last executing test programs: 19m22.938398965s ago: executing program 2 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x541b, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffff2, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = io_uring_setup(0xfc6, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') close_range(r3, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x14ef, 0x5f72, 0x48, &(0x7f0000000040)={[0x2]}, 0x8) 19m21.553363655s ago: executing program 2 (id=191): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000100)=0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 19m20.439574629s ago: executing program 2 (id=194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x0, 0xc0, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba"}, 0x50) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001540)) ptrace$getregs(0xc, 0x0, 0x4, &(0x7f0000000180)=""/224) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19m16.77645258s ago: executing program 2 (id=200): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000151401"], 0x10}}, 0x40) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000100)=ANY=[@ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) close(r0) write$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(r5) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)}], 0x1}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400003, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 19m13.198854152s ago: executing program 2 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0xc8bc, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0}, &(0x7f0000000300)=0x40) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000000)=0x3) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4620, @remote}}}, 0x118) 19m10.930963464s ago: executing program 2 (id=213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read(r5, &(0x7f0000000040)=""/138, 0x8a) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 18m55.237664759s ago: executing program 32 (id=213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read(r5, &(0x7f0000000040)=""/138, 0x8a) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 3m2.386967292s ago: executing program 0 (id=2165): sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000040)=0x1) connect$unix(r7, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 2m58.866924099s ago: executing program 0 (id=2168): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x14, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8c081, 0x0) symlink(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r6 = accept(r3, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x46, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 2m53.962699475s ago: executing program 0 (id=2178): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) eventfd(0xfffffff9) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff00"/49], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c8, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x9}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x498, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_CGROUP_ACT={0x484, 0x1, [@m_skbmod={0x44, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x18, 0x6, "e89718adf4828127be9e20c6a270b380e8d28f7d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xf8, 0x17, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xc5}]}]}, {0xab, 0x6, "0e99bfe35fc7c9c334702bbf4a5cdee93659b45731b9c96ec0cf18dc94b0d299654a697857f56e182b0c1dfcb2891f9bff160ff79813511a06437d7690019fa789df177ff505a4f48ee49fa2ff64806ab7ef84913a25d7d10f4931b59c4b6ffcf8c394245748bfc2b4b011a8480ba6c0db11741c82b5f7b9e617509a64a9fb0f90ab91c48cc15973f0b3ffc83aa889abd900b75203ceb899c0f12998adcb2450fad5364a6b76c4"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_simple={0x118, 0x1a, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xffffffff, 0x7, 0x5, 0xfff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x5, 0x20000000, 0xa, 0xd19}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x2, 0x8, 0x7fff, 0x101}}]}, {0xa1, 0x6, "45bb4f243393e0a8b2cec7205ed1ad39ee8f1c7dea20997580858b5933f608bc017d0bd2903e3527363c1d6cf2cc6dae630534b62fd2b99bf74fc7b432682b2b1b39e82f06083002f897f30bc8b319c328cddf96631f97567aa5518749031ec847dd092f1154fe03d6eec5539d030da18dd2f581073e5d5dbefb59982f70673d9e4fa988daab7ab912d0d3011877d39f6390285642b3848858eaed1ab0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x1c8, 0x7, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x1, 0x0, 0x3, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x6, 0x2, 0x3, 0xfffff013}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3, 0x3, 0x9, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xd, 0x1, 0x1, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x10001, 0x10000000, 0x5, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2fe, 0xfffffff2, 0x20000000, 0x40, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffff723, 0x5, 0x3, 0x0, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0x5, 0x40, 0x101}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xd3cd, 0x3, 0x3, 0xbd}}]}, {0xbb, 0x6, "cfa3534cbd285d3044294b223ba212d1a47334e5f2981418d93e12d94f2f134579a2dc69efcefb0d59434b92a526bc91892db13c8c8748598e49b1a2cf03556ada132268d2b685e399e3d9c8b9886c4c6de4d4d3ed7027af71cd274e366ac402ce8c4c1aba0c4e251514c96acbd487faa7fdc6d59165838be3085635b18892533a45a5a31aa4808180e08bd6f566a52a17f42512c06b8cc144dfbbc7f7c8ecf136e71756be2008a3445df986c75a3e2f2faf268034c1b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x64, 0x1d, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffe01}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc0}]]}, {0x22, 0x6, "ed90e1244235c5b1588681fd9adbf71b0c3f22c647b5a99d52ba71534215"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 2m53.076010686s ago: executing program 0 (id=2181): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) listen(r2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) 2m48.776571159s ago: executing program 0 (id=2187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x4dcac099e9802ae0, &(0x7f0000000180)={0xd, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) creat(&(0x7f0000000040)='./file0\x00', 0x8) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000003c0)=""/45, 0x2d) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xb, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 2m47.698126555s ago: executing program 0 (id=2189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4008084) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x96, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) 2m30.769903456s ago: executing program 33 (id=2189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4008084) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x96, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) 19.82488889s ago: executing program 5 (id=2467): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(r0, 0xc, 0x0, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) 18.224651025s ago: executing program 5 (id=2470): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x14, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8c081, 0x0) symlink(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r6 = accept(r3, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x46, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 14.720624936s ago: executing program 6 (id=2475): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x0, 0x8000000000000001, 0x48c, 0x1, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x80000000007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x3, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 13.348753956s ago: executing program 3 (id=2479): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x1, @ANYBLOB="faffffff0000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="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"], 0x50) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 12.669141948s ago: executing program 5 (id=2481): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 11.587226456s ago: executing program 3 (id=2484): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000002280)=@FILEID_INO32_GEN_PARENT={0x0, 0x2, {{0x0, 0x4}, 0x39c6, 0xf137}}, 0x0, 0x200) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2b, 0x80801, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000002240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}}, 0x40040) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) 11.473699056s ago: executing program 6 (id=2485): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) 10.138857989s ago: executing program 5 (id=2486): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x62, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xf, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0x48000000000, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0xd, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500), 0x200) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000808) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r0) 9.515330636s ago: executing program 6 (id=2487): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) 8.507929233s ago: executing program 6 (id=2488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4008084) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x96, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) 7.867767057s ago: executing program 3 (id=2490): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xb]}, 0x8, 0x80000) 7.725549586s ago: executing program 1 (id=2491): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x8d}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r1, r6, 0x0) 6.61213623s ago: executing program 3 (id=2492): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="ef2b08176a1313a0e0e208d4c14ad726616d7f935e0ffc27da023ba54adff15da3c8d60940f9ab4398c7ff1480907a262d40e2eef8fa3f9c2ee0a39c958995e7b8a3a3b5de6d59239979b085f6555d77ffe19358e7e3235b8446bb22a4", 0x5d}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4004041) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 6.452840226s ago: executing program 1 (id=2493): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r1, &(0x7f0000001dc0), 0x0, 0x48850) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4) getrlimit(0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x7, &(0x7f0000000200)={{0x12, 0x1, 0x141, 0x8f, 0x1b, 0x77, 0x10, 0x12d1, 0xd796, 0xf8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xcf, 0x2, 0x2, 0xff, 0x6, 0x3f, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x10, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc0, 0x7}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=@newtclass={0x68, 0x28, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xc, 0xa}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_cbs={0xfffffffffffffeee}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x8, 0xf}}, @tclass_kind_options=@c_netem={0xa}]}, 0x68}}, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x205002) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000100)=0xb, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x85c3}}) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) 6.407025502s ago: executing program 6 (id=2494): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="03006bafb372d209f3e800000a", @ANYRES64], 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65784eb4541215", 0x66, r6) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x56555959, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x700, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7fc, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x4}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, 0x0, 0x0) 5.663026558s ago: executing program 5 (id=2495): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x0, 0x8000000000000001, 0x48c, 0x1, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x80000000007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x3, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 5.290868062s ago: executing program 4 (id=2496): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2000000018140100000000000008000300040000000800010001000000de110e31d1789ece58b1401c8ff2db94eae017de6b4fe75c25c9c809a49a94d70dee51cf2c662b4d1ce7b2af212eaa91fa17a78e355ad9d1cd5514cc7d7265544dfc38c750267d5716d80315322209fc9d8dda37fe409455430a40d38b1cc58a3e662a46a8f3c8ed8ca46204062b7e67b91fda70030a9b86f982cb5c065fae9955bb87ad3707ebf108806d23c24a7a09bcadfb69d785410cd4c76cf413490ffdd01e3efad354eaf6dadd6e92"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4c044) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000100)=0x32) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x1000000000) ioctl$PPPIOCGIDLE64(r7, 0x8010743f, &(0x7f0000000040)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4004095}, 0x0) 4.925777921s ago: executing program 1 (id=2497): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) close(r3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 4.924636105s ago: executing program 4 (id=2498): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100", 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 3.6426898s ago: executing program 1 (id=2499): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) 3.629703851s ago: executing program 3 (id=2500): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42042, 0x85) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0), 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63", 0xbe}], 0x1) 3.627259072s ago: executing program 4 (id=2501): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x328, 0x328, 0x4d0, 0x238, 0x3c0, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x6, &(0x7f0000000240), {[{{@ip={@rand_addr=0x64010102, @private=0xa010102, 0xffffff00, 0xffffff00, 'ip6gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x5}, 0x0, 0x1d8, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e22, 0x4e22], [0x4e20, 0x4e20], [0x3, 0x7, 0x9, 0x7, 0x6, 0x4, 0xe, 0x7, 0x8, 0x1, 0x5, 0x3, 0x2, 0x74c, 0x8, 0x7, 0x3, 0x9, 0xdc, 0x100, 0x8, 0x800, 0x80000001, 0x1, 0x1, 0x5, 0x400, 0x9eab, 0x8, 0x9, 0x7, 0x2, 0xf0000000, 0x2, 0x8, 0x7, 0x4, 0x7, 0x4, 0x2, 0x8001, 0x2, 0x4, 0x3, 0x449, 0x4, 0x2, 0x8000, 0x7, 0x5, 0x7, 0x7, 0x3, 0x800, 0x4, 0x100, 0x8, 0x2, 0x4, 0x6eaf9452, 0x4, 0xc0000000, 0x2, 0xfffffffc], 0x5, [{0x5, 0x5, 0x6}, {0xff, 0x1, 0x4}, {0x1, 0x4c, 0x1}, {0x1, 0xff, 0x2e}], 0x2, 0x0, 0x4}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x5, 0x2, 0x1, 0x0, 0x1], 0x6, 0x2}, {0x4, [0x0, 0x8, 0x1, 0x4], 0xfa, 0x2}}}}, {{@ip={@remote, @broadcast, 0xff000000, 0xffffff00, 'ip6_vti0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x2, 0x8}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1000, 0x3, @multicast1, 0x4e22}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0xff, 'veth0_to_hsr\x00', 'pimreg0\x00', {0xff}, {}, 0x2f, 0x2, 0x1}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x56}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0xffffff00, 'geneve0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x4, 0x1}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x9}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, 0xff000000, 0xff, 'veth0_macvtap\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x1, 0x47}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = inotify_init() r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040), &(0x7f0000002080)=ANY=[@ANYBLOB='enc=raw ha\a\x00=sha256-gene\x00'/36], 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) pread64(r6, 0x0, 0x0, 0x1f8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x2a, 0xa0}, 0x0, 0x0, 0x4, {0x80, 0x8}, 0x6, 0x17}) 2.451407939s ago: executing program 1 (id=2502): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0xc00) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 2.36114532s ago: executing program 4 (id=2503): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r4, 0x1) mremap(&(0x7f0000a3d000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x0, 0x1012}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, 0x0}, 0x94) 2.346951343s ago: executing program 3 (id=2504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4008084) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x96, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) 2.313249433s ago: executing program 6 (id=2505): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000008000000000500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x102080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x6a0}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r7, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c43", 0x8, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f0000000040)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 841.260789ms ago: executing program 1 (id=2506): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500200106"], 0xf8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 840.783462ms ago: executing program 4 (id=2507): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)='H', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1000b3060000e9ff83000000070000007f00000100000000171e2c497b9e"], 0x10, 0x8000000}, 0x840) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 82.211564ms ago: executing program 4 (id=2508): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xb1b1, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) io_uring_setup(0x3ef, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000000080), 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffe, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x20000084) close(0x3) ioctl$TIOCCONS(r0, 0x541d) 0s ago: executing program 5 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x440) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x9637b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) r8 = fsopen(&(0x7f0000000000)='ext3\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f00000000c0)='/dev/fuse\x00', &(0x7f0000000140), 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x300}, 0x24) kernel console output (not intermixed with test programs): lformed UNC in devname [ 943.017644][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.228267][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.844591][T14048] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.852244][T14048] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.042551][T14063] 9pnet_virtio: no channels available for device syz [ 945.624374][T14048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.706250][T14072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 945.917653][T14073] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1686'. [ 946.371186][T14081] netlink: zone id is out of range [ 946.402296][ T8018] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.411391][T14081] netlink: zone id is out of range [ 946.416630][T14081] netlink: zone id is out of range [ 946.422288][T14081] netlink: zone id is out of range [ 946.453449][T14081] netlink: zone id is out of range [ 946.498030][T14081] netlink: zone id is out of range [ 946.503976][T14081] netlink: zone id is out of range [ 946.577195][T14081] netlink: zone id is out of range [ 947.884331][ T8018] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.224007][ T8018] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.236582][ T8018] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.365289][ T29] audit: type=1400 audit(1771901640.834:1487): avc: denied { accept } for pid=14085 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 948.570247][T14104] xt_connbytes: Forcing CT accounting to be enabled [ 948.609846][T14104] Cannot find set identified by id 0 to match [ 951.143480][ T8018] net_ratelimit: 12 callbacks suppressed [ 951.143498][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.158936][ T8037] wlan0: Trigger new scan to find an IBSS to join [ 951.159354][ T9867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.461971][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 951.480995][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 952.086553][T14127] infiniband syz1: set active [ 952.091561][T14127] infiniband syz1: added syz_tun [ 952.115574][T14127] RDS/IB: syz1: added [ 952.119581][T14127] smc: adding ib device syz1 with port count 1 [ 952.126030][T14127] smc: ib device syz1 port 1 has no pnetid [ 953.227559][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 953.322123][T14053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.576754][T14136] netlink: 'syz.3.1701': attribute type 10 has an invalid length. [ 953.716790][T14136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.844410][T14136] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 953.928101][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 954.022197][T14142] sctp: [Deprecated]: syz.4.1702 (pid 14142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 954.022197][T14142] Use struct sctp_sack_info instead [ 954.742824][T14152] 9p: Unknown Cache mode or invalid value loGe [ 955.076437][ T29] audit: type=1400 audit(1771901647.092:1488): avc: denied { create } for pid=14147 comm="syz.4.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 955.317896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.326609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.414517][T14161] 9p: Bad value for 'rfdno' [ 956.397692][ T2134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.472434][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 956.531978][T14174] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 956.836344][ T8037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.919632][ T8037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.448624][T14184] overlayfs: failed to clone upperpath [ 957.923796][ T29] audit: type=1400 audit(1771901649.777:1489): avc: denied { connect } for pid=14183 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 958.716547][T14189] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.384201][ T29] audit: type=1400 audit(1771901651.124:1490): avc: denied { write } for pid=14194 comm="syz.1.1713" path="socket:[39926]" dev="sockfs" ino=39926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 959.469371][T14189] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.748539][T14189] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.794074][T14189] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.928804][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.024780][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.287244][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.356260][T14216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.380660][T14216] batadv_slave_0: entered promiscuous mode [ 960.563477][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.387827][T14234] xt_TCPMSS: Only works on TCP SYN packets [ 962.406645][T14234] sit2: entered allmulticast mode [ 963.033477][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'. [ 964.077672][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.088451][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.096918][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.128795][ T29] audit: type=1400 audit(1771901655.595:1491): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=42676 daddr=10.128.0.254 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 964.303294][T14248] openvswitch: netlink: EtherType 0 is less than min 600 [ 964.486485][T14251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 964.498281][ T29] audit: type=1400 audit(1771901655.922:1492): avc: denied { nlmsg_read } for pid=14247 comm="syz.3.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 964.576121][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1724'. [ 966.502148][T14261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 966.971897][T14266] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 966.999157][T14261] overlayfs: missing 'lowerdir' [ 967.365666][T14270] can0: slcan on ttyS3. [ 967.807875][ T793] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 968.103380][ T793] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 968.133743][ T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.144625][ T793] usb 5-1: config 0 has no interface number 0 [ 968.157973][ T793] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 968.197599][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.242478][ T793] usb 5-1: Product: syz [ 968.246701][ T793] usb 5-1: Manufacturer: syz [ 968.251326][ T793] usb 5-1: SerialNumber: syz [ 968.258084][ T793] usb 5-1: config 0 descriptor?? [ 968.719072][T14263] can0 (unregistered): slcan off ttyS3. [ 968.749995][ T29] audit: type=1400 audit(1771901659.907:1493): avc: denied { read } for pid=14282 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 970.115388][ T9867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.123906][ T9867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.133482][ T9867] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 970.693549][ T793] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 970.799941][ T793] uvcvideo 5-1:0.64: No valid video chain found. [ 970.873738][ T793] usb 5-1: USB disconnect, device number 22 [ 971.012098][ T5953] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 971.262244][ T5953] usb 1-1: config 0 has no interfaces? [ 971.282811][ T5953] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 971.562192][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.585450][ T5953] usb 1-1: config 0 descriptor?? [ 971.896160][ T5953] usb 1-1: USB disconnect, device number 18 [ 973.171946][ T29] audit: type=1326 audit(1771901664.023:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 973.564352][ T29] audit: type=1326 audit(1771901664.023:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 974.437460][ T85] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 974.448276][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.477903][ T29] audit: type=1326 audit(1771901664.023:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 974.502267][ T29] audit: type=1326 audit(1771901664.023:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 974.532461][ T29] audit: type=1326 audit(1771901664.023:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 974.557151][ T29] audit: type=1326 audit(1771901664.023:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 974.581535][ T29] audit: type=1326 audit(1771901664.023:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 974.605854][ T29] audit: type=1326 audit(1771901664.023:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 974.629878][ T29] audit: type=1326 audit(1771901664.023:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 974.654036][ T29] audit: type=1326 audit(1771901664.023:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.4.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 975.187313][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 975.200897][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'. [ 975.438708][T14368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.757246][T14374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.765915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.774815][T14374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.918589][ T793] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 975.931470][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.972988][T14374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.007141][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.015622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.069052][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.077552][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.132235][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.148337][ T793] usb 5-1: Using ep0 maxpacket: 16 [ 976.187155][ T793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 976.196385][ T793] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 976.239432][ T793] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.261912][ T793] usb 5-1: config 1 has no interface number 0 [ 976.281768][ T793] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 976.292564][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.301965][ T793] usb 5-1: Product: syz [ 976.306675][ T793] usb 5-1: Manufacturer: syz [ 976.311314][ T793] usb 5-1: SerialNumber: syz [ 977.563318][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 978.616714][ T793] usb 5-1: USB disconnect, device number 23 [ 979.917549][T14413] fuse: Bad value for 'fd' [ 981.500210][T14424] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 982.037896][ T9867] net_ratelimit: 25 callbacks suppressed [ 982.037910][ T9867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.052186][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.517703][T14429] tipc: Started in network mode [ 982.522639][T14429] tipc: Node identity 7f000001, cluster identity 4711 [ 982.530546][T14429] tipc: Enabling of bearer rejected, failed to enable media [ 982.550598][T14429] tipc: Enabling of bearer rejected, failed to enable media [ 983.291109][T14434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.299741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.308871][T14434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.327516][T14434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.336272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.378151][T14434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.417106][T14434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.425647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.946608][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 985.946621][ T29] audit: type=1400 audit(1771901675.668:1564): avc: denied { map } for pid=14446 comm="syz.4.1763" path="socket:[41394]" dev="sockfs" ino=41394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 986.010055][ T29] audit: type=1400 audit(1771901675.678:1565): avc: denied { read accept } for pid=14446 comm="syz.4.1763" path="socket:[41394]" dev="sockfs" ino=41394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 987.546729][ T793] IPVS: starting estimator thread 0... [ 987.699938][ T8018] net_ratelimit: 19 callbacks suppressed [ 987.699956][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.742485][T14470] IPVS: using max 41 ests per chain, 98400 per kthread [ 988.481437][ T9866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.830766][T14487] rdma_rxe: rxe_newlink: failed to add syz_tun [ 989.980201][ T29] audit: type=1400 audit(1771901679.775:1566): avc: denied { write } for pid=14486 comm="syz.4.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 990.653996][T14505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.672274][T14505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.121766][ T9866] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 992.540726][ T29] audit: type=1400 audit(1771901682.170:1567): avc: denied { mount } for pid=14518 comm="syz.0.1778" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 992.662882][T14525] syz.5.1782 (14525): attempted to duplicate a private mapping with mremap. This is not supported. [ 993.184768][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.602166][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.610996][ T9867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.738921][ T29] audit: type=1400 audit(1771901684.209:1568): avc: denied { mount } for pid=14536 comm="syz.5.1785" name="/" dev="ramfs" ino=41555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 997.553519][T14557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1789'. [ 998.337125][ T5892] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 998.765727][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 998.831949][ T5892] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 998.854499][ T5892] usb 5-1: config 0 has no interface number 0 [ 998.860857][ T5892] usb 5-1: config 0 interface 167 has no altsetting 0 [ 998.877725][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 998.892747][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.956877][ T5892] usb 5-1: Product: syz [ 998.961044][ T5892] usb 5-1: Manufacturer: syz [ 998.974511][ T5892] usb 5-1: SerialNumber: syz [ 999.017190][ T5892] usb 5-1: config 0 descriptor?? [ 999.297878][ T29] audit: type=1400 audit(1771901688.446:1569): avc: denied { read } for pid=14565 comm="syz.0.1790" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 999.342327][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.527202][ T29] audit: type=1400 audit(1771901688.446:1570): avc: denied { open } for pid=14565 comm="syz.0.1790" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 999.587712][T14051] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 999.610422][ T5892] usbtest 5-1:0.167: couldn't get endpoints, -22 [ 1000.018503][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.039625][ T5892] usbtest 5-1:0.167: probe with driver usbtest failed with error -22 [ 1000.069474][ T5892] usb 5-1: USB disconnect, device number 24 [ 1000.082280][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1791'. [ 1000.143545][T14051] usb 1-1: Using ep0 maxpacket: 16 [ 1000.158049][T14051] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1000.167184][T14051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.175624][T14051] usb 1-1: Product: syz [ 1000.179814][T14051] usb 1-1: Manufacturer: syz [ 1000.192353][T14051] usb 1-1: SerialNumber: syz [ 1000.219534][T14051] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1000.225815][T14051] r8152-cfgselector 1-1: config 0 descriptor?? [ 1000.700495][ T9866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.632063][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1002.370956][ T29] audit: type=1400 audit(1771901691.364:1571): avc: denied { mounton } for pid=14600 comm="syz.3.1800" path="/93/file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1002.394946][T14601] fuse: Bad value for 'fd' [ 1002.691952][ T793] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 1002.769842][T14606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1002.819136][T14606] vivid-004: disconnect [ 1003.003705][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 1003.062143][T14609] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1003.325288][T14598] vivid-004: reconnect [ 1003.439887][ T9866] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1003.718096][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 1004.052571][T14630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1807'. [ 1004.808434][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.199421][ T29] audit: type=1400 audit(1771901694.629:1572): avc: denied { write } for pid=14635 comm="syz.4.1809" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1006.228823][ T9866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.556396][T14652] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1812'. [ 1006.626129][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 1006.857716][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.739165][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1817'. [ 1007.827795][T14671] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1007.872782][ T5871] IPVS: starting estimator thread 0... [ 1008.160434][T14672] IPVS: using max 71 ests per chain, 170400 per kthread [ 1008.932248][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1009.663564][T14690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.672520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.709651][T14690] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1011.639938][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1825'. [ 1012.008666][T14717] netlink: 'syz.0.1826': attribute type 10 has an invalid length. [ 1012.016824][T14717] batadv0: left allmulticast mode [ 1012.021987][T14717] batadv0: left promiscuous mode [ 1012.027623][T14717] bridge0: port 3(batadv0) entered disabled state [ 1012.128629][T14717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.142062][T14717] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1012.301574][T14725] netlink: 'syz.4.1828': attribute type 4 has an invalid length. [ 1012.348066][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.050000][ T9866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.951171][T14731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.961264][T14731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.008720][ T29] audit: type=1800 audit(1771901702.243:1573): pid=14732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1831" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1014.281787][T14051] lo speed is unknown, defaulting to 1000 [ 1014.287779][T14051] syz0: Port: 1 Link DOWN [ 1014.294660][ T9866] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.314350][ T9866] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.817372][ T9866] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.827394][ T9866] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.295620][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.381897][T14753] 9pnet_virtio: no channels available for device ./bus [ 1016.538226][ T29] audit: type=1400 audit(1771901704.282:1574): avc: denied { write } for pid=14754 comm="syz.1.1836" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1016.596323][ T29] audit: type=1400 audit(1771901704.282:1575): avc: denied { open } for pid=14754 comm="syz.1.1836" path="/358/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1016.815817][ T29] audit: type=1326 audit(1771901704.862:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b96f9c629 code=0x7ffc0000 [ 1017.379978][ T29] audit: type=1326 audit(1771901704.862:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0b96f9c629 code=0x7ffc0000 [ 1017.452142][ T29] audit: type=1326 audit(1771901704.862:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b96f9c629 code=0x7ffc0000 [ 1017.591347][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'. [ 1017.678680][ T29] audit: type=1326 audit(1771901704.862:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b96f9c629 code=0x7ffc0000 [ 1017.736607][ T29] audit: type=1326 audit(1771901704.862:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b96f9c629 code=0x7ffc0000 [ 1017.763726][ T29] audit: type=1326 audit(1771901704.862:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0b96f9c629 code=0x7ffc0000 [ 1017.796125][T14051] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1017.944792][ T29] audit: type=1326 audit(1771901704.862:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b96f9c629 code=0x7ffc0000 [ 1018.029294][T14051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.071606][T14051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.089418][T14783] Mount JFS Failure: -5 [ 1018.167732][T14051] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1018.381865][T14051] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1018.410505][T14051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.421506][T14051] usb 2-1: config 0 descriptor?? [ 1018.441331][T14779] nbd0: detected capacity change from 0 to 63 [ 1018.499973][ T8037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.508334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.835539][ T5823] block nbd0: Receive control failed (result -104) [ 1018.880539][T14051] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1019.174078][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.183017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.315104][T14801] dvmrp9: entered allmulticast mode [ 1020.734364][T14051] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 1021.102453][T14820] Cannot find set identified by id 0 to match [ 1021.212215][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 1021.579712][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1854'. [ 1021.589029][T14836] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1854'. [ 1021.963900][T14064] usb 2-1: USB disconnect, device number 11 [ 1021.996578][ T2134] wlan0: Trigger new scan to find an IBSS to join [ 1022.596416][T14847] Mount JFS Failure: -5 [ 1023.316252][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1023.316284][ T29] audit: type=1400 audit(1771901710.952:1625): avc: denied { remount } for pid=14850 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1024.058794][T14869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1859'. [ 1024.158473][T14872] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1024.209619][T14872] team0: Port device batadv3 added [ 1024.702685][ T8037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.711162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.417319][ T9866] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1025.417457][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.435577][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.443820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.706785][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 1025.926137][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 1025.952183][ T9866] wlan0: Trigger new scan to find an IBSS to join [ 1026.097851][T14897] xt_hashlimit: max too large, truncated to 1048576 [ 1026.971573][ T29] audit: type=1400 audit(1771901713.608:1626): avc: denied { mounton } for pid=14898 comm="syz.5.1869" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1027.079972][ T29] audit: type=1400 audit(1771901714.478:1627): avc: denied { unmount } for pid=7170 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1027.170455][T14910] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 1027.187977][T14910] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 1028.038415][ T9866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.062386][ T29] audit: type=1400 audit(1771901715.395:1628): avc: denied { listen } for pid=14908 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1028.668439][T14923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.677014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.685587][T14923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.794181][T14923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.802618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.045608][ T29] audit: type=1400 audit(1771901716.358:1629): avc: denied { setopt } for pid=14927 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1030.790055][T14923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.798543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.817933][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.826273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.971853][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'. [ 1031.191687][T14923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.200108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.253839][T14923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.262117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.282768][T14923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.306775][T14923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.624422][T14946] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1033.880890][T14973] usb usb8: usbfs: process 14973 (syz.5.1883) did not claim interface 0 before use [ 1034.670084][ T29] audit: type=1400 audit(1771901721.073:1630): avc: denied { setopt } for pid=14975 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1035.608220][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1036.264501][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 1036.976147][ T35] net_ratelimit: 10 callbacks suppressed [ 1036.976166][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.990081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.172465][ T29] audit: type=1400 audit(1771901723.907:1631): avc: denied { ioctl } for pid=15008 comm="syz.0.1892" path="/dev/sg0" dev="devtmpfs" ino=789 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1038.594852][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.603193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.672731][T15024] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.737412][T15024] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.807691][T15024] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.412324][T15024] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.460424][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 1040.513157][T15034] netlink: 'syz.4.1896': attribute type 16 has an invalid length. [ 1040.674741][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.842694][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.850893][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.060354][T15045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1900'. [ 1041.372788][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.862174][ T29] audit: type=1400 audit(1771901728.294:1632): avc: denied { block_suspend } for pid=15055 comm="syz.1.1903" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1042.925130][T15067] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1042.934712][T15067] team0: Port device batadv2 added [ 1043.293478][T15056] bridge0: port 3(syz_tun) entered blocking state [ 1043.300181][T15056] bridge0: port 3(syz_tun) entered disabled state [ 1043.306751][T15056] syz_tun: entered allmulticast mode [ 1043.313013][T15056] syz_tun: entered promiscuous mode [ 1043.328901][T15079] hub 9-0:1.0: USB hub found [ 1043.343495][T15079] hub 9-0:1.0: 1 port detected [ 1043.486263][T15103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.494627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.523632][T15105] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1044.488405][ T9867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.496643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.881044][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.895510][ T9867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.904263][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.923527][T14053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.317631][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 1046.511804][T15131] xt_socket: unknown flags 0x4 [ 1046.541590][ T29] audit: type=1400 audit(1771901988.682:1633): avc: denied { connect } for pid=15120 comm="syz.4.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1047.132209][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 1048.594032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.277634][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.285910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.521297][ T29] audit: type=1400 audit(1771901991.450:1634): avc: denied { associate } for pid=15173 comm="syz.4.1921" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1050.282854][ T29] audit: type=1400 audit(1771901991.769:1635): avc: denied { read } for pid=15173 comm="syz.4.1921" lport=40433 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1050.444262][T15187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.452611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.461892][T15187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.494688][T15187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.503000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.517232][T15187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.570847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.581906][T15187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.641840][T15192] mkiss: ax0: crc mode is auto. [ 1050.651854][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 30 seconds [ 1050.667712][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 30 seconds [ 1050.678660][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 30 seconds [ 1050.690290][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 30 seconds [ 1051.291870][T14065] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 1051.490195][T14065] usb 5-1: device descriptor read/64, error -71 [ 1051.779895][T14065] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 1051.949990][T14065] usb 5-1: device descriptor read/64, error -71 [ 1052.078828][T14065] usb usb5-port1: attempt power cycle [ 1052.403689][T15215] sctp: [Deprecated]: syz.3.1931 (pid 15215) Use of int in maxseg socket option. [ 1052.403689][T15215] Use struct sctp_assoc_value instead [ 1052.548590][T14065] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 1052.741707][T14065] usb 5-1: device descriptor read/8, error -71 [ 1053.008336][T14065] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1053.275796][T14065] usb 5-1: device descriptor read/8, error -71 [ 1053.404196][T14065] usb usb5-port1: unable to enumerate USB device [ 1053.682056][T15229] syz.0.1934 (15229): drop_caches: 2 [ 1054.241596][T15238] Device name cannot be null; rc = [-22] [ 1055.183453][ T49] net_ratelimit: 481 callbacks suppressed [ 1055.183465][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.197449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.569975][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.608605][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.638938][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.960559][T15239] netlink: 'syz.1.1937': attribute type 21 has an invalid length. [ 1055.977993][T15239] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1937'. [ 1056.061229][T15251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1056.517961][T14053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.528513][ T8030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.536818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.540526][ T29] audit: type=1400 audit(1771901997.605:1636): avc: denied { name_bind } for pid=15246 comm="syz.4.1940" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1056.576475][T15239] netlink: 'syz.1.1937': attribute type 4 has an invalid length. [ 1056.598110][T15239] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1937'. [ 1056.689950][T15239] netlink: 'syz.1.1937': attribute type 1 has an invalid length. [ 1056.739335][T15239] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1937'. [ 1056.903612][T15237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.942244][T15237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.868737][T15270] input: syz1 as /devices/virtual/input/input12 [ 1058.464167][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 1059.035786][T15288] overlay: ./file0 is not a directory [ 1059.845982][T15286] netlink: 'syz.0.1949': attribute type 4 has an invalid length. [ 1059.860258][ T29] audit: type=1400 audit(1771902000.365:1637): avc: denied { mounton } for pid=15279 comm="syz.1.1948" path="/382/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1060.218966][T15292] netlink: 'syz.0.1949': attribute type 4 has an invalid length. [ 1060.240035][ T8020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1060.385592][T15282] block device autoloading is deprecated and will be removed. [ 1061.606946][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.615327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.942432][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.176023][ T29] audit: type=1400 audit(1771902003.152:1638): avc: denied { ioctl } for pid=15304 comm="syz.1.1953" path="socket:[44737]" dev="sockfs" ino=44737 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1062.285071][ T9867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.293870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.955026][ T9867] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1065.167728][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 1065.188354][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1066.183729][T15349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15349 comm=syz.4.1960 [ 1066.214999][T15349] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1066.361969][ T29] audit: type=1400 audit(1771902007.221:1639): avc: denied { mount } for pid=15348 comm="syz.4.1960" name="/" dev="rpc_pipefs" ino=44934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1066.421608][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.453782][T15357] misc userio: Invalid payload size [ 1066.461967][T15357] misc userio: No port type given on /dev/userio [ 1066.479734][T15357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1963'. [ 1067.261023][T15360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1966'. [ 1067.446539][T15369] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1967'. [ 1067.605452][ T29] audit: type=1400 audit(1771902008.325:1640): avc: denied { read } for pid=15363 comm="syz.5.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1067.699097][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.707346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.751179][ T8020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.759511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.772018][T14065] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1067.946083][T14065] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1067.958464][T14065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1067.968150][T14065] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1067.977713][T14065] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1067.986709][T14065] usb 1-1: Product: syz [ 1067.993463][T14065] usb 1-1: Manufacturer: syz [ 1068.006745][T14065] usb 1-1: SerialNumber: syz [ 1068.032711][T14065] usb 1-1: config 0 descriptor?? [ 1068.049621][T14065] usb 1-1: selecting invalid altsetting 0 [ 1068.124503][T15376] xt_TCPMSS: Only works on TCP SYN packets [ 1068.150855][T15376] sit1: entered allmulticast mode [ 1068.431400][T14065] usb 1-1: USB disconnect, device number 20 [ 1069.900667][ T8030] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1070.985369][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1973'. [ 1071.304306][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 1071.941228][T15409] lo speed is unknown, defaulting to 1000 [ 1072.597510][ T29] audit: type=1326 audit(1771902012.703:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.1.1978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206f39c629 code=0x0 [ 1073.724763][T15425] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1073.744269][T15425] batadv1: entered allmulticast mode [ 1073.755615][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 1073.776699][T15425] team0: Port device batadv1 added [ 1075.898832][ T9866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.907124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.646466][T14053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.217189][ T29] audit: type=1326 audit(1771902017.258:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.3.1986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b96f9c629 code=0x0 [ 1077.332576][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1077.351852][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1078.704337][T14053] Process accounting resumed [ 1080.217917][T15493] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 1080.227113][ T29] audit: type=1326 audit(1771902020.121:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab9c629 code=0x7ffc0000 [ 1080.440867][ T29] audit: type=1326 audit(1771902020.121:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f050ab9c629 code=0x7ffc0000 [ 1080.465047][ T29] audit: type=1326 audit(1771902020.130:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab9c629 code=0x7ffc0000 [ 1080.519973][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 1080.588763][ T29] audit: type=1326 audit(1771902020.130:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15487 comm="syz.0.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f050ab9c629 code=0x7ffc0000 [ 1080.645708][T15493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1080.686636][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1994'. [ 1082.124487][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.132900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.774965][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 1082.845433][ T8030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.851189][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 60 seconds [ 1082.853790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.864594][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 60 seconds [ 1082.883625][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 60 seconds [ 1082.899261][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 60 seconds [ 1083.399313][T15535] /dev/nullb0: Can't lookup blockdev [ 1083.796493][T15537] batadv_slave_0: entered promiscuous mode [ 1084.423466][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 1084.433122][T15545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2005'. [ 1085.466886][T15552] xt_hashlimit: max too large, truncated to 1048576 [ 1085.591692][T15554] macsec1: entered promiscuous mode [ 1085.597007][T15554] macsec1: entered allmulticast mode [ 1086.428502][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 1086.972467][ T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.699441][T15574] overlay: ./file0 is not a directory [ 1088.965075][ T9866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.973482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.983056][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.991319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.416278][ T5892] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1090.692808][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 1090.907744][ T5892] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1090.916830][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.939819][ T5892] usb 1-1: config 0 descriptor?? [ 1091.137339][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 1092.276508][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2017'. [ 1093.167466][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1093.208570][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1093.333785][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1093.457470][ T5892] usb 1-1: media controller created [ 1093.473348][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1093.501163][T15611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2013'. [ 1093.603736][T15614] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1094.115992][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 1094.499138][ T8020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1095.044326][T14053] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1095.195931][ T8030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.204085][ T8030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.212372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.216855][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 1095.220693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.514327][T14053] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1095.543046][T14053] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1095.552471][T14053] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 1095.567599][T14053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.607176][T14053] usb 6-1: Product: syz [ 1095.637484][T14053] usb 6-1: Manufacturer: syz [ 1095.642118][T14053] usb 6-1: SerialNumber: syz [ 1096.059391][T14065] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1096.094118][ T5892] az6027: usb out operation failed. (-71) [ 1096.127511][ T5892] az6027: usb out operation failed. (-71) [ 1096.133256][ T5892] stb0899_attach: Driver disabled by Kconfig [ 1096.142376][T15634] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2024'. [ 1096.166235][ T5892] az6027: no front-end attached [ 1096.166235][ T5892] [ 1096.195099][ T5892] az6027: usb out operation failed. (-71) [ 1096.208992][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1096.233693][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 1096.455430][ T5892] dvb-usb: schedule remote query interval to 400 msecs. [ 1096.462421][ T5892] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1097.521799][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.527681][ T5892] usb 1-1: USB disconnect, device number 21 [ 1097.843204][T15646] lo speed is unknown, defaulting to 1000 [ 1098.164531][T14053] usbhid 6-1:1.0: can't add hid device: -71 [ 1098.180696][T14053] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1098.205931][T14053] usb 6-1: USB disconnect, device number 11 [ 1098.312595][ T5892] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1098.523870][T15660] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2027'. [ 1098.950945][T15668] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1098.961056][T15668] team0: Port device batadv3 added [ 1099.338907][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1099.450535][T14065] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1099.721504][T15672] netlink: 'syz.1.2033': attribute type 2 has an invalid length. [ 1099.774368][T14065] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1099.794478][T14065] usb 2-1: can't read configurations, error -71 [ 1099.873411][T15672] hmaÓË224): entered promiscuous mode [ 1100.271600][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 1101.032231][T15686] Device name cannot be null; rc = [-22] [ 1101.826750][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.835123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.844995][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.853269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.493897][T15692] fuse: Unknown parameter '0xffffffffffffffff' [ 1102.586225][ T29] audit: type=1400 audit(1771902041.073:1647): avc: denied { connect } for pid=15676 comm="syz.4.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1103.221514][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 1103.632933][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'. [ 1104.892921][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 1107.498398][T14053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.777639][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.785935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.928392][T15746] Device name cannot be null; rc = [-22] [ 1108.847017][ T8030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.855221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.345325][ T5178] udevd[5178]: worker [13153] /devices/virtual/block/nbd0 is taking a long time [ 1110.857183][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.922054][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.942573][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.973031][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.095651][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.542320][ T8020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1112.748216][ T29] audit: type=1400 audit(1771902050.605:1648): avc: denied { read append } for pid=15783 comm="syz.5.2054" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1112.843616][ T29] audit: type=1400 audit(1771902050.615:1649): avc: denied { open } for pid=15783 comm="syz.5.2054" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1112.886871][T15761] net_ratelimit: 660 callbacks suppressed [ 1112.886884][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.917499][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.931302][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.949551][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.957878][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.967296][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.977867][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.986455][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.995227][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.004527][T15761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.069735][ T29] audit: type=1400 audit(1771902050.914:1650): avc: denied { write } for pid=15783 comm="syz.5.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1113.773758][T15792] dns_resolver: Unsupported server list version (6) [ 1113.829741][T15792] netlink: 'syz.1.2061': attribute type 4 has an invalid length. [ 1113.876024][ T29] audit: type=1326 audit(1771902051.587:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1114.237974][ T29] audit: type=1326 audit(1771902051.587:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f206f35cece code=0x7ffc0000 [ 1114.302303][ T29] audit: type=1326 audit(1771902051.587:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f206f35cece code=0x7ffc0000 [ 1114.354610][ T29] audit: type=1326 audit(1771902051.587:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1114.382165][ T29] audit: type=1326 audit(1771902051.587:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1114.800165][ T29] audit: type=1326 audit(1771902051.587:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1114.853142][ T29] audit: type=1326 audit(1771902051.597:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f206f39dec7 code=0x7ffc0000 [ 1114.962432][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 90 seconds [ 1114.973250][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 90 seconds [ 1114.992560][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 90 seconds [ 1115.004063][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 90 seconds [ 1115.960902][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 1116.574844][ T5953] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1116.978617][ T5953] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1117.595344][ T5953] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1117.606070][ T5953] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1117.615803][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.649690][T15817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1117.946890][ T5953] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1118.807839][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1118.807856][ T29] audit: type=1326 audit(1771902056.255:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.4.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 1119.518168][ T29] audit: type=1326 audit(1771902056.264:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15803 comm="syz.4.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb739c629 code=0x7ffc0000 [ 1120.379217][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 1120.874643][T14064] usb 1-1: USB disconnect, device number 22 [ 1121.072923][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 1123.173019][T15088] wlan0: Trigger new scan to find an IBSS to join [ 1123.395417][T14064] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1123.769734][T14064] usb 1-1: Using ep0 maxpacket: 32 [ 1123.781717][T14064] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1123.800862][T14064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.828231][T14064] usb 1-1: config 0 descriptor?? [ 1124.322549][T14064] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1124.337651][T14064] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1124.363693][T14064] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1124.376278][T14064] usb 1-1: media controller created [ 1124.388672][T14064] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1124.662242][ T5953] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1124.676216][ T5953] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1125.173700][T15899] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2084'. [ 1125.255396][ T29] audit: type=1400 audit(1771902062.242:1689): avc: denied { create } for pid=15888 comm="syz.4.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1125.290542][T15895] fido_id[15895]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1125.508473][T15904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2086'. [ 1125.551962][ T29] audit: type=1400 audit(1771902062.242:1690): avc: denied { write } for pid=15888 comm="syz.4.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1125.695370][ T29] audit: type=1400 audit(1771902062.242:1691): avc: denied { setopt } for pid=15888 comm="syz.4.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1125.806143][ T29] audit: type=1400 audit(1771902062.550:1692): avc: denied { write } for pid=15901 comm="syz.1.2086" path="socket:[48145]" dev="sockfs" ino=48145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1126.313858][T14064] az6027: usb out operation failed. (-71) [ 1126.319939][T14064] az6027: usb out operation failed. (-71) [ 1126.325787][T14064] stb0899_attach: Driver disabled by Kconfig [ 1126.331788][T14064] az6027: no front-end attached [ 1126.331788][T14064] [ 1126.339208][T14064] az6027: usb out operation failed. (-71) [ 1126.347511][T14064] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1126.428483][T14064] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 1126.464719][T14064] dvb-usb: schedule remote query interval to 400 msecs. [ 1126.471687][T14064] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1126.631174][T14064] usb 1-1: USB disconnect, device number 23 [ 1127.239776][T14064] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1127.705508][T15921] net_ratelimit: 359 callbacks suppressed [ 1127.705540][T15921] netlink: zone id is out of range [ 1127.716831][T15921] netlink: zone id is out of range [ 1127.722124][T15921] netlink: zone id is out of range [ 1127.727405][T15921] netlink: zone id is out of range [ 1127.732849][T15921] netlink: zone id is out of range [ 1127.738237][T15921] netlink: zone id is out of range [ 1127.743504][T15921] netlink: zone id is out of range [ 1127.750835][T15921] netlink: zone id is out of range [ 1127.769593][T15921] netlink: zone id is out of range [ 1127.775084][T15921] netlink: zone id is out of range [ 1128.438852][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'. [ 1128.559369][ T8020] wlan0: Trigger new scan to find an IBSS to join [ 1128.715597][T15932] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.2089'. [ 1128.739850][ T8020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1128.968284][T15921] batman_adv: batadv0: Adding interface: macvtap1 [ 1129.181318][T15921] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.211499][T15921] batman_adv: batadv0: Interface activated: macvtap1 [ 1129.949465][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.722302][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1130.794680][T15957] fuse: Bad value for 'fd' [ 1130.801757][T15957] netlink: 'syz.3.2098': attribute type 3 has an invalid length. [ 1133.536061][ T9866] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1133.686463][ T793] Process accounting resumed [ 1134.135385][T15997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2105'. [ 1136.053550][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'. [ 1136.284745][ T8020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1137.144621][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 1137.353668][T16020] netlink: 'syz.5.2109': attribute type 1 has an invalid length. [ 1137.381825][ T29] audit: type=1400 audit(1771902073.653:1693): avc: denied { write } for pid=16019 comm="syz.5.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1138.422619][ T5891] Process accounting resumed [ 1138.817635][ T29] audit: type=1326 audit(1771902075.000:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.3.2114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b96f9c629 code=0x0 [ 1139.307719][T16052] xt_connbytes: Forcing CT accounting to be enabled [ 1139.318726][T16052] set match dimension is over the limit! [ 1141.622158][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 1142.969113][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2123'. [ 1143.572801][T16091] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1143.598025][T16091] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1143.706178][T16091] ovl_remap_lower_ino: 8 callbacks suppressed [ 1143.706211][T16091] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1143.722235][T16091] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1143.733984][T16091] overlayfs: d_ino too big (422, ino=9223372036854778059, xinobits=3) [ 1143.746529][T16091] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1143.758451][T16091] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1143.770431][T16091] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1143.783310][T16091] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1143.795478][T16091] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1143.808269][T16091] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1143.820269][T16091] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1144.158129][T16091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2125'. [ 1144.917046][ T29] audit: type=1400 audit(1771902080.388:1695): avc: denied { setopt } for pid=16093 comm="syz.4.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1144.985739][ T29] audit: type=1400 audit(1771902080.416:1696): avc: denied { map } for pid=16093 comm="syz.4.2127" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1146.269457][ T9866] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1147.196832][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 120 seconds [ 1147.209185][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 120 seconds [ 1147.221159][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 120 seconds [ 1147.232470][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 120 seconds [ 1147.542481][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 1148.830114][T16143] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2134'. [ 1148.864969][T16146] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2135'. [ 1150.177335][ T29] audit: type=1400 audit(1771902085.196:1697): avc: denied { create } for pid=16144 comm="syz.1.2126" name="#1c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1150.247122][ T29] audit: type=1400 audit(1771902085.206:1698): avc: denied { link } for pid=16144 comm="syz.1.2126" name="#1c" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1150.296851][ T29] audit: type=1400 audit(1771902085.215:1699): avc: denied { rename } for pid=16144 comm="syz.1.2126" name="#1d" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1153.028580][ T29] audit: type=1326 audit(1771902088.283:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16165 comm="syz.5.2141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cdaf9c629 code=0x0 [ 1153.127811][T16179] netlink: 'syz.3.2143': attribute type 4 has an invalid length. [ 1153.135703][T16179] netlink: 'syz.3.2143': attribute type 3 has an invalid length. [ 1153.143465][T16179] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2143'. [ 1153.159151][T16179] net_ratelimit: 11 callbacks suppressed [ 1153.159162][T16179] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1153.171843][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1153.179875][T16179] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1153.186841][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1153.200795][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 1153.794476][ T29] audit: type=1326 audit(1771902089.003:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.3.2146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b96f9c629 code=0x0 [ 1156.316651][T16219] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1156.889652][ T29] audit: type=1400 audit(1771902091.884:1702): avc: denied { execute } for pid=16205 comm="syz.1.2149" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1157.044083][T16227] netlink: 'syz.5.2152': attribute type 10 has an invalid length. [ 1157.055819][ T29] audit: type=1400 audit(1771902092.062:1703): avc: denied { getopt } for pid=16224 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1157.214068][T16215] lo speed is unknown, defaulting to 1000 [ 1157.342027][T13222] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 1158.268662][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1161.949274][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2161'. [ 1163.455013][ T85] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1165.063957][ T9866] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1167.537325][T16295] dummy0: entered promiscuous mode [ 1167.887654][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 1169.164175][T16294] dummy0: left promiscuous mode [ 1169.290256][T14064] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1169.362292][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2173'. [ 1169.709162][T15088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1169.922147][T14064] usb 2-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 1169.931220][T14064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.960328][T14064] usb 2-1: config 0 descriptor?? [ 1171.010293][ T8030] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1172.877511][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 1173.815655][ T29] audit: type=1400 audit(1771902107.739:1704): avc: denied { bind } for pid=16342 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1173.918875][ T29] audit: type=1400 audit(1771902107.824:1705): avc: denied { listen } for pid=16342 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1174.046770][ T29] audit: type=1400 audit(1771902107.870:1706): avc: denied { accept } for pid=16342 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1174.048960][T16351] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 1175.719450][T16359] infiniband syz2: set down [ 1175.724041][T16359] infiniband syz2: added ipvlan0 [ 1176.081138][T16359] RDS/IB: syz2: added [ 1176.085164][T16359] smc: adding ib device syz2 with port count 1 [ 1176.091574][T16359] smc: ib device syz2 port 1 has pnetid ßßßß (user defined) [ 1176.707490][T14064] usbhid 2-1:0.0: can't add hid device: -32 [ 1176.735751][T14064] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1177.180301][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2184'. [ 1179.632391][T14065] usb 2-1: USB disconnect, device number 14 [ 1179.961850][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 150 seconds [ 1179.972618][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 150 seconds [ 1179.984005][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 150 seconds [ 1179.995831][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 150 seconds [ 1180.510248][ T29] audit: type=1400 audit(1771902113.997:1707): avc: denied { connect } for pid=16397 comm="syz.1.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1180.537519][T16398] kAFS: No cell specified [ 1181.383054][ T85] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1181.403228][T16414] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2194'. [ 1181.992625][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 1182.349203][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 1183.531342][T16432] dummy0: entered promiscuous mode [ 1183.649883][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 1184.317997][T16431] dummy0: left promiscuous mode [ 1184.665344][T16444] tipc: Trying to set illegal importance in message [ 1184.749709][T14053] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1185.701741][T14053] usb 5-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 1185.711319][T14053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.722666][T14053] usb 5-1: config 0 descriptor?? [ 1185.952953][ T29] audit: type=1326 audit(1771902119.076:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1186.263690][ T29] audit: type=1326 audit(1771902119.076:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1186.440503][ T29] audit: type=1326 audit(1771902119.076:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1186.643584][ T29] audit: type=1326 audit(1771902119.076:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1186.769394][ T29] audit: type=1326 audit(1771902119.076:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1186.892413][ T29] audit: type=1326 audit(1771902119.076:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1187.054636][ T29] audit: type=1326 audit(1771902119.076:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1187.209821][ T29] audit: type=1326 audit(1771902119.076:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1187.234888][ T29] audit: type=1326 audit(1771902119.076:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1187.688634][ T29] audit: type=1326 audit(1771902119.086:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.5.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1188.418467][T14053] usbhid 5-1:0.0: can't add hid device: -71 [ 1188.435412][T14053] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1188.454347][T14053] usb 5-1: USB disconnect, device number 29 [ 1190.062441][T16490] overlayfs: failed to clone upperpath [ 1192.140413][T16497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2213'. [ 1192.334481][T16509] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2211'. [ 1195.225566][T16536] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1195.235817][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 1195.781500][T14064] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1195.886120][T16543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1195.899903][T16543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1195.907671][T16543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1195.964343][T16543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1195.990509][T16543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1195.995209][T14064] usb 6-1: device descriptor read/64, error -71 [ 1196.143723][T16542] lo speed is unknown, defaulting to 1000 [ 1196.282723][T14064] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1196.384710][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1196.423318][T14064] usb 6-1: device descriptor read/64, error -71 [ 1196.433464][T14065] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1196.563960][T14064] usb usb6-port1: attempt power cycle [ 1196.593867][T14065] usb 5-1: device descriptor read/64, error -71 [ 1196.871859][T14065] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1196.978997][T14064] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1197.140061][T14064] usb 6-1: device descriptor read/8, error -71 [ 1197.295062][T16561] batman_adv: batadv0: Adding interface: macvtap1 [ 1197.363967][T14065] usb 5-1: device descriptor read/64, error -71 [ 1197.386162][T16561] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.481504][T16561] batman_adv: batadv0: Interface activated: macvtap1 [ 1197.491183][T14065] usb usb5-port1: attempt power cycle [ 1197.826719][T16565] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1198.224937][T16543] Bluetooth: hci3: command tx timeout [ 1198.531482][T14065] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1198.561566][T14065] usb 5-1: device descriptor read/8, error -71 [ 1198.613045][T16569] xt_recent: Unsupported userspace flags (000000de) [ 1198.817875][T14065] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1199.043302][T14065] usb 5-1: device descriptor read/8, error -71 [ 1199.049180][T16542] chnl_net:caif_netlink_parms(): no params data found [ 1199.121346][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1199.121363][ T29] audit: type=1400 audit(1771902131.405:1731): avc: denied { accept } for pid=16573 comm="syz.1.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1199.235792][T14065] usb usb5-port1: unable to enumerate USB device [ 1200.127353][T16580] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 1200.349244][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 1200.401222][T16543] Bluetooth: hci3: command tx timeout [ 1200.678632][T16542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.685772][T16542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.726649][T16542] bridge_slave_0: entered allmulticast mode [ 1200.743985][T16542] bridge_slave_0: entered promiscuous mode [ 1200.905855][T16542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.921688][T16542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.957397][T16542] bridge_slave_1: entered allmulticast mode [ 1200.964330][T16542] bridge_slave_1: entered promiscuous mode [ 1202.146594][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1202.176939][T16542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.188832][T16542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.368420][T16542] team0: Port device team_slave_0 added [ 1202.408110][T16542] team0: Port device team_slave_1 added [ 1202.436378][T16603] usb usb8: usbfs: process 16603 (syz.1.2232) did not claim interface 0 before use [ 1202.485808][T16542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.506002][T16542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.539381][ T8037] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1202.574358][T16542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.634002][T16542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.634562][T16543] Bluetooth: hci3: command tx timeout [ 1202.662728][T16542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.961688][T16542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.644689][T16608] overlayfs: failed to clone lowerpath [ 1203.656357][T16608] overlayfs: failed to clone lowerpath [ 1203.818313][T16542] hsr_slave_0: entered promiscuous mode [ 1203.826592][T16542] hsr_slave_1: entered promiscuous mode [ 1203.847955][T16542] debugfs: 'hsr0' already exists in 'hsr' [ 1203.859801][T16542] Cannot create hsr debugfs directory [ 1204.889812][T16543] Bluetooth: hci3: command tx timeout [ 1205.290828][T16542] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1205.377944][T16542] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1205.406587][ T29] audit: type=1326 audit(1771902137.289:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16619 comm="syz.4.2236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbb739c629 code=0x0 [ 1205.456540][T16542] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1205.497585][T16542] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1205.662555][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'. [ 1206.028074][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1206.523233][T16542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.546630][T16542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.569968][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.577097][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.702385][ T8030] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1207.100364][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.107467][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.336196][T16651] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2240'. [ 1208.665193][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 1209.073690][ T29] audit: type=1326 audit(1771902140.656:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1209.081645][T16542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.111777][ T29] audit: type=1326 audit(1771902140.656:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1209.183608][T16676] netlink: 'syz.1.2245': attribute type 1 has an invalid length. [ 1209.455235][ T29] audit: type=1326 audit(1771902140.656:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1209.504932][ T29] audit: type=1326 audit(1771902140.656:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1209.878203][T16683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2245'. [ 1209.918630][ T29] audit: type=1326 audit(1771902140.656:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f206f39c629 code=0x7ffc0000 [ 1210.671130][T16689] overlayfs: overlapping lowerdir path [ 1210.774408][T16690] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1210.782991][T16690] overlayfs: overlapping lowerdir path [ 1211.160955][T16676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1211.708001][T16542] veth0_vlan: entered promiscuous mode [ 1211.815605][T16542] veth1_vlan: entered promiscuous mode [ 1211.964055][T16542] veth0_macvtap: entered promiscuous mode [ 1212.009822][T16542] veth1_macvtap: entered promiscuous mode [ 1212.577579][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 180 seconds [ 1212.588347][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 180 seconds [ 1212.602138][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 180 seconds [ 1212.613358][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 180 seconds [ 1212.672939][T16542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.701528][T16542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.730988][ T9867] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.753366][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.789105][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.842020][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.715000][ T29] audit: type=1400 audit(1771902144.772:1738): avc: denied { read write } for pid=16710 comm="syz.5.2250" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1214.309756][ T29] audit: type=1400 audit(1771902144.772:1739): avc: denied { open } for pid=16710 comm="syz.5.2250" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1214.891192][T15088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.041672][T15088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.074721][T15088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.083120][T15088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.539541][ T9867] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1217.197520][ T29] audit: type=1400 audit(1771902148.289:1740): avc: denied { mount } for pid=16727 comm="syz.4.2266" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1218.155464][ T29] audit: type=1326 audit(1771902149.056:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16742 comm="syz.1.2255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f206f39c629 code=0x0 [ 1218.902899][ T29] audit: type=1400 audit(1771902149.907:1742): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1219.889669][T16763] netlink: 'syz.4.2257': attribute type 27 has an invalid length. [ 1221.815480][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2262'. [ 1221.831762][T16776] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2262'. [ 1222.605116][T16784] lo speed is unknown, defaulting to 1000 [ 1222.944703][ T29] audit: type=1400 audit(1771902153.686:1743): avc: denied { ioctl } for pid=16779 comm="syz.1.2267" path="socket:[51136]" dev="sockfs" ino=51136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1223.348266][T16792] input: syz1 as /devices/virtual/input/input16 [ 1224.191588][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2270'. [ 1225.150261][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'. [ 1226.450470][T16830] netlink: 'syz.4.2276': attribute type 4 has an invalid length. [ 1226.579621][ T29] audit: type=1400 audit(1771902156.960:1744): avc: denied { accept } for pid=16818 comm="syz.4.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1229.085701][T16850] lo speed is unknown, defaulting to 1000 [ 1229.799519][T16856] xt_recent: Unsupported userspace flags (000000de) [ 1231.567118][T16873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16873 comm=syz.1.2286 [ 1232.839549][T16885] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 1232.989122][T16885] CIFS mount error: No usable UNC path provided in device string! [ 1232.989122][T16885] [ 1232.999196][T16885] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1233.261774][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2293'. [ 1235.163828][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 1235.835127][ T29] audit: type=1400 audit(1771902165.678:1745): avc: denied { append } for pid=16913 comm="syz.5.2299" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1235.992041][T16924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1236.132782][T16928] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1236.177391][T16924] ovl_remap_lower_ino: 8 callbacks suppressed [ 1236.177403][T16924] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1236.192558][T16929] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[16929] [ 1236.413111][T16924] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1236.465476][T16924] overlayfs: d_ino too big (450, ino=9223372036854778210, xinobits=3) [ 1236.521409][T16934] vivid-007: ================= START STATUS ================= [ 1236.530406][T16934] vivid-007: Enable Output Cropping: true [ 1236.536799][T16934] vivid-007: Enable Output Composing: true [ 1236.542816][T16934] vivid-007: Enable Output Scaler: true [ 1236.543448][T16924] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1236.555584][T16934] vivid-007: Tx RGB Quantization Range: Automatic [ 1236.563836][T16934] vivid-007: Transmit Mode: HDMI [ 1236.601137][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2301'. [ 1236.611864][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2301'. [ 1236.632103][T16936] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2301'. [ 1236.642833][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2301'. [ 1236.651866][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2301'. [ 1236.677737][T16934] vivid-007: Hotplug Present: 0x00000000 [ 1236.683953][T16934] vivid-007: RxSense Present: 0x00000000 [ 1236.689720][T16934] vivid-007: EDID Present: 0x00000000 [ 1236.695365][T16934] vivid-007: ================== END STATUS ================== [ 1236.752471][ T29] audit: type=1400 audit(1771902166.454:1746): avc: denied { read } for pid=16931 comm="syz.5.2301" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1236.800440][T15088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1239.399887][ T5178] udevd[5178]: worker [13153] /devices/virtual/block/nbd0 timeout; kill it [ 1239.441854][ T5178] udevd[5178]: seq 16320 '/devices/virtual/block/nbd0' killed [ 1240.417198][ T8030] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1240.853565][ T8030] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1242.757063][T16988] overlayfs: failed to clone lowerpath [ 1242.837913][T16988] overlayfs: failed to clone lowerpath [ 1245.123186][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 210 seconds [ 1245.134060][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 210 seconds [ 1245.145461][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 210 seconds [ 1245.156446][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 210 seconds [ 1245.475071][T17016] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1245.484477][T17016] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1245.529647][T17016] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1245.546796][T17016] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1245.610335][T17016] overlayfs: d_ino too big (456, ino=9223372036854778243, xinobits=3) [ 1245.680013][T17016] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1245.708473][T17016] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1245.734324][T17016] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1245.951271][T17016] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1246.080829][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 1246.089788][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 1247.836308][T17040] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2323'. [ 1248.776247][T17043] overlayfs: failed to clone lowerpath [ 1248.802596][T17043] overlayfs: failed to clone lowerpath [ 1249.416207][ T5871] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1249.587289][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2329'. [ 1249.753662][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.798737][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1249.909742][ T5871] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1249.968644][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.996068][ T5871] usb 6-1: config 0 descriptor?? [ 1250.432436][ T8020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1250.822546][ T29] audit: type=1400 audit(1771902179.765:1747): avc: denied { ioctl } for pid=17058 comm="syz.6.2332" path="socket:[52461]" dev="sockfs" ino=52461 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1251.844235][T17077] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1251.868045][T17077] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1251.964175][T17077] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1251.972574][T17077] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1251.983708][T17077] overlayfs: d_ino too big (457, ino=9223372036854778253, xinobits=3) [ 1251.997558][T17077] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1252.009341][T17077] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1252.021302][T17077] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1252.033611][T17077] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1252.045003][T17077] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1252.055963][T17077] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1252.069242][T17077] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1252.756690][T14064] usb 6-1: USB disconnect, device number 16 [ 1254.530207][T17091] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1254.553164][T17091] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1255.330458][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 1256.165815][T17105] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1256.191054][T17105] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1258.825576][T17126] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2338'. [ 1258.843263][T17126] random: crng reseeded on system resumption [ 1260.287175][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'. [ 1262.282912][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1262.906457][T17160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'. [ 1263.578924][T17161] loop2: detected capacity change from 0 to 7 [ 1263.634756][T15377] Dev loop2: unable to read RDB block 7 [ 1263.654721][T15377] loop2: AHDI p1 p2 p3 [ 1263.680250][T15377] loop2: partition table partially beyond EOD, truncated [ 1263.708898][T15377] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1263.726354][T15377] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1264.363418][T17166] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1264.386690][T17166] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1264.480569][T17166] ovl_remap_lower_ino: 44 callbacks suppressed [ 1264.480602][T17166] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1264.496120][T17166] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1264.507281][T17166] overlayfs: d_ino too big (425, ino=9223372036854778095, xinobits=3) [ 1264.518819][T17166] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1264.531710][T17166] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1264.543132][T17166] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1264.555430][T17166] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1264.566621][T17166] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1264.579321][T17166] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1264.592598][T17166] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1265.019106][T17161] Dev loop2: unable to read RDB block 7 [ 1265.025172][T17161] loop2: AHDI p1 p2 p3 [ 1265.029630][T17161] loop2: partition table partially beyond EOD, truncated [ 1265.038726][T17161] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1265.047066][T17161] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1265.064691][ T5178] Dev loop2: unable to read RDB block 7 [ 1265.070849][ T5178] loop2: AHDI p1 p2 p3 [ 1265.077950][ T5178] loop2: partition table partially beyond EOD, truncated [ 1265.091545][ T5178] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1265.104573][ T5178] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1265.857889][T17170] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1265.882805][T17170] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1266.560964][T17173] openvswitch: netlink: Flow actions attr not present in new flow. [ 1266.573838][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2352'. [ 1267.261497][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2354'. [ 1267.265445][T17183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2357'. [ 1267.519904][T17185] libceph: resolve '0..' (ret=-3): failed [ 1270.401416][T17209] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1270.427116][T17209] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1270.520972][T17209] ovl_remap_lower_ino: 26 callbacks suppressed [ 1270.521007][T17209] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1270.536668][T17209] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1270.547846][T17209] overlayfs: d_ino too big (465, ino=9223372036854778297, xinobits=3) [ 1270.559193][T17209] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1270.571907][T17209] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1270.583653][T17209] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1270.595241][T17209] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1270.608686][T17209] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1270.620449][T17209] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1270.634103][T17209] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1271.603010][T17213] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1271.625328][T17213] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1272.337565][ T9867] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1272.949692][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2369'. [ 1274.136177][ T5891] libceph: connect (1)[c::]:6789 error -13 [ 1274.149676][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 1274.196363][ T5891] libceph: connect (1)[c::]:6789 error -13 [ 1274.205794][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 1274.497256][ T5891] libceph: connect (1)[c::]:6789 error -13 [ 1274.503259][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 1275.158827][T17221] ceph: No mds server is up or the cluster is laggy [ 1275.168402][T14065] libceph: connect (1)[c::]:6789 error -13 [ 1275.186753][T14065] libceph: mon0 (1)[c::]:6789 connect error [ 1275.196902][ T8030] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1275.202214][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1277.841896][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 240 seconds [ 1277.852671][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 240 seconds [ 1277.863650][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 240 seconds [ 1277.874861][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 240 seconds [ 1279.858549][ T29] audit: type=1400 audit(1771902206.583:1748): avc: denied { ioctl } for pid=17280 comm="syz.3.2380" path="socket:[51910]" dev="sockfs" ino=51910 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1279.895502][ T29] audit: type=1400 audit(1771902206.602:1749): avc: denied { write } for pid=17280 comm="syz.3.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1281.110903][T17297] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2382'. [ 1281.122423][T17294] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2382'. [ 1282.052525][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'. [ 1282.716454][T17347] syz_tun: left allmulticast mode [ 1282.721673][T17347] syz_tun: left promiscuous mode [ 1282.763235][T17347] bridge0: port 3(syz_tun) entered disabled state [ 1282.980461][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 1284.396238][T17347] bond0: (slave batadv0): Releasing backup interface [ 1284.492314][T17347] bridge_slave_0: left allmulticast mode [ 1284.521775][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.549509][T17347] bridge_slave_1: left allmulticast mode [ 1284.555373][T17347] bridge_slave_1: left promiscuous mode [ 1284.562592][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.635417][T17347] bond0: (slave bond_slave_0): Releasing backup interface [ 1284.661865][T17347] bond0: (slave bond_slave_1): Releasing backup interface [ 1284.677478][T17347] team0: Port device team_slave_1 removed [ 1284.685887][T17347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.779766][T17347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.787435][T17347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.048479][T17347] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1285.074520][T17352] team0: No ports can be present during mode change [ 1285.614133][T17377] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1285.636291][T17377] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1285.698284][T17377] ovl_remap_lower_ino: 26 callbacks suppressed [ 1285.698318][T17377] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1285.716211][T17377] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1285.727822][T17377] overlayfs: d_ino too big (431, ino=9223372036854778127, xinobits=3) [ 1285.739167][T17377] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1285.751967][T17377] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1285.763454][T17377] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1285.774195][T17377] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1285.787343][T17377] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1285.798499][T17377] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1285.811008][T17377] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1286.194286][ T9865] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1286.211385][T17357] team0 (unregistering): Port device batadv1 removed [ 1286.228325][T17357] team0 (unregistering): Port device batadv2 removed [ 1286.638626][T17383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2390'. [ 1289.851161][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 1290.841966][T17413] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2396'. [ 1292.319275][T17422] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1292.342336][T17422] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1292.433013][T17422] ovl_remap_lower_ino: 8 callbacks suppressed [ 1292.433048][T17422] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1292.449707][T17422] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1292.460869][T17422] overlayfs: d_ino too big (473, ino=9223372036854778341, xinobits=3) [ 1292.472050][T17422] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1292.484849][T17422] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1292.498445][T17422] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1292.509502][T17422] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1292.522398][T17422] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1292.533536][T17422] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1292.546409][T17422] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1293.238661][T17431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2401'. [ 1294.813621][T17440] overlayfs: failed to clone lowerpath [ 1294.867640][T17444] overlayfs: failed to clone lowerpath [ 1297.706129][ T5871] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1297.992134][T17465] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1298.017273][T17465] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1298.719889][ T5871] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1298.739603][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.951244][ T5871] usb 7-1: config 0 descriptor?? [ 1298.975540][ T5871] cp210x 7-1:0.0: cp210x converter detected [ 1299.419164][T17482] openvswitch: netlink: Flow key attr not present in new flow. [ 1301.024658][ T29] audit: type=1326 audit(1771902226.704:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.5.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1301.085198][T17490] lo speed is unknown, defaulting to 1000 [ 1301.091314][ T29] audit: type=1326 audit(1771902226.704:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.5.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1301.667049][T17495] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 1301.821238][ T29] audit: type=1326 audit(1771902226.704:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.5.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9cdaf9c629 code=0x7ffc0000 [ 1302.016243][ T5871] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1302.640715][ T5871] cp210x 7-1:0.0: querying part number failed [ 1302.660750][ T5871] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1302.739716][ T5871] usb 7-1: USB disconnect, device number 2 [ 1303.738092][ T5871] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1303.752764][ T5871] cp210x 7-1:0.0: device disconnected [ 1304.371616][T17528] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1304.390310][T17528] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1304.485471][T17528] ovl_remap_lower_ino: 8 callbacks suppressed [ 1304.485537][T17528] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1304.499954][T17528] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1304.512067][T17528] overlayfs: d_ino too big (478, ino=9223372036854778363, xinobits=3) [ 1304.525106][T17528] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1304.544733][T17528] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1304.562438][T17528] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1304.576954][T17528] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1304.594241][T17528] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1304.609208][T17528] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1304.627239][T17528] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1306.738270][T17330] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1308.727020][T17563] lo speed is unknown, defaulting to 1000 [ 1309.990089][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 270 seconds [ 1310.001275][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 270 seconds [ 1310.015406][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 270 seconds [ 1310.026648][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 270 seconds [ 1310.641409][T17330] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1310.641749][ T9866] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1310.812438][T17588] Device name not specified. [ 1310.812438][T17588] [ 1312.840375][ T29] audit: type=1400 audit(2000000006.547:1753): avc: denied { create } for pid=17594 comm="syz.5.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1313.166370][ T29] audit: type=1400 audit(2000000006.547:1754): avc: denied { sys_admin } for pid=17594 comm="syz.5.2434" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1315.224361][T17626] netlink: 'syz.1.2439': attribute type 21 has an invalid length. [ 1315.232386][T17626] IPv6: NLM_F_CREATE should be specified when creating new route [ 1315.661975][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 1316.750388][T17644] netlink: 'syz.6.2443': attribute type 21 has an invalid length. [ 1316.758390][T17644] IPv6: NLM_F_CREATE should be specified when creating new route [ 1316.781814][T17644] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2443'. [ 1317.036708][T17644] lo speed is unknown, defaulting to 1000 [ 1318.411050][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 1318.536589][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 1319.026772][T17662] lo: entered allmulticast mode [ 1319.384980][T17666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2449'. [ 1320.110257][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 1320.895076][T17674] bridge0: port 3(syz_tun) entered blocking state [ 1320.901564][T17674] bridge0: port 3(syz_tun) entered disabled state [ 1320.908205][T17674] syz_tun: entered allmulticast mode [ 1320.914454][T17674] syz_tun: entered promiscuous mode [ 1320.920184][T17674] bridge0: port 3(syz_tun) entered blocking state [ 1320.927011][T17674] bridge0: port 3(syz_tun) entered forwarding state [ 1321.594529][ T9866] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1322.181238][T17694] Mount JFS Failure: -5 [ 1322.618796][T17705] 9pnet_virtio: no channels available for device syz [ 1322.657356][T17705] overlay: Unknown parameter '/' [ 1322.742176][T17706] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1322.934005][T17706] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1322.944280][T17706] overlayfs: failed to look up (tracing) for ino (-66) [ 1324.913384][ T5891] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1325.406459][ T5891] usb 2-1: config 15 has an invalid interface number: 154 but max is 0 [ 1325.435951][ T5891] usb 2-1: config 15 has no interface number 0 [ 1325.469580][ T5891] usb 2-1: config 15 interface 154 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 8 [ 1325.900057][ T5891] usb 2-1: config 15 interface 154 altsetting 7 endpoint 0xB has invalid maxpacket 43051, setting to 8 [ 1326.020399][ T5891] usb 2-1: config 15 interface 154 has no altsetting 0 [ 1326.040931][ T5891] usb 2-1: string descriptor 0 read error: -22 [ 1326.051783][ T5891] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 1326.061797][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.181774][T17709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1326.310512][ T5891] ati_remote 2-1:15.154: ati_remote_probe: Unexpected endpoint_in [ 1327.750616][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1328.791854][ T793] usb 2-1: USB disconnect, device number 15 [ 1329.975251][T16543] Bluetooth: hci3: command 0x0406 tx timeout [ 1330.014807][T17756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1330.659273][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 1332.916502][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2476'. [ 1335.165987][T17817] 9pnet_virtio: no channels available for device syz [ 1335.200127][T17817] overlay: Unknown parameter '/' [ 1335.286945][T17818] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1335.449652][T17818] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1335.486771][T17818] overlayfs: failed to look up (tracing) for ino (-66) [ 1336.493518][T17821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17821 comm=syz.3.2484 [ 1336.508674][T17821] /dev/nullb0: Can't lookup blockdev [ 1338.147869][T17835] Mount JFS Failure: -5 [ 1338.398646][ T5953] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1338.622864][ T5953] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1338.639287][ T5953] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.660224][ T5953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1339.349057][T17845] hub 9-0:1.0: USB hub found [ 1339.355930][T17845] hub 9-0:1.0: 1 port detected [ 1339.633551][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.644657][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.698448][ T5953] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1339.724567][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1339.733421][ T5953] usb 5-1: Product: syz [ 1339.737676][ T5953] usb 5-1: Manufacturer: syz [ 1339.764863][ T5953] cdc_wdm 5-1:1.0: skipping garbage [ 1339.770258][ T5953] cdc_wdm 5-1:1.0: skipping garbage [ 1339.777616][ T5953] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1339.851069][ T5953] cdc_wdm 5-1:1.0: Unknown control protocol [ 1339.936299][T17851] netlink: 'syz.1.2493': attribute type 10 has an invalid length. [ 1339.969583][T17851] veth0_vlan: entered allmulticast mode [ 1340.000568][T17851] batman_adv: batadv0: Interface deactivated: vlan1 [ 1340.365854][T17832] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1340.378980][ T5953] usb 5-1: USB disconnect, device number 34 [ 1340.386288][ T29] audit: type=1400 audit(2000000019.522:1755): avc: denied { read write } for pid=17830 comm="syz.4.2489" name="cdc-wdm0" dev="devtmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1340.419724][ T29] audit: type=1400 audit(2000000019.522:1756): avc: denied { open } for pid=17830 comm="syz.4.2489" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1341.143765][T17865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2496'. [ 1342.130048][ T11] block nbd0: Possible stuck request ffff888027ce8000: control (read@0,1024B). Runtime 300 seconds [ 1342.141187][ T11] block nbd0: Possible stuck request ffff888027ce8200: control (read@1024,1024B). Runtime 300 seconds [ 1342.152653][ T11] block nbd0: Possible stuck request ffff888027ce8400: control (read@2048,1024B). Runtime 300 seconds [ 1342.170481][ T11] block nbd0: Possible stuck request ffff888027ce8600: control (read@3072,1024B). Runtime 300 seconds [ 1342.624518][ T29] audit: type=1400 audit(2000000021.271:1757): avc: denied { setopt } for pid=17867 comm="syz.4.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1342.836884][T15103] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1344.802292][T17893] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1344.966262][T17893] overlayfs: missing 'lowerdir' [ 1345.213291][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 1345.653621][T15101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1345.667068][T15091] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1346.947586][ T30] INFO: task syz.0.2189:16387 blocked for more than 143 seconds. [ 1346.955975][ T30] Tainted: G L syzkaller #0 [ 1346.964202][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1346.973854][ T30] task:syz.0.2189 state:D stack:28168 pid:16387 tgid:16383 ppid:5806 task_flags:0x400140 flags:0x00080002 [ 1346.979974][T17913] affs: No valid root block on device nullb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1347.234515][ T29] audit: type=1400 audit(2000000025.939:1758): avc: denied { write } for pid=5791 comm="syz-executor" path="pipe:[4472]" dev="pipefs" ino=4472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1347.405810][ T30] Call Trace: [ 1347.409128][ T30] [ 1347.412061][ T30] __schedule+0xfee/0x60e0 [ 1347.544593][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1347.549600][ T30] ? __pfx___schedule+0x10/0x10 [ 1347.554583][ T30] ? find_held_lock+0x2b/0x80 [ 1347.606282][ T30] ? schedule+0x2bf/0x390 [ 1347.624396][ T30] schedule+0xdd/0x390 [ 1347.628482][ T30] schedule_preempt_disabled+0x13/0x30 [ 1347.673102][ T30] __mutex_lock+0xc9a/0x1b90 [ 1347.694696][ T30] ? bdev_open+0xa2/0xe40 [ 1347.699072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1347.704113][ T30] ? bd_prepare_to_claim+0x1e0/0x280 [ 1347.718645][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1347.724310][ T30] ? file_init_path+0x48e/0x670 [ 1347.750274][ T30] ? bdev_open+0xa2/0xe40 [ 1347.754614][ T30] bdev_open+0xa2/0xe40 [ 1347.769039][ T30] ? iput+0x3a/0x40 [ 1347.772863][ T30] bdev_file_open_by_dev+0x179/0x210 [ 1347.778131][ T30] setup_bdev_super+0x385/0x730 [ 1347.801326][ T30] get_tree_bdev_flags+0x363/0x620 [ 1347.806452][ T30] ? __pfx_jfs_fill_super+0x10/0x10 [ 1347.811632][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1347.834702][ T30] ? cap_capable+0x107/0x460 [ 1347.839310][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1347.875899][ T30] ? security_capable+0x80/0x260 [ 1347.880885][ T30] vfs_get_tree+0x92/0x320 [ 1347.885306][ T30] path_mount+0x7d0/0x23d0 [ 1347.898687][ T30] ? __pfx_path_mount+0x10/0x10 [ 1347.903553][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1347.929387][ T30] ? putname+0xb1/0x110 [ 1347.933572][ T30] ? kmem_cache_free+0x124/0x6a0 [ 1347.960612][ T30] ? __x64_sys_mount+0x293/0x310 [ 1347.972685][ T30] __x64_sys_mount+0x293/0x310 [ 1347.977472][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 1347.993692][ T30] do_syscall_64+0x106/0xf80 [ 1347.998293][ T30] ? clear_bhb_loop+0x40/0x90 [ 1348.002975][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.026837][ T30] RIP: 0033:0x7f050ab9c629 [ 1348.032168][ T30] RSP: 002b:00007f050ba7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1348.050810][ T30] RAX: ffffffffffffffda RBX: 00007f050ae16090 RCX: 00007f050ab9c629 [ 1348.059076][ T30] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 1348.067047][ T30] RBP: 00007f050ac32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1348.075278][ T30] R10: 0000000001a0c000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.084032][ T30] R13: 00007f050ae16128 R14: 00007f050ae16090 R15: 00007ffe80296a48 [ 1348.092590][ T30] [ 1348.095884][ T30] [ 1348.095884][ T30] Showing all locks held in the system: [ 1348.474135][T16381] bridge0: port 3(syz_tun) entered disabled state [ 1348.512695][T16381] syz_tun (unregistering): left allmulticast mode [ 1348.519181][T16381] syz_tun (unregistering): left promiscuous mode [ 1348.525515][T16381] bridge0: port 3(syz_tun) entered disabled state [ 1348.549990][ T30] 1 lock held by khungtaskd/30: [ 1348.554847][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1348.603677][ T30] 3 locks held by kworker/0:2/793: [ 1348.609072][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1348.692657][ T30] #1: ffffc90003a77d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1348.727067][ T30] #2: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1348.741948][ T30] 2 locks held by getty/5565: [ 1348.746626][ T30] #0: ffff888038b9b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1348.773924][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1348.784055][ T30] 3 locks held by kworker/0:7/5953: [ 1348.838149][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1348.848618][ T30] #1: ffffc9000449fd08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1348.859653][ T30] #2: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1348.870010][ T30] 1 lock held by udevd/13153: [ 1348.891511][ T30] #0: ffff888027c4c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1348.900868][ T30] 3 locks held by kworker/u8:9/15103: [ 1348.932433][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1348.943726][ T30] #1: ffffc90003f07d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1348.954143][ T30] #2: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1348.969046][ T30] 1 lock held by syz.5.2186/16381: [ 1348.974147][ T30] #0: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1348.983150][ T30] 2 locks held by syz.0.2189/16387: [ 1348.988353][ T30] #0: ffff888055b380e0 (&type->s_umount_key#92/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1348.998868][ T30] #1: ffff888027c4c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1349.008083][ T30] 3 locks held by syz.3.2464/17758: [ 1349.013306][ T30] #0: ffff88802cfa8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1349.023049][ T30] #1: ffff88802cfa80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1349.032774][ T30] #2: ffffffff908a7268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1349.042904][ T30] 4 locks held by syz.6.2505/17903: [ 1349.048196][ T30] #0: ffff88802a3a8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1349.057844][ T30] #1: ffff88802a3a80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1349.067537][ T30] #2: ffffffff908a7268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1349.077562][ T30] #3: ffff88803597d2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 1349.086898][ T30] 2 locks held by syz.6.2505/17904: [ 1349.092064][ T30] #0: ffff88807703b008 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1349.102606][ T30] #1: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1349.112653][ T30] 1 lock held by syz.4.2508/17908: [ 1349.117803][ T30] #0: ffffffff9060f268 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1349.135440][ T30] [ 1349.138220][ T30] ============================================= [ 1349.138220][ T30] [ 1349.146650][ T30] NMI backtrace for cpu 1 [ 1349.146670][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.146696][ T30] Tainted: [L]=SOFTLOCKUP [ 1349.146702][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1349.146712][ T30] Call Trace: [ 1349.146719][ T30] [ 1349.146726][ T30] dump_stack_lvl+0x100/0x190 [ 1349.146760][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1349.146781][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1349.146812][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1349.146842][ T30] sys_info+0x141/0x190 [ 1349.146864][ T30] watchdog+0xd25/0x1050 [ 1349.146897][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.146923][ T30] ? __kthread_parkme+0x18c/0x230 [ 1349.146954][ T30] ? kthread+0x13a/0x450 [ 1349.146970][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.146995][ T30] kthread+0x370/0x450 [ 1349.147012][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.147032][ T30] ret_from_fork+0x754/0xd80 [ 1349.147052][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1349.147074][ T30] ? __switch_to+0x7b4/0x1120 [ 1349.147098][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.147119][ T30] ret_from_fork_asm+0x1a/0x30 [ 1349.147157][ T30] [ 1349.147165][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1349.272354][ C0] NMI backtrace for cpu 0 [ 1349.272372][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.272398][ C0] Tainted: [L]=SOFTLOCKUP [ 1349.272404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1349.272414][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1349.272448][ C0] Code: d8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 0c 1c 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1349.272466][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1349.272480][ C0] RAX: 000000000477d26d RBX: ffffffff8e4975c0 RCX: ffffffff8b8f7c75 [ 1349.272493][ C0] RDX: 0000000000000000 RSI: ffffffff8de71ed4 RDI: ffffffff8c1aefa0 [ 1349.272504][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1349.272520][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1349.272532][ C0] R13: 0000000000000000 R14: ffffffff90d96410 R15: 0000000000000000 [ 1349.272544][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 1349.272561][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1349.272572][ C0] CR2: 0000200000400000 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1349.272583][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1349.272594][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1349.272605][ C0] Call Trace: [ 1349.272611][ C0] [ 1349.272617][ C0] default_idle+0x9/0x10 [ 1349.272637][ C0] default_idle_call+0x6c/0xb0 [ 1349.272657][ C0] do_idle+0x35b/0x4b0 [ 1349.272680][ C0] ? __pfx_do_idle+0x10/0x10 [ 1349.272706][ C0] cpu_startup_entry+0x4f/0x60 [ 1349.272728][ C0] rest_init+0x251/0x260 [ 1349.272750][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1349.272775][ C0] start_kernel+0x47f/0x480 [ 1349.272797][ C0] x86_64_start_reservations+0x24/0x30 [ 1349.272819][ C0] x86_64_start_kernel+0x12b/0x130 [ 1349.272842][ C0] common_startup_64+0x13e/0x148 [ 1349.272871][ C0] [ 1349.596254][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1349.603124][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.613779][ T30] Tainted: [L]=SOFTLOCKUP [ 1349.618085][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1349.628120][ T30] Call Trace: [ 1349.631379][ T30] [ 1349.634293][ T30] dump_stack_lvl+0x100/0x190 [ 1349.638969][ T30] vpanic+0x552/0x970 [ 1349.642938][ T30] ? __pfx_vpanic+0x10/0x10 [ 1349.647432][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1349.653581][ T30] panic+0xd1/0xe0 [ 1349.657286][ T30] ? __pfx_panic+0x10/0x10 [ 1349.661690][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1349.667830][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1349.673971][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1349.680111][ T30] ? watchdog.cold+0x198/0x1ca [ 1349.684858][ T30] ? watchdog+0xd35/0x1050 [ 1349.689264][ T30] watchdog.cold+0x1a9/0x1ca [ 1349.693845][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.698512][ T30] ? __kthread_parkme+0x18c/0x230 [ 1349.703530][ T30] ? kthread+0x13a/0x450 [ 1349.707753][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.712417][ T30] kthread+0x370/0x450 [ 1349.716468][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.721042][ T30] ret_from_fork+0x754/0xd80 [ 1349.725616][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1349.730723][ T30] ? __switch_to+0x7b4/0x1120 [ 1349.735483][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.740062][ T30] ret_from_fork_asm+0x1a/0x30 [ 1349.744835][ T30] [ 1349.748142][ T30] Kernel Offset: disabled [ 1349.752448][ T30] Rebooting in 86400 seconds..