last executing test programs: 8.71569503s ago: executing program 1 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x3, 0x264}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() r1 = socket$can_j1939(0x1d, 0x2, 0x7) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$can_j1939(r1, &(0x7f00000000c0), 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000e26243053116c51e01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080688e49232a50d2c98fb000240000000120800014000000000140003006e657464657673696d300000000000001c0008800c0002400000000000007fff04000140000000010000000014000000110001000000"], 0xc0}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r7, 0x1, 0xc, &(0x7f0000000600)=0xdfa, 0x4) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) bind$can_j1939(r5, 0x0, 0x0) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0xfffd, 0x0, 0x7, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @loopback}, 0x10) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r6, 0x25, 0x1, @val=@kprobe_multi=@addrs={0x0, 0x3, 0x0, &(0x7f0000000000)=[0xa1, 0x6, 0xb3b], 0x6}}, 0x30) 7.721387732s ago: executing program 4 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r5, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) 7.457805882s ago: executing program 1 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8, 0x3, r6}]}, 0x24}}, 0x100000000000000) socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7.449275001s ago: executing program 0 (id=122): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000205, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) unshare(0x2a020400) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x6d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r3, r4) 6.554017397s ago: executing program 2 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000081"], 0x1) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) pwrite64(r3, &(0x7f0000000440)='}', 0x1, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.519423077s ago: executing program 1 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x6, 0x80800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x70fb40, 0x0) socket(0xa, 0x5, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/186) 6.426379278s ago: executing program 4 (id=126): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r0, &(0x7f0000000280)=""/4097, 0x1001) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x2, 0xf0, 0x1}, 0xfd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x40001, 0x371, 0x8, 0x0, 0x400}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x102}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x6, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x336}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x2, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0x800, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x4}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0x6}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7fffffff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x8000004, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b5, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x8, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0x5, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x7ff, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xa, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x7, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) dup(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 6.309401542s ago: executing program 0 (id=128): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)}}], 0x1, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x99c822, &(0x7f0000000000)=ANY=[@ANYBLOB='grpquo']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) (fail_nth: 4) 5.662995273s ago: executing program 0 (id=129): openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x50, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x0, 0x9, 0xc, 0xfffd}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, 0x4782, 0x7) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2c, 0x71, 0xa6, 0x20, 0x2020, 0x2031, 0x3b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x38, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0xe0, 0x0, 0xff, 0xd7, 0x10, 0x9}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 4.828589927s ago: executing program 3 (id=130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000080)) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x40800) 4.634039996s ago: executing program 2 (id=131): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b7bd7310820507b3f1680000000109021200010000b60809040e7442bc7be1"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7eb92a0000000000) 4.253578053s ago: executing program 4 (id=132): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000cc0)="b2182bd904812ac584d91707161cad9b3b14f21bd46ced28244c6daf1734b2b004614d58c187deb00ae8468d9cc84a4d7eb76cb62ec21fa7032ea5c45724431aa011e991ce19908d98244ed3ec6222389287d3664fa5335f0edc6ac5df1c641b2c54fe2f3ca6c9b207", 0x69}, {&(0x7f00000002c0)="8f45543b8e", 0x5}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="63296f62bd5b16d7a496d62cd8bb810be9dcb97471decb814774da3acbc074f7fd14ac0b95ee52ab5b4080813a67b324e319588e5c96f7bb2f5261048f27a7bd4056d2fdf0878fa63ec2cc32fdb9efb974ec513da9c8ffa552cfb6451fffda7e36b1fb73bfbabfe6616710209326b6", 0x6f}], 0x1}}], 0x2, 0x480e0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000300), &(0x7f00000003c0)=r1}, 0x20) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x7, 0x200) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000540)={{&(0x7f00001a3000/0x3000)=nil, 0x3000}, 0x5}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000073f000/0x3000)=nil, 0x400000, 0x1, 0x18100}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf251900000008000300", @ANYRES32=r5, @ANYBLOB="030000000000fcff"], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r10, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8d, 0x54}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0xc000) 4.165512953s ago: executing program 3 (id=133): mknod$loop(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x5}, {}, {0xf, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x20040054) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 3.697965858s ago: executing program 3 (id=134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x6, 0x80800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x70fb40, 0x0) socket(0xa, 0x5, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/186) 3.697618327s ago: executing program 2 (id=135): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) 3.461401498s ago: executing program 1 (id=136): r0 = syz_usb_connect$rtl8150(0x3, 0xfffffffffffffe5e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b04a0, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r0, 0x2, 0x0, 0x0) 3.454835576s ago: executing program 2 (id=137): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x8500, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40, 0x1ff, 0x3, 0x10, 0x2, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x2f00, 0xfff, 0x8049]}) 3.261749382s ago: executing program 2 (id=138): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) flock(r0, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) socket(0x28, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee4, 0x2, 0x2, 0xef, 0x0, r2}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80adf7c39da42d017dca493817aa84407e88dca79ad1ceecb28019cf6", 0x2e) mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xb617164a62ee778b) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x4f1}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000984000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x491, 0x0, 0x8000000000000000}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x19, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) fsopen(&(0x7f0000000380)='vfat\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r8}, 0x10) 3.261080646s ago: executing program 4 (id=139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) faccessat(0xffffffffffffff9c, 0x0, 0x2) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0xd8, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x2b, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x4c, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={0x0, 0x5c, 0x0, 0x0}) r11 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r11, 0xc01064c5, &(0x7f0000000580)={&(0x7f0000000500)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r8, r10, 0x9, 0x7, 0x1}) 2.998517886s ago: executing program 2 (id=140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) setgid(0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x2}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xdc, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x440c1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000300000000d000000000000009700c0ffffff5f8015ea6722ffff9519"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000}, 0x94) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r7}) 2.64238888s ago: executing program 3 (id=141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.454054212s ago: executing program 3 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x6, 0x80800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x70fb40, 0x0) socket(0xa, 0x5, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/186) 2.18911969s ago: executing program 4 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x200}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x200}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x134, &(0x7f00000004c0)={0x0, 0x55ed, 0x2000, 0x2, 0x276}, &(0x7f0000000540), &(0x7f0000000580)) io_setup(0x6, &(0x7f0000001380)) (async) io_setup(0x6, &(0x7f0000001380)=0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xb, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) dup2(r4, r9) (async) dup2(r4, r9) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020600000524060000052400000005240f0100000000fc0f0000000905820200020000fc090503424e81bb0400"], 0x0) (async) r11 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020600000524060000052400000005240f0100000000fc0f0000000905820200020000fc090503424e81bb0400"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0xa, @string={0xa, 0x3, "0a080fb5a92b777d"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r10, 0x3b88, &(0x7f0000000440)={0xc}) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x0, r4, &(0x7f0000000280)="59b7907fc991e887bba7cdaf65621cebc98dbe572ef49e3c729dc21f68811431c8f762e3f84dbb0023fe398daee4b52000150ef2cf1327aca34ed0075d246658f38b7aa1f1a3d566ef4d44c74383ac29fd1b1291c1950dafb78aba023684d0af36f82873d2641fd2c6bfa38d26936637f65df71f514795f8f42e6d536a1eabf7d744350ffaab4cb387733576038708adfd1f501387edd26bc3a371bc24a53fb1a196bdf99c917a151db14a6444ffc4", 0xaf, 0x6, 0x0, 0x2}]) (async) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x0, r4, &(0x7f0000000280)="59b7907fc991e887bba7cdaf65621cebc98dbe572ef49e3c729dc21f68811431c8f762e3f84dbb0023fe398daee4b52000150ef2cf1327aca34ed0075d246658f38b7aa1f1a3d566ef4d44c74383ac29fd1b1291c1950dafb78aba023684d0af36f82873d2641fd2c6bfa38d26936637f65df71f514795f8f42e6d536a1eabf7d744350ffaab4cb387733576038708adfd1f501387edd26bc3a371bc24a53fb1a196bdf99c917a151db14a6444ffc4", 0xaf, 0x6, 0x0, 0x2}]) 1.701342722s ago: executing program 0 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000880002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) 674.504694ms ago: executing program 0 (id=145): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x494002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183000000100000000000000030000009504000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) 260.297145ms ago: executing program 0 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202209a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x80, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000900)=0x15) writev(r3, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) 187.907285ms ago: executing program 1 (id=147): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) write(r0, &(0x7f0000000140)="490f8093f88286fdfe860ea4c9542865075dac4bc706d757af135e783900a4be5d5da1f8e7fdea75d2fa83cbe71e5c5c368c0400000000000000e49a2226c4ba0800b47071b6962f568f771fec413a5455769cafb437eb1b277eeb30cefaa80f5f487b8cbaa8f61f9730e0", 0x6b) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xc}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) (async) write(r0, &(0x7f0000000140)="490f8093f88286fdfe860ea4c9542865075dac4bc706d757af135e783900a4be5d5da1f8e7fdea75d2fa83cbe71e5c5c368c0400000000000000e49a2226c4ba0800b47071b6962f568f771fec413a5455769cafb437eb1b277eeb30cefaa80f5f487b8cbaa8f61f9730e0", 0x6b) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) epoll_create(0x7f) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xc}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) (async) syz_open_pts(r1, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 65.908791ms ago: executing program 1 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x6, 0x80800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x70fb40, 0x0) socket(0xa, 0x5, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/186) 64.470379ms ago: executing program 4 (id=149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x7, 0x7ff, 0x3840, 0x80, 0x7, 0x8, 0x40}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x598, &(0x7f00000000c0)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r11, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x30) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r12, 0x4008af13, &(0x7f0000000340)={0x1, 0x5e}) getpgrp(0x0) prlimit64(0x0, 0xc, &(0x7f0000000040)={0x0, 0x100}, &(0x7f0000000080)) fcntl$lock(r8, 0x5, &(0x7f0000000400)={0x1, 0x2, 0x2884, 0xda}) 0s ago: executing program 3 (id=150): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x1a, 0x0, &(0x7f0000000240)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0xd, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000020e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 66.067729][ T30] audit: type=1400 audit(1764358846.198:62): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.091174][ T30] audit: type=1400 audit(1764358846.228:63): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.093645][ T5797] cgroup: Unknown subsys name 'net' [ 66.121705][ T30] audit: type=1400 audit(1764358846.258:64): avc: denied { unmount } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.261588][ T5797] cgroup: Unknown subsys name 'cpuset' [ 66.269683][ T5797] cgroup: Unknown subsys name 'rlimit' [ 66.404082][ T30] audit: type=1400 audit(1764358846.538:65): avc: denied { setattr } for pid=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.436098][ T30] audit: type=1400 audit(1764358846.538:66): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.462874][ T30] audit: type=1400 audit(1764358846.538:67): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.483974][ T30] audit: type=1400 audit(1764358846.538:68): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.504282][ T30] audit: type=1400 audit(1764358846.548:69): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.521772][ T5799] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.529091][ T30] audit: type=1400 audit(1764358846.548:70): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.560879][ T30] audit: type=1400 audit(1764358846.588:71): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.528764][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.279727][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.286216][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455789][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 71.455805][ T30] audit: type=1400 audit(1764358851.588:78): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.532707][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.539017][ T30] audit: type=1400 audit(1764358851.588:79): avc: denied { read write } for pid=5807 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.540827][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.572624][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.581038][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.588623][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.599670][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.607430][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.616238][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.616456][ T30] audit: type=1400 audit(1764358851.588:80): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.624162][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.647642][ T30] audit: type=1400 audit(1764358851.598:81): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="socket:[4062]" dev="sockfs" ino=4062 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.682191][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.697401][ T30] audit: type=1400 audit(1764358851.828:82): avc: denied { read } for pid=5807 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.702981][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.748314][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.748506][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.769541][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.776824][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.785302][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.785353][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.800825][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.801661][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.808259][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.823638][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.840716][ T30] audit: type=1400 audit(1764358851.828:83): avc: denied { open } for pid=5807 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.842790][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.872945][ T30] audit: type=1400 audit(1764358851.828:84): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.874162][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.908703][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.918379][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.208146][ T30] audit: type=1400 audit(1764358852.338:85): avc: denied { module_request } for pid=5807 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.319669][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 72.426383][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 72.445333][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 72.473633][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 72.498115][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 72.569446][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.576606][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.584233][ T5807] bridge_slave_0: entered allmulticast mode [ 72.590955][ T5807] bridge_slave_0: entered promiscuous mode [ 72.621151][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.628268][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.635701][ T5807] bridge_slave_1: entered allmulticast mode [ 72.642463][ T5807] bridge_slave_1: entered promiscuous mode [ 72.694945][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.702161][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.710042][ T5811] bridge_slave_0: entered allmulticast mode [ 72.716773][ T5811] bridge_slave_0: entered promiscuous mode [ 72.745056][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.752216][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.759383][ T5811] bridge_slave_1: entered allmulticast mode [ 72.766008][ T5811] bridge_slave_1: entered promiscuous mode [ 72.783317][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.800979][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.808066][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.815455][ T5816] bridge_slave_0: entered allmulticast mode [ 72.822283][ T5816] bridge_slave_0: entered promiscuous mode [ 72.854918][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.878695][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.886845][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.894031][ T5816] bridge_slave_1: entered allmulticast mode [ 72.900694][ T5816] bridge_slave_1: entered promiscuous mode [ 72.907141][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.914346][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.921669][ T5818] bridge_slave_0: entered allmulticast mode [ 72.928263][ T5818] bridge_slave_0: entered promiscuous mode [ 72.936771][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.953733][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.960943][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.968046][ T5824] bridge_slave_0: entered allmulticast mode [ 72.974893][ T5824] bridge_slave_0: entered promiscuous mode [ 72.982073][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.989410][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.996518][ T5824] bridge_slave_1: entered allmulticast mode [ 73.003348][ T5824] bridge_slave_1: entered promiscuous mode [ 73.016968][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.024193][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.031991][ T5818] bridge_slave_1: entered allmulticast mode [ 73.039498][ T5818] bridge_slave_1: entered promiscuous mode [ 73.047805][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.065783][ T5807] team0: Port device team_slave_0 added [ 73.102613][ T5807] team0: Port device team_slave_1 added [ 73.110144][ T5811] team0: Port device team_slave_0 added [ 73.124966][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.149992][ T5811] team0: Port device team_slave_1 added [ 73.171082][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.182214][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.201914][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.226068][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.247543][ T5816] team0: Port device team_slave_0 added [ 73.255805][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.265643][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.272824][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.299088][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.311143][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.318083][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.344117][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.363679][ T5816] team0: Port device team_slave_1 added [ 73.376849][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.384028][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.409995][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.421610][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.428535][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.454644][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.492900][ T5818] team0: Port device team_slave_0 added [ 73.504041][ T5818] team0: Port device team_slave_1 added [ 73.511028][ T5824] team0: Port device team_slave_0 added [ 73.525051][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.532317][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.558481][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.571500][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.578439][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.604464][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.627540][ T5824] team0: Port device team_slave_1 added [ 73.665403][ T5807] hsr_slave_0: entered promiscuous mode [ 73.672026][ T5807] hsr_slave_1: entered promiscuous mode [ 73.695506][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.702611][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.728665][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.748381][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.749937][ T5809] Bluetooth: hci1: command tx timeout [ 73.755486][ T5135] Bluetooth: hci0: command tx timeout [ 73.761838][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.793063][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.811589][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.818549][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.844629][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.871128][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.878107][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.904175][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.909210][ T5135] Bluetooth: hci2: command tx timeout [ 73.920542][ T5809] Bluetooth: hci3: command tx timeout [ 73.940982][ T5816] hsr_slave_0: entered promiscuous mode [ 73.947195][ T5816] hsr_slave_1: entered promiscuous mode [ 73.953363][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 73.959150][ T5816] Cannot create hsr debugfs directory [ 73.967890][ T5811] hsr_slave_0: entered promiscuous mode [ 73.974282][ T5811] hsr_slave_1: entered promiscuous mode [ 73.980559][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 73.986285][ T5811] Cannot create hsr debugfs directory [ 73.991745][ T5135] Bluetooth: hci4: command tx timeout [ 74.038214][ T5818] hsr_slave_0: entered promiscuous mode [ 74.044437][ T5818] hsr_slave_1: entered promiscuous mode [ 74.050549][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 74.056271][ T5818] Cannot create hsr debugfs directory [ 74.140175][ T5824] hsr_slave_0: entered promiscuous mode [ 74.146298][ T5824] hsr_slave_1: entered promiscuous mode [ 74.152316][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 74.158022][ T5824] Cannot create hsr debugfs directory [ 74.430783][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.442038][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.459617][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.481007][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.530834][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.545531][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.557336][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.580078][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.648856][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.675606][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.685443][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.700672][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.712642][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.747098][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.812212][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.819557][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.828779][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.835891][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.858698][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.867656][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.877090][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.905043][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.917410][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.963198][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.000431][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.007566][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.026001][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.041203][ T30] audit: type=1400 audit(1764358855.178:86): avc: denied { sys_module } for pid=5807 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.073468][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.085539][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.097097][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.104265][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.132529][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.156960][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.218212][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.246465][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.260165][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.267239][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.295010][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.302186][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.335004][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.385066][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.433814][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.440993][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.475942][ T5807] veth0_vlan: entered promiscuous mode [ 75.491064][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.498209][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.563500][ T5807] veth1_vlan: entered promiscuous mode [ 75.585349][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.608492][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.634075][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.648110][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.655261][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.680928][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.688005][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.708201][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.798186][ T5807] veth0_macvtap: entered promiscuous mode [ 75.833399][ T5135] Bluetooth: hci1: command tx timeout [ 75.839110][ T5809] Bluetooth: hci0: command tx timeout [ 75.852000][ T5811] veth0_vlan: entered promiscuous mode [ 75.858311][ T5807] veth1_macvtap: entered promiscuous mode [ 75.883420][ T5811] veth1_vlan: entered promiscuous mode [ 75.908501][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.918485][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.946021][ T5818] veth0_vlan: entered promiscuous mode [ 75.957127][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.973435][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.989454][ T5809] Bluetooth: hci2: command tx timeout [ 75.994951][ T5809] Bluetooth: hci3: command tx timeout [ 76.015754][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.024841][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.055537][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079335][ T5809] Bluetooth: hci4: command tx timeout [ 76.090343][ T5818] veth1_vlan: entered promiscuous mode [ 76.124351][ T5816] veth0_vlan: entered promiscuous mode [ 76.134046][ T5811] veth0_macvtap: entered promiscuous mode [ 76.164866][ T5811] veth1_macvtap: entered promiscuous mode [ 76.177506][ T5816] veth1_vlan: entered promiscuous mode [ 76.212714][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.234057][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.254934][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.277056][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.286007][ T5818] veth0_macvtap: entered promiscuous mode [ 76.297899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.311472][ T5816] veth0_macvtap: entered promiscuous mode [ 76.323747][ T5818] veth1_macvtap: entered promiscuous mode [ 76.336561][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.347925][ T30] audit: type=1400 audit(1764358856.478:87): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.CJGLev/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.402208][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.428113][ T5816] veth1_macvtap: entered promiscuous mode [ 76.429696][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.470489][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.490815][ T1329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.510814][ T1329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.529484][ T1329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.538230][ T1329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.549823][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 76.549837][ T30] audit: type=1400 audit(1764358856.678:99): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.587791][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.614759][ T30] audit: type=1400 audit(1764358856.678:100): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.644677][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.662062][ T30] audit: type=1400 audit(1764358856.688:101): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.690034][ T30] audit: type=1400 audit(1764358856.768:102): avc: denied { prog_load } for pid=5922 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.728799][ T30] audit: type=1400 audit(1764358856.768:103): avc: denied { bpf } for pid=5922 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.751964][ T30] audit: type=1400 audit(1764358856.768:104): avc: denied { perfmon } for pid=5922 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.777245][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.788125][ T1105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.798079][ T1105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.830076][ T5927] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure [ 76.850117][ T30] audit: type=1400 audit(1764358856.958:105): avc: denied { create } for pid=5925 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.889428][ T1105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.900609][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.908442][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.910394][ T30] audit: type=1400 audit(1764358857.008:106): avc: denied { setopt } for pid=5925 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.941538][ T30] audit: type=1400 audit(1764358857.018:107): avc: denied { create } for pid=5925 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.967603][ T1105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.987228][ T1105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.997095][ T1105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.016973][ T3633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.026062][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.026563][ T3633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.043154][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.155013][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.173211][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.223499][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.225165][ T5824] veth0_vlan: entered promiscuous mode [ 77.237239][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.248294][ T5824] veth1_vlan: entered promiscuous mode [ 77.277160][ T3633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.287516][ T3633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.351719][ T30] audit: type=1400 audit(1764358857.488:108): avc: denied { ioctl } for pid=5935 comm="syz.2.7" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.433392][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.450784][ T5824] veth0_macvtap: entered promiscuous mode [ 77.466773][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.490853][ T5824] veth1_macvtap: entered promiscuous mode [ 77.555661][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.612290][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.636540][ T5942] mmap: syz.0.8 (5942) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.649099][ T1105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.658537][ T1105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727524][ T5947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'. [ 77.762115][ T1105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.781056][ T1105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.903169][ T5953] overlayfs: missing 'workdir' [ 77.919967][ T5809] Bluetooth: hci0: command tx timeout [ 77.920863][ T5135] Bluetooth: hci1: command tx timeout [ 77.939987][ T3772] libceph: connect (1)[c::]:6789 error -101 [ 77.955850][ T3772] libceph: mon0 (1)[c::]:6789 connect error [ 77.980016][ T3772] libceph: connect (1)[c::]:6789 error -101 [ 77.990235][ T3772] libceph: mon0 (1)[c::]:6789 connect error [ 78.080408][ T5135] Bluetooth: hci3: command tx timeout [ 78.080418][ T5809] Bluetooth: hci2: command tx timeout [ 78.150063][ T5135] Bluetooth: hci4: command tx timeout [ 78.178225][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.249857][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 78.255858][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 78.357992][ T1206] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.387757][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.419032][ T3772] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.496452][ T5953] ceph: No mds server is up or the cluster is laggy [ 78.588995][ T3772] usb 2-1: Using ep0 maxpacket: 8 [ 78.597367][ T3772] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 78.608008][ T3772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.620665][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 78.664099][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.691340][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.699947][ T1206] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 78.719827][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.734953][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.745253][ T3772] pvrusb2: Hardware description: Terratec Grabster AV400 [ 78.771906][ T1206] usb 3-1: config 0 descriptor?? [ 78.773714][ T3772] pvrusb2: ********** [ 78.820005][ T3772] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 78.889015][ T3772] pvrusb2: Important functionality might not be entirely working. [ 78.907114][ T3772] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 78.951813][ T3772] pvrusb2: ********** [ 78.982637][ T2337] pvrusb2: Invalid write control endpoint [ 79.006329][ T5956] overlay: Unknown parameter '/' [ 79.184796][ T2337] pvrusb2: Invalid write control endpoint [ 79.192541][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 79.203238][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 79.213956][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 79.228670][ T1206] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 79.239516][ T1206] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 79.246365][ T2337] pvrusb2: Device being rendered inoperable [ 79.292198][ T1206] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 79.309044][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 79.335730][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 79.346469][ T1206] elan 0003:04F3:0755.0001: hidraw0: USB HID v0.05 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 79.363954][ T5964] xt_ecn: cannot match TCP bits for non-tcp packets [ 79.375753][ T5881] usb 2-1: USB disconnect, device number 2 [ 79.383310][ T2337] pvrusb2: Attached sub-driver cx25840 [ 79.394576][ T5973] bridge0: entered allmulticast mode [ 79.401013][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 79.465109][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 79.580355][ T5973] pim6reg: entered allmulticast mode [ 79.772452][ T5900] usb 3-1: USB disconnect, device number 2 [ 79.839036][ T5966] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.989787][ T5135] Bluetooth: hci1: command tx timeout [ 79.989803][ T5809] Bluetooth: hci0: command tx timeout [ 80.003404][ T5966] usb 4-1: config index 0 descriptor too short (expected 45, got 43) [ 80.011681][ T5966] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 80.022365][ T5966] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.043050][ T5966] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 80.053537][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.069087][ T5966] usb 4-1: Product: syz [ 80.078808][ T5966] usb 4-1: Manufacturer: syz [ 80.084515][ T5966] usb 4-1: SerialNumber: syz [ 80.103304][ T5966] rtl8150 4-1:1.0: couldn't find required endpoints [ 80.119656][ T5966] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 80.139649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 80.148898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 80.157356][ T5135] Bluetooth: hci2: command tx timeout [ 80.162860][ T5809] Bluetooth: hci3: command tx timeout [ 80.229369][ T5135] Bluetooth: hci4: command tx timeout [ 80.369665][ T5986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18'. [ 80.548705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.949595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.958593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.062852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.079627][ T5990] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 81.087868][ T10] usb 4-1: USB disconnect, device number 2 [ 81.160297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.212390][ T5997] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 81.221656][ T5997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19'. [ 81.269909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 81.310164][ T5997] dummy0: entered promiscuous mode [ 81.399177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.470312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.750970][ T24] cfg80211: failed to load regulatory.db [ 82.066351][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 82.066364][ T30] audit: type=1400 audit(1764358862.198:168): avc: denied { bind } for pid=6002 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.095074][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23'. [ 82.269756][ T30] audit: type=1400 audit(1764358862.398:169): avc: denied { create } for pid=6004 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.356692][ T30] audit: type=1400 audit(1764358862.408:170): avc: denied { ioctl } for pid=6004 comm="syz.3.24" path="socket:[8135]" dev="sockfs" ino=8135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.533887][ T30] audit: type=1400 audit(1764358862.428:171): avc: denied { connect } for pid=6004 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.554943][ T30] audit: type=1400 audit(1764358862.568:172): avc: denied { create } for pid=6010 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.574312][ T30] audit: type=1400 audit(1764358862.568:173): avc: denied { write } for pid=6010 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.594116][ T30] audit: type=1400 audit(1764358862.578:174): avc: denied { write } for pid=6004 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.651036][ T30] audit: type=1400 audit(1764358862.578:175): avc: denied { read } for pid=6010 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.680389][ T30] audit: type=1400 audit(1764358862.788:176): avc: denied { read } for pid=6012 comm="syz.1.27" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 82.764437][ T30] audit: type=1400 audit(1764358862.788:177): avc: denied { open } for pid=6012 comm="syz.1.27" path="/5/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 83.134695][ T6014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.356923][ T6026] autofs: Unknown parameter 'fd0x0000000000000000' [ 83.468993][ T5900] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 83.623461][ T5900] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 83.661873][ T5900] usb 2-1: config 0 has no interface number 0 [ 83.801437][ T5900] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.824396][ T5900] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 83.859552][ T5900] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 83.882611][ T5900] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 83.912497][ T5900] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.936141][ T5900] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 83.950907][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.964641][ T5900] usb 2-1: config 0 descriptor?? [ 83.975952][ T6024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.996655][ T5900] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 84.092263][ T6028] kvm: pic: single mode not supported [ 84.092300][ T6028] kvm: pic: level sensitive irq not supported [ 84.097963][ T6028] kvm: pic: non byte read [ 84.129608][ T6028] kvm: pic: non byte read [ 84.135811][ T6028] kvm: pic: single mode not supported [ 84.135876][ T6028] kvm: pic: non byte read [ 84.138081][ T6029] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 84.940781][ T6034] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 85.902467][ T6044] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 86.035613][ T6040] syz.0.32 (6040) used greatest stack depth: 19672 bytes left [ 86.337661][ T5900] usb 2-1: USB disconnect, device number 3 [ 86.398224][ T5900] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 86.412575][ T6051] ipvlan1: entered promiscuous mode [ 86.522649][ T6055] Zero length message leads to an empty skb [ 87.025325][ T6044] comedi comedi0: reset error (fatal) [ 87.081708][ T6064] pim6reg: entered allmulticast mode [ 87.089043][ T6064] pim6reg: left allmulticast mode [ 87.220333][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 87.220349][ T30] audit: type=1400 audit(1764358867.358:210): avc: denied { append } for pid=6076 comm="syz.4.43" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.303183][ T30] audit: type=1400 audit(1764358867.358:211): avc: denied { write } for pid=6076 comm="syz.4.43" name="tcp6" dev="proc" ino=4026533460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 87.336211][ T30] audit: type=1400 audit(1764358867.418:212): avc: denied { ioctl } for pid=6076 comm="syz.4.43" path="socket:[8995]" dev="sockfs" ino=8995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.430695][ T6083] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 87.442030][ T30] audit: type=1400 audit(1764358867.558:213): avc: denied { ioctl } for pid=6081 comm="syz.3.46" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8996 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.569010][ T5874] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.595221][ T30] audit: type=1400 audit(1764358867.718:214): avc: denied { name_bind } for pid=6087 comm="syz.0.47" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 87.780387][ T5874] usb 2-1: config index 0 descriptor too short (expected 45, got 43) [ 87.788501][ T5874] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 87.799346][ T5874] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.814540][ T5874] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 87.907834][ T6097] process 'syz.3.49' launched './file0' with NULL argv: empty string added [ 88.150725][ T5135] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 88.159946][ T5135] Bluetooth: hci2: Injecting HCI hardware error event [ 88.176473][ T5809] Bluetooth: hci2: hardware error 0x00 [ 88.274719][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.282898][ T5874] usb 2-1: Product: syz [ 88.288892][ T5874] usb 2-1: Manufacturer: syz [ 88.293193][ T30] audit: type=1400 audit(1764358868.008:215): avc: denied { bind } for pid=6092 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.293660][ T5874] usb 2-1: SerialNumber: syz [ 88.335774][ T5874] rtl8150 2-1:1.0: couldn't find required endpoints [ 88.352962][ T30] audit: type=1400 audit(1764358868.008:216): avc: denied { name_bind } for pid=6092 comm="syz.3.49" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 88.376517][ T30] audit: type=1400 audit(1764358868.008:217): avc: denied { node_bind } for pid=6092 comm="syz.3.49" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 88.393364][ T5874] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 88.400783][ T30] audit: type=1400 audit(1764358868.038:218): avc: denied { execute } for pid=6092 comm="syz.3.49" name="file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.428885][ T30] audit: type=1400 audit(1764358868.058:219): avc: denied { execute_no_trans } for pid=6092 comm="syz.3.49" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.769873][ T6105] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 88.859940][ T6110] openvswitch: netlink: Flow key attr not present in new flow. [ 88.872371][ T6110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6110 comm=syz.2.52 [ 89.675609][ T24] usb 2-1: USB disconnect, device number 4 [ 89.947021][ T6125] tmpfs: Unknown parameter 'grpquo' [ 90.389100][ T5809] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 90.617167][ T6140] netlink: 556 bytes leftover after parsing attributes in process `syz.3.64'. [ 91.035860][ T6135] pim6reg: left allmulticast mode [ 91.041323][ T6135] bridge0: left allmulticast mode [ 91.118874][ T6143] 9pnet_fd: Insufficient options for proto=fd [ 92.477333][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 92.477347][ T30] audit: type=1400 audit(1764358872.608:234): avc: denied { accept } for pid=6145 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.539392][ T6159] overlayfs: failed to resolve './file0': -2 [ 93.000713][ T30] audit: type=1400 audit(1764358873.138:235): avc: denied { read } for pid=6145 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.037824][ T6150] 9pnet_fd: Insufficient options for proto=fd [ 93.111276][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.300019][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 93.328366][ T5900] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 93.346120][ T5900] usb 1-1: config 0 has no interface number 0 [ 93.377832][ T5900] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.650024][ T5900] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 93.693763][ T5900] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.704907][ T5900] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.720345][ T5900] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 93.732049][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.749163][ T5900] usb 1-1: config 0 descriptor?? [ 93.773150][ T5900] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 94.037729][ T5900] usb 1-1: USB disconnect, device number 2 [ 94.037782][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 95.103041][ T30] audit: type=1400 audit(1764358875.238:236): avc: denied { read } for pid=6197 comm="syz.1.81" dev="sockfs" ino=10376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.124771][ T6198] 9pnet_fd: Insufficient options for proto=fd [ 95.235695][ T30] audit: type=1400 audit(1764358875.358:237): avc: denied { write } for pid=6201 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.279209][ T6204] loop7: detected capacity change from 0 to 7 [ 95.299121][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.308440][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 95.319176][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.328300][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 95.339006][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.348173][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 95.357099][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.366279][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 95.376066][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.385251][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 95.393276][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.402473][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 95.412573][ T6162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.70'. [ 95.445679][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.454909][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 95.464870][ T6162] netlink: 44 bytes leftover after parsing attributes in process `syz.0.70'. [ 95.490506][ T6162] IPVS: Unknown mcast interface: vetN1_macvtap [ 95.524159][ T6204] ldm_validate_partition_table(): Disk read failed. [ 96.397994][ T30] audit: type=1400 audit(1764358876.528:238): avc: denied { map } for pid=6210 comm="syz.4.87" path="socket:[10403]" dev="sockfs" ino=10403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.457117][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.466283][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.488787][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.498054][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.507575][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.516803][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.527914][ T6204] Dev loop7: unable to read RDB block 0 [ 96.533629][ T5900] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 96.542605][ T6204] loop7: unable to read partition table [ 96.601851][ T6204] loop7: partition table beyond EOD, truncated [ 96.614691][ T6204] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 97.808456][ T6226] bridge0: entered allmulticast mode [ 98.480430][ T30] audit: type=1400 audit(1764358878.208:239): avc: denied { ioctl } for pid=6240 comm="syz.4.94" path="socket:[9546]" dev="sockfs" ino=9546 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.563923][ T30] audit: type=1400 audit(1764358878.698:240): avc: denied { create } for pid=6245 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.589534][ T30] audit: type=1400 audit(1764358878.698:241): avc: denied { create } for pid=6245 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.591600][ T6226] pim6reg: entered allmulticast mode [ 98.721353][ T30] audit: type=1400 audit(1764358878.828:242): avc: denied { sys_module } for pid=6245 comm="syz.2.95" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.685580][ T30] audit: type=1400 audit(1764358879.808:243): avc: denied { ioctl } for pid=6258 comm="syz.2.97" path="socket:[10453]" dev="sockfs" ino=10453 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.826006][ T6266] netlink: 64 bytes leftover after parsing attributes in process `syz.1.100'. [ 99.889008][ T6266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.100'. [ 100.010852][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.093381][ T30] audit: type=1400 audit(1764358880.228:244): avc: denied { ioctl } for pid=6269 comm="syz.3.101" path="socket:[10485]" dev="sockfs" ino=10485 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.119936][ T30] audit: type=1400 audit(1764358880.248:245): avc: denied { bind } for pid=6269 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.139547][ T30] audit: type=1400 audit(1764358880.248:246): avc: denied { write } for pid=6269 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.169361][ T30] audit: type=1400 audit(1764358880.248:247): avc: denied { ioctl } for pid=6269 comm="syz.3.101" path="/dev/sg0" dev="devtmpfs" ino=771 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.204670][ T10] usb 5-1: device descriptor read/64, error -71 [ 100.465758][ T6278] overlayfs: missing 'lowerdir' [ 100.635115][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.695040][ T30] audit: type=1400 audit(1764358880.828:248): avc: denied { read } for pid=6282 comm="syz.0.103" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.799006][ T10] usb 5-1: device descriptor read/64, error -71 [ 101.018525][ T10] usb usb5-port1: attempt power cycle [ 101.267846][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 101.278856][ T6292] bond0: Unable to set up delay as MII monitoring is disabled [ 101.291528][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 101.300671][ T6292] bond0: Unable to set up delay as MII monitoring is disabled [ 101.338619][ T6294] bridge0: entered allmulticast mode [ 101.368230][ T6294] pim6reg: entered allmulticast mode [ 101.413954][ T6294] pim6reg: left allmulticast mode [ 101.447130][ T6294] bridge0: left allmulticast mode [ 101.452713][ T5874] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.746247][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.864673][ T10] usb 5-1: device descriptor read/8, error -71 [ 102.029209][ T5874] usb 1-1: device descriptor read/64, error -71 [ 102.603564][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.612673][ T5874] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.919012][ T5874] usb 1-1: device descriptor read/64, error -71 [ 102.949124][ T10] usb 5-1: device not accepting address 5, error -71 [ 102.963063][ T10] usb usb5-port1: unable to enumerate USB device [ 103.119803][ T5874] usb usb1-port1: attempt power cycle [ 103.377782][ T6317] bridge0: entered allmulticast mode [ 103.459074][ T6317] bridge0: left allmulticast mode [ 103.469030][ T5874] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 103.520345][ T5874] usb 1-1: device descriptor read/8, error -71 [ 103.540696][ T6320] overlayfs: failed to clone upperpath [ 103.783437][ T5874] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 103.837189][ T6326] kAFS: Can only specify source 'none' with -o dyn [ 104.021605][ T5874] usb 1-1: device not accepting address 6, error -71 [ 104.062026][ T5874] usb usb1-port1: unable to enumerate USB device [ 104.340455][ T6341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.121'. [ 104.858987][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 104.917933][ T30] audit: type=1400 audit(1764358884.988:254): avc: denied { watch } for pid=6337 comm="syz.0.122" path="/19" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.942388][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.323779][ T6354] tmpfs: Unknown parameter 'grpquo' [ 105.353912][ T6354] FAULT_INJECTION: forcing a failure. [ 105.353912][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.367223][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 105.367245][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.367253][ T6354] Call Trace: [ 105.367261][ T6354] [ 105.367268][ T6354] dump_stack_lvl+0x16c/0x1f0 [ 105.367289][ T6354] should_fail_ex+0x512/0x640 [ 105.367311][ T6354] _copy_from_iter+0x29f/0x1720 [ 105.367331][ T6354] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.367347][ T6354] ? skb_set_owner_w+0x31f/0x710 [ 105.367368][ T6354] ? __pfx__copy_from_iter+0x10/0x10 [ 105.367386][ T6354] ? __pfx_skb_set_owner_w+0x10/0x10 [ 105.367406][ T6354] ? __alloc_skb+0x1f2/0x380 [ 105.367431][ T6354] pppol2tp_sendmsg+0x438/0x5f0 [ 105.367460][ T6354] ____sys_sendmsg+0xa98/0xc70 [ 105.367477][ T6354] ? copy_msghdr_from_user+0x10a/0x160 [ 105.367499][ T6354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.367526][ T6354] ___sys_sendmsg+0x134/0x1d0 [ 105.367548][ T6354] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.367578][ T6354] ? find_held_lock+0x2b/0x80 [ 105.367613][ T6354] __sys_sendmmsg+0x200/0x420 [ 105.367637][ T6354] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.367656][ T6354] ? __pfx___schedule+0x10/0x10 [ 105.367686][ T6354] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 105.367735][ T6354] __x64_sys_sendmmsg+0x9c/0x100 [ 105.367755][ T6354] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.367770][ T6354] do_syscall_64+0xcd/0xfa0 [ 105.367787][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.367802][ T6354] RIP: 0033:0x7f73ead8f749 [ 105.367816][ T6354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.367831][ T6354] RSP: 002b:00007f73ebb68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.367847][ T6354] RAX: ffffffffffffffda RBX: 00007f73eafe6090 RCX: 00007f73ead8f749 [ 105.367858][ T6354] RDX: 04000000000001ce RSI: 0000200000005f80 RDI: 0000000000000005 [ 105.367868][ T6354] RBP: 00007f73ebb68090 R08: 0000000000000000 R09: 0000000000000000 [ 105.367877][ T6354] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001 [ 105.367886][ T6354] R13: 00007f73eafe6128 R14: 00007f73eafe6090 R15: 00007fff938b83d8 [ 105.367909][ T6354] [ 107.259784][ T6366] geneve2: entered promiscuous mode [ 107.265118][ T6366] geneve2: entered allmulticast mode [ 107.271787][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.289418][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.319455][ T1031] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.337951][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 107.347722][ T1031] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.380521][ T1031] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.453778][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 107.484170][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 107.507185][ T5881] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.522326][ T5881] usb 1-1: config 56 has an invalid interface number: 222 but max is 0 [ 107.531345][ T5881] usb 1-1: config 56 has no interface number 0 [ 107.539201][ T5881] usb 1-1: config 56 interface 222 has no altsetting 0 [ 107.562644][ T5881] usb 1-1: New USB device found, idVendor=2020, idProduct=2031, bcdDevice=3b.23 [ 107.581125][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.595873][ T5881] usb 1-1: Product: syz [ 107.604787][ T5881] usb 1-1: Manufacturer: syz [ 107.614584][ T5881] usb 1-1: SerialNumber: syz [ 108.283068][ T30] audit: type=1400 audit(1764358888.418:255): avc: denied { mounton } for pid=6387 comm="syz.2.138" path="/43/bus" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.478724][ T6392] netlink: 76 bytes leftover after parsing attributes in process `syz.4.139'. [ 108.527215][ T5966] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.536470][ T6392] netlink: 72 bytes leftover after parsing attributes in process `syz.4.139'. [ 108.551766][ T6392] netlink: 'syz.4.139': attribute type 3 has an invalid length. [ 108.559672][ T6392] netlink: 11 bytes leftover after parsing attributes in process `syz.4.139'. [ 108.901373][ T5966] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 108.932329][ T5966] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 108.945363][ T5966] usb 2-1: can't read configurations, error -22 [ 108.961211][ T30] audit: type=1400 audit(1764358889.098:256): avc: denied { read } for pid=6397 comm="syz.3.141" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.994945][ T6398] binder_alloc: 6397: binder_alloc_buf, no vma [ 109.019076][ T30] audit: type=1400 audit(1764358889.098:257): avc: denied { open } for pid=6397 comm="syz.3.141" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.046456][ T30] audit: type=1400 audit(1764358889.128:258): avc: denied { ioctl } for pid=6397 comm="syz.3.141" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.093206][ T30] audit: type=1400 audit(1764358889.128:259): avc: denied { set_context_mgr } for pid=6397 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.127893][ T5966] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.146008][ T30] audit: type=1400 audit(1764358889.128:260): avc: denied { map } for pid=6397 comm="syz.3.141" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.172922][ T30] audit: type=1400 audit(1764358889.128:261): avc: denied { call } for pid=6397 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.192017][ T30] audit: type=1400 audit(1764358889.128:262): avc: denied { transfer } for pid=6397 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.409615][ T5966] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 109.419742][ T5966] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 109.429020][ T5966] usb 2-1: can't read configurations, error -22 [ 109.435856][ T5966] usb usb2-port1: attempt power cycle [ 109.786691][ T5881] option 1-1:56.222: GSM modem (1-port) converter detected [ 109.811086][ T5881] usb 1-1: USB disconnect, device number 7 [ 109.839577][ T5966] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.843116][ T5881] option 1-1:56.222: device disconnected [ 109.884773][ T5966] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 109.902325][ T5966] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 109.920583][ T5966] usb 2-1: can't read configurations, error -22 [ 110.552520][ T5966] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.597552][ T5966] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 110.853573][ T5966] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 110.869428][ T5966] usb 2-1: can't read configurations, error -22 [ 110.876835][ T5966] usb usb2-port1: unable to enumerate USB device [ 111.574155][ T6417] [U] [ 111.577061][ T6417] [U] [ 111.579763][ T6417] [U] [ 111.582453][ T6417] [U] [ 111.592328][ T6417] [U] [ 111.595067][ T6417] [U] [ 111.597771][ T6417] [U] [ 111.600469][ T6417] [U] [ 111.604421][ T6417] [U] [ 111.607133][ T6417] [U] [ 111.609829][ T6417] [U] [ 111.612525][ T6417] [U] [ 111.614328][ T6428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.617579][ T6417] [U] [ 111.624800][ T6417] [U] !P4RPVew\gCyؤ}|c=a?'iT䜡w\ [ 111.631310][ T6417] [U] (/8łm!f8 b$g=)= [ 111.636942][ T6417] [U] UDElLm} 3zO [ 111.641788][ T6417] [U] WR`-'t [ 111.645661][ T6417] [U] UĞ[cߨ9ah2 8Y>ush>#vWUvjP*sxOUG?aI]%/ﭻodK}s˂.UTw+$%_LRśD/26Y5iDU8*9v~,+m~Ve8u,eyQT)vNd [ 111.664380][ T6417] [U] )V?AErO_(8I2ՖlK˿ak :ܹB&hb>vL6^`Ɛ %)@>.|A6 [ 111.674434][ T6417] [U] ,XaG6-gGT>˜H?$ϓXM( [ 111.681435][ T6417] [U] J>&{Z0BPp,_&BnyҰ>-hET-uGZk9Z#b :VsLƻ[ƁYEW|#0ˡV1kI:rZQǎcGB [ 111.697031][ T6417] [U] ײz۩)eoGi0M.冭1%8Δe@2~݅iR[F*A+ [ 111.704980][ T6417] [U] ˾k(T$!ڤhDg&h [ 111.710674][ T6417] [U] 3JR{p ,״iV9. 9|1H;>)\m Ԝ1?4"ZM*EFi,聯)aJȔ [ 111.730267][ T6417] [U] Nl8bc\ 9'='2 F;gRmaw| 579 ȭgTpkZŦb q]E BUs_iw 9%Q4zfx"3ChYƢO{|Gbt@^L}9z7>,{/gXʳyU^=&/hzb+?/~I'&mF =W빸.?C'LجǦ"oX!발Ŏ^D86׍K [ 111.759066][ T6417] [U] ю2㱫=0O%:/۪t}kH {Ϛqቦʅ22s׈|!WDN5;ae$M̡cae?7Ym(zyzs4>v'Zz$$fvnAuqh;*wQA f%y tV^`% !q*wwJ{;U/YF˦4E&v +椯A`/ʽ9n?m-_l$!Lv #c-+ܴ(Ur@|,3YdcALM=gnX_v>6,'ndc_Fk̠=!BS]2a{ɐB'6R#u )@,*Ct.=!$ ޛb0Կ'1VB?J-_ԣl1NB\ iBMn_(*}a`E^]f U\ [ 111.805976][ T6417] [U] G:gD*DV_5鸡 Fq˜%H yls>A)f̏l42Ϛ+S`1c L?UqݸL6[xt/PW 6Pm^NPmFȪ.4Gv$(h1qM [ 111.820355][ T6417] [U] \R7 %tI{Vûl(r1^Ƀ'j1Tӻݞh(~$ͥAq !gqR:&O$JNJM,|V| [ 111.832384][ T6417] [U] &3ܡuuhJ}:Y>2h+[<v,r|Zc _ЗˆS+1ktU,\nBt%;"{Ѩ ,Jk5 W [ 111.844417][ T6417] [U] yN [ 111.847422][ T6417] [U] pb5"ζዥD}Au[D5L^lj7V/ ,P$g׾YBMeDD+fw8C:%>M&nȞT˾=g.ބڼpH [ 111.860937][ T6417] [U] ֒k&Wލ#Z#Ww|Ifqe#b7޿ʵہYn6q:4TlZdJclTCh@q{~Y޿ Q󫮍'rB'Yo9E[7[ԽT kA0(q:A,Y/6O =D5 {+s-hW&T?1 [ 111.880775][ T6417] [U] Pq6ʋ/GVm(:z [ 111.885074][ T6417] [U] 6n@nza  [ 111.889109][ T6417] [U] Օ%px*_\#%% *[yR'&DE_:6^ ؓhnrX&3wf&Lb)wS [ 111.898274][ T6417] [U] hKrL[nL!GoপZr뎻" [ 111.904341][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.924690][ T6417] [U] =t#b⩣3Lh(XE 8R[;t6l&`੨ [ 111.932694][ T6417] [U] ^t&q%%z|'.^o36"L 1d^2Du,v)iR1˄Flj0)u [ 111.942032][ T6417] [U] dl,57ICO=]h 0<0"d|p@r@@f#zog8ߺ=3p 7s}2}e҇]zwq%(zp bR[=pr\L=ܕj-m [ 111.973927][ T6417] [U] wsJ⏞_mb~^i6Qq [ 111.978654][ T6417] [U] l8 [ 111.981902][ T6417] [U] pѝPq [ 111.985067][ T6417] [U] ?#mɦZn}Zi16ž:A#b мhϻ"4Av9#ƎIWWr0K%ga6¿vz@3 [ 111.996491][ T6417] [U] C2~\}Ab?lM~' y @Uc9F,&ׅ)ͅL(Io|f' rvmŰV~CkЄE| 1NZW [ 112.008619][ T6417] [U] |ץ8ުCЏvb5Q"`T]kA쓵_O;jr [ 112.050458][ T6417] [U] Z˙&,8[/ [ 112.054232][ T6417] [U] T1YiQrtBZUt*m+i2oBo ZiүSMV8BfMgYEywTh5|OAd*N=9YGiR[ȭۜ~9.7l!- [ 112.068511][ T6417] [U] +eh掤Vy [ 112.072631][ T6417] [U] {L\=FLFIqi0? [ 112.077623][ T6417] [U] *{Ӊ ckYh̩xd=b;=B4&\y?׈簚MhML/m[朄o BPe/j['~Kщ,W]-g{ԮDQǝgGzE5R%4 !,B偓9-|$3lA9I~'K*g s.Y z@u^28(J9dL]Z)8*z33yx+BeQfUDZ=i [ 112.154815][ T6417] [U] 5gVG0<ϓһ{BHbC%sIweKW 2X [ 112.162088][ T6417] [U] oza[ō3R?i2RYѿxxNtvWL;by,ja:Xc0[bfnO~zY60SSY[A<Lғ_jvR*q{)b [ 112.178198][ T6417] [U] G,S{˭s8R4A2h [ 112.183204][ T6417] [U] |nғ< KNb2,j/:b7;>98<5K6zwill쏃|g"螼ZҌ(}j\CD$-%,89A [ 112.196451][ T6417] [U] ]UЪzu%>,6U>ץg8~Cc n+ߌPi:|Iں( [ 112.205112][ T6417] [U] 7S@oL]B_'l0+:5ЫȢ [ 112.211787][ T6417] [U] /z@)Ejkd≘z3{#`"!Xyl0xעƩCChI0jю\Q!C?'S:[[3‰H7[#S訑M7؎JTk=KSJ?B[vS@N!e-_gOZB` [ 112.229810][ T6417] [U] 4mVh9$mqlX` [ 112.235151][ T6417] [U] G9!Eݾ]' [ 112.239971][ T6417] [U] †'P踀^b&I};i/hSʮШ<']]9$!w$Arnf|n.8Z. x+z]5BSY٤/ [ 112.252177][ T6417] [U] Bd?^m91vȋs+ݰ<%5鹍w~;: M@ @nn`2R-+ NsYT4.uDj~7_b .]'`U4ܓmjU[ & B [ 112.269857][ T6417] [U] dz7GHȸ7!h )D췡 =9xARH6oKLP#mh [ 112.279634][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.279710][ T6428] ------------[ cut here ]------------ [ 112.291325][ T6428] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 112.320055][ T6430] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 112.333409][ T6417] [U] !{E ]ыC#GsRL 0b 90 90 e9 4e fe ff ff e8 dc 1d 72 fc 48 89 ef e8 64 ac 18 06 [ 112.448824][ T6428] RSP: 0018:ffffc90003acfb10 EFLAGS: 00010286 [ 112.454934][ T6428] RAX: 0000000000000000 RBX: ffff88802589a000 RCX: ffffc9000c699000 [ 112.462954][ T6428] RDX: 0000000000080000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 112.471243][ T6428] RBP: ffff888142714000 R08: 0000000000000001 R09: 0000000000000000 [ 112.479286][ T6428] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 112.487269][ T6428] R13: ffffffff8c1cf480 R14: 1ffff92000759f65 R15: 000000000000187b [ 112.495292][ T6428] FS: 00007f88fe6546c0(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 112.504633][ T6428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.511625][ T6428] CR2: 0000000000000004 CR3: 0000000077f17000 CR4: 00000000003526f0 [ 112.519794][ T6428] Call Trace: [ 112.523083][ T6428] [ 112.526024][ T6428] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 112.531734][ T6428] ? __pfx_autoremove_wake_function+0x10/0x10 [ 112.537828][ T6428] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.543175][ T6428] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.549017][ T6428] ? drm_vblank_get+0x150/0x290 [ 112.553872][ T6428] drm_fb_helper_ioctl+0x156/0x1a0 [ 112.559009][ T6428] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 112.564630][ T6428] do_fb_ioctl+0x3d5/0x7e0 [ 112.569103][ T6428] ? __pfx_do_fb_ioctl+0x10/0x10 [ 112.574049][ T6428] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.579993][ T6428] ? selinux_file_ioctl+0x180/0x270 [ 112.585190][ T6428] fb_ioctl+0xe5/0x150 [ 112.589295][ T6428] ? __pfx_fb_ioctl+0x10/0x10 [ 112.593994][ T6428] __x64_sys_ioctl+0x18e/0x210 [ 112.598798][ T6428] do_syscall_64+0xcd/0xfa0 [ 112.604084][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.610703][ T6428] RIP: 0033:0x7f88fd78f749 [ 112.615131][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.634804][ T6428] RSP: 002b:00007f88fe654038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.643209][ T6428] RAX: ffffffffffffffda RBX: 00007f88fd9e5fa0 RCX: 00007f88fd78f749 [ 112.651173][ T6428] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006 [ 112.659129][ T6428] RBP: 00007f88fd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.667079][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.675050][ T6428] R13: 00007f88fd9e6038 R14: 00007f88fd9e5fa0 R15: 00007ffe60bdf538 [ 112.683014][ T6428] [ 112.686009][ T6428] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.693259][ T6428] CPU: 1 UID: 0 PID: 6428 Comm: syz.3.150 Not tainted syzkaller #0 PREEMPT(full) [ 112.702442][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.712499][ T6428] Call Trace: [ 112.715754][ T6428] [ 112.718669][ T6428] dump_stack_lvl+0x3d/0x1f0 [ 112.723257][ T6428] vpanic+0x640/0x6f0 [ 112.727221][ T6428] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 112.732480][ T6428] panic+0xca/0xd0 [ 112.736188][ T6428] ? __pfx_panic+0x10/0x10 [ 112.740585][ T6428] check_panic_on_warn+0xab/0xb0 [ 112.745495][ T6428] __warn+0xf6/0x3c0 [ 112.749358][ T6428] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 112.754633][ T6428] report_bug+0x3c3/0x580 [ 112.758944][ T6428] ? drm_wait_one_vblank+0x2f6/0x5b0 [ 112.764214][ T6428] handle_bug+0x184/0x210 [ 112.768515][ T6428] exc_invalid_op+0x17/0x50 [ 112.773003][ T6428] asm_exc_invalid_op+0x1a/0x20 [ 112.777823][ T6428] RIP: 0010:drm_wait_one_vblank+0x2f6/0x5b0 [ 112.783705][ T6428] Code: ed 0f 84 12 02 00 00 e8 08 1e 72 fc 48 89 ef e8 30 44 90 00 44 89 e1 4c 89 ea 48 c7 c7 e0 05 08 8c 48 89 c6 e8 4b 51 30 fc 90 <0f> 0b 90 90 e9 4e fe ff ff e8 dc 1d 72 fc 48 89 ef e8 64 ac 18 06 [ 112.803288][ T6428] RSP: 0018:ffffc90003acfb10 EFLAGS: 00010286 [ 112.809351][ T6428] RAX: 0000000000000000 RBX: ffff88802589a000 RCX: ffffc9000c699000 [ 112.817313][ T6428] RDX: 0000000000080000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 112.825261][ T6428] RBP: ffff888142714000 R08: 0000000000000001 R09: 0000000000000000 [ 112.833204][ T6428] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 112.841157][ T6428] R13: ffffffff8c1cf480 R14: 1ffff92000759f65 R15: 000000000000187b [ 112.849119][ T6428] ? __warn_printk+0x1a5/0x350 [ 112.853865][ T6428] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 112.859490][ T6428] ? __pfx_autoremove_wake_function+0x10/0x10 [ 112.865532][ T6428] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.870700][ T6428] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.876484][ T6428] ? drm_vblank_get+0x150/0x290 [ 112.881309][ T6428] drm_fb_helper_ioctl+0x156/0x1a0 [ 112.886392][ T6428] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 112.891992][ T6428] do_fb_ioctl+0x3d5/0x7e0 [ 112.896389][ T6428] ? __pfx_do_fb_ioctl+0x10/0x10 [ 112.901305][ T6428] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.907201][ T6428] ? selinux_file_ioctl+0x180/0x270 [ 112.912405][ T6428] fb_ioctl+0xe5/0x150 [ 112.916449][ T6428] ? __pfx_fb_ioctl+0x10/0x10 [ 112.921101][ T6428] __x64_sys_ioctl+0x18e/0x210 [ 112.925840][ T6428] do_syscall_64+0xcd/0xfa0 [ 112.930314][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.936178][ T6428] RIP: 0033:0x7f88fd78f749 [ 112.940564][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.960142][ T6428] RSP: 002b:00007f88fe654038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.968525][ T6428] RAX: ffffffffffffffda RBX: 00007f88fd9e5fa0 RCX: 00007f88fd78f749 [ 112.976476][ T6428] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006 [ 112.984419][ T6428] RBP: 00007f88fd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.992375][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.000327][ T6428] R13: 00007f88fd9e6038 R14: 00007f88fd9e5fa0 R15: 00007ffe60bdf538 [ 113.008281][ T6428] [ 113.011594][ T6428] Kernel Offset: disabled [ 113.015916][ T6428] Rebooting in 86400 seconds..