last executing test programs: 2m46.22034953s ago: executing program 2 (id=1208): r0 = io_uring_setup(0x130f, &(0x7f0000000000)={0x0, 0x209b, 0x10000, 0x3, 0x13c6}) r1 = io_uring_setup(0xf4a, &(0x7f00000002c0)={0x0, 0xe166, 0x40, 0x3, 0x20000004, 0x0, r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc1b0000400007012bbd700005000000017c00000400c2800c0001800600060065580000971b0280540211", @ANYRES16=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) accept(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fallocate(r4, 0x0, 0x0, 0x400001) close_range(r1, 0xffffffffffffffff, 0x0) 2m45.222072122s ago: executing program 2 (id=1217): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x6b, {"2e450fe0dfb805000000b9e2e3ffff0f010fc7b80050000066ba210066edc74424000d000000c7442402fdffff7fc7442406000000000f011c24350000008066ba420066ed66420f2900c4a3e144fe5e420f01cbc421ee586f00"}}], 0x6b}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) close_range(r5, r2, 0xafbc6a5fd814b66d) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000008f00304004000010203010902"], 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1}]}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x1, 0x3f, 0x2003206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 2m44.468721847s ago: executing program 2 (id=1223): socket$kcm(0x10, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x101}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x800008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf25efffffccff00000102000100080006000000000008000d0003000000ab9a7eee95"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) epoll_wait(r7, &(0x7f0000000100), 0x0, 0x6) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x9}, 0x5, 0x8, 0xb54, 0x7, 0x3, 'syz1\x00', "cf2fe434a57196e09426caff46dff3aafb653b9b28d189b2d215d304c4155a48", "4af0d10f2b5b363aaecaeaf813001b261ba9f4f3cc9bd09727f06eb98133507b", [{0x276, 0x3, {0x3, 0x2}}, {0x5, 0xc04, {0x2, 0x8}}, {0x2, 0x6, {0x1, 0x4}}, {0x2, 0x9, {0x1, 0x9}}, {0x8001, 0x5, {0x2, 0x80000001}}, {0xdccd, 0x0, {0x3, 0x1ff}}, {0xcd, 0x800, {0x1, 0xb}}, {0x7, 0x6, {0x3, 0x5}}, {0x0, 0xc, {0x1, 0x7fff}}, {0x0, 0x6, {0x1, 0x3}}, {0x5, 0x10, {0x1, 0x4}}, {0x8, 0x647b, {0x3, 0x8d}}, {0x0, 0x7, {0x1, 0x2}}, {0x3, 0x3, {0x1, 0x8}}, {0x4, 0x9, {0x2, 0x4}}, {0x3, 0x10, {0x2, 0x80}}, {0x8001, 0xf8b5, {0x2, 0x4f}}, {0x1, 0x1, {0x1, 0x7}}, {0x7b, 0x0, {0x2, 0x5}}, {0x8000, 0x0, {0x1, 0x5}}, {0x2b3d, 0x9, {0x2}}, {0x1, 0xf000, {0x3, 0x79}}, {0x6, 0x2224, {0x1, 0x8001}}, {0x7, 0xfff, {0x3, 0x4}}, {0x1, 0xc, {0x3, 0x280e}}, {0x0, 0xc, {0x0, 0x4}}, {0x0, 0x7fff, {0x2, 0x80000000}}, {0x1, 0x1, {0x1, 0x4}}, {0x0, 0x5, {0x1, 0x5}}, {0x8, 0x0, {0x2, 0x101}}, {0x8, 0x1, {0x1}}, {0x8001, 0x2, {0x2, 0x9}}, {0x7f, 0x8000, {0x1, 0x5}}, {0x5, 0x3, {0x2, 0x8}}, {0x7, 0x6, {0x3, 0x3}}, {0x2, 0x6da, {0x1, 0x7}}, {0x80d, 0x9, {0x1, 0xfff}}, {0x7, 0x6, {0x0, 0x1}}, {0x5, 0x4, {0x2, 0xf}}, {0xfff, 0x7ff, {0x3, 0x788}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0xc9, 0x64, 0x4, 0x1, 0xb, 'syz1\x00', "dd38c970da4c836584fc3423c5d52d163ef0f91ca343f877d99fba8a410e3313", "21cd3b6d7f431e85cdd37c7b92ecd8d7397a2d9cd7dc626149bd8a4e9ab75360", [{0x9, 0x40, {0x3, 0x7fffffff}}, {0x0, 0x10, {0x0, 0xfff}}, {0x5, 0x3, {0x1, 0x3}}, {0x100, 0x3ff, {0x2, 0x9}}, {0xe, 0x2, {0x1, 0x80000000}}, {0xe, 0x8001, {0x3, 0x9}}, {0x12, 0x1, {0x3, 0x648}}, {0xe130, 0x5, {0x2, 0x40}}, {0x200, 0x8, {0x1, 0x35}}, {0xff7f, 0x7, {0x2, 0xa47d}}, {0x800, 0x4, {0x3, 0x9}}, {0x4, 0x2, {0x3, 0x100}}, {0x8, 0x595c, {0x1, 0xfffffffd}}, {0x0, 0x8, {0x3, 0x4}}, {0x9, 0x3, {0x0, 0x3}}, {0x4, 0x3, {0x2, 0x9}}, {0x2, 0x9, {0x1, 0x7}}, {0x596, 0x40, {0x0, 0xb}}, {0x803, 0x88, {0x3, 0xac7}}, {0x2, 0x100, {0x3, 0x9}}, {0xcf6f, 0xfff, {0x1, 0x3}}, {0x6, 0x6, {0x2, 0xb}}, {0x3, 0x7, {0x2, 0x1}}, {0x0, 0x57, {0x3, 0x4}}, {0x2, 0x81, {0x0, 0x9}}, {0x8000, 0xa, {0x8ae8cd06705942bd, 0xe9}}, {0x74, 0x9, {0x3, 0x6}}, {0x1, 0x3, {0x0, 0x8}}, {0x7, 0x98fe, {0x3, 0xfffffffb}}, {0x7c, 0x3, {0x2, 0xa8}}, {0x7, 0xffff, {0x0, 0x7}}, {0x6, 0x6, {0x2}}, {0x4, 0x9, {0x1, 0x9}}, {0x2, 0x1, {0x2, 0x7fffffff}}, {0xfff, 0x8, {0x2, 0x1}}, {0x3ff, 0xfffd, {0x0, 0x865}}, {0xc, 0x3, {0x3, 0x1}}, {0x9f68, 0xdb83, {0x1, 0x6}}, {0xb, 0x6, {0x1, 0x9}}, {0x2, 0x7, {0x2, 0x2}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) 2m43.918879805s ago: executing program 2 (id=1224): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698", 0x79}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9", 0x7f}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000640)={0x87, 0x1, 0x4}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000b889e66b40973bb600c482620940200000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4500000004000000020000000400"/28], 0x50) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m43.824863266s ago: executing program 2 (id=1225): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0xffffffffffffffb6) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4000003e, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r7, &(0x7f0000000040), 0x0, 0x0) 2m42.173824508s ago: executing program 2 (id=1231): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x10000}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000080)={0x10000, "6898ec0c000000196644ccf2fdfc973ab6e8670009848076783b6bf6fa00", 0x1, 0x80, 0x0, 0x7, 0x2, 0x0, 0xdf, 0x6}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd70fffddbdf250400000008000100", @ANYRES32, @ANYBLOB="05000a"], 0x54}, 0x1, 0x0, 0x0, 0x2805}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab050103000101020301090224000100000000090400"], 0x0) 2m26.981540728s ago: executing program 32 (id=1231): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x10000}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000080)={0x10000, "6898ec0c000000196644ccf2fdfc973ab6e8670009848076783b6bf6fa00", 0x1, 0x80, 0x0, 0x7, 0x2, 0x0, 0xdf, 0x6}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd70fffddbdf250400000008000100", @ANYRES32, @ANYBLOB="05000a"], 0x54}, 0x1, 0x0, 0x0, 0x2805}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab050103000101020301090224000100000000090400"], 0x0) 10.751316106s ago: executing program 3 (id=1775): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4c, &(0x7f0000000300)=ANY=[@ANYBLOB="8785f2fb81cc1dd99c160979885dcc3245c539b06fb870fd9e1b00392bad24f05e98bd561cfb9970c534ce2413e9708013edac0d1bf94440a185552833b035aac3d7f5fad976dd85348df7828c6669efc745cffd6c5a3b5e6a55ecba36"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000400000008"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x19, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x400) fanotify_mark(r8, 0x1, 0x4800003e, r7, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) close(r10) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 9.600067156s ago: executing program 3 (id=1779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x40, "1642520b74664e01229250b9825870ca80933f9c3e40f70a69af2fd280a92f1a"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r5], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x23042, 0x1df) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 8.125214058s ago: executing program 3 (id=1783): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40), 0x5d, 0x4000000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/183, 0xb7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r6 = socket(0x10, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 7.935968613s ago: executing program 1 (id=1784): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0xb54, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f00000018c0)=[{0x6, 0x5000, 0x0, 0x0}], 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') openat$sndtimer(0xffffff9c, 0x0, 0x200000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) syz_io_uring_setup(0xafe, &(0x7f0000000480)={0x0, 0x3f9a, 0x1000, 0x2, 0x339}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000300), &(0x7f0000000400)=0x2) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 7.797775848s ago: executing program 1 (id=1785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$rxrpc(0x21, 0x2, 0xa) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) 7.253017614s ago: executing program 0 (id=1788): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xc2a9, 0x408, 0x2, 0x6a}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x9685, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x5, 0x0, @local, @mcast2, 0x8, 0x7, 0x2, 0x1}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf250400000008000200080000000500050000000000080003000100000034000180060005004e230000080006001e00000006000100020000000600010002000000060001000200000008000700", @ANYRES32=0x0, @ANYBLOB="0b06bbfcd313b345a0797aef16c096f379c754437db2bbb9a996461e2f3c696c0e114d53af923e2b33491f17b325c6d75f480ac38025e87b72b76e4546c48fa8d97e1d590c48c10f28c5bdd431d2e829ae432b5ba0e3944c560e71fd207b4ca4e20357db17c93b7b1e0139bc81206b830edf685cd41a6a4bcfadc1b850ddf97d", @ANYRES32=0x0, @ANYBLOB="0500020062000000060001000a0000001c0006800800060008000000060005004e2100000800060004000000050005000300000014000180050002000900000008000700", @ANYRES32=0x0, @ANYBLOB="28000680140004000000000000000000000000000000000008000700", @ANYRES32=r4, @ANYBLOB="060005004e220000"], 0xec}, 0x1, 0x0, 0x0, 0x24040052}, 0x45) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb", 0x7}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000028010000000000002900000004000000042100000000000007100000000102099f000800000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c50401f8801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0740000000010e7a01800500000000000000090000000000000004000000000000000600000000000000040000000000000000040000000000000b0000000000000005020a7e000100c910fc0200000000000000000000000000009311e80ee304ecb784ec4655260cecea14e49800000014"], 0x2c8}}], 0x1, 0x810) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000cc0)="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", 0x15a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) 7.144209991s ago: executing program 0 (id=1790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = userfaultfd(0x1) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c40000001900010500000000fbdbdf25fc00"/32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000002000000000000000c001c00"/116, @ANYRES32], 0xc4}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ad2000/0x3000)=nil, 0x3000}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x2800}, 0x50) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000100001041200"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) 6.231709952s ago: executing program 0 (id=1793): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xa, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', r6, 0x20, 0x20, 0x5, 0xd9f1, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x65, 0x0, 0x8a, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x1e000000, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, 0x0, 0x119) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="10031200e0", 0x5, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.2311011s ago: executing program 4 (id=1794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'wlan0\x00', @ifru_ivalue=0x6}}) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) (async) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8481, 0x98) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes256, 0x1, @desc1}) (async) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x40000, 0x0) (async) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x48400, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000240)=0x448be115, 0x4) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x3, 0xd3ab}) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000002c0)={0x5, 0x2, 0x4, 0x8, 0x48f4, {}, {0x4, 0xd, 0xa3, 0x80, 0x6, 0x4, "d3036a8a"}, 0xfffffffd, 0x4, {0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000340)={{r2}, "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"}) (async) r6 = creat(&(0x7f0000001340)='./file0\x00', 0x0) (async) listen(r1, 0xff) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001380)={0x1, 0x2}, 0x8) (async) write$cgroup_freezer_state(r6, &(0x7f00000013c0)='THAWED\x00', 0x7) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0xb, &(0x7f0000001400)="25868ea415e686695b6e61f51454cf6d1320d5be678a96b04d3b79d9122865431263bc8c07f5e04e740dbed47744e71a514e13a69bb8c5989109814d96fc8ee592160133ddf27031593feb434d0c44b944a5c4835ba66e55bf43a156bcfcbe0f24a18cb8854ec009eeef917213062d192f", 0x71) (async) read$rfkill(r6, &(0x7f0000001480), 0x8) setsockopt$inet6_tcp_buf(r6, 0x6, 0x21, &(0x7f00000014c0)="91ff35b03bc96a4ff390da97a6a8b89581eb325ba2b500509ae3ca3c113b4355d9546871609ee1f4e44a53cc9b519fdd997a04b3bd195088cac4b7fb7dc564bcf20cd7b2726d7f6663f6baf962cf24af6ddaaebd9a4ce71be30036add9e554cc5c8ee2b45dde67a4d60f43eb1a7ff05a26ca645ac0f7bf2dc70dc06679f1d9b3ae174b5b193f51838f", 0x89) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001580)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x9}}}, 0x84) (async) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000001640)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x6, 'geneve1\x00'}) (async) connect$unix(r6, &(0x7f0000001740)=@file={0x0, './file0\x00'}, 0x6e) (async) write$snapshot(0xffffffffffffffff, &(0x7f00000017c0)="68f1baa77e7a47ef8e3ba69862978c2f8e8a9cdd516f9b140b9e6cffb68d293987de1edcb5328ff4580bdc0ee9b94d844298365fcd5fd8a2443ee0b375f2a28c92fa30dfc95133c7c4f267b10d689da099150f6ff378f6caf5646ee365279e307d8a4dfe197e6973f9ef0808dad7e6", 0x6f) getpeername$packet(r6, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001880)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x7, 0x7, 0x9, 0x3, 0x2c1, r3, 0xc, '\x00', r8, 0xffffffffffffffff, 0x3}, 0x50) (async) r9 = dup(r6) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001bc0)={0xac, 0x0, &(0x7f0000001ac0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001940)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r9}}, &(0x7f00000019c0)={0x0, 0x18, 0x30}}}, @clear_death, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001a00)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder, @fd}, &(0x7f0000001a80)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper], 0xd, 0x0, &(0x7f0000001b80)="63b4c7c58b5aa8b870613fbdcc"}) 6.190757146s ago: executing program 4 (id=1795): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 5.990974269s ago: executing program 5 (id=1796): epoll_create(0x6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x100, 0x14, 0x1c0}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x3516, 0x2, 0x0, 0x0, 0x0) 4.925202408s ago: executing program 3 (id=1797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) mlock2(&(0x7f0000440000/0x2000)=nil, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigaction(0xd, &(0x7f0000003a40)={&(0x7f0000000000)="ca00d1c441ef096ec866400fde0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18800000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000014}, 0x40012) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc5, 0xc}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x32, 0x0}}], 0x1, 0x0) 4.823825188s ago: executing program 0 (id=1798): socket$rds(0x15, 0x5, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x8801, 0x2b, 0x14}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, @in6={0xa, 0x4e22, 0x7, @empty, 0x4}, @in6={0xa, 0x4ea2, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x6}, @in6={0xa, 0x4e23, 0x2, @empty, 0x3}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x6}, @in6={0xa, 0x4e20, 0x2, @remote, 0x6}, @in={0x2, 0x4e21, @loopback}], 0xc8) socket$nl_generic(0x11, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000640)=""/213, 0xd5}], 0x1, 0xc1, 0xffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x39, 0x6, 0x0, 0x12, 0x7, 0x18, "3282290166e1c42c06b581afb61774159cbcbff7e0ed712b39c58cb939a4632098a549a17326f13586abd7b1ea83934614c7bb40fac008d47538a181635286c4", "ff315e9bd85c131b800903dcc706a1c239495e31a7f2e9878954e49433a1b6086c848c4bc021cdcbc2d442d50289473324f99c02ef6f70cf732bfec005d429ea", "15c82a7037d7d37b2814ab823ec97928190cf05e619e00", [0x55, 0x7663]}) r5 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x4042, 0x100) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r5, 0x0) ioperm(0x5, 0x8, 0x8000000000005) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r7, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_delete(r8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.82310173s ago: executing program 4 (id=1799): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x130, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe168}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd173}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x20048014) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000140)={0xfffffff7, 0x10000, 0x7ff, 0xd7, 0x0, 0x3, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRESHEX=r5, @ANYRESDEC=r6, @ANYRESHEX, @ANYBLOB="4b8c96844866ece40e98b573f3c91bf223160e670cd8647399e6cd2c383a4e746630a80ba8e4d99a96a0e70e14ac1263875c4392321b9fda3cc21f677ab47ad67da5ea10ee5388d748e23a9bd80dc3603ae2496ee19d828a092a2fca20d94dac612eb7bdfb7ff54d5e1adc7fe34d44a6827d207840f908b1771948ed2b61d7035ea6515f86844522d49f7327be20b5e6ff5c79", @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5], 0x0) 3.997639178s ago: executing program 1 (id=1800): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\'\x00'/12, @ANYRES32=r1, @ANYBLOB="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"], 0x20) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x101700) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r0, 0xffffffffffffffff, 0x10, 0x20, 0x0, @void, @void, @void, @value=r2}, 0x20) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x1411, 0x105, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netpci0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c57, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x2625, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x1, 0xc000159}) 3.806839558s ago: executing program 4 (id=1801): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3], 0x48) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) 3.749463158s ago: executing program 0 (id=1802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x40000) socket$rxrpc(0x21, 0x2, 0xa) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) 3.50912033s ago: executing program 5 (id=1803): recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}], 0x1}}], 0x1, 0x10000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 3.443065801s ago: executing program 1 (id=1804): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="dcecfffff0000000000668afc76e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.667205934s ago: executing program 5 (id=1805): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000280)={0x28, 0x400d8b2b3cdc6778, r1, r3, 0x27b402, 0x1, 0x9, 0x3428ec}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$packet(r6, &(0x7f0000000080)="4e0914beb0b3dea54569389a0e450313e3be2b108063767ae195c2e0a3285c8d8d24b2c72f56772f61d49bd1ea0b2b800e3e3518a4ddfdd7e5a5626f899ad01df8ff2c594cc4dd2dcbd039432b4d6c0b", 0x50, 0x8000, &(0x7f0000000140)={0x11, 0x1c, r5, 0x1, 0xe6, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) accept$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x18, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314142}) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.634558584s ago: executing program 1 (id=1806): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000c22135a5ef8d83220000000000000000000000000008000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x24, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x2, 0x3, 0x5, 0x170483956c1114a1, 0x100, 0x4}, @printk={@x}]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x54, 0x0, 0xc08}}, 0x120) 2.250552184s ago: executing program 5 (id=1807): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x3f3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, 0x0, 0x0) syz_open_pts(r2, 0x42) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_io_uring_setup(0xb7e, &(0x7f0000000500)={0x0, 0x38ab, 0x10, 0x0, 0x1e6}, &(0x7f0000000340), &(0x7f0000000100)) 1.379198858s ago: executing program 5 (id=1808): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(&(0x7f0000000480), 0x9, 0x100) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x8, 0xbdb], 0x0, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0xee00]) read$FUSE(r7, &(0x7f0000003440)={0x2020}, 0x2020) 1.0941994s ago: executing program 3 (id=1809): mkdirat(0xffffffffffffff9c, 0x0, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x8a441, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="f80000001600850200000000000000002001005b0015a48d032f3c1e73ffffffffffffff00000002a6000002000000000000000000000000000000000000000000000000000000926fa51d593114577fee45ff0a215ec6e4e8e814329da30bd89bbad1a2b988f7a3c98f3af15c888823bce1d4db5691792402ade60c43471e80068e5d56faa148e318bc69a0f51a91e442a47493ffde80eac02358ea9ad1d67dc84a40270a5f9247dc4a0dcd7233f956f236e3ab6e9c7263615cb7ba619f0b806b7345fc7269c1366628d2996aba660baf0fc9123548347e8ada976ad785d413ad508e848f4fb260f22713f7ec5c386211b8fb8456e3668da01edd598415d56e6a32aba7da5fe0ed4649dd45567c9cebcf0e937bf51463a54ace57a83d3611ad46377c023927431282028a3125e1bf17f247f1eadbfe387315d2b685a5c463d40aba89341ca3a4a764dddb90850804b79c37", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x200, 0x0) read$msr(r2, &(0x7f0000019680)=""/102381, 0x18fed) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000100)={0x2a, 0x1, 0x8000}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x0, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.07339384s ago: executing program 4 (id=1810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r5, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) 966.953582ms ago: executing program 3 (id=1811): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0xfffffffd, 0x8, 0x1, 0x6, 0x100, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x80000b) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1d}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40000000000012d, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004890) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40850}, 0x400c042) flock(r6, 0xe) socket$alg(0x26, 0x5, 0x0) 253.462067ms ago: executing program 0 (id=1812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="a40100005bc4a4718bd0e9640d98f52eab8ea2d3e5909000e5e17678f3dbc70000f600"/44, @ANYRES16=0x0, @ANYBLOB="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"], 0x1a4}}, 0x20000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000400"/15], 0x48) mmap(&(0x7f000039c000/0x6000)=nil, 0x6000, 0x4, 0xab9f1d0e47981691, r5, 0x2c9ab000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r7, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 119.172429ms ago: executing program 5 (id=1813): iopl(0x3) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0xfa}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000580)) syz_usb_connect(0x3, 0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x9eb62000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000001180)="6cd84ee85d5b38e5d35e2c1b4134f0119cb0d7e984db8598f0e8bae85264323187558085045092f64997828eac51a3c51e6a454083a2f47e4c45f53ed6849903ebdecadc7250180e43407e3c8d2a111876f1806479eaf69adcae70a70af0266eea1f751821c6714f9cfc5c1c65e454db6c732e51be80e840e73fe3dbbec656e69c13e8a6df33ed8224ef869d82f5c46b60f5ef4e7bf7030e1d57cbd76c68eed2fd5ae81a0371071f033830e4dac38809bff5a93e2f6ee1afdc987d5fbf3c49b58aca3bba4c811558563cd25e80af76e10925f0698e0f97dcb96dee7a4e93b2d50ece37ee9f2ea356cc60758d5ead2aef85c41cb7fac4f34fbaff4f8bac6b2f910159c5a0840fc2c2a0066de1e81c785e4d0fe09b6641faa7c47c93ccb8263a948a27076eacdcd1a8f4478f34285b7803529c4d388a36a45044fac3f18c7064065db10caf6f429b78de15e72a3251dde63339d4a519c97c3f90f76d8d51edd72e62bcb7e2e77c606f031104479e310c49d7c2223f728c60a942b5d7bc69baa03af908cb018965b866067b39af4eb7221aefad54c61c08c093489954d01922a4afb9724fdcbf178ffd260bae2ec9c7824179ee4633481e6e7c61514966160f6663d63dd0d8736ae9defd80ef4d4f68625fb27c263bcb96a15ece750c69e938a3bc7ec4d4bae98bb79819bff89cc208aae1ec62b4fa653252c67e581c18e491dd79f6d699fc0ce9137e77ab8987ab35c7abc3a913c5de2153884560deb12e5628d4274bb62270093d49005ab438f79671eae39d0e20126f8b0da217dba7cdf9dc348a3e52197186da1ebbb9a1a29976bb78ef00ea58c2ffd01b135d6172a8c87c49be8122320151af4f9dbc12afc142ff73de39a63cbd6d155157bef956abd062949e574727900483aa41c543840d0d7fbfa53f494ea37ee405abfcba0f33e7ba0ef9ba89c616341603d4c7d6e1fa2a3b1aa13ad7c9c7b6b16cab97b2b91eef366c61ee0767faba6d0b78bd6daf4b6aebd2d6048f8f595babd01de05cad14a64fff729a23066fb918c54d54128e5eada304b16e134fb2ed99d4efe4966404b0dba83bd57cb76c6d5156ffaf3df7db6d9a9c6ea014c96aed99f016f50b49c4f5ea5276ff635f46f37aaac517be5e61a43831f918b5443208e5f6b6eed403cba96b7fb91a8cad4fb6c5586e18a53954f7e962f8a7f64dde64d6951e0b454e0dc808bdd1b5a16f6785c27021803e4a8f2127ca589e1d8974fcf973cc3189cad5fcd78a9be6a752198e160998e6f221b123d4b530ec90d15e3554c7a404b6cff47213dc71b1eeb8903ff6c21b9326ec6111cdee47ce60a38f9374a7fa415428ced2599dd7581cbf452725b57eafde50ea2b380e2f842e79f45b63b0c0507ad76aeca5e4daa10518f511c2b14c5790aa6436c03eacc6613f0e2f4c615ea2242cb1025c5d77004bd26642eac0df9e135f2c86f254978209c5d6dae9b3a74916530741d071da3f79883454cb967105425ab127549dcf9d3a2ff6e752491fd181a7960561b6f6cdd39fd0e9a1feb6ae8a970b768b57e16d15f2dfa17d44b08b3089cb3271df3992a30236f2e34d41a892f083d574cc66e57a7f91bb0e07d0ff326ca1b7f54f150fc18e92b245f9cd816a806147e6ba27a907bac1a49cb921748dbf1b8e575ef3820602583954108146a74f46b0eb03dd5b0ab1b8605a091f7d05cfb5de5b8b70690162f43fe312640df0166bcd4538d67d94d92c5b787d74770689214dbfd76577abbf7e7705a57504d488e4eaac4a2324efa996d9176dad0666c4921f45baf8368c78742532202934831f57ec1dfd974fc9128918ae96579257324f63f353439eea037f44e6617114f862bef214a77569ced2e3df25e977cdb257000026c638f2a4a9e80fada09d3260df553a091225091d858c6abe90e34c138f47e71ec72d5e25815f31f77cf4ee820bf665cfe0804e5b0ef0d0e2f9434cf157e56e27eacbca45c1730c65d31f8f5d9311d9e9ef67cb54f49778a9fce7a284362accc7a0d5b456567086fc0ad1c6aee2b704f14f05e9d0e4672fcf721bc694b5174f6ebdb97ecb72367ad17b8a5ec795f0dca8b42a8ef3765eedb2af44edd8c6124257e11e7ecfad68436411636699b7acf603efc4f6490af4d23faaaa2bd4c9faf8c61dfc12dc80e88d9c3201d4f2c8d65f0e8c8859d91c0be9cc2d627d5d52f1b089f456b30e0f3aaece2c4536e3415d877122d77117de5ee3f5a6b1ebeb624e64d6ee487b82c4e4a59171400878178ec13fd38c9932b3d935700b42c25e11e2b198811370dc84c7772a9d2ff7ac40153a3bb5493623fb5c48e49ec50b42894dc7d6a91ff9d68f62bb6753ff86a6a37f390bf68805fa3ba9c65585a4a037f4997290dfbd3a6b24de38775faa723990acb524a90deaa636f7eecbad960150791428e42be2a8ec06d64a7c101aaeb7188a8c1cd5a233fe5d2d4582a27abdca694ce62cbec3ec1c8528a3e78031ae6e390df9fc7f8a2638905205fc8685f126b4460454f672caf9a24448e3c0f0517b1b79e5fba47906c395e14296bcb006a4a7a631eb7ef68abbcd5ceefc303a5293c82037e86071ea8d3b6bb22b42a44cbf048f1c5fd79a8330955564886bab8673d04cfaaffa133825199dfc133f77a7cc0a36d37b38091912a7d80c569940c6e2b5feffaf2fd0dd82659c760d822f8629fba3098d7e533339a34042a955b3be6d007c616e4c13eeccba6f87a5de21b2dda7a3a6ff43e82cafe34a5666f3b705808c2fa285b5e8dac0f78e9cc95bacbe018178ca7c5107326b0567ef6abf9b180d47dfe30864793db6dcd7b944c05d0c059c86b176e7a0e7f5726a9318a131d850dc4335d5938917e1b4fed1a0ce22b6e49905d599d133e17da9174f0fcd4d34d4ddb938545ae042af60d113bbfe878407936be8a2b4224478fa0fb2be211a789c95844ee5160de9001abb0e9e401e1218a60a781807de4198f67ecfc38fa93e046cfb920c23cde38d2568950e3396804f6ec81317ab0cefb90ea63a2f14146a6fa36a45600491e3361e90a539b8179e18d36688f405e3deedbc146ba353b812c88683152b64f06b11988635e95b419f21bc655250b7c896b2b06000f9e6e699c96b68e3798cdd1bdf8919bb62a9b61616633ec7249925c45e886fb93af85258fe16bbb380c6872b2ec84d4c8d30cadda25b0eb58d285e50cd19983e0d434604af85d692a8feed9a229e38c019bd4269cdea4fd31593cef43cbfec75304a405c46904e2a7ea7bbda177597e2fca6ce9dade9069d633603cc4986ab4e23d5ac3e9d911f87bd45e820a2a63f915539dee5e1e87bb00ca9032a6f28bea28ecfee8c4c26a007f7a32d17d2ebfb7a564981cff34a704f887feec685d16d4b56fe85129bc953c3b791b2d0849a513df6df1bb81215d456c4578e4db1920c8cd6740bab66380b4ee866f07119586f3fad489f781757a2e2ecc5e8210167fc0fa095e1b56f6eb7144d63f0eeaf50ac7340718db3a3003fe31b83a6efc2b8956f55a36f99cc1562edf6f477a82afbfe7c3b697e7b54a21f4832d3f9c1ce6e0af7a241ee38de1fbc7c02a1172a0b3da13d1c2ef623ab522bd6d5902b9d7d6df49eb3d1c2c2f5fc8dd589fd6d8eecca5cb5d0dc0942ddbf5bcb7b86da27df7e6402a298bfdce48dcc0f01dd74baa8203fef0e81e1b2db2343966f5d2cdd920c3a583386122fc1241e514496c1e4de6df95e71b186d22552fb3ad92b84aac1ea3a0b47a37e55adac82c5aa68c19d2756e5284add838ca507b1f678dad52bcb944d0f5f1057b74d9664ba6cd1408e676da1abcdf486235271b02355c7a78967972833cf5686a3e412e9af05baa9764669fc0a42371530233782cfc05953a9fc568adb8854dbfd560e469fe7ad67dc0e535dce286c41886c339d57f3dad264653e66a2cff47c4602d8b74bad233f0b5955a4f453e3e00ff444710d34ca37cadb6b3d9a2303c7bf8f1336a563b3ac0a26972857486ae7d92533c3b16eafc2cb175b8496ae223508589872db9203b209ef2dcaf2326d766137f2435a38602e41d3405e4c3254859037b1b5eb945cf84f7ccacc531675efdf1911f833e4138bfda4cae329a8b20dcd63747c7ae195059b1f59cd36b116402c3eb349e6fbae350b24d2a408fef61c201dc48e6f3c60fa78d20b26a3493df538a0c94770636ffbb0b6250f2f7bbb80d34af278a8c783df7a7463117e7d512579ee5562722ef4812e48b3b55209c749b1fa77fb3960722ad8444d9480bba30ced122b640af676fa186f1be033423318a7c1788185bde34cebbdd47e13eb6e6c949ea4bba411964440735664448934984f7dac58bf7024b8e71b88df7e0cb1b76bc0cef7522809a36ec2bc067dfab803b4ee8821baa5e557edc716d8bf002c9e8aab78e1a5af8bc58078fa256d3321a55481f36f45fb508a397e757d7b7b287830e362888b7cbff976bc70698024d838e5dba6e6813152a178c80180b306b2f4eb8cbe40f800bcbce51a845b6fcf70f225b90bc34bc36f68dd2b64c1b389e0a9f744615bfdcd683e8d850c635a295b6db75dbf1b8b072454d91eb08381e1018ea625462d52d44b2ea064ae6f5922fba6d326711a0ddbf091a885", 0xcd3}], 0x1) setns(r5, 0x24020000) r7 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) r8 = syz_pidfd_open(r7, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7) setns(r8, 0x10000000) gettid() r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e64000000001400028008000200", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) 42.164757ms ago: executing program 4 (id=1814): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmmsg(r1, &(0x7f0000000ac0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x82) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f00000000c0)=""/40, 0x28) setresuid(r4, r4, r4) r8 = getgid() r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000004b80)={0x648, 0x0, 0x0, [{{0x2, 0x1, 0x1a, 0x67ab, 0x5, 0x4, {0x1, 0x0, 0x1000, 0x9, 0xfff, 0x9, 0x17, 0x0, 0x9d, 0x8000, 0x5, 0x0, 0x0, 0x9, 0x3}}, {0x2, 0x7fff, 0xf, 0x4, '.[\')@[&)\'^%%+/\x85'}}, {{0x5, 0x1, 0x2, 0x98, 0x3e, 0x94, {0x0, 0x1, 0x5de, 0x3, 0xf1ea, 0x2, 0xd, 0x0, 0x8, 0xc000, 0x10000, 0x0, 0x0, 0x4, 0xffffffc0}}, {0x3, 0x67a, 0xc, 0x5, '/dev/nullb0\x00'}}, {{0x1, 0x3, 0x2, 0xfffffffffffffffc, 0x21f6bf01, 0x9, {0x2, 0x5, 0x6, 0x8, 0x0, 0x0, 0x7, 0x9, 0x80000001, 0x6000, 0xffffffff, 0x0, 0x0, 0x0, 0x2}}, {0x6, 0x4, 0x0, 0xd02}}, {{0x3, 0x3, 0x100000000, 0x2, 0x9, 0xd4, {0x2, 0x5, 0x4, 0x1, 0x6, 0x0, 0xb, 0x6, 0x3, 0x0, 0x800, 0x0, 0x0, 0x8, 0x4}}, {0x2, 0x8000000000000000, 0x0, 0xfffffff9}}, {{0x5, 0x2, 0x3b1, 0x0, 0x4, 0x3, {0x1, 0x400, 0x1, 0xce9, 0x5, 0x9, 0x4a4be1c2, 0x1, 0x7f, 0x6000, 0x4, 0x0, 0x0, 0x8, 0x7fffffff}}, {0x2, 0x1, 0x4, 0x2, '.-]]'}}, {{0x4, 0x3, 0x7, 0x10000, 0x2, 0x3, {0x6, 0xea6, 0x9, 0xfffffffffffffff8, 0x1, 0x6, 0x1, 0xb5, 0x7, 0xa000, 0x7, 0x0, 0x0, 0x0, 0x3}}, {0x5, 0xaee, 0x3, 0x2, ':)\\'}}, {{0x3, 0xe, 0xe, 0x40, 0x0, 0x2, {0x5, 0x1, 0xfffffffffffffffa, 0x9, 0x2, 0x6, 0x80000, 0x9751, 0x6000, 0x8000, 0xa, 0x0, 0x0, 0x1, 0x9}}, {0x1, 0x6, 0x1, 0x200, '@'}}, {{0x1, 0x2, 0x7, 0x5, 0xbf, 0xe0f, {0x2, 0x6, 0x4, 0x10000, 0x7b, 0xfffffffffffff000, 0x7f00000, 0xd, 0x6, 0x6000, 0x101, 0x0, 0x0, 0x2, 0x3}}, {0x0, 0x0, 0x1, 0xb3, '\x00'}}, {{0x1, 0x0, 0x80000001, 0x8, 0xb, 0x0, {0x5, 0x7, 0x3, 0x1ff, 0x40, 0x200, 0x10001, 0x40, 0x0, 0x1000, 0xa, 0x0, r8, 0x6, 0x200}}, {0x2, 0x8, 0x0, 0xdec}}, {{0x0, 0x2, 0x3ff, 0x2, 0xffffffff, 0xfffffffd, {0x2, 0x80, 0x8bb, 0x40, 0x800, 0x100000000, 0x4, 0x7fff, 0xae, 0x4000, 0x7ff, 0x0, r10, 0x5, 0x2}}, {0x2, 0x4, 0x6, 0x6f2, '.#%+.$'}}]}, 0x648) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 0s ago: executing program 1 (id=1815): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) accept(0xffffffffffffffff, &(0x7f0000000240)=@hci, &(0x7f0000000080)=0x80) socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x24004800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x201, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) kernel console output (not intermixed with test programs): n process `syz.0.996'. [ 308.536838][ T9569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.945826][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 309.027866][ T9587] batadv_slave_1: entered promiscuous mode [ 309.078655][ T9588] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1004'. [ 309.090840][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 309.090850][ T30] audit: type=1326 audit(1763030055.401:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9585 comm="syz.0.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x0 [ 309.172362][ T30] audit: type=1400 audit(1763030055.421:1136): avc: denied { nlmsg_read } for pid=9578 comm="syz.4.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.907050][ T30] audit: type=1326 audit(1763030056.251:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 309.950845][ T30] audit: type=1326 audit(1763030056.251:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 310.001020][ T30] audit: type=1326 audit(1763030056.281:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 310.119511][ T30] audit: type=1326 audit(1763030056.281:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 310.155022][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 310.201595][ T30] audit: type=1326 audit(1763030056.281:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 310.228198][ T30] audit: type=1326 audit(1763030056.281:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 310.292532][ T30] audit: type=1326 audit(1763030056.281:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 310.360872][ T30] audit: type=1326 audit(1763030056.281:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 311.830010][ T9628] 9pnet_fd: Insufficient options for proto=fd [ 312.126036][ T9585] batadv_slave_1: left promiscuous mode [ 313.741746][ T9654] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1024'. [ 314.878501][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.712982][ T9673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.718492][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.725804][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.932713][ T9691] overlayfs: failed to clone upperpath [ 317.541071][ T9702] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 317.553722][ T9701] IPVS: stopping master sync thread 9702 ... [ 318.321427][ T9707] fuse: Unknown parameter '' [ 318.328888][ T9707] warn_alloc: 2 callbacks suppressed [ 318.328897][ T9707] syz.1.1040: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 318.349247][ T9707] CPU: 1 UID: 0 PID: 9707 Comm: syz.1.1040 Not tainted syzkaller #0 PREEMPT(full) [ 318.349261][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.349268][ T9707] Call Trace: [ 318.349272][ T9707] [ 318.349277][ T9707] dump_stack_lvl+0x16c/0x1f0 [ 318.349299][ T9707] warn_alloc+0x248/0x3a0 [ 318.349316][ T9707] ? __pfx_warn_alloc+0x10/0x10 [ 318.349331][ T9707] ? __pfx_stack_trace_save+0x10/0x10 [ 318.349351][ T9707] ? kasan_save_stack+0x42/0x60 [ 318.349362][ T9707] ? kasan_save_stack+0x33/0x60 [ 318.349371][ T9707] ? kasan_save_track+0x14/0x30 [ 318.349380][ T9707] ? xskq_create+0x52/0x1d0 [ 318.349393][ T9707] ? xsk_setsockopt+0x74e/0x9a0 [ 318.349404][ T9707] ? do_sock_setsockopt+0xf3/0x1d0 [ 318.349421][ T9707] ? xskq_create+0xfb/0x1d0 [ 318.349434][ T9707] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 318.349452][ T9707] ? xskq_create+0xfb/0x1d0 [ 318.349468][ T9707] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 318.349486][ T9707] ? xskq_create+0xfb/0x1d0 [ 318.349499][ T9707] vmalloc_user_noprof+0x9e/0xe0 [ 318.349511][ T9707] ? xskq_create+0xfb/0x1d0 [ 318.349525][ T9707] xskq_create+0xfb/0x1d0 [ 318.349539][ T9707] xsk_setsockopt+0x74e/0x9a0 [ 318.349552][ T9707] ? __pfx_xsk_setsockopt+0x10/0x10 [ 318.349565][ T9707] ? find_held_lock+0x2b/0x80 [ 318.349580][ T9707] ? selinux_socket_setsockopt+0x6a/0x80 [ 318.349592][ T9707] ? __pfx_xsk_setsockopt+0x10/0x10 [ 318.349605][ T9707] do_sock_setsockopt+0xf3/0x1d0 [ 318.349621][ T9707] __sys_setsockopt+0x1a0/0x230 [ 318.349637][ T9707] __x64_sys_setsockopt+0xbd/0x160 [ 318.349656][ T9707] ? do_syscall_64+0x91/0xfa0 [ 318.349667][ T9707] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.349677][ T9707] do_syscall_64+0xcd/0xfa0 [ 318.349689][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.349700][ T9707] RIP: 0033:0x7fe95138f6c9 [ 318.349709][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.349720][ T9707] RSP: 002b:00007fe9521c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 318.349731][ T9707] RAX: ffffffffffffffda RBX: 00007fe9515e5fa0 RCX: 00007fe95138f6c9 [ 318.349738][ T9707] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 318.349745][ T9707] RBP: 00007fe951411f91 R08: 0000000000000004 R09: 0000000000000000 [ 318.349752][ T9707] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.349759][ T9707] R13: 00007fe9515e6038 R14: 00007fe9515e5fa0 R15: 00007ffc85bab3b8 [ 318.349774][ T9707] [ 318.349778][ T9707] Mem-Info: [ 318.608551][ T9707] active_anon:23079 inactive_anon:0 isolated_anon:0 [ 318.608551][ T9707] active_file:18391 inactive_file:41225 isolated_file:0 [ 318.608551][ T9707] unevictable:17160 dirty:357 writeback:0 [ 318.608551][ T9707] slab_reclaimable:12159 slab_unreclaimable:98700 [ 318.608551][ T9707] mapped:33484 shmem:17870 pagetables:1211 [ 318.608551][ T9707] sec_pagetables:0 bounce:0 [ 318.608551][ T9707] kernel_misc_reclaimable:0 [ 318.608551][ T9707] free:1265351 free_pcp:20390 free_cma:0 [ 318.656423][ T9707] Node 0 active_anon:92316kB inactive_anon:0kB active_file:73564kB inactive_file:164696kB unevictable:67104kB isolated(anon):0kB isolated(file):0kB mapped:133936kB dirty:1428kB writeback:0kB shmem:69944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12196kB pagetables:4704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.695458][ T9707] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.730469][ T9707] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.760868][ T9707] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 318.785451][ T9707] Node 0 DMA32 free:1181672kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70260kB inactive_anon:0kB active_file:73564kB inactive_file:164696kB unevictable:67104kB writepending:1436kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:57484kB local_pcp:29692kB free_cma:0kB [ 318.821554][ T9707] lowmem_reserve[]: 0 0 1 1 1 [ 318.826347][ T9707] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.859966][ T9707] lowmem_reserve[]: 0 0 0 0 0 [ 318.866997][ T9707] Node 1 Normal free:3891052kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19680kB local_pcp:7136kB free_cma:0kB [ 318.908767][ T9707] lowmem_reserve[]: 0 0 0 0 0 [ 318.916931][ T9707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 318.930436][ T9707] Node 0 DMA32: 1310*4kB (UME) 1112*8kB (UM) 731*16kB (UM) 379*32kB (UME) 190*64kB (UM) 141*128kB (UM) 105*256kB (UM) 45*512kB (UME) 29*1024kB (UM) 3*2048kB (ME) 255*4096kB (UM) = 1198408kB [ 318.937127][ T9715] fuse: Unknown parameter '' [ 318.954100][ T9707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 318.967993][ T9707] Node 1 Normal: 215*4kB (UME) 56*8kB (UME) 49*16kB (UME) 142*32kB (UME) 42*64kB (UME) 12*128kB (UME) 7*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3891052kB [ 318.986788][ T9707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.997854][ T9707] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.008117][ T9707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.017804][ T9707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.027370][ T9707] 84542 total pagecache pages [ 319.032178][ T9707] 0 pages in swap cache [ 319.036399][ T9707] Free swap = 124996kB [ 319.041020][ T9707] Total swap = 124996kB [ 319.447283][ T9707] 2097051 pages RAM [ 319.484899][ T9707] 0 pages HighMem/MovableOnly [ 319.611440][ T9707] 428747 pages reserved [ 319.633099][ T9707] 0 pages cma reserved [ 319.809801][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 319.852771][ T9726] netlink: 'syz.3.1046': attribute type 10 has an invalid length. [ 319.860496][ T30] audit: type=1400 audit(1763030066.151:1180): avc: denied { bind } for pid=9719 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 319.894540][ T9726] veth1_macvtap: left promiscuous mode [ 320.069741][ T9731] tipc: Enabled bearer , priority 10 [ 320.078217][ T9731] tipc: Enabled bearer , priority 0 [ 320.413600][ T9740] netlink: 'syz.4.1047': attribute type 21 has an invalid length. [ 320.424402][ T9740] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1047'. [ 320.687636][ T9740] netlink: 'syz.4.1047': attribute type 4 has an invalid length. [ 320.696264][ T9740] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1047'. [ 320.936973][ T9749] fuse: Unknown parameter '' [ 321.251946][ T30] audit: type=1400 audit(1763030067.601:1181): avc: denied { wake_alarm } for pid=9759 comm="syz.3.1054" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.959886][ T30] audit: type=1326 audit(1763030068.281:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 322.077303][ T30] audit: type=1326 audit(1763030068.281:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 322.189498][ T30] audit: type=1326 audit(1763030068.281:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 322.339949][ T30] audit: type=1326 audit(1763030068.281:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 322.447510][ T30] audit: type=1326 audit(1763030068.281:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 322.525215][ T30] audit: type=1326 audit(1763030068.281:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 322.630409][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.129464][ T30] audit: type=1326 audit(1763030068.291:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 323.184504][ T30] audit: type=1326 audit(1763030068.291:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 323.245287][ T9778] netlink: 'syz.4.1057': attribute type 21 has an invalid length. [ 323.259869][ T9778] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1057'. [ 323.279207][ T9778] netlink: 'syz.4.1057': attribute type 4 has an invalid length. [ 323.295361][ T9778] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1057'. [ 323.432815][ T9780] batadv1: entered promiscuous mode [ 323.460121][ T9780] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.701726][ T9795] fuse: Unknown parameter '' [ 326.659082][ T9836] lo speed is unknown, defaulting to 1000 [ 326.823080][ T9844] bond0: option mode: invalid value (48) [ 326.853656][ T9844] bond0 (unregistering): Released all slaves [ 327.836235][ T9868] fuse: Unknown parameter '' [ 329.011036][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 329.011053][ T30] audit: type=1400 audit(1763030075.341:1249): avc: denied { read } for pid=9877 comm="syz.3.1084" path="socket:[19889]" dev="sockfs" ino=19889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 330.650188][ T30] audit: type=1400 audit(1763030077.001:1250): avc: denied { lock } for pid=9894 comm="syz.1.1088" path="socket:[20912]" dev="sockfs" ino=20912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.664976][ T9905] virtio-fs: tag not found [ 331.867303][ T9920] delete_channel: no stack [ 331.872512][ T9912] lo speed is unknown, defaulting to 1000 [ 331.878204][ T9913] ptrace attach of "./syz-executor exec"[9915] was attempted by "./syz-executor exec"[9913] [ 331.899859][ T30] audit: type=1400 audit(1763030078.241:1251): avc: denied { ioctl } for pid=9909 comm="syz.0.1087" path="socket:[20952]" dev="sockfs" ino=20952 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 332.098819][ T9927] fuse: Unknown parameter '' [ 332.105537][ T9927] warn_alloc: 2 callbacks suppressed [ 332.105546][ T9927] syz.1.1094: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 332.126954][ T9927] CPU: 1 UID: 0 PID: 9927 Comm: syz.1.1094 Not tainted syzkaller #0 PREEMPT(full) [ 332.126979][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.126989][ T9927] Call Trace: [ 332.126995][ T9927] [ 332.127001][ T9927] dump_stack_lvl+0x16c/0x1f0 [ 332.127031][ T9927] warn_alloc+0x248/0x3a0 [ 332.127057][ T9927] ? __pfx_warn_alloc+0x10/0x10 [ 332.127084][ T9927] ? __pfx_stack_trace_save+0x10/0x10 [ 332.127116][ T9927] ? kasan_save_stack+0x42/0x60 [ 332.127134][ T9927] ? kasan_save_stack+0x33/0x60 [ 332.127151][ T9927] ? kasan_save_track+0x14/0x30 [ 332.127169][ T9927] ? xskq_create+0x52/0x1d0 [ 332.127190][ T9927] ? xsk_setsockopt+0x74e/0x9a0 [ 332.127210][ T9927] ? do_sock_setsockopt+0xf3/0x1d0 [ 332.127240][ T9927] ? xskq_create+0xfb/0x1d0 [ 332.127263][ T9927] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 332.127294][ T9927] ? xskq_create+0xfb/0x1d0 [ 332.127323][ T9927] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 332.127355][ T9927] ? xskq_create+0xfb/0x1d0 [ 332.127379][ T9927] vmalloc_user_noprof+0x9e/0xe0 [ 332.127402][ T9927] ? xskq_create+0xfb/0x1d0 [ 332.127425][ T9927] xskq_create+0xfb/0x1d0 [ 332.127450][ T9927] xsk_setsockopt+0x74e/0x9a0 [ 332.127475][ T9927] ? __pfx_xsk_setsockopt+0x10/0x10 [ 332.127497][ T9927] ? find_held_lock+0x2b/0x80 [ 332.127528][ T9927] ? selinux_socket_setsockopt+0x6a/0x80 [ 332.127547][ T9927] ? __pfx_xsk_setsockopt+0x10/0x10 [ 332.127568][ T9927] do_sock_setsockopt+0xf3/0x1d0 [ 332.127601][ T9927] __sys_setsockopt+0x1a0/0x230 [ 332.127630][ T9927] __x64_sys_setsockopt+0xbd/0x160 [ 332.127652][ T9927] ? do_syscall_64+0x91/0xfa0 [ 332.127670][ T9927] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.127687][ T9927] do_syscall_64+0xcd/0xfa0 [ 332.127706][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.127724][ T9927] RIP: 0033:0x7fe95138f6c9 [ 332.127740][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.127757][ T9927] RSP: 002b:00007fe9521c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 332.127774][ T9927] RAX: ffffffffffffffda RBX: 00007fe9515e5fa0 RCX: 00007fe95138f6c9 [ 332.127785][ T9927] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 332.127795][ T9927] RBP: 00007fe951411f91 R08: 0000000000000004 R09: 0000000000000000 [ 332.127806][ T9927] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.127815][ T9927] R13: 00007fe9515e6038 R14: 00007fe9515e5fa0 R15: 00007ffc85bab3b8 [ 332.127839][ T9927] [ 332.127846][ T9927] Mem-Info: [ 332.341065][ T30] audit: type=1400 audit(1763030078.671:1252): avc: denied { remount } for pid=9909 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 332.411673][ T9924] xt_time: unknown flags 0xc [ 332.446423][ T9927] active_anon:13786 inactive_anon:0 isolated_anon:0 [ 332.446423][ T9927] active_file:18391 inactive_file:41229 isolated_file:0 [ 332.446423][ T9927] unevictable:17160 dirty:433 writeback:0 [ 332.446423][ T9927] slab_reclaimable:12167 slab_unreclaimable:99530 [ 332.446423][ T9927] mapped:34925 shmem:8330 pagetables:1235 [ 332.446423][ T9927] sec_pagetables:0 bounce:0 [ 332.446423][ T9927] kernel_misc_reclaimable:0 [ 332.446423][ T9927] free:1271094 free_pcp:22671 free_cma:0 [ 332.543184][ T9927] Node 0 active_anon:55344kB inactive_anon:0kB active_file:73564kB inactive_file:164712kB unevictable:67104kB isolated(anon):0kB isolated(file):0kB mapped:139700kB dirty:1732kB writeback:0kB shmem:31784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12528kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.612707][ T5928] Process accounting resumed [ 332.640133][ T9927] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.670233][ T9927] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.700269][ T9927] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 332.707125][ T9927] Node 0 DMA32 free:1184360kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55780kB inactive_anon:0kB active_file:73564kB inactive_file:164712kB unevictable:67104kB writepending:1732kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:68900kB local_pcp:37948kB free_cma:0kB [ 332.743051][ T9927] lowmem_reserve[]: 0 0 1 1 1 [ 332.747832][ T9927] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.809094][ T9927] lowmem_reserve[]: 0 0 0 0 0 [ 332.816848][ T9927] Node 1 Normal free:3891308kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19424kB local_pcp:7136kB free_cma:0kB [ 332.850328][ T9927] lowmem_reserve[]: 0 0 0 0 0 [ 332.873878][ T9927] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.972884][ T9927] Node 0 DMA32: 914*4kB (UME) 600*8kB (ME) 366*16kB (UM) 319*32kB (UME) 170*64kB (UME) 85*128kB (UME) 94*256kB (UM) 44*512kB (UME) 28*1024kB (UM) 9*2048kB (UME) 255*4096kB (UM) = 1184456kB [ 332.991783][ T9927] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 333.009841][ T9927] Node 1 Normal: 215*4kB (UME) 56*8kB (UME) 49*16kB (UME) 148*32kB (UME) 43*64kB (UME) 12*128kB (UME) 7*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3891308kB [ 333.121502][ T9927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.575368][ T9927] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.584893][ T9927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.594732][ T9927] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.604161][ T9927] 84340 total pagecache pages [ 333.608809][ T9927] 0 pages in swap cache [ 333.613556][ T9927] Free swap = 124992kB [ 333.617693][ T9927] Total swap = 124996kB [ 333.622162][ T9927] 2097051 pages RAM [ 333.625941][ T9927] 0 pages HighMem/MovableOnly [ 333.631134][ T9927] 428747 pages reserved [ 333.635278][ T9927] 0 pages cma reserved [ 335.904069][ T9978] fuse: Unknown parameter '' [ 337.417380][ T9993] dummy0: left promiscuous mode [ 337.484890][ T9993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.977379][ T30] audit: type=1400 audit(1763030086.321:1253): avc: denied { read } for pid=10025 comm="syz.3.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.473558][ T30] audit: type=1400 audit(1763030086.821:1254): avc: denied { getopt } for pid=10036 comm="syz.0.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.361189][T10046] tipc: Can't bind to reserved service type 0 [ 341.587507][T10059] fuse: Unknown parameter '' [ 341.669458][ T30] audit: type=1400 audit(1763030088.001:1255): avc: denied { execmod } for pid=10054 comm="syz.0.1132" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 341.763167][ T30] audit: type=1400 audit(1763030088.111:1256): avc: denied { read } for pid=10063 comm="syz.4.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 341.845242][T10067] overlayfs: missing 'lowerdir' [ 346.639402][ T30] audit: type=1400 audit(1763030348.985:1257): avc: denied { connect } for pid=10136 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.792736][T10141] lo speed is unknown, defaulting to 1000 [ 346.978632][ T30] audit: type=1326 audit(1763030349.325:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 347.141719][ T7129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 347.165659][T10149] xt_hashlimit: max too large, truncated to 1048576 [ 347.172659][ T30] audit: type=1326 audit(1763030349.325:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 347.199982][T10149] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 347.228383][ T30] audit: type=1326 audit(1763030349.335:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 347.390738][ T30] audit: type=1326 audit(1763030349.335:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 347.420100][ T30] audit: type=1326 audit(1763030349.335:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 347.450655][ T30] audit: type=1326 audit(1763030349.365:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 347.530210][ T30] audit: type=1326 audit(1763030349.365:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 347.626879][ T30] audit: type=1326 audit(1763030349.365:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 347.799926][ T30] audit: type=1326 audit(1763030349.365:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.0.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 348.725690][T10175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10175 comm=syz.2.1169 [ 350.482748][T10194] fuse: Unknown parameter '000000000000000000014230x0000000000000006' [ 350.784487][T10194] lo speed is unknown, defaulting to 1000 [ 351.514788][T10221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10221 comm=syz.0.1180 [ 352.039601][T10223] ======================================================= [ 352.039601][T10223] WARNING: The mand mount option has been deprecated and [ 352.039601][T10223] and is ignored by this kernel. Remove the mand [ 352.039601][T10223] option from the mount to silence this warning. [ 352.039601][T10223] ======================================================= [ 352.120853][T10224] overlayfs: failed to clone lowerpath [ 352.170844][T10224] tipc: Started in network mode [ 352.195065][T10224] tipc: Node identity 4, cluster identity 4711 [ 352.207591][T10224] tipc: Node number set to 4 [ 352.250166][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 352.250183][ T30] audit: type=1400 audit(1763030354.575:1321): avc: denied { mount } for pid=10222 comm="syz.1.1181" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 353.522265][ T30] audit: type=1400 audit(1763030355.875:1322): avc: denied { mounton } for pid=10244 comm="syz.0.1188" path="/248/file0" dev="tmpfs" ino=1332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 353.692980][ T9] Process accounting resumed [ 353.944598][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 354.528004][T10264] netlink: 'syz.1.1193': attribute type 4 has an invalid length. [ 355.095045][T10275] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1196'. [ 355.418745][ T52] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 355.485526][T10286] fuse: Unknown parameter '' [ 355.501790][T10286] warn_alloc: 2 callbacks suppressed [ 355.501799][T10286] syz.2.1200: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.568944][T10286] CPU: 1 UID: 0 PID: 10286 Comm: syz.2.1200 Not tainted syzkaller #0 PREEMPT(full) [ 355.568964][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.568971][T10286] Call Trace: [ 355.568975][T10286] [ 355.568979][T10286] dump_stack_lvl+0x16c/0x1f0 [ 355.569001][T10286] warn_alloc+0x248/0x3a0 [ 355.569018][T10286] ? __pfx_warn_alloc+0x10/0x10 [ 355.569034][T10286] ? __pfx_stack_trace_save+0x10/0x10 [ 355.569053][T10286] ? kasan_save_stack+0x42/0x60 [ 355.569064][T10286] ? kasan_save_stack+0x33/0x60 [ 355.569073][T10286] ? kasan_save_track+0x14/0x30 [ 355.569082][T10286] ? xskq_create+0x52/0x1d0 [ 355.569094][T10286] ? xsk_setsockopt+0x74e/0x9a0 [ 355.569106][T10286] ? do_sock_setsockopt+0xf3/0x1d0 [ 355.569124][T10286] ? xskq_create+0xfb/0x1d0 [ 355.569137][T10286] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 355.569155][T10286] ? xskq_create+0xfb/0x1d0 [ 355.569171][T10286] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.569188][T10286] ? xskq_create+0xfb/0x1d0 [ 355.569201][T10286] vmalloc_user_noprof+0x9e/0xe0 [ 355.569214][T10286] ? xskq_create+0xfb/0x1d0 [ 355.569227][T10286] xskq_create+0xfb/0x1d0 [ 355.569241][T10286] xsk_setsockopt+0x74e/0x9a0 [ 355.569254][T10286] ? __pfx_xsk_setsockopt+0x10/0x10 [ 355.569267][T10286] ? find_held_lock+0x2b/0x80 [ 355.569282][T10286] ? selinux_socket_setsockopt+0x6a/0x80 [ 355.569293][T10286] ? __pfx_xsk_setsockopt+0x10/0x10 [ 355.569306][T10286] do_sock_setsockopt+0xf3/0x1d0 [ 355.569323][T10286] __sys_setsockopt+0x1a0/0x230 [ 355.569339][T10286] __x64_sys_setsockopt+0xbd/0x160 [ 355.569350][T10286] ? do_syscall_64+0x91/0xfa0 [ 355.569365][T10286] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.569374][T10286] do_syscall_64+0xcd/0xfa0 [ 355.569384][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.569395][T10286] RIP: 0033:0x7f9f4c38f6c9 [ 355.569404][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.569415][T10286] RSP: 002b:00007f9f4d20b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 355.569426][T10286] RAX: ffffffffffffffda RBX: 00007f9f4c5e5fa0 RCX: 00007f9f4c38f6c9 [ 355.569433][T10286] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 355.569439][T10286] RBP: 00007f9f4c411f91 R08: 0000000000000004 R09: 0000000000000000 [ 355.569445][T10286] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.569452][T10286] R13: 00007f9f4c5e6038 R14: 00007f9f4c5e5fa0 R15: 00007ffd427b8ef8 [ 355.569466][T10286] [ 355.569470][T10286] Mem-Info: [ 355.826932][T10286] active_anon:13121 inactive_anon:0 isolated_anon:0 [ 355.826932][T10286] active_file:20183 inactive_file:41240 isolated_file:0 [ 355.826932][T10286] unevictable:17160 dirty:125 writeback:0 [ 355.826932][T10286] slab_reclaimable:12210 slab_unreclaimable:99621 [ 355.826932][T10286] mapped:30038 shmem:6837 pagetables:1188 [ 355.826932][T10286] sec_pagetables:0 bounce:0 [ 355.826932][T10286] kernel_misc_reclaimable:0 [ 355.826932][T10286] free:1271043 free_pcp:22392 free_cma:0 [ 355.875611][T10286] Node 0 active_anon:52484kB inactive_anon:0kB active_file:80732kB inactive_file:164756kB unevictable:67104kB isolated(anon):0kB isolated(file):0kB mapped:120152kB dirty:496kB writeback:0kB shmem:25812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12176kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.944431][T10286] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 356.027414][T10286] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.060728][T10286] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 356.066482][T10286] Node 0 DMA32 free:1183448kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53584kB inactive_anon:0kB active_file:80732kB inactive_file:164756kB unevictable:67104kB writepending:496kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:62696kB local_pcp:14084kB free_cma:0kB [ 356.103717][T10286] lowmem_reserve[]: 0 0 1 1 1 [ 356.122180][T10286] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.183671][T10286] lowmem_reserve[]: 0 0 0 0 0 [ 356.198288][T10286] Node 1 Normal free:3892364kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18400kB local_pcp:6400kB free_cma:0kB [ 356.278366][T10286] lowmem_reserve[]: 0 0 0 0 0 [ 356.284733][T10286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 356.337960][T10286] Node 0 DMA32: 1567*4kB (UME) 1320*8kB (UME) 919*16kB (UM) 866*32kB (UME) 326*64kB (UME) 162*128kB (UME) 38*256kB (UM) 9*512kB (UME) 13*1024kB (UM) 7*2048kB (UME) 255*4096kB (UM) = 1187308kB [ 356.392142][T10286] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.419898][T10286] Node 1 Normal: 215*4kB (UME) 56*8kB (UME) 49*16kB (UME) 161*32kB (UME) 51*64kB (UME) 13*128kB (UME) 7*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3892364kB [ 356.458676][T10286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.478122][T10286] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.671917][T10286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.349918][T10286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.359216][T10286] 91862 total pagecache pages [ 357.523794][T10286] 0 pages in swap cache [ 357.527972][T10286] Free swap = 124996kB [ 357.532157][T10286] Total swap = 124996kB [ 357.536306][T10286] 2097051 pages RAM [ 357.540131][T10286] 0 pages HighMem/MovableOnly [ 357.544794][T10286] 428747 pages reserved [ 357.548934][T10286] 0 pages cma reserved [ 357.741324][T10314] openvswitch: netlink: nsh attribute has 12284 unknown bytes. [ 357.857131][T10314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.023940][T10307] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.032096][T10307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.039564][T10307] IPv6: NLM_F_CREATE should be set when creating new route [ 358.220317][T10329] netlink: 'syz.4.1211': attribute type 4 has an invalid length. [ 358.247125][ T24] lo speed is unknown, defaulting to 1000 [ 358.258423][ T24] syz0: Port: 1 Link DOWN [ 358.742288][T10347] dvmrp31: entered allmulticast mode [ 358.858194][T10351] fuse: Unknown parameter '' [ 359.183756][T10344] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1216'. [ 359.457820][T10361] overlayfs: failed to clone upperpath [ 360.311518][T10374] fuse: Bad value for 'fd' [ 360.509041][ T30] audit: type=1400 audit(1763030362.855:1323): avc: denied { mount } for pid=10375 comm="syz.2.1225" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 361.431485][ T30] audit: type=1400 audit(1763030363.785:1324): avc: denied { connect } for pid=10389 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 361.739432][T10399] lo speed is unknown, defaulting to 1000 [ 361.843083][T10399] lo speed is unknown, defaulting to 1000 [ 361.870435][T10399] lo speed is unknown, defaulting to 1000 [ 361.962423][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 361.971456][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 362.474187][T10399] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 362.545578][T10399] lo speed is unknown, defaulting to 1000 [ 362.562385][T10399] lo speed is unknown, defaulting to 1000 [ 362.578774][T10413] netlink: 'syz.3.1233': attribute type 20 has an invalid length. [ 362.591372][T10399] lo speed is unknown, defaulting to 1000 [ 362.640482][T10413] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.652094][T10399] lo speed is unknown, defaulting to 1000 [ 362.658653][T10399] lo speed is unknown, defaulting to 1000 [ 362.759332][T10415] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 365.772234][T10453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1242'. [ 365.986563][T10456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10456 comm=syz.1.1242 [ 367.057052][T10471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.202679][T10483] netlink: 'syz.3.1251': attribute type 21 has an invalid length. [ 368.210645][T10483] netlink: 'syz.3.1251': attribute type 6 has an invalid length. [ 368.214481][T10493] bond1 (unregistering): Released all slaves [ 369.269029][T10501] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1254'. [ 370.205025][T10512] Cannot find add_set index 128 as target [ 370.257554][T10512] overlayfs: failed to clone lowerpath [ 370.275993][T10512] overlayfs: failed to clone lowerpath [ 373.377511][T10540] netlink: 'syz.0.1265': attribute type 12 has an invalid length. [ 373.720649][T10548] delete_channel: no stack [ 373.725272][T10548] delete_channel: no stack [ 374.473122][T10565] sctp: [Deprecated]: syz.4.1271 (pid 10565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.473122][T10565] Use struct sctp_sack_info instead [ 374.756172][ T30] audit: type=1400 audit(1763030377.105:1325): avc: denied { write } for pid=10568 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.104935][ T30] audit: type=1400 audit(1763030379.405:1326): avc: denied { ioctl } for pid=10602 comm="syz-executor" path="socket:[22685]" dev="sockfs" ino=22685 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 377.132890][T10605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.142713][T10605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.153183][T10605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.162670][T10605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.170355][T10605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.230131][T10602] lo speed is unknown, defaulting to 1000 [ 378.081949][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.088703][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.107779][T10614] bond1 (unregistering): Released all slaves [ 378.155244][T10602] chnl_net:caif_netlink_parms(): no params data found [ 378.391798][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.477807][T10602] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.485379][T10602] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.513150][T10602] bridge_slave_0: entered allmulticast mode [ 378.545057][T10602] bridge_slave_0: entered promiscuous mode [ 378.601430][T10602] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.617038][T10602] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.634096][T10602] bridge_slave_1: entered allmulticast mode [ 378.690714][T10602] bridge_slave_1: entered promiscuous mode [ 378.755176][T10602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.786596][T10602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.846066][T10602] team0: Port device team_slave_0 added [ 378.881107][T10602] team0: Port device team_slave_1 added [ 379.112999][T10602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.139943][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.216434][T10605] Bluetooth: hci5: command tx timeout [ 379.229897][T10602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.281164][T10602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.399972][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.485304][T10602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.587469][T10602] hsr_slave_0: entered promiscuous mode [ 379.601850][T10602] hsr_slave_1: entered promiscuous mode [ 379.609403][T10602] debugfs: 'hsr0' already exists in 'hsr' [ 379.625482][T10602] Cannot create hsr debugfs directory [ 380.580339][T10602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 380.603709][T10602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.621195][T10602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 380.630380][T10602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 380.721654][T10602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.747382][T10602] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.760396][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.767465][ T7125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.798029][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.805161][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.982914][T10602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.247501][ T30] audit: type=1400 audit(1763030383.575:1327): avc: denied { create } for pid=10679 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 381.281182][ T52] Bluetooth: hci5: command tx timeout [ 381.473824][T10602] veth0_vlan: entered promiscuous mode [ 381.486053][T10602] veth1_vlan: entered promiscuous mode [ 381.507890][T10602] veth0_macvtap: entered promiscuous mode [ 381.516248][T10602] veth1_macvtap: entered promiscuous mode [ 381.529642][T10602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.543039][T10602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.555407][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.573787][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.605576][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.623610][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.649063][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.657156][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.687110][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.697540][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.134584][ T30] audit: type=1400 audit(1763030384.485:1328): avc: denied { write } for pid=10704 comm="syz.5.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 382.162199][ T30] audit: type=1400 audit(1763030384.505:1329): avc: denied { connect } for pid=10704 comm="syz.5.1281" lport=37505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 382.188323][ T30] audit: type=1400 audit(1763030384.505:1330): avc: denied { read } for pid=10704 comm="syz.5.1281" laddr=fe80::7439:4dff:fe3f:34bc lport=37505 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 382.457879][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 382.472441][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 382.482927][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 382.494706][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 383.395413][ T52] Bluetooth: hci5: command tx timeout [ 384.074695][T10724] fuse: Unknown parameter '01777777777777777777777' [ 385.441004][ T52] Bluetooth: hci5: command tx timeout [ 386.890526][ T5886] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 387.055147][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 387.071538][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.107962][ T5886] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 387.129605][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.156587][ T5886] usb 6-1: Product: syz [ 387.169990][ T5886] usb 6-1: Manufacturer: syz [ 387.184779][ T5886] usb 6-1: SerialNumber: syz [ 387.193515][ T5886] usb 6-1: config 0 descriptor?? [ 387.210598][ T5886] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 387.555225][ T30] audit: type=1400 audit(1763030389.885:1331): avc: denied { watch } for pid=10758 comm="syz.3.1313" path="/256/file0" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 388.261508][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 388.398765][T10772] 9pnet_fd: Insufficient options for proto=fd [ 390.190870][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'. [ 390.234503][ T5886] usb 6-1: qt2_attach - failed to power on unit: -71 [ 390.255157][ T5886] quatech2 6-1:0.0: probe with driver quatech2 failed with error -71 [ 390.276143][ T5886] usb 6-1: USB disconnect, device number 2 [ 390.441517][T10797] sctp: [Deprecated]: syz.5.1322 (pid 10797) Use of int in max_burst socket option deprecated. [ 390.441517][T10797] Use struct sctp_assoc_value instead [ 391.799539][ T30] audit: type=1326 audit(1763030394.135:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 391.852580][ T30] audit: type=1326 audit(1763030394.135:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 391.882035][ T30] audit: type=1326 audit(1763030394.135:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 391.913925][ T30] audit: type=1326 audit(1763030394.135:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 391.937666][ T30] audit: type=1326 audit(1763030394.135:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 391.964441][ T30] audit: type=1326 audit(1763030394.135:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 391.993288][ T30] audit: type=1326 audit(1763030394.135:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 392.019357][ T30] audit: type=1326 audit(1763030394.145:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 392.069936][ T30] audit: type=1326 audit(1763030394.145:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.3.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 392.619176][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 392.619191][ T30] audit: type=1400 audit(1763030394.965:1488): avc: denied { ioctl } for pid=10829 comm="syz.1.1331" path="socket:[23784]" dev="sockfs" ino=23784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 392.821288][ T30] audit: type=1400 audit(1763030395.135:1489): avc: denied { unmount } for pid=10602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 393.594441][T10847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.534357][ T30] audit: type=1326 audit(1763030396.735:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 394.621919][T10867] 9pnet_fd: p9_fd_create_tcp (10867): problem connecting socket to 127.0.0.1 [ 394.640040][ T30] audit: type=1326 audit(1763030396.735:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 394.690716][ T30] audit: type=1326 audit(1763030396.745:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 394.746289][ T30] audit: type=1326 audit(1763030396.745:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 394.770837][ T30] audit: type=1326 audit(1763030396.745:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 394.796017][ T30] audit: type=1326 audit(1763030396.745:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 394.838999][ T30] audit: type=1326 audit(1763030396.745:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 394.865805][ T30] audit: type=1326 audit(1763030396.745:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 396.070496][ T5865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 396.088249][T10895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=10895 comm=syz.0.1346 [ 396.243575][ T5865] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 396.337313][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.460923][ T5865] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 396.470503][ T5865] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 396.484041][ T5865] usb 6-1: Manufacturer: syz [ 396.491806][ T5865] usb 6-1: config 0 descriptor?? [ 396.570523][ T5865] rc_core: IR keymap rc-hauppauge not found [ 396.596335][ T5865] Registered IR keymap rc-empty [ 396.620215][ T5865] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 396.648981][ T5865] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 396.803538][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 397.021119][T10905] netlink: 'syz.5.1344': attribute type 1 has an invalid length. [ 397.031260][T10905] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1344'. [ 397.300082][ T5817] usb 6-1: USB disconnect, device number 3 [ 398.840807][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 398.840822][ T30] audit: type=1400 audit(1763030401.195:1504): avc: denied { write } for pid=10922 comm="syz.5.1352" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 398.874974][T10923] netlink: 'syz.5.1352': attribute type 10 has an invalid length. [ 398.883232][T10923] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.891006][T10923] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.900641][T10923] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.907782][T10923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.915105][T10923] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.922174][T10923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.926535][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1352'. [ 398.931931][T10923] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 398.948082][T10924] bridge_slave_1: left allmulticast mode [ 398.953749][T10924] bridge_slave_1: left promiscuous mode [ 398.959550][T10924] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.972548][T10924] bridge_slave_0: left allmulticast mode [ 398.978963][T10924] bridge_slave_0: left promiscuous mode [ 398.985315][T10924] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.182927][T10924] bond0: (slave bridge0): Releasing backup interface [ 400.302760][T10929] tipc: Enabling of bearer rejected, failed to enable media [ 403.229481][T10986] No control pipe specified [ 403.591460][T10990] syzkaller0: entered promiscuous mode [ 403.596914][T10990] syzkaller0: entered allmulticast mode [ 405.469544][ T5817] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 405.808529][ T5817] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 405.828826][ T5817] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 405.973797][ T5817] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.028457][ T5817] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.057175][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.073844][ T5817] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.088021][ T5817] usb 6-1: invalid MIDI out EP 0 [ 406.094948][T11018] netlink: 'syz.1.1376': attribute type 3 has an invalid length. [ 406.394800][ T5817] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 406.471676][T11028] udevd[11028]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.654635][ T5886] usb 6-1: USB disconnect, device number 4 [ 407.079458][T11040] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1381'. [ 407.144868][ T30] audit: type=1400 audit(1763030409.485:1505): avc: denied { read } for pid=11036 comm="syz.0.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 408.787029][T11066] lo speed is unknown, defaulting to 1000 [ 409.424083][ T6254] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 410.337639][T11095] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 410.404952][T11096] @0: renamed from bond_slave_1 [ 411.229213][ T30] audit: type=1326 audit(1763030413.575:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 411.298579][ T30] audit: type=1326 audit(1763030413.575:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 411.326383][ T30] audit: type=1326 audit(1763030413.575:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 411.352773][ T30] audit: type=1326 audit(1763030413.575:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 411.379542][ T30] audit: type=1326 audit(1763030413.575:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 411.459206][ T30] audit: type=1326 audit(1763030413.605:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 411.484923][ T30] audit: type=1326 audit(1763030413.605:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 411.527856][ T30] audit: type=1326 audit(1763030413.605:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 411.553157][ T30] audit: type=1326 audit(1763030413.605:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 413.690392][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 413.690408][ T30] audit: type=1400 audit(1763030416.035:1580): avc: denied { setopt } for pid=11146 comm="syz.5.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.750824][T11152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.762478][ T30] audit: type=1400 audit(1763030417.115:1581): avc: denied { read write } for pid=11151 comm="syz.5.1409" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 414.936089][ T30] audit: type=1400 audit(1763030417.115:1582): avc: denied { open } for pid=11151 comm="syz.5.1409" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 415.574692][T11158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.316606][ T24] IPVS: starting estimator thread 0... [ 416.420088][T11173] IPVS: using max 78 ests per chain, 187200 per kthread [ 417.332927][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1419'. [ 418.291121][T11201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.582969][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 420.166087][ T30] audit: type=1326 audit(1763030422.515:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.198415][ T30] audit: type=1326 audit(1763030422.515:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.257051][ T30] audit: type=1326 audit(1763030422.545:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.298877][ T30] audit: type=1326 audit(1763030422.545:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.325573][ T30] audit: type=1326 audit(1763030422.545:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.351271][ T30] audit: type=1326 audit(1763030422.545:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.379172][T11227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1425'. [ 420.388730][ T30] audit: type=1326 audit(1763030422.545:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.415896][ T30] audit: type=1326 audit(1763030422.545:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.441426][ T30] audit: type=1326 audit(1763030422.545:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 420.466105][ T30] audit: type=1326 audit(1763030422.545:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 421.496839][T11244] No control pipe specified [ 422.739383][T11258] overlayfs: failed to clone lowerpath [ 422.769185][T11258] overlayfs: failed to clone lowerpath [ 423.147002][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 425.067448][T11308] team0: Device gtp0 is of different type [ 425.313140][T11311] lo speed is unknown, defaulting to 1000 [ 426.962237][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 427.139618][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.201685][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 427.211072][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 427.220898][T10605] Bluetooth: hci3: hardware error 0x00 [ 427.294229][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 427.327997][ T24] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 427.347353][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.374339][ T24] usb 6-1: config 0 descriptor?? [ 427.483006][ T5817] Process accounting resumed [ 429.280273][T10605] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 429.671967][ T24] Bluetooth: Can't get state to change to load ram patch err [ 429.681975][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 429.689318][ T24] Bluetooth: Loading patch file failed [ 429.706324][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1471'. [ 429.707105][ T24] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 429.729120][ T30] audit: type=1400 audit(1763030432.035:1657): avc: denied { read } for pid=11378 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 429.864021][ T24] usb 6-1: USB disconnect, device number 5 [ 429.907125][T11344] IPVS: Scheduler module ip_vs_ not found [ 430.073912][T11377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1457'. [ 430.113119][ T30] audit: type=1400 audit(1763030432.465:1658): avc: denied { create } for pid=11391 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 430.187128][ T30] audit: type=1400 audit(1763030432.505:1659): avc: denied { read } for pid=11391 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 430.228135][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'. [ 430.336524][ T30] audit: type=1400 audit(1763030432.685:1660): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.433796][ T30] audit: type=1400 audit(1763030432.685:1661): avc: denied { search } for pid=5478 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.539878][ T30] audit: type=1400 audit(1763030432.685:1662): avc: denied { search } for pid=5478 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.585506][ T30] audit: type=1400 audit(1763030432.685:1663): avc: denied { read } for pid=5478 comm="dhcpcd" name="n101" dev="tmpfs" ino=3328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 430.615853][ T30] audit: type=1400 audit(1763030432.685:1664): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 430.641453][ T30] audit: type=1400 audit(1763030432.685:1665): avc: denied { getattr } for pid=5478 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 430.907600][ T30] audit: type=1326 audit(1763030433.255:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.0.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 431.882626][T11418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.816101][T11429] overlayfs: failed to resolve './file1': -2 [ 433.099888][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 433.266151][ T9] usb 6-1: device descriptor read/64, error -71 [ 434.340117][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 434.499849][ T9] usb 6-1: device descriptor read/64, error -71 [ 434.610127][ T9] usb usb6-port1: attempt power cycle [ 434.717598][T11457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 434.788036][T11461] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1494'. [ 435.527617][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 435.556966][T11469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.564965][ T9] usb 6-1: device descriptor read/8, error -71 [ 435.592776][T11469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.807822][ T5865] Process accounting resumed [ 435.880116][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 436.516618][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 436.516633][ T30] audit: type=1400 audit(1763030438.865:1683): avc: denied { module_request } for pid=11487 comm="syz.0.1503" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 436.710055][ T9] usb 6-1: device not accepting address 9, error -71 [ 436.719638][ T9] usb usb6-port1: unable to enumerate USB device [ 436.766748][ T30] audit: type=1326 audit(1763030439.065:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 436.849934][ T30] audit: type=1326 audit(1763030439.065:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 437.084370][ T30] audit: type=1326 audit(1763030439.065:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 437.155978][ T30] audit: type=1326 audit(1763030439.065:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 437.300425][ T30] audit: type=1326 audit(1763030439.065:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 437.325052][ T30] audit: type=1326 audit(1763030439.065:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 437.489659][ T30] audit: type=1326 audit(1763030439.065:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 437.515877][ T30] audit: type=1326 audit(1763030439.065:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 437.539986][ T30] audit: type=1326 audit(1763030439.065:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad878f6c9 code=0x7ffc0000 [ 437.752605][T11512] Cannot find add_set index 128 as target [ 437.764505][T11512] overlayfs: failed to clone lowerpath [ 437.820192][T11515] overlayfs: failed to clone lowerpath [ 439.523899][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.543368][T11542] No control pipe specified [ 440.409961][ T5928] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 440.550889][ T6254] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.572646][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 440.612334][ T5928] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 440.626905][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1519'. [ 440.673676][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.683168][ T5928] usb 6-1: Product: syz [ 440.688121][ T5928] usb 6-1: Manufacturer: syz [ 440.693134][ T5928] usb 6-1: SerialNumber: syz [ 440.703390][ T5928] usb 6-1: config 0 descriptor?? [ 440.722821][ T5928] gspca_main: sq930x-2.14.0 probing 2770:930c [ 442.362499][T11564] sg_write: data in/out 65500/14 bytes for SCSI command 0x8-- guessing data in; [ 442.362499][T11564] program syz.5.1517 not setting count and/or reply_len properly [ 442.439939][ T5928] gspca_sq930x: reg_w 0105 0e00 failed -71 [ 442.446012][ T5928] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 442.470081][ T5928] usb 6-1: USB disconnect, device number 10 [ 442.636375][T11584] No control pipe specified [ 443.154179][T11579] fuse: Unknown parameter 'group_itYi"d' [ 444.161508][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 444.161523][ T30] audit: type=1400 audit(1763030446.515:1777): avc: denied { append } for pid=11600 comm="syz.5.1536" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 444.787545][ T30] audit: type=1400 audit(1763030447.135:1778): avc: denied { ioctl } for pid=11610 comm="syz.1.1539" path="socket:[24995]" dev="sockfs" ino=24995 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 444.812422][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.571117][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 445.633626][T11626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1542'. [ 445.677478][ T30] audit: type=1400 audit(1763030448.025:1779): avc: denied { mounton } for pid=11628 comm="syz.0.1544" path="/326/file0" dev="tmpfs" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 445.744010][ T30] audit: type=1326 audit(1763030448.095:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 445.768333][ T30] audit: type=1326 audit(1763030448.095:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 445.779858][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 445.791804][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.793893][ T30] audit: type=1326 audit(1763030448.115:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 445.826289][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.835652][ T30] audit: type=1326 audit(1763030448.115:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 445.859266][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.865899][ T30] audit: type=1326 audit(1763030448.115:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 445.889382][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.896672][ T30] audit: type=1326 audit(1763030448.155:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 445.923361][ T30] audit: type=1326 audit(1763030448.155:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7aeb8f6c9 code=0x7ffc0000 [ 445.957029][ T24] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 445.980028][ T24] usb 6-1: config 0 has no interface number 0 [ 445.990285][ T24] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 446.012878][ T24] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 446.040145][ T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 446.050293][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.058976][ T24] usb 6-1: Product: syz [ 446.064166][ T24] usb 6-1: Manufacturer: syz [ 446.068808][ T24] usb 6-1: SerialNumber: syz [ 446.076078][ T24] usb 6-1: config 0 descriptor?? [ 446.100035][T11607] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 446.107403][T11607] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 446.334505][T11607] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 446.344865][T11607] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 446.985808][ T24] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 446.997467][ T24] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 447.009568][ T24] asix 6-1:0.251: probe with driver asix failed with error -5 [ 447.033662][ T24] usb 6-1: USB disconnect, device number 11 [ 447.060704][T11648] netlink: 'syz.0.1549': attribute type 2 has an invalid length. [ 447.773741][T11662] warn_alloc: 1 callbacks suppressed [ 447.773753][T11662] syz.1.1551: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 447.820213][T11662] CPU: 0 UID: 0 PID: 11662 Comm: syz.1.1551 Not tainted syzkaller #0 PREEMPT(full) [ 447.820238][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.820249][T11662] Call Trace: [ 447.820253][T11662] [ 447.820258][T11662] dump_stack_lvl+0x16c/0x1f0 [ 447.820278][T11662] warn_alloc+0x248/0x3a0 [ 447.820297][T11662] ? __pfx_warn_alloc+0x10/0x10 [ 447.820312][T11662] ? __pfx_stack_trace_save+0x10/0x10 [ 447.820333][T11662] ? kasan_save_stack+0x42/0x60 [ 447.820349][T11662] ? kasan_save_stack+0x33/0x60 [ 447.820358][T11662] ? kasan_save_track+0x14/0x30 [ 447.820367][T11662] ? xskq_create+0x52/0x1d0 [ 447.820380][T11662] ? xsk_setsockopt+0x74e/0x9a0 [ 447.820391][T11662] ? do_sock_setsockopt+0xf3/0x1d0 [ 447.820409][T11662] ? xskq_create+0xfb/0x1d0 [ 447.820423][T11662] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 447.820442][T11662] ? xskq_create+0xfb/0x1d0 [ 447.820458][T11662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.820476][T11662] ? xskq_create+0xfb/0x1d0 [ 447.820488][T11662] vmalloc_user_noprof+0x9e/0xe0 [ 447.820501][T11662] ? xskq_create+0xfb/0x1d0 [ 447.820515][T11662] xskq_create+0xfb/0x1d0 [ 447.820529][T11662] xsk_setsockopt+0x74e/0x9a0 [ 447.820542][T11662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.820554][T11662] ? find_held_lock+0x2b/0x80 [ 447.820569][T11662] ? selinux_socket_setsockopt+0x6a/0x80 [ 447.820581][T11662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.820594][T11662] do_sock_setsockopt+0xf3/0x1d0 [ 447.820611][T11662] __sys_setsockopt+0x1a0/0x230 [ 447.820626][T11662] __x64_sys_setsockopt+0xbd/0x160 [ 447.820638][T11662] ? do_syscall_64+0x91/0xfa0 [ 447.820647][T11662] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.820657][T11662] do_syscall_64+0xcd/0xfa0 [ 447.820667][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.820677][T11662] RIP: 0033:0x7fe95138f6c9 [ 447.820686][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.820695][T11662] RSP: 002b:00007fe9521c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.820706][T11662] RAX: ffffffffffffffda RBX: 00007fe9515e5fa0 RCX: 00007fe95138f6c9 [ 447.820712][T11662] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 447.820718][T11662] RBP: 00007fe951411f91 R08: 0000000000000004 R09: 0000000000000000 [ 447.820723][T11662] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.820729][T11662] R13: 00007fe9515e6038 R14: 00007fe9515e5fa0 R15: 00007ffc85bab3b8 [ 447.820742][T11662] [ 447.820746][T11662] Mem-Info: [ 448.081292][T11662] active_anon:34758 inactive_anon:0 isolated_anon:0 [ 448.081292][T11662] active_file:10915 inactive_file:51184 isolated_file:0 [ 448.081292][T11662] unevictable:17160 dirty:240 writeback:0 [ 448.081292][T11662] slab_reclaimable:12407 slab_unreclaimable:104474 [ 448.081292][T11662] mapped:36745 shmem:27547 pagetables:1458 [ 448.081292][T11662] sec_pagetables:0 bounce:0 [ 448.081292][T11662] kernel_misc_reclaimable:0 [ 448.081292][T11662] free:1239740 free_pcp:14039 free_cma:0 [ 448.126975][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.135241][T11662] Node 0 active_anon:138832kB inactive_anon:0kB active_file:43660kB inactive_file:204532kB unevictable:67104kB isolated(anon):0kB isolated(file):0kB mapped:146980kB dirty:960kB writeback:0kB shmem:108352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12356kB pagetables:5692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.167283][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.175699][T11662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.205638][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.215697][T11662] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.245570][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.256087][T11662] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 448.262078][T11662] Node 0 DMA32 free:1049956kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:133232kB inactive_anon:0kB active_file:43660kB inactive_file:204532kB unevictable:67104kB writepending:960kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:45612kB local_pcp:23712kB free_cma:0kB [ 448.295556][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.303056][T11662] lowmem_reserve[]: 0 0 1 1 1 [ 448.312562][T11662] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.342306][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.375151][T11662] lowmem_reserve[]: 0 0 0 0 0 [ 448.380248][T11662] Node 1 Normal free:3893644kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17120kB local_pcp:11488kB free_cma:0kB [ 448.412503][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.419126][T11662] lowmem_reserve[]: 0 0 0 0 0 [ 448.424298][T11662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 448.438294][T11662] Node 0 DMA32: 607*4kB (U) 189*8kB (UME) 28*16kB (UE) 72*32kB (UM) 5*64kB (U) 46*128kB (UME) 63*256kB (M) 16*512kB (ME) 13*1024kB (UME) 2*2048kB (M) 243*4096kB (M) = 1049956kB [ 448.455943][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.462889][T11662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 448.474549][T11662] Node 1 Normal: 215*4kB (UME) 56*8kB (UME) 49*16kB (UME) 183*32kB (UME) 58*64kB (UME) 14*128kB (UME) 7*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3893644kB [ 448.494501][T11662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.504245][T11662] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 448.513674][T11662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.523327][T11662] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 448.532741][T11662] 92926 total pagecache pages [ 448.538185][T11662] 0 pages in swap cache [ 448.542447][T11662] Free swap = 124996kB [ 448.546691][T11662] Total swap = 124996kB [ 448.550930][T11662] 2097051 pages RAM [ 448.554779][T11662] 0 pages HighMem/MovableOnly [ 448.559696][T11662] 428747 pages reserved [ 448.563958][T11662] 0 pages cma reserved [ 449.245270][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 449.245285][ T30] audit: type=1326 audit(1763030451.595:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11693 comm="syz.0.1562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x0 [ 449.274718][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.741682][ T30] audit: type=1800 audit(1763030452.095:1833): pid=11707 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1563" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 450.485515][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1568'. [ 453.029416][T11728] bridge0: port 1(veth3) entered blocking state [ 453.056419][T11728] bridge0: port 1(veth3) entered disabled state [ 453.070564][T11728] veth3: entered allmulticast mode [ 453.083488][T11728] veth3: entered promiscuous mode [ 453.112896][T11724] bridge0: port 2(veth5) entered blocking state [ 453.119174][T11724] bridge0: port 2(veth5) entered disabled state [ 453.125840][T11724] veth5: entered allmulticast mode [ 453.131854][T11724] veth5: entered promiscuous mode [ 453.216112][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1573'. [ 453.610849][T11749] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1574'. [ 453.621088][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.628950][T11749] batadv_slave_0: entered promiscuous mode [ 455.270761][T11765] lo speed is unknown, defaulting to 1000 [ 456.233305][T11788] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:21 [ 457.350235][T11805] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 459.035011][ T30] audit: type=1400 audit(1763030460.405:1834): avc: denied { execute_no_trans } for pid=11815 comm="syz.3.1595" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=25406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 460.283291][ T30] audit: type=1400 audit(1763030462.635:1835): avc: denied { create } for pid=11832 comm="syz.0.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 460.546835][T11840] No control pipe specified [ 462.985624][T11861] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1604'. [ 463.173115][T11864] random: crng reseeded on system resumption [ 463.218141][ T30] audit: type=1400 audit(1763030465.525:1836): avc: denied { write } for pid=11857 comm="syz.5.1605" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 463.981115][ T30] audit: type=1400 audit(1763030465.525:1837): avc: denied { ioctl } for pid=11857 comm="syz.5.1605" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 464.194706][T11869] bond1 (unregistering): Released all slaves [ 464.214601][T11873] tipc: Started in network mode [ 464.219740][T11873] tipc: Node identity , cluster identity 4711 [ 464.226102][T11873] tipc: Failed to obtain node identity [ 464.231689][T11873] tipc: Enabling of bearer rejected, failed to enable media [ 464.519291][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 464.528366][T11885] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 465.465185][T11894] syz.3.1614: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 465.522161][T11894] CPU: 0 UID: 0 PID: 11894 Comm: syz.3.1614 Not tainted syzkaller #0 PREEMPT(full) [ 465.522190][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.522201][T11894] Call Trace: [ 465.522207][T11894] [ 465.522215][T11894] dump_stack_lvl+0x16c/0x1f0 [ 465.522250][T11894] warn_alloc+0x248/0x3a0 [ 465.522279][T11894] ? __pfx_warn_alloc+0x10/0x10 [ 465.522306][T11894] ? __pfx_stack_trace_save+0x10/0x10 [ 465.522340][T11894] ? kasan_save_stack+0x42/0x60 [ 465.522357][T11894] ? kasan_save_stack+0x33/0x60 [ 465.522373][T11894] ? kasan_save_track+0x14/0x30 [ 465.522391][T11894] ? xskq_create+0x52/0x1d0 [ 465.522414][T11894] ? xsk_setsockopt+0x74e/0x9a0 [ 465.522434][T11894] ? do_sock_setsockopt+0xf3/0x1d0 [ 465.522464][T11894] ? xskq_create+0xfb/0x1d0 [ 465.522489][T11894] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 465.522521][T11894] ? xskq_create+0xfb/0x1d0 [ 465.522552][T11894] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 465.522585][T11894] ? xskq_create+0xfb/0x1d0 [ 465.522609][T11894] vmalloc_user_noprof+0x9e/0xe0 [ 465.522631][T11894] ? xskq_create+0xfb/0x1d0 [ 465.522656][T11894] xskq_create+0xfb/0x1d0 [ 465.522683][T11894] xsk_setsockopt+0x74e/0x9a0 [ 465.522707][T11894] ? __pfx_xsk_setsockopt+0x10/0x10 [ 465.522730][T11894] ? find_held_lock+0x2b/0x80 [ 465.522758][T11894] ? selinux_socket_setsockopt+0x6a/0x80 [ 465.522777][T11894] ? __pfx_xsk_setsockopt+0x10/0x10 [ 465.522802][T11894] do_sock_setsockopt+0xf3/0x1d0 [ 465.522833][T11894] __sys_setsockopt+0x1a0/0x230 [ 465.522862][T11894] __x64_sys_setsockopt+0xbd/0x160 [ 465.522897][T11894] ? do_syscall_64+0x91/0xfa0 [ 465.522920][T11894] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.522937][T11894] do_syscall_64+0xcd/0xfa0 [ 465.522955][T11894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.522974][T11894] RIP: 0033:0x7fe7aeb8f6c9 [ 465.522989][T11894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.523008][T11894] RSP: 002b:00007fe7afb0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 465.523027][T11894] RAX: ffffffffffffffda RBX: 00007fe7aede5fa0 RCX: 00007fe7aeb8f6c9 [ 465.523038][T11894] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 465.523049][T11894] RBP: 00007fe7aec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 465.523059][T11894] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.523069][T11894] R13: 00007fe7aede6038 R14: 00007fe7aede5fa0 R15: 00007ffc2dd6cb28 [ 465.523095][T11894] [ 465.523102][T11894] Mem-Info: [ 465.611983][T11895] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1607'. [ 465.820817][T11894] active_anon:23931 inactive_anon:0 isolated_anon:0 [ 465.820817][T11894] active_file:10915 inactive_file:51191 isolated_file:0 [ 465.820817][T11894] unevictable:17160 dirty:329 writeback:0 [ 465.820817][T11894] slab_reclaimable:12474 slab_unreclaimable:104884 [ 465.820817][T11894] mapped:47311 shmem:17387 pagetables:1403 [ 465.820817][T11894] sec_pagetables:0 bounce:0 [ 465.820817][T11894] kernel_misc_reclaimable:0 [ 465.820817][T11894] free:1243022 free_pcp:17189 free_cma:0 [ 465.897773][T11894] Node 0 active_anon:100824kB inactive_anon:0kB active_file:43660kB inactive_file:204560kB unevictable:67104kB isolated(anon):0kB isolated(file):0kB mapped:196144kB dirty:1316kB writeback:0kB shmem:72912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12368kB pagetables:5472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 465.949251][T11894] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 465.980068][T11894] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.018219][T11894] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 466.034833][T11894] Node 0 DMA32 free:1061384kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101924kB inactive_anon:0kB active_file:43660kB inactive_file:204560kB unevictable:67104kB writepending:1316kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:47232kB local_pcp:27700kB free_cma:0kB [ 466.220157][T11894] lowmem_reserve[]: 0 0 1 1 1 [ 466.229981][T11894] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.314965][T11894] lowmem_reserve[]: 0 0 0 0 0 [ 466.338704][T11894] Node 1 Normal free:3893644kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17120kB local_pcp:11488kB free_cma:0kB [ 466.377551][T11894] lowmem_reserve[]: 0 0 0 0 0 [ 466.432743][T11894] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 466.458612][T11894] Node 0 DMA32: 66*4kB (UM) 297*8kB (UME) 204*16kB (UME) 82*32kB (UME) 197*64kB (UM) 153*128kB (ME) 65*256kB (ME) 6*512kB (UM) 13*1024kB (UME) 3*2048kB (UM) 240*4096kB (M) = 1062928kB [ 466.477196][T11894] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 466.490041][T11894] Node 1 Normal: 215*4kB (UME) 56*8kB (UME) 49*16kB (UME) 183*32kB (UME) 58*64kB (UME) 14*128kB (UME) 7*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3893644kB [ 466.510169][T11894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.519946][T11894] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 466.529264][T11894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.588920][T11894] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.606795][ T30] audit: type=1326 audit(1763030468.955:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 466.642663][T11894] 97073 total pagecache pages [ 466.663358][T11894] 0 pages in swap cache [ 466.684819][T11894] Free swap = 124996kB [ 466.697220][T11894] Total swap = 124996kB [ 466.707234][T11894] 2097051 pages RAM [ 466.714587][ T30] audit: type=1326 audit(1763030468.955:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 466.750503][T11894] 0 pages HighMem/MovableOnly [ 466.767844][T11895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.767911][T11894] 428747 pages reserved [ 466.814679][T11894] 0 pages cma reserved [ 466.835647][T11895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.844469][ T30] audit: type=1326 audit(1763030468.955:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 466.933456][T11895] bond0 (unregistering): Released all slaves [ 466.994813][ T30] audit: type=1326 audit(1763030468.955:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 467.094749][ T30] audit: type=1326 audit(1763030468.955:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 467.098116][T11907] vxcan3: entered promiscuous mode [ 467.268896][ T30] audit: type=1326 audit(1763030468.955:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 467.517098][ T30] audit: type=1326 audit(1763030468.955:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 467.581578][ T30] audit: type=1326 audit(1763030468.955:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 467.609944][ T30] audit: type=1326 audit(1763030468.955:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f994e18df10 code=0x7ffc0000 [ 467.665105][ T30] audit: type=1326 audit(1763030468.955:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994e18f6c9 code=0x7ffc0000 [ 467.783301][T11919] overlayfs: failed to clone upperpath [ 469.047028][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 469.056503][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 469.065907][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 469.074928][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 470.078377][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.085542][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.127128][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.137022][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.267786][ T3539] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.277322][ T3539] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.307740][ T3539] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.335800][ T3539] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.583330][T11957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.309554][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1647'. [ 473.630880][ T5886] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 473.862304][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 473.862319][ T30] audit: type=1326 audit(1763030476.215:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 474.201867][T12015] bond1: Removing last arp target with arp_interval on [ 474.213110][T12015] bond1: entered allmulticast mode [ 474.219859][T12015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.498947][ T30] audit: type=1326 audit(1763030476.215:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 474.522671][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 474.528588][ T30] audit: type=1326 audit(1763030476.215:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 474.555365][ T30] audit: type=1326 audit(1763030476.215:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 474.579220][ T30] audit: type=1326 audit(1763030476.215:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 474.603931][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.614668][ T30] audit: type=1326 audit(1763030476.215:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 474.638145][ T5886] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 474.649948][ T5886] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 474.662552][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.670707][ T30] audit: type=1326 audit(1763030476.215:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 474.700079][ T5886] usb 6-1: config 0 descriptor?? [ 474.800521][ T30] audit: type=1326 audit(1763030476.215:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 474.849517][ T30] audit: type=1326 audit(1763030476.215:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 475.838609][ T30] audit: type=1326 audit(1763030476.215:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bfd8f6c9 code=0x7ffc0000 [ 475.879574][T12026] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1652'. [ 476.568349][ T5886] usb 6-1: USB disconnect, device number 12 [ 479.082157][T12069] ceph: No mds server is up or the cluster is laggy [ 479.147940][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 479.311519][ T24] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 479.323902][ T24] usb 6-1: config 1 has no interface number 0 [ 479.350565][ T24] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 479.397404][ T24] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 479.437648][ T24] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 479.479677][ T24] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5 [ 479.525094][ T24] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 479.570526][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 479.584993][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.615925][ T24] usb 6-1: Product: syz [ 479.634374][ T24] usb 6-1: Manufacturer: syz [ 479.653262][ T24] usb 6-1: SerialNumber: syz [ 479.676103][T12067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 479.687893][T12067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.592042][T12089] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.599464][T12089] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.611396][ T24] usb 6-1: No status endpoint found [ 480.785445][T12091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1668'. [ 480.821792][T12091] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12091 comm=syz.1.1668 [ 480.973541][T12094] tunl0: entered promiscuous mode [ 481.027810][T12094] netlink: 'syz.3.1669': attribute type 4 has an invalid length. [ 481.049809][T12094] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1669'. [ 481.089716][T12094] 9pnet_fd: Insufficient options for proto=fd [ 481.369092][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 481.475687][T12100] bridge4: port 1(veth9) entered blocking state [ 481.483437][T12100] bridge4: port 1(veth9) entered disabled state [ 481.490381][T12100] veth9: entered allmulticast mode [ 481.496305][T12100] veth9: entered promiscuous mode [ 481.529706][T12103] bridge4: port 2(veth11) entered blocking state [ 481.539920][T12103] bridge4: port 2(veth11) entered disabled state [ 481.558697][T12103] veth11: entered allmulticast mode [ 481.565537][T12103] veth11: entered promiscuous mode [ 482.590944][T12118] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.667229][T12118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.857534][ T5865] usb 6-1: USB disconnect, device number 13 [ 486.372394][T12173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.286147][ T5817] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 488.500451][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 488.514762][ T5817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 488.530665][ T5817] usb 6-1: config 159 has an invalid interface number: 195 but max is 0 [ 488.665976][T12208] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1697'. [ 489.122986][ T5817] usb 6-1: config 159 has no interface number 0 [ 489.140283][ T5817] usb 6-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 489.151010][ T5817] usb 6-1: config 159 interface 195 has no altsetting 0 [ 489.158468][T12210] netlink: 'syz.3.1699': attribute type 4 has an invalid length. [ 489.160135][ T5817] usb 6-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 489.183711][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.199578][ T5817] usb 6-1: Product: syz [ 489.340540][ T5817] usb 6-1: Manufacturer: syz [ 489.345129][ T5817] usb 6-1: SerialNumber: syz [ 490.009813][T12189] netlink: 'syz.5.1692': attribute type 2 has an invalid length. [ 490.766217][ T5817] udl 6-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 490.782778][ T5817] [drm:udl_init] *ERROR* Selecting channel failed [ 490.818547][ T5817] [drm] Initialized udl 0.0.1 for 6-1:159.195 on minor 2 [ 490.827133][ T5817] [drm] Initialized udl on minor 2 [ 490.835733][ T5817] udl 6-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 490.847407][ T5817] udl 6-1:159.195: [drm] Cannot find any crtc or sizes [ 490.856555][ T5928] udl 6-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 490.868391][ T5817] usb 6-1: USB disconnect, device number 14 [ 490.881309][ T5928] udl 6-1:159.195: [drm] Cannot find any crtc or sizes [ 492.418902][T12260] netlink: 'syz.1.1713': attribute type 4 has an invalid length. [ 493.584133][T12288] bond2 (unregistering): Released all slaves [ 494.466026][T12290] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1720'. [ 495.086815][T12318] netlink: 'syz.4.1728': attribute type 4 has an invalid length. [ 497.310146][T12339] netlink: 'syz.5.1733': attribute type 10 has an invalid length. [ 497.327339][T12339] veth1_macvtap: left promiscuous mode [ 497.669825][ T5817] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 497.804286][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 497.804302][ T30] audit: type=1326 audit(1763030500.155:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 497.862313][ T30] audit: type=1326 audit(1763030500.155:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 497.887101][ T30] audit: type=1326 audit(1763030500.155:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 497.889851][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 497.915333][ T30] audit: type=1326 audit(1763030500.155:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 497.975907][ T30] audit: type=1326 audit(1763030500.155:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 498.001158][ T30] audit: type=1326 audit(1763030500.155:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 498.026775][ T30] audit: type=1326 audit(1763030500.185:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 498.052030][ T30] audit: type=1326 audit(1763030500.185:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 498.077056][ T30] audit: type=1326 audit(1763030500.185:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 498.101322][ T30] audit: type=1326 audit(1763030500.185:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95138f6c9 code=0x7ffc0000 [ 498.150474][ T5817] usb 6-1: config 1 interface 0 altsetting 15 bulk endpoint 0x1 has invalid maxpacket 64 [ 498.222571][ T5817] usb 6-1: config 1 interface 0 has no altsetting 0 [ 498.240174][ T5817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 498.254863][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.271765][ T5817] usb 6-1: Product: ⒔詅⩢Ⴌ⼲䷪慺掕Ȧ༓ෛ僎ᤴ噯﯇Ⲃ韾믃樈撺礅庑띤옔塇覈갍儞쉈藎昝깲潤ค蚽䥍⯼솤廴ꄲ墔ꔰ귖䶵즮鷴儼⿻⎲꭬쥯ㆵ粛머꣪좃娇奮탍撀퉋䷌ᢡນ횴ꉴ⛸ᔰߓባ疶慹픽ς㱁僤鲏㺙歃燳導꨸Ꚕꒄ࿘謴쯧＋ྀꙜ澈腛⛫분៶脇芎؊酉 [ 498.373093][ T5817] usb 6-1: Manufacturer: Ｏ瓧潯ヾ銐ణ㷳㝈凘幦飠梐ꌃ켒⯵齷쳾딚Ⱋ늏⠒瓊죞ᤝ␽鏐뗔選燌듊笶␍㗖뛠㟛₰郬ꛣ풷ӎꐣꮑニ₆쇬큮짼句잳ᖶ쩴춰䌅ா渠龒䐷줟쮶襶Ⴒ拂烦랟벑১及፡勵琅嫥䥽墸읠ﶅ林ꐅࢱ劊ḧ혖﷡䞈땅幪⣶䜤선Ʉ䬾裫⸣꜁䰂巺숳뙻୳源骍蝱믍℠䏸ᢚ躟힯ι细⟦ [ 498.493094][ T5817] usb 6-1: SerialNumber: syz [ 498.500773][T12341] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 499.386279][ T5817] usb 6-1: USB disconnect, device number 15 [ 499.712587][T12372] bond0: entered promiscuous mode [ 499.723162][T12372] dummy0: entered promiscuous mode [ 499.735082][T12372] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 499.745349][T12372] hsr1: entered promiscuous mode [ 499.750361][T12372] hsr1: entered allmulticast mode [ 499.755406][T12372] bond0: entered allmulticast mode [ 499.760652][T12372] dummy0: entered allmulticast mode [ 500.966767][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.320966][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1746'. [ 503.044235][T10605] Bluetooth: hci5: command 0x0406 tx timeout [ 503.070038][T12411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.712450][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1751'. [ 506.033690][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 506.033712][ T30] audit: type=1400 audit(1763030508.385:1956): avc: denied { lock } for pid=12415 comm="syz.1.1752" path="socket:[27477]" dev="sockfs" ino=27477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 506.458639][T12414] bridge1: port 1(veth7) entered blocking state [ 506.467850][T12414] bridge1: port 1(veth7) entered disabled state [ 506.474209][T12414] veth7: entered allmulticast mode [ 506.480145][T12414] veth7: entered promiscuous mode [ 507.341958][T12438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1755'. [ 507.838895][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 507.847953][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 507.858588][T12441] netlink: 'syz.1.1756': attribute type 21 has an invalid length. [ 507.866433][T12441] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1756'. [ 507.875943][T12441] netlink: 'syz.1.1756': attribute type 5 has an invalid length. [ 507.883717][T12441] netlink: 'syz.1.1756': attribute type 6 has an invalid length. [ 507.891655][T12441] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1756'. [ 510.109690][ T30] audit: type=1400 audit(1763030512.455:1957): avc: denied { create } for pid=12455 comm="syz.0.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 510.171677][ T5879] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 510.318182][ T30] audit: type=1400 audit(1763030512.665:1958): avc: denied { read } for pid=12455 comm="syz.0.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 510.334352][ T5879] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 510.348497][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.429887][T12477] bridge0: port 3(gretap0) entered blocking state [ 510.436643][T12477] bridge0: port 3(gretap0) entered disabled state [ 510.443623][T12477] gretap0: entered allmulticast mode [ 510.454024][T12477] gretap0: entered promiscuous mode [ 510.460659][T12477] bridge0: port 3(gretap0) entered blocking state [ 510.467132][T12477] bridge0: port 3(gretap0) entered forwarding state [ 510.843913][ T5879] usb 6-1: Product: syz [ 510.848707][ T5879] usb 6-1: Manufacturer: syz [ 510.853452][ T5879] usb 6-1: SerialNumber: syz [ 510.862334][T12476] lo speed is unknown, defaulting to 1000 [ 510.870525][ T5879] usb 6-1: config 0 descriptor?? [ 510.888211][ T5879] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 510.916462][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 510.935964][T12475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1761'. [ 510.951922][ T5879] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 510.963365][ T5879] usb 6-1: media controller created [ 510.983217][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.026139][ T5879] DVB: Unable to find symbol mt352_attach() [ 511.070448][ T5879] DVB: Unable to find symbol nxt6000_attach() [ 511.076742][ T5879] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 511.215606][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 511.228946][ T5879] dvb-usb: schedule remote query interval to 1000 msecs. [ 511.241377][ T5879] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 511.254146][ T5879] dvb-usb: bulk message failed: -22 (7/0) [ 511.272206][ T5879] dvb-usb: bulk message failed: -22 (7/0) [ 511.998915][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1770'. [ 512.322492][ T5879] dvb-usb: bulk message failed: -22 (7/0) [ 512.329120][ T5879] dvb-usb: error while querying for an remote control event. [ 512.841310][ T5817] usb 6-1: USB disconnect, device number 16 [ 512.945728][ T5817] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 513.570582][ T30] audit: type=1400 audit(1763030515.925:1959): avc: denied { getopt } for pid=12524 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 514.535428][T12541] No control pipe specified [ 514.997756][ T5817] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 515.159686][ T5817] usb 6-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 515.639243][ T5817] usb 6-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.802749][ T5817] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 515.814659][ T5817] usb 6-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 515.825506][ T5817] usb 6-1: Manufacturer: syz [ 515.983402][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 516.026987][T12557] gretap0: left allmulticast mode [ 516.032320][T12557] gretap0: left promiscuous mode [ 516.038201][T12557] bridge0: port 3(gretap0) entered disabled state [ 516.051819][ T5817] usb 6-1: USB disconnect, device number 17 [ 516.293354][T12557] bridge_slave_1: left allmulticast mode [ 516.299385][T12557] bridge_slave_1: left promiscuous mode [ 516.332618][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.357201][T12557] bridge_slave_0: left allmulticast mode [ 516.366004][T12557] bridge_slave_0: left promiscuous mode [ 516.375810][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.547013][ T30] audit: type=1400 audit(1763030518.895:1960): avc: denied { append } for pid=12564 comm="syz.0.1787" name="file0" dev="tmpfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 516.581795][ T30] audit: type=1400 audit(1763030518.895:1961): avc: denied { open } for pid=12564 comm="syz.0.1787" path="/384/file0" dev="tmpfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 516.689125][T12569] sp0: Synchronizing with TNC [ 516.988061][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1790'. [ 519.193961][T12604] netlink: 'syz.3.1797': attribute type 10 has an invalid length. [ 519.867651][T12608] netlink: 'syz.3.1797': attribute type 10 has an invalid length. [ 519.876406][T12608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1797'. [ 519.898260][T12608] batadv0: entered promiscuous mode [ 519.922561][T12608] batadv0: entered allmulticast mode [ 520.049943][T12608] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 520.199614][ T30] audit: type=1400 audit(1763030522.535:1962): avc: denied { ioctl } for pid=12609 comm="syz.1.1800" path="socket:[28460]" dev="sockfs" ino=28460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 521.603055][T12639] input: syz1 as /devices/virtual/input/input11 [ 521.730891][T12637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.817296][ T30] audit: type=1400 audit(1763030525.165:1963): avc: denied { write } for pid=12648 comm="syz.3.1809" path="socket:[28792]" dev="sockfs" ino=28792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 524.189935][ T31] INFO: task syz.2.1231:10404 blocked for more than 143 seconds. [ 524.211910][ T31] Not tainted syzkaller #0 [ 524.216844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.228424][ T31] task:syz.2.1231 state:D stack:24872 pid:10404 tgid:10398 ppid:5806 task_flags:0x400140 flags:0x00080003 [ 524.240584][ T31] Call Trace: [ 524.245133][ T31] [ 524.248123][ T31] __schedule+0x1190/0x5de0 [ 524.289838][ T31] ? __pfx___schedule+0x10/0x10 [ 524.300911][ T31] ? find_held_lock+0x2b/0x80 [ 524.305724][ T31] ? schedule+0x2d7/0x3a0 [ 524.312082][ T31] schedule+0xe7/0x3a0 [ 524.317988][ T31] schedule_timeout+0x257/0x290 [ 524.328865][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 524.343244][ T31] ? mark_held_locks+0x49/0x80 [ 524.353324][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.364520][ T31] __wait_for_common+0x2fc/0x4e0 [ 524.375030][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 524.430063][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'. [ 524.446835][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 524.458561][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 524.469530][ T31] disable_device+0x16f/0x280 [ 524.521967][ T31] ? __pfx_disable_device+0x10/0x10 [ 524.542599][ T31] __ib_unregister_device+0x2b4/0x480 [ 524.555839][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 524.569431][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 524.581430][ T31] nldev_dellink+0x21f/0x320 [ 524.590599][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 524.604410][ T31] ? cap_capable+0xb3/0x250 [ 524.613796][ T31] ? bpf_lsm_capable+0x9/0x10 [ 524.635825][ T31] ? security_capable+0x7e/0x260 [ 524.650703][ T31] ? ns_capable+0xd7/0x110 [ 524.660157][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 524.906964][ T30] audit: type=1400 audit(1763030527.205:1964): avc: denied { create } for pid=12664 comm="syz.5.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 524.907040][ T52] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 524.982385][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 524.993385][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 525.033642][ T31] ? __lock_acquire+0x622/0x1c90 [ 525.070173][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 525.111104][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 525.147709][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 525.163845][ T31] netlink_unicast+0x5aa/0x870 [ 525.174687][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 525.184209][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 525.189864][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.195233][ T31] ____sys_sendmsg+0xa98/0xc70 [ 525.200251][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 525.205821][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.211896][ T31] ? __page_table_check_ptes_set+0x1ae/0x420 [ 525.219192][ T31] ? do_pte_missing+0x8a3/0x3ba0 [ 525.224275][ T31] ___sys_sendmsg+0x134/0x1d0 [ 525.229050][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.234997][ T31] ? __lock_acquire+0x622/0x1c90 [ 525.240455][ T31] __sys_sendmsg+0x16d/0x220 [ 525.245218][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.250517][ T31] ? find_held_lock+0x2b/0x80 [ 525.256389][ T31] ? do_user_addr_fault+0x843/0x1370 [ 525.262834][ T31] do_syscall_64+0xcd/0xfa0 [ 525.267542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.273741][ T31] RIP: 0033:0x7f9f4c38f6c9 [ 525.278269][ T31] RSP: 002b:00007f9f4d1ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.286916][ T31] RAX: ffffffffffffffda RBX: 00007f9f4c5e6090 RCX: 00007f9f4c38f6c9 [ 525.295406][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 525.303444][ T31] RBP: 00007f9f4c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 525.311658][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.319681][ T31] R13: 00007f9f4c5e6128 R14: 00007f9f4c5e6090 R15: 00007ffd427b8ef8 [ 525.327815][ T31] [ 525.330975][ T31] [ 525.330975][ T31] Showing all locks held in the system: [ 525.357114][ T31] 1 lock held by khungtaskd/31: [ 525.363160][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 525.375421][ T31] 4 locks held by kworker/u8:6/1143: [ 525.380903][ T31] #0: ffff88801ba94948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 525.391832][ T31] #1: ffffc900045efd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 525.402864][ T31] #2: ffffffff900d0fd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 525.412381][ T31] #3: ffff888051d8c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 525.423825][ T31] 2 locks held by getty/5569: [ 525.428598][ T31] #0: ffff8880359000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 525.439529][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 525.449935][ T31] 3 locks held by kworker/u8:13/7125: [ 525.455318][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 525.466745][ T31] #1: ffffc900037cfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 525.477216][ T31] #2: ffffffff900e7408 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 525.486280][ T31] 3 locks held by kworker/u8:14/7127: [ 525.491727][ T31] #0: ffff88814cf90148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 525.502810][ T31] #1: ffffc900037afd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 525.515149][ T31] #2: ffffffff900e7408 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 525.524665][ T31] 2 locks held by syz.2.1231/10404: [ 525.529910][ T31] #0: ffffffff9ae65598 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 525.540924][ T31] #1: ffff888051d8c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 525.552401][ T31] 1 lock held by syz.5.1813/12666: [ 525.557496][ T31] #0: ffff888079b34dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_status+0x32/0x70 [ 525.567337][ T31] 2 locks held by syz.1.1815/12673: [ 525.572541][ T31] #0: ffffffff8f48eee0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 525.582137][ T31] #1: ffffffff900e7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 525.591252][ T31] 3 locks held by syz.1.1815/12674: [ 525.596445][ T31] #0: ffffffff8f48eee0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 525.606391][ T31] #1: ffffffff900e7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 525.615488][ T31] #2: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 525.625526][ T31] 3 locks held by syz.4.1814/12679: [ 525.630795][ T31] #0: ffff88807ce9c148 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 525.641368][ T31] #1: ffff8881432da7e0 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_release+0x51/0x380 [ 525.651619][ T31] #2: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 525.661711][ T31] [ 525.662468][T12674] bridge1: port 1(veth5) entered blocking state [ 525.670434][ T31] ============================================= [ 525.670434][ T31] [ 525.671606][T12674] bridge1: port 1(veth5) entered disabled state [ 525.678858][ T31] NMI backtrace for cpu 0 [ 525.678871][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 525.678890][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.678898][ T31] Call Trace: [ 525.678904][ T31] [ 525.678910][ T31] dump_stack_lvl+0x116/0x1f0 [ 525.678937][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 525.678954][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 525.678976][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 525.678999][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 525.679018][ T31] watchdog+0xf3f/0x1170 [ 525.679041][ T31] ? rcu_is_watching+0x12/0xc0 [ 525.679060][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.679077][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 525.679091][ T31] ? __kthread_parkme+0x19e/0x250 [ 525.679113][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.679130][ T31] kthread+0x3c5/0x780 [ 525.679145][ T31] ? __pfx_kthread+0x10/0x10 [ 525.679161][ T31] ? rcu_is_watching+0x12/0xc0 [ 525.679179][ T31] ? __pfx_kthread+0x10/0x10 [ 525.679194][ T31] ret_from_fork+0x675/0x7d0 [ 525.679207][ T31] ? __pfx_kthread+0x10/0x10 [ 525.679222][ T31] ret_from_fork_asm+0x1a/0x30 [ 525.679253][ T31] [ 525.679259][ T31] Sending NMI from CPU 0 to CPUs 1: [ 525.811169][ C1] NMI backtrace for cpu 1 [ 525.811183][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 525.811198][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.811206][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 525.811230][ C1] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 84 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 525.811242][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 525.811254][ C1] RAX: 0000000001f1a439 RBX: 0000000000000001 RCX: ffffffff8b60a2a9 [ 525.811262][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 525.811271][ C1] RBP: ffffed1003ad1490 R08: 0000000000000001 R09: ffffed10170a6655 [ 525.811279][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 525.811287][ C1] R13: ffff88801d68a480 R14: ffffffff90820dd0 R15: 0000000000000000 [ 525.811296][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 525.811309][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.811318][ C1] CR2: 00007fe7aedb4198 CR3: 000000007e357000 CR4: 00000000003526f0 [ 525.811326][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 525.811333][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 525.811341][ C1] Call Trace: [ 525.811345][ C1] [ 525.811350][ C1] default_idle+0x13/0x20 [ 525.811364][ C1] default_idle_call+0x6c/0xb0 [ 525.811378][ C1] do_idle+0x38d/0x500 [ 525.811396][ C1] ? __pfx_do_idle+0x10/0x10 [ 525.811411][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 525.811428][ C1] cpu_startup_entry+0x4f/0x60 [ 525.811443][ C1] start_secondary+0x21d/0x2b0 [ 525.811462][ C1] ? __pfx_start_secondary+0x10/0x10 [ 525.811481][ C1] common_startup_64+0x13e/0x148 [ 525.811501][ C1] [ 525.814922][T12674] veth5: entered allmulticast mode [ 525.950132][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 525.989901][T12666] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 526.021278][T12674] veth5: entered promiscuous mode [ 526.042222][T12673] bridge1: port 2(veth7) entered blocking state [ 526.049243][T12673] bridge1: port 2(veth7) entered disabled state [ 526.057035][T12673] veth7: entered allmulticast mode [ 526.063518][T12673] veth7: entered promiscuous mode