [ 1095.936635][T14288] shmem_mknod+0x22e/0x450 [ 1095.941039][T14288] shmem_mkdir+0x31/0x80 [ 1095.945276][T14288] vfs_mkdir+0x593/0x8c0 [ 1095.949512][T14288] do_mkdirat+0x304/0x3e0 [ 1095.953822][T14288] __x64_sys_mkdirat+0x83/0xb0 [ 1095.958577][T14288] do_syscall_64+0xcd/0xfa0 [ 1095.963062][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.968934][T14288] [ 1095.971241][T14288] The buggy address belongs to the object at ffff888072957600 [ 1095.971241][T14288] which belongs to the cache kmalloc-256 of size 256 [ 1095.985269][T14288] The buggy address is located 48 bytes inside of [ 1095.985269][T14288] freed 256-byte region [ffff888072957600, ffff888072957700) [ 1095.998952][T14288] [ 1096.001269][T14288] The buggy address belongs to the physical page: [ 1096.007655][T14288] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72956 [ 1096.016393][T14288] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1096.024868][T14288] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1096.032387][T14288] page_type: f5(slab) [ 1096.036347][T14288] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1096.044909][T14288] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1096.053470][T14288] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 1096.062121][T14288] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1096.070772][T14288] head: 00fff00000000001 ffffea0001ca5581 00000000ffffffff 00000000ffffffff [ 1096.079423][T14288] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1096.088064][T14288] page dumped because: kasan: bad access detected [ 1096.094452][T14288] page_owner tracks the page as allocated [ 1096.100140][T14288] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5813, tgid 5813 (syz-executor), ts 64744579864, free_ts 17063895242 [ 1096.121478][T14288] post_alloc_hook+0x1c0/0x230 [ 1096.126238][T14288] get_page_from_freelist+0x10a3/0x3a30 [ 1096.131767][T14288] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1096.137651][T14288] alloc_pages_mpol+0x1fb/0x550 [ 1096.142487][T14288] new_slab+0x24a/0x360 [ 1096.146627][T14288] ___slab_alloc+0xd79/0x1a50 [ 1096.151288][T14288] __slab_alloc.constprop.0+0x63/0x110 [ 1096.156730][T14288] __kmalloc_noprof+0x501/0x880 [ 1096.161563][T14288] __register_sysctl_table+0xea2/0x1900 [ 1096.167100][T14288] __addrconf_sysctl_register+0x1a2/0x360 [ 1096.172806][T14288] addrconf_sysctl_register+0x15f/0x1f0 [ 1096.178351][T14288] ipv6_add_dev+0xb31/0x15f0 [ 1096.182929][T14288] addrconf_notify+0x53e/0x19e0 [ 1096.187759][T14288] notifier_call_chain+0xbc/0x410 [ 1096.192776][T14288] call_netdevice_notifiers_info+0xbe/0x140 [ 1096.198668][T14288] register_netdevice+0x182e/0x2270 [ 1096.203854][T14288] page last free pid 1 tgid 1 stack trace: [ 1096.209633][T14288] __free_frozen_pages+0x7df/0x1160 [ 1096.214813][T14288] free_contig_range+0x183/0x4b0 [ 1096.219733][T14288] destroy_args+0xb69/0x12e0 [ 1096.224306][T14288] debug_vm_pgtable+0x1a32/0x3640 [ 1096.229316][T14288] do_one_initcall+0x123/0x6e0 [ 1096.234062][T14288] kernel_init_freeable+0x5c8/0x920 [ 1096.239246][T14288] kernel_init+0x1c/0x2b0 [ 1096.243558][T14288] ret_from_fork+0x675/0x7d0 [ 1096.248128][T14288] ret_from_fork_asm+0x1a/0x30 [ 1096.252875][T14288] [ 1096.255174][T14288] Memory state around the buggy address: [ 1096.260781][T14288] ffff888072957500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1096.268823][T14288] ffff888072957580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1096.276860][T14288] >ffff888072957600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1096.284896][T14288] ^ [ 1096.290500][T14288] ffff888072957680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1096.298536][T14288] ffff888072957700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1096.306571][T14288] ================================================================== [ 1096.314710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1096.337172][T14288] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1096.344392][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.5.2303 Not tainted syzkaller #0 PREEMPT(full) [ 1096.353775][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1096.363857][T14288] Call Trace: [ 1096.367129][T14288] [ 1096.370044][T14288] dump_stack_lvl+0x3d/0x1f0 [ 1096.374625][T14288] vpanic+0x640/0x6f0 [ 1096.378599][T14288] panic+0xca/0xd0 [ 1096.382307][T14288] ? __pfx_panic+0x10/0x10 [ 1096.386711][T14288] ? sysfs_remove_file_ns+0x63/0x70 [ 1096.391891][T14288] ? preempt_schedule_common+0x44/0xc0 [ 1096.397338][T14288] ? preempt_schedule_thunk+0x16/0x30 [ 1096.402704][T14288] check_panic_on_warn+0xab/0xb0 [ 1096.407621][T14288] end_report+0x107/0x170 [ 1096.411945][T14288] kasan_report+0xee/0x110 [ 1096.416358][T14288] ? sysfs_remove_file_ns+0x63/0x70 [ 1096.421550][T14288] sysfs_remove_file_ns+0x63/0x70 [ 1096.426566][T14288] driver_remove_file+0x4a/0x60 [ 1096.431406][T14288] bus_remove_driver+0x224/0x2c0 [ 1096.436360][T14288] driver_unregister+0x76/0xb0 [ 1096.441107][T14288] comedi_device_detach_locked+0x12f/0xa50 [ 1096.446913][T14288] comedi_device_detach+0x67/0xb0 [ 1096.451927][T14288] comedi_device_attach+0x43d/0x900 [ 1096.457110][T14288] do_devconfig_ioctl+0x1b1/0x710 [ 1096.462120][T14288] ? __mutex_lock+0x1c5/0x1060 [ 1096.466864][T14288] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1096.472403][T14288] ? find_held_lock+0x2b/0x80 [ 1096.477065][T14288] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1096.482505][T14288] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1096.488295][T14288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1096.494172][T14288] ? do_vfs_ioctl+0x128/0x14f0 [ 1096.499013][T14288] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1096.504022][T14288] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1096.510858][T14288] ? hook_file_ioctl_common+0x145/0x410 [ 1096.516391][T14288] ? selinux_file_ioctl+0x180/0x270 [ 1096.521571][T14288] ? selinux_file_ioctl+0xb4/0x270 [ 1096.526666][T14288] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1096.532455][T14288] __x64_sys_ioctl+0x18e/0x210 [ 1096.537204][T14288] do_syscall_64+0xcd/0xfa0 [ 1096.541687][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.547559][T14288] RIP: 0033:0x7fb85d38f6c9 [ 1096.551957][T14288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.571566][T14288] RSP: 002b:00007fb85e23b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1096.579957][T14288] RAX: ffffffffffffffda RBX: 00007fb85d5e6090 RCX: 00007fb85d38f6c9 [ 1096.587909][T14288] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000006 [ 1096.595856][T14288] RBP: 00007fb85d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1096.603807][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.611758][T14288] R13: 00007fb85d5e6128 R14: 00007fb85d5e6090 R15: 00007ffcc1bb7358 [ 1096.619716][T14288] [ 1096.622938][T14288] Kernel Offset: disabled [ 1096.627235][T14288] Rebooting in 86400 seconds..