last executing test programs: 1m7.376925131s ago: executing program 2 (id=696): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r12, {}, {0x6, 0xb}, {0x9, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 59.962923473s ago: executing program 2 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002c00090027bd7000000000000400000008001a8004000480bf3b190f2221e2690e519c22b6613958157202b085d545cd35eac8e671367b6b87c06a4f1dad59"], 0x1c}, 0x1, 0x0, 0x0, 0x20042804}, 0x84) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x41, 0x18) bind$packet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb']}) r6 = getpid() syz_pidfd_open(r6, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYBLOB="060d00000000000007500000000112050000030000000000000004000000000000000d00000000000000800000000000000001040000000000000200004000000000070000000000000081000000000000000600000000000000c204000000000103000000c9100000000000000000000000000000000100"], 0x78) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/158, 0x9e}], 0x4, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0, 0x91) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) syz_open_procfs(r6, &(0x7f00000003c0)='net/softnet_stat\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) 58.916860178s ago: executing program 2 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r6 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000700)={'vlan0\x00', @ifru_addrs=@ax25={0x3, @bcast, 0x7}}) 57.975098299s ago: executing program 2 (id=716): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x40, 0x21, 0x7, {0x7, 0xf, "9cc5de3955"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000040)="940910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000000)) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) close_range(r5, r5, 0x2) 54.249893962s ago: executing program 2 (id=726): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 50.721808491s ago: executing program 2 (id=739): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$nci(r12, &(0x7f0000001180)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x6, {0x0, 0x9, 0xff, 0x3}}, 0x7) 43.613056546s ago: executing program 1 (id=754): r0 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0x4) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) ioctl$FIONREAD(r5, 0x541b, 0xfffffffffffffffe) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="07a1000000000000180012800b000100697036746e6c0000080002800400130008001f"], 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0x41) 43.06301181s ago: executing program 1 (id=759): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x2010, r0, 0x8e014000) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r8, &(0x7f0000000100)='-1\x00', 0x2) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r7, 0x0, 0x41, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x28) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000100)={@my=0x0, 0xfffffffe}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x3001}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 41.704943143s ago: executing program 0 (id=763): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000340)={0x18, 0x2, {0x80, @loopback}}, 0x1e) connect$pptp(r8, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmmsg(r7, 0x0, 0x0, 0x40840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0xc1, 0x0, r9}}, 0x18}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r11 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f00000001c0)={@mcast1, 0x75}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022bbd7000ffdbdf2507000000080001000100000008000500000000000c00060002000000000000000a0004007770616e330000000c00170002b6aa4d6baaaaaa0c0006000200000002000000cc1918751dec8366d5db778a3d49ef7a828c77877b00a8d09193937f749827dd30a8900e7e1848b81c322f7c765f7e0ab0a3d6543925b84f5cd0b0107f6e50274ad688f5ed3da8551926bfaf2e76a6086efe6186707ecc70b8581208580467f4f5793194faf23f4c289c02fa6f6d4747b05e759a1b84164bbe8082d1062350dc278a11929ee76f7e463fdb3c33c79dfe1b76703fd50245e893e7eeaea810f1d41cd6ea42d8b263ad39a7686a5da5f5a8be052d467ca608587e5ffcce609f4d5c71dcec4f9378fe7e5a1a6a804deb5e845207cff7a4e75fe76914"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 41.145925359s ago: executing program 1 (id=764): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1f00, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x2, 0x2, 0x5, 0x0, 0x400}, 0x20) r5 = openat$kvm(0x0, 0x0, 0x9818c0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 40.286982206s ago: executing program 0 (id=767): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 39.474715409s ago: executing program 1 (id=769): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/73, 0x49}, {&(0x7f0000000600)=""/237, 0xed}], 0x5, &(0x7f0000000780)=""/189, 0xbd}, 0xa}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/150, 0x96}], 0x3, &(0x7f0000000b00)=""/143, 0x8f}, 0x8}, {{&(0x7f0000000bc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/60, 0x3c}], 0x1, &(0x7f0000000cc0)=""/113, 0x71}, 0x9}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/230, 0xe6}, 0x3}, {{&(0x7f0000002000)=@caif=@dgm, 0x80, &(0x7f0000002640)=[{&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000002180)=""/12, 0xc}, {&(0x7f00000021c0)=""/107, 0x6b}, {&(0x7f0000002240)=""/238, 0xee}, {&(0x7f0000002340)=""/112, 0x70}, {&(0x7f00000023c0)=""/101, 0x65}, {&(0x7f0000002440)=""/225, 0xe1}, {&(0x7f0000002540)=""/12, 0xc}, {&(0x7f0000002580)=""/33, 0x21}, {&(0x7f00000025c0)=""/119, 0x77}], 0xa, &(0x7f0000002700)=""/119, 0x77}, 0x4}], 0x5, 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r6, 0x0, 0x0, 0x1000400000de, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r11, &(0x7f0000ff9000/0x1000)=nil, 0x4000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 37.249016678s ago: executing program 0 (id=773): r0 = syz_io_uring_setup(0x911, &(0x7f0000000180)={0x0, 0x6c6b, 0x1, 0x2, 0xf6}, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x4110810, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006100)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) pread64(r4, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x1071) 37.247972607s ago: executing program 1 (id=774): r0 = syz_io_uring_setup(0x911, &(0x7f0000000180)={0x0, 0x6c6b, 0x1, 0x2, 0xf6}, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x4110810, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020}, 0x2020) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) 35.654984886s ago: executing program 0 (id=777): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v\x00@\x00\x00\x00\x00'], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x4, 0x0, 0xfd}, 0xfffffffe, 0x1, {}, 0x6}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 35.50195536s ago: executing program 32 (id=739): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$nci(r12, &(0x7f0000001180)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x6, {0x0, 0x9, 0xff, 0x3}}, 0x7) 35.490931651s ago: executing program 1 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r4, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x7ffd, 0xe) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 34.532226128s ago: executing program 0 (id=782): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, 0x0) 33.112147297s ago: executing program 0 (id=785): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x6c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) unshare(0x28040680) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) close(r7) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) creat(&(0x7f0000000000)='./file0\x00', 0x2) 32.477917724s ago: executing program 3 (id=786): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v\x00@\x00\x00\x00\x00'], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x4, 0x0, 0xfd}, 0xfffffffe, 0x1, {}, 0x6}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 31.606707922s ago: executing program 3 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x6a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000c7baf82063074110bd640102030109025800010000e0000904b80006ff"], 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x0) 30.323983883s ago: executing program 3 (id=790): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r3, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v\x00@\x00\x00\x00\x00'], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x4, 0x0, 0xfd}, 0xfffffffe, 0x1, {}, 0x6}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 29.034669219s ago: executing program 3 (id=792): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v\x00@\x00\x00\x00\x00'], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x4, 0x0, 0xfd}, 0xfffffffe, 0x1, {}, 0x6}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 28.172144107s ago: executing program 3 (id=794): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="ce407a21601faac29a5832d81cb42eb2e20559b3d51251cd080a889910e1ba5aeae19e2a6fe9d59e2a42efdd42ba111d39aa2f428359bf580183ac9e8ed27f5497", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="2f000000382000007f000000552b23d08233554c575b497e16c61aba33b91daa085d29bae369f2c4a23c8af041c90000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 27.197067716s ago: executing program 3 (id=796): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) writev(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = io_uring_setup(0x1148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\x\xacK-^{', 0x3a, './file1'}, 0x3d) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 20.040788367s ago: executing program 33 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r4, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x7ffd, 0xe) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 18.770138559s ago: executing program 4 (id=808): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1f00, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, 0xffffffffffffffff}) fremovexattr(r5, &(0x7f0000000000)=ANY=[@ANYBLOB]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x2, 0x2, 0x5, 0x0, 0x400}, 0x20) r6 = openat$kvm(0x0, 0x0, 0x9818c0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 18.04796481s ago: executing program 34 (id=785): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x6c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) unshare(0x28040680) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) close(r7) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) creat(&(0x7f0000000000)='./file0\x00', 0x2) 17.877791631s ago: executing program 4 (id=810): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v\x00@\x00\x00\x00\x00'], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x4, 0x0, 0xfd}, 0xfffffffe, 0x1, {}, 0x6}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 16.968586603s ago: executing program 4 (id=811): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r3, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v\x00@\x00\x00\x00\x00'], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x4, 0x0, 0xfd}, 0xfffffffe, 0x1, {}, 0x6}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 16.148414049s ago: executing program 4 (id=812): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x3ff) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xdaf}}, './file0\x00'}) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x0, 0x2}, 0x18) sendfile(r7, r7, 0x0, 0x200000) 15.276651392s ago: executing program 4 (id=813): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x28, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80b}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) preadv2(r1, 0x0, 0x0, 0x3, 0x9f, 0xd) listen(0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socket(0x15, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/163, 0xa3}, {&(0x7f0000000780)=""/148, 0x94}, {&(0x7f0000000840)=""/131, 0x83}], 0x4}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x4, 0x2, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d2, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 15.208907214s ago: executing program 4 (id=814): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31830000000000000000190000000c000180080003000600"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x480a0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 12.030350577s ago: executing program 35 (id=796): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) writev(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = io_uring_setup(0x1148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\x\xacK-^{', 0x3a, './file1'}, 0x3d) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 36 (id=814): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31830000000000000000190000000c000180080003000600"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x480a0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) kernel console output (not intermixed with test programs): devsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.912527][ T30] audit: type=1400 audit(1766796003.280:86): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.LxqoY8/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.936952][ T30] audit: type=1400 audit(1766796003.280:87): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.959353][ T30] audit: type=1400 audit(1766796003.280:88): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.LxqoY8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.986903][ T30] audit: type=1400 audit(1766796003.280:89): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.990915][ T3425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.009069][ T30] audit: type=1400 audit(1766796003.280:90): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.LxqoY8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.048132][ T30] audit: type=1400 audit(1766796003.310:91): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.LxqoY8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.084974][ T30] audit: type=1400 audit(1766796003.310:92): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.109360][ T30] audit: type=1400 audit(1766796003.350:93): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.111566][ T5815] veth0_macvtap: entered promiscuous mode [ 76.140026][ T30] audit: type=1400 audit(1766796003.350:94): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="gadgetfs" ino=7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.165782][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.175023][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.177579][ T5815] veth1_macvtap: entered promiscuous mode [ 76.213335][ T5813] veth0_macvtap: entered promiscuous mode [ 76.224798][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.243279][ T5813] veth1_macvtap: entered promiscuous mode [ 76.292902][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.348774][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.383847][ T3747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.400804][ T3747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.432280][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.440105][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.572253][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.598214][ T3747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.624787][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.020256][ T5832] Bluetooth: hci1: command tx timeout [ 77.025817][ T5832] Bluetooth: hci0: command tx timeout [ 77.031664][ T5828] Bluetooth: hci3: command tx timeout [ 77.037113][ T5828] Bluetooth: hci4: command tx timeout [ 77.073771][ T5832] Bluetooth: hci2: command tx timeout [ 77.146840][ T3747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.160329][ T3747] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.172597][ T5942] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.196096][ T3747] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502027][ T3747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503531][ T3747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503594][ T3747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.503620][ T3747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.503693][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.503708][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.503811][ T3747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503989][ T3481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.506000][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.506016][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.003428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.105840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.170480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.207718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.349140][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.380160][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.513723][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.521983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.572590][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.029284][ T5970] fuseblk: Bad value for 'fd' [ 79.119446][ T5830] Bluetooth: hci2: command tx timeout [ 79.125450][ T5830] Bluetooth: hci1: command tx timeout [ 79.134024][ T5832] Bluetooth: hci4: command tx timeout [ 79.139906][ T5828] Bluetooth: hci0: command tx timeout [ 79.145389][ T5833] Bluetooth: hci3: command tx timeout [ 79.252747][ T5976] ======================================================= [ 79.252747][ T5976] WARNING: The mand mount option has been deprecated and [ 79.252747][ T5976] and is ignored by this kernel. Remove the mand [ 79.252747][ T5976] option from the mount to silence this warning. [ 79.252747][ T5976] ======================================================= [ 79.325107][ T5976] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.762672][ T5976] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 79.773341][ T5976] overlayfs: failed to look up (tracing) for ino (-66) [ 79.823716][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 79.823761][ T30] audit: type=1400 audit(1766796006.650:122): avc: denied { mount } for pid=5960 comm="syz.4.5" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.358228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.468780][ T30] audit: type=1400 audit(1766796006.680:123): avc: denied { mount } for pid=5960 comm="syz.4.5" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.651311][ T30] audit: type=1400 audit(1766796007.790:124): avc: denied { ioctl } for pid=5961 comm="syz.2.7" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.721967][ T5937] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.750169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 80.760249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 80.768499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 80.790281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 80.835737][ T30] audit: type=1400 audit(1766796008.020:125): avc: denied { read write } for pid=5978 comm="syz.0.8" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.875617][ T30] audit: type=1400 audit(1766796008.020:126): avc: denied { open } for pid=5978 comm="syz.0.8" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.964158][ T5986] use of bytesused == 0 is deprecated and will be removed in the future, [ 80.973313][ T5986] use the actual size instead. [ 81.361273][ T89] cfg80211: failed to load regulatory.db [ 81.398141][ T30] audit: type=1400 audit(1766796008.060:127): avc: denied { ioctl } for pid=5978 comm="syz.0.8" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.612280][ T30] audit: type=1400 audit(1766796008.310:128): avc: denied { create } for pid=5978 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.632572][ T30] audit: type=1400 audit(1766796008.320:129): avc: denied { read write } for pid=5978 comm="syz.0.8" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.709951][ T5937] usb 3-1: device descriptor read/all, error -71 [ 81.715423][ T30] audit: type=1400 audit(1766796008.320:130): avc: denied { open } for pid=5978 comm="syz.0.8" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.082520][ T30] audit: type=1400 audit(1766796008.320:131): avc: denied { ioctl } for pid=5978 comm="syz.0.8" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.468715][ T6012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.870254][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 84.870270][ T30] audit: type=1400 audit(1766796012.230:176): avc: denied { allowed } for pid=6024 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.964140][ T30] audit: type=1400 audit(1766796012.230:177): avc: denied { create } for pid=6024 comm="syz.3.16" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.332203][ T30] audit: type=1400 audit(1766796012.230:178): avc: denied { map } for pid=6024 comm="syz.3.16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.424427][ T30] audit: type=1400 audit(1766796012.230:179): avc: denied { read write } for pid=6024 comm="syz.3.16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.574746][ T30] audit: type=1400 audit(1766796012.270:180): avc: denied { write } for pid=6024 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.853746][ T6047] process 'syz.4.18' launched '/dev/fd/9' with NULL argv: empty string added [ 86.230316][ T30] audit: type=1400 audit(1766796012.270:181): avc: denied { read } for pid=6024 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.270184][ T30] audit: type=1400 audit(1766796012.360:182): avc: denied { unlink } for pid=6035 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=1969 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.560202][ T5933] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.574358][ T30] audit: type=1400 audit(1766796012.860:183): avc: denied { read } for pid=6039 comm="syz.0.17" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.780467][ T30] audit: type=1400 audit(1766796012.860:184): avc: denied { open } for pid=6039 comm="syz.0.17" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.810359][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 87.278758][ T30] audit: type=1400 audit(1766796012.860:185): avc: denied { ioctl } for pid=6039 comm="syz.0.17" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.316818][ T6063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.384307][ T6061] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 87.455402][ T5933] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 87.475101][ T5933] usb 5-1: config 0 has no interface number 0 [ 87.481581][ T5933] usb 5-1: config 0 interface 184 has no altsetting 0 [ 87.491650][ T5933] usb 5-1: New USB device found, idVendor=0424, idProduct=7518, bcdDevice=69.ee [ 87.544206][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.765872][ T5933] usb 5-1: Product: syz [ 87.770034][ T5933] usb 5-1: Manufacturer: syz [ 87.799482][ T5933] usb 5-1: SerialNumber: syz [ 87.885411][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.092902][ T5933] usb 5-1: config 0 descriptor?? [ 88.200183][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 88.212345][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.228159][ T5904] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 88.345764][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.355635][ T5904] usb 3-1: config 0 descriptor?? [ 89.409968][ T5904] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 90.274047][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 90.274079][ T30] audit: type=1400 audit(1766796017.480:201): avc: denied { connect } for pid=6096 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.484960][ T30] audit: type=1400 audit(1766796017.520:202): avc: denied { mounton } for pid=6096 comm="syz.1.24" path="/2/file1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.045687][ T6104] vivid-000: kernel_thread() failed [ 91.144393][ T30] audit: type=1400 audit(1766796018.120:203): avc: denied { bind } for pid=6098 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.247439][ T5924] usb 5-1: USB disconnect, device number 2 [ 91.494856][ T30] audit: type=1400 audit(1766796018.120:204): avc: denied { name_bind } for pid=6098 comm="syz.0.23" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 91.659157][ T30] audit: type=1400 audit(1766796018.130:205): avc: denied { node_bind } for pid=6098 comm="syz.0.23" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 91.943823][ T5924] usb 3-1: USB disconnect, device number 4 [ 93.386825][ T30] audit: type=1400 audit(1766796020.250:206): avc: denied { create } for pid=6146 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.744220][ T30] audit: type=1400 audit(1766796022.070:207): avc: denied { create } for pid=6158 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.926371][ T6167] capability: warning: `syz.3.30' uses 32-bit capabilities (legacy support in use) [ 95.400004][ T30] audit: type=1400 audit(1766796022.760:208): avc: denied { ioctl } for pid=6168 comm="syz.4.32" path="socket:[9317]" dev="sockfs" ino=9317 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.566374][ T30] audit: type=1400 audit(1766796022.930:209): avc: denied { ioctl } for pid=6168 comm="syz.4.32" path="socket:[8855]" dev="sockfs" ino=8855 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.595043][ T6176] netlink: 68 bytes leftover after parsing attributes in process `syz.4.32'. [ 95.648555][ T30] audit: type=1400 audit(1766796022.960:210): avc: denied { write } for pid=6168 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.673072][ T30] audit: type=1400 audit(1766796022.960:211): avc: denied { nlmsg_write } for pid=6168 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.790013][ T30] audit: type=1400 audit(1766796023.040:212): avc: denied { name_bind } for pid=6168 comm="syz.4.32" src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 96.582309][ T30] audit: type=1400 audit(1766796023.940:213): avc: denied { read write } for pid=6178 comm="syz.0.33" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.647279][ T30] audit: type=1400 audit(1766796023.940:214): avc: denied { open } for pid=6178 comm="syz.0.33" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.711068][ T30] audit: type=1400 audit(1766796023.950:215): avc: denied { ioctl } for pid=6178 comm="syz.0.33" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 96.786773][ T30] audit: type=1400 audit(1766796023.990:216): avc: denied { search } for pid=6189 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.965224][ T30] audit: type=1400 audit(1766796023.990:217): avc: denied { search } for pid=6189 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.290204][ T6125] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.490178][ T6125] usb 3-1: Using ep0 maxpacket: 32 [ 97.524337][ T6125] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 97.997699][ T6125] usb 3-1: config 0 has no interface number 0 [ 98.012731][ T6125] usb 3-1: config 0 interface 80 has no altsetting 0 [ 98.065123][ T6125] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=54.b7 [ 98.077519][ T6125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.085960][ T6125] usb 3-1: Product: syz [ 98.090348][ T6125] usb 3-1: Manufacturer: syz [ 98.095044][ T6125] usb 3-1: SerialNumber: syz [ 98.102305][ T6125] usb 3-1: config 0 descriptor?? [ 98.110906][ T6125] usbhid 3-1:0.80: couldn't find an input interrupt endpoint [ 98.423865][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 99.877047][ T5934] usb 3-1: USB disconnect, device number 5 [ 100.478320][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 100.478335][ T30] audit: type=1400 audit(1766796027.840:229): avc: denied { mounton } for pid=6223 comm="syz.1.39" path="/6/file1" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.752742][ T6230] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 100.760476][ T6230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.40'. [ 100.769504][ T6230] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 100.803358][ T30] audit: type=1400 audit(1766796028.150:230): avc: denied { connect } for pid=6229 comm="syz.3.40" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.818229][ T6238] netlink: 176 bytes leftover after parsing attributes in process `syz.0.41'. [ 100.841096][ T6237] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.897279][ T6237] vlan2: entered promiscuous mode [ 100.910329][ T30] audit: type=1400 audit(1766796028.150:231): avc: denied { write } for pid=6229 comm="syz.3.40" laddr=fe80::789c:19ff:fecb:3843 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.947594][ T6237] vlan2: entered allmulticast mode [ 101.018015][ T6237] hsr_slave_1: entered allmulticast mode [ 101.023076][ T30] audit: type=1400 audit(1766796028.350:232): avc: denied { mount } for pid=6235 comm="syz.0.41" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 101.092340][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 101.110179][ T30] audit: type=1400 audit(1766796028.380:233): avc: denied { ioctl } for pid=6236 comm="syz.2.42" path="socket:[9574]" dev="sockfs" ino=9574 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.515145][ T30] audit: type=1400 audit(1766796028.450:234): avc: denied { write } for pid=6236 comm="syz.2.42" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.903397][ T6269] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.570212][ T30] audit: type=1400 audit(1766796030.220:235): avc: denied { create } for pid=6267 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.677287][ T30] audit: type=1400 audit(1766796030.240:236): avc: denied { bind } for pid=6267 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.919738][ T30] audit: type=1400 audit(1766796030.240:237): avc: denied { write } for pid=6267 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.919081][ T30] audit: type=1400 audit(1766796030.380:238): avc: denied { setopt } for pid=6267 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.279512][ T6294] sp0: Synchronizing with TNC [ 105.376645][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 106.108418][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 106.122394][ T30] audit: type=1400 audit(1766796033.470:239): avc: denied { write } for pid=6293 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.937820][ T6314] ceph: No mds server is up or the cluster is laggy [ 106.949730][ T6125] libceph: connect (1)[c::]:6789 error -101 [ 106.972077][ T6125] libceph: mon0 (1)[c::]:6789 connect error [ 107.234781][ T6316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.535401][ T30] audit: type=1400 audit(1766796035.470:240): avc: denied { name_bind } for pid=6319 comm="syz.4.54" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 108.564560][ T30] audit: type=1400 audit(1766796035.470:241): avc: denied { node_bind } for pid=6319 comm="syz.4.54" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 109.709344][ T6345] mmap: syz.3.56 (6345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.094053][ T30] audit: type=1400 audit(1766796037.040:242): avc: denied { setopt } for pid=6340 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.264270][ T30] audit: type=1400 audit(1766796037.620:243): avc: denied { map } for pid=6352 comm="syz.4.58" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 110.463858][ T6368] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 112.007819][ T30] audit: type=1400 audit(1766796039.350:244): avc: denied { unlink } for pid=6377 comm="syz.2.62" name="#1" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.369505][ T30] audit: type=1400 audit(1766796039.360:245): avc: denied { mount } for pid=6377 comm="syz.2.62" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.660195][ T30] audit: type=1400 audit(1766796039.840:246): avc: denied { create } for pid=6383 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.683773][ T30] audit: type=1400 audit(1766796040.030:247): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.216219][ T30] audit: type=1400 audit(1766796040.030:248): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 113.237013][ T30] audit: type=1400 audit(1766796040.110:249): avc: denied { getopt } for pid=6383 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.284933][ T30] audit: type=1400 audit(1766796040.110:250): avc: denied { write } for pid=6383 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.369171][ T30] audit: type=1400 audit(1766796040.120:251): avc: denied { setopt } for pid=6383 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.392073][ T30] audit: type=1400 audit(1766796040.120:252): avc: denied { read } for pid=6383 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.501963][ T24] IPVS: starting estimator thread 0... [ 113.601684][ T6391] IPVS: using max 43 ests per chain, 103200 per kthread [ 113.983070][ T30] audit: type=1400 audit(1766796041.260:253): avc: denied { mount } for pid=6395 comm="syz.3.65" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 115.974419][ T6427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.69'. [ 117.285703][ T6439] syz.1.72 uses obsolete (PF_INET,SOCK_PACKET) [ 117.311328][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 117.311343][ T30] audit: type=1400 audit(1766796044.680:262): avc: denied { wake_alarm } for pid=6437 comm="syz.1.72" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.636553][ T30] audit: type=1400 audit(1766796044.997:263): avc: denied { mount } for pid=6437 comm="syz.1.72" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 118.725259][ T6456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'. [ 119.097819][ T6469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.77'. [ 119.716583][ T30] audit: type=1400 audit(1766796047.077:264): avc: denied { create } for pid=6479 comm="syz.3.80" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.156780][ T30] audit: type=1400 audit(1766796047.127:265): avc: denied { write } for pid=6479 comm="syz.3.80" name="file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.556427][ T30] audit: type=1400 audit(1766796047.137:266): avc: denied { open } for pid=6479 comm="syz.3.80" path="/18/file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.578909][ T30] audit: type=1400 audit(1766796047.577:267): avc: denied { setopt } for pid=6479 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.630271][ T30] audit: type=1400 audit(1766796047.577:268): avc: denied { read } for pid=6479 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.657804][ T6487] netlink: 36 bytes leftover after parsing attributes in process `syz.4.79'. [ 120.764862][ T30] audit: type=1400 audit(1766796047.577:269): avc: denied { ioctl } for pid=6479 comm="syz.3.80" path="/18/file0" dev="tmpfs" ino=114 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.925218][ T30] audit: type=1400 audit(1766796047.947:270): avc: denied { unlink } for pid=5814 comm="syz-executor" name="file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.115009][ T30] audit: type=1400 audit(1766796048.217:271): avc: denied { ioctl } for pid=6481 comm="syz.4.79" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 122.613380][ T6507] netlink: 444 bytes leftover after parsing attributes in process `syz.1.84'. [ 122.622615][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 123.705728][ T6522] netlink: 116 bytes leftover after parsing attributes in process `syz.4.85'. [ 123.716948][ T6522] netlink: 116 bytes leftover after parsing attributes in process `syz.4.85'. [ 123.726456][ T6522] Zero length message leads to an empty skb [ 123.864740][ T30] audit: type=1400 audit(1766796051.097:272): avc: denied { ioctl } for pid=6515 comm="syz.4.85" path="socket:[10028]" dev="sockfs" ino=10028 ioctlcmd=0x42d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.931537][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.939742][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.898833][ T10] IPVS: starting estimator thread 0... [ 126.040654][ T6546] IPVS: using max 63 ests per chain, 151200 per kthread [ 127.720331][ T5904] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 128.133585][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.659740][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.679903][ T5904] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.689564][ T5904] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.701586][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.742479][ T5904] usb 5-1: config 0 descriptor?? [ 128.757481][ T5904] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 128.767282][ T5904] dvb-usb: bulk message failed: -22 (3/0) [ 128.777429][ T5904] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 128.806843][ T30] audit: type=1400 audit(1766796056.167:273): avc: denied { execute } for pid=6577 comm="syz.0.100" path="/19/cpu.stat" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.831003][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.972317][ T5904] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 129.032756][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 129.059757][ T5904] usb 5-1: media controller created [ 129.272203][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.416163][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 129.454634][ T5904] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 129.636463][ T5904] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 129.877483][ T5904] dvb-usb: schedule remote query interval to 150 msecs. [ 129.943580][ T5904] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 130.104405][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 130.138556][ T5904] dvb-usb: error while querying for an remote control event. [ 130.146263][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.376738][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 130.394875][ T5904] dvb-usb: error while querying for an remote control event. [ 130.909777][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 131.069263][ T5904] dvb-usb: error while querying for an remote control event. [ 131.332540][ T10] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.345662][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.352371][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 131.361555][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.373623][ T10] usb 3-1: config 0 descriptor?? [ 131.379123][ T10] usb 3-1: can't set config #0, error -71 [ 131.388941][ T10] usb 3-1: USB disconnect, device number 6 [ 131.390238][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 131.457444][ T5904] dvb-usb: error while querying for an remote control event. [ 131.523574][ T6067] usb 5-1: USB disconnect, device number 3 [ 131.651247][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.103'. [ 131.789893][ T6067] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 131.942579][ T30] audit: type=1400 audit(1766796059.287:274): avc: denied { read write } for pid=6600 comm="syz.1.106" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.164080][ T30] audit: type=1400 audit(1766796059.287:275): avc: denied { open } for pid=6600 comm="syz.1.106" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.299693][ T30] audit: type=1400 audit(1766796059.297:276): avc: denied { ioctl } for pid=6600 comm="syz.1.106" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.574063][ T30] audit: type=1400 audit(1766796059.357:277): avc: denied { mount } for pid=6600 comm="syz.1.106" name="/" dev="ramfs" ino=10203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 132.643849][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653306][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.858111][ T30] audit: type=1400 audit(1766796059.607:278): avc: denied { create } for pid=6608 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.110272][ T30] audit: type=1400 audit(1766796059.657:279): avc: denied { ioctl } for pid=6608 comm="syz.0.107" path="socket:[10811]" dev="sockfs" ino=10811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.299445][ T30] audit: type=1400 audit(1766796059.737:280): avc: denied { create } for pid=6608 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.331297][ T24] IPVS: starting estimator thread 0... [ 133.377600][ T30] audit: type=1400 audit(1766796059.737:281): avc: denied { ioctl } for pid=6608 comm="syz.0.107" path="socket:[10213]" dev="sockfs" ino=10213 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.432226][ T6614] IPVS: using max 41 ests per chain, 98400 per kthread [ 133.912207][ T30] audit: type=1400 audit(1766796061.267:282): avc: denied { setopt } for pid=6616 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.368590][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 135.388556][ T30] audit: type=1400 audit(1766796062.747:283): avc: denied { read } for pid=6635 comm="syz.3.114" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.751308][ T892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 136.043130][ T892] usb 2-1: Using ep0 maxpacket: 16 [ 136.091984][ T892] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 136.101101][ T892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.125603][ T892] usb 2-1: Product: syz [ 136.138374][ T892] usb 2-1: Manufacturer: syz [ 136.268212][ T892] usb 2-1: SerialNumber: syz [ 136.409453][ T892] r8152-cfgselector 2-1: Unknown version 0x0000 [ 136.762729][ T892] r8152-cfgselector 2-1: config 0 descriptor?? [ 136.795158][ T892] hub 2-1:0.0: bad descriptor, ignoring hub [ 136.816112][ T892] hub 2-1:0.0: probe with driver hub failed with error -5 [ 137.216566][ T5891] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 137.322946][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 137.322963][ T30] audit: type=1400 audit(1766796064.617:287): avc: denied { write } for pid=6652 comm="syz.3.116" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 138.779192][ T30] audit: type=1400 audit(1766796065.657:288): avc: denied { listen } for pid=6654 comm="syz.2.117" lport=57256 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.939551][ T6663] tipc: Started in network mode [ 138.944579][ T6663] tipc: Node identity 4, cluster identity 4711 [ 138.950908][ T6663] tipc: Node number set to 4 [ 139.340196][ T30] audit: type=1400 audit(1766796065.657:289): avc: denied { accept } for pid=6654 comm="syz.2.117" lport=57256 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.541253][ T30] audit: type=1400 audit(1766796065.667:290): avc: denied { setopt } for pid=6654 comm="syz.2.117" lport=57256 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 140.140244][ T30] audit: type=1400 audit(1766796065.677:291): avc: denied { accept } for pid=6654 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.171413][ T6678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.122'. [ 140.350361][ T30] audit: type=1400 audit(1766796067.057:292): avc: denied { ioctl } for pid=6665 comm="syz.2.119" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11021 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.518496][ T30] audit: type=1400 audit(1766796067.867:293): avc: denied { write } for pid=6681 comm="syz.2.123" name="ip_vs" dev="proc" ino=4026533429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 141.453057][ T30] audit: type=1400 audit(1766796068.287:294): avc: denied { getopt } for pid=6681 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.520680][ T30] audit: type=1400 audit(1766796068.287:295): avc: denied { name_connect } for pid=6681 comm="syz.2.123" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 141.864391][ T6696] ip6gretap0: entered promiscuous mode [ 141.870035][ T6696] vlan2: entered promiscuous mode [ 141.883487][ T30] audit: type=1400 audit(1766796069.217:296): avc: denied { create } for pid=6693 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.030999][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 142.997619][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 142.997652][ T30] audit: type=1400 audit(1766796070.357:298): avc: denied { create } for pid=6703 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.642307][ T30] audit: type=1326 audit(1766796070.817:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 143.734643][ T30] audit: type=1326 audit(1766796070.817:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 143.767836][ T30] audit: type=1326 audit(1766796070.817:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 143.940177][ T30] audit: type=1326 audit(1766796070.817:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 143.987500][ T30] audit: type=1326 audit(1766796070.817:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 144.648345][ T30] audit: type=1326 audit(1766796070.817:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 144.791065][ T5987] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.070203][ T5987] usb 2-1: Using ep0 maxpacket: 32 [ 145.076955][ T5987] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 145.111502][ T5987] usb 2-1: config 0 has no interface number 0 [ 145.131680][ T6728] 9p: Bad value for 'port' [ 145.193451][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 145.205773][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 145.622454][ T5987] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 145.632769][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.654036][ T30] audit: type=1326 audit(1766796070.817:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 145.710785][ T5987] usb 2-1: Product: syz [ 145.715240][ T30] audit: type=1326 audit(1766796070.817:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d80f8df90 code=0x7ffc0000 [ 145.787869][ T5987] usb 2-1: Manufacturer: syz [ 145.792659][ T5987] usb 2-1: SerialNumber: syz [ 145.798621][ T30] audit: type=1326 audit(1766796070.817:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7d80f90f77 code=0x7ffc0000 [ 145.911927][ T6728] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 146.031365][ T5987] usb 2-1: config 0 descriptor?? [ 146.111082][ T5987] smsc95xx v2.0.0 [ 146.114723][ T5987] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 146.174487][ T5987] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 146.729731][ T6742] netlink: 212 bytes leftover after parsing attributes in process `syz.0.138'. [ 147.770478][ T5833] Bluetooth: hci0: command 0x0401 tx timeout [ 148.089139][ T6754] ip6gretap0: entered promiscuous mode [ 148.094871][ T6754] vlan2: entered promiscuous mode [ 149.613335][ T892] usb 2-1: USB disconnect, device number 3 [ 150.137012][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 150.137044][ T30] audit: type=1400 audit(1766796077.457:337): avc: denied { mount } for pid=6768 comm="syz.3.145" name="/" dev="rpc_pipefs" ino=11562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 151.214928][ T5891] IPVS: starting estimator thread 0... [ 151.311839][ T6787] IPVS: using max 36 ests per chain, 86400 per kthread [ 151.580197][ T5891] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.890229][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 152.188920][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.210395][ T5891] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.219543][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.662104][ T5891] usb 2-1: config 0 descriptor?? [ 152.695739][ T5891] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 153.477088][ T6811] xt_l2tp: v2 sid > 0xffff: 117440512 [ 153.486016][ T6811] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 153.493939][ T6811] netlink: 168 bytes leftover after parsing attributes in process `syz.2.152'. [ 154.326750][ T5924] usb 2-1: USB disconnect, device number 4 [ 154.714286][ T6818] vlan2: entered promiscuous mode [ 156.674500][ T6838] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 156.682509][ T6838] netlink: 168 bytes leftover after parsing attributes in process `syz.0.158'. [ 157.722385][ T6849] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 157.736985][ T6849] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 157.761231][ T30] audit: type=1400 audit(1766796085.097:338): avc: denied { firmware_load } for pid=6845 comm="syz.0.162" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 158.080230][ T30] audit: type=1400 audit(1766796085.307:339): avc: denied { connect } for pid=6841 comm="syz.4.161" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.830427][ T6862] syz_tun: entered allmulticast mode [ 159.413563][ T6858] syz_tun: left allmulticast mode [ 159.702700][ T6871] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 159.741229][ T6871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.165'. [ 159.750473][ T6871] dummy0: entered promiscuous mode [ 159.756382][ T6871] bridge0: port 3(dummy0) entered blocking state [ 159.790936][ T6871] bridge0: port 3(dummy0) entered disabled state [ 159.809114][ T6871] dummy0: entered allmulticast mode [ 159.823156][ T6871] bridge0: port 3(dummy0) entered blocking state [ 159.829629][ T6871] bridge0: port 3(dummy0) entered forwarding state [ 160.028992][ T6871] binder: 6863:6871 ioctl c0306201 0 returned -14 [ 161.238667][ T6883] ip6gretap0: entered promiscuous mode [ 161.244240][ T6883] vlan2: entered promiscuous mode [ 161.390940][ T30] audit: type=1400 audit(1766796088.757:340): avc: denied { bind } for pid=6885 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.818141][ T30] audit: type=1400 audit(1766796088.917:341): avc: denied { create } for pid=6885 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 162.439443][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.173'. [ 164.303087][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.177'. [ 164.720195][ T30] audit: type=1400 audit(1766796091.647:342): avc: denied { append } for pid=6916 comm="syz.4.177" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.831541][ T30] audit: type=1400 audit(1766796091.767:343): avc: denied { ioctl } for pid=6916 comm="syz.4.177" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.153380][ T6926] netlink: 444 bytes leftover after parsing attributes in process `syz.1.178'. [ 165.162560][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 166.846369][ T30] audit: type=1400 audit(1766796094.197:344): avc: denied { create } for pid=6942 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 167.301497][ T30] audit: type=1400 audit(1766796094.207:345): avc: denied { read } for pid=6942 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 167.987721][ T6952] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.170394][ T30] audit: type=1400 audit(1766796095.437:346): avc: denied { append } for pid=6948 comm="syz.1.185" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 168.688880][ T30] audit: type=1400 audit(1766796096.037:347): avc: denied { read } for pid=6962 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.665434][ T30] audit: type=1400 audit(1766796096.967:348): avc: denied { name_bind } for pid=6971 comm="syz.0.190" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 170.110230][ T30] audit: type=1400 audit(1766796097.407:349): avc: denied { create } for pid=6962 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 170.137083][ T30] audit: type=1400 audit(1766796097.497:350): avc: denied { write } for pid=6962 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 170.145943][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 170.848375][ T6983] netlink: 444 bytes leftover after parsing attributes in process `syz.0.191'. [ 170.857643][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 172.163617][ T6993] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿtmpfs' [ 172.314267][ T30] audit: type=1400 audit(1766796099.577:351): avc: denied { append } for pid=6986 comm="syz.4.192" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.406894][ T6993] futex_wake_op: syz.4.192 tries to shift op by 144; fix this program [ 173.100434][ T6998] nbd2: detected capacity change from 0 to 63 [ 173.460386][ T30] audit: type=1400 audit(1766796100.557:352): avc: denied { bind } for pid=7003 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.551527][ T7001] block nbd2: NBD_DISCONNECT [ 173.557559][ T7001] block nbd2: Disconnected due to user request. [ 173.597903][ T7001] block nbd2: shutting down sockets [ 173.711066][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.720799][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.728724][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.738242][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 173.746092][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.755589][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 173.763369][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.772829][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 173.781237][ T5834] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.808844][ T5834] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.819979][ T5834] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.830313][ T5834] Buffer I/O error on dev nbd2, logical block 1, async page read [ 173.838158][ T5834] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.942216][ T5834] Buffer I/O error on dev nbd2, logical block 2, async page read [ 173.964767][ T5834] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.001119][ T5834] Buffer I/O error on dev nbd2, logical block 3, async page read [ 174.028394][ T5834] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.070204][ T5834] Buffer I/O error on dev nbd2, logical block 0, async page read [ 174.110805][ T892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.121891][ T5834] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 174.137142][ T5834] Buffer I/O error on dev nbd2, logical block 1, async page read [ 174.203837][ T5834] ldm_validate_partition_table(): Disk read failed. [ 174.242806][ T5834] Dev nbd2: unable to read RDB block 0 [ 174.256658][ T5834] nbd2: unable to read partition table [ 174.281534][ T5834] ldm_validate_partition_table(): Disk read failed. [ 174.302954][ T5834] Dev nbd2: unable to read RDB block 0 [ 174.321812][ T892] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 174.330074][ T892] usb 2-1: config 0 has no interface number 0 [ 174.336340][ T892] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.351038][ T892] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 174.360258][ T892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.368972][ T892] usb 2-1: Product: syz [ 174.376746][ T892] usb 2-1: Manufacturer: syz [ 174.383206][ T892] usb 2-1: SerialNumber: syz [ 174.425686][ T5834] nbd2: unable to read partition table [ 174.481492][ T892] usb 2-1: config 0 descriptor?? [ 174.586145][ T892] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 175.169941][ T7024] syzkaller1: entered promiscuous mode [ 175.175616][ T7024] syzkaller1: entered allmulticast mode [ 175.199417][ T30] audit: type=1400 audit(1766796102.527:353): avc: denied { ioctl } for pid=7015 comm="syz.1.199" path="socket:[12851]" dev="sockfs" ino=12851 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.140255][ T30] audit: type=1400 audit(1766796104.227:354): avc: denied { read } for pid=7037 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.286236][ T6013] usb 2-1: USB disconnect, device number 5 [ 177.297723][ T6013] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 177.610639][ T30] audit: type=1400 audit(1766796104.837:355): avc: denied { mount } for pid=7042 comm="syz.2.206" name="/" dev="hugetlbfs" ino=12955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 178.127626][ T30] audit: type=1400 audit(1766796105.067:356): avc: denied { mounton } for pid=7042 comm="syz.2.206" path="/42/file0" dev="hugetlbfs" ino=12955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 178.150777][ T30] audit: type=1400 audit(1766796105.077:357): avc: denied { mount } for pid=7042 comm="syz.2.206" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 178.365079][ T30] audit: type=1326 audit(1766796105.107:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 178.470178][ T30] audit: type=1326 audit(1766796105.107:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 178.549933][ T30] audit: type=1326 audit(1766796105.117:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 178.608408][ T30] audit: type=1326 audit(1766796105.117:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 178.665494][ T30] audit: type=1326 audit(1766796105.117:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x7ffc0000 [ 180.400468][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 180.400483][ T30] audit: type=1326 audit(1766796107.767:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 180.676369][ T30] audit: type=1326 audit(1766796108.037:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 180.919408][ T30] audit: type=1326 audit(1766796108.277:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 181.474104][ T30] audit: type=1326 audit(1766796108.277:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 181.663268][ T30] audit: type=1326 audit(1766796108.887:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 181.820229][ T30] audit: type=1326 audit(1766796108.907:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 182.322128][ T30] audit: type=1326 audit(1766796109.047:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 182.383980][ T7096] Invalid source name [ 182.623891][ T30] audit: type=1326 audit(1766796109.047:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 183.092962][ T30] audit: type=1326 audit(1766796109.047:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a1f8f749 code=0x7ffc0000 [ 183.235360][ T30] audit: type=1400 audit(1766796109.747:413): avc: denied { listen } for pid=7091 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.749438][ T7142] 9pnet_virtio: no channels available for device syz [ 186.827349][ T7142] SQUASHFS error: Failed to read block 0x0: -5 [ 187.188048][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 187.188061][ T30] audit: type=1400 audit(1766796114.177:419): avc: denied { getopt } for pid=7139 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.562467][ T30] audit: type=1400 audit(1766796116.837:420): avc: denied { create } for pid=7155 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.680191][ T30] audit: type=1400 audit(1766796116.847:421): avc: denied { connect } for pid=7155 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.700193][ T30] audit: type=1400 audit(1766796116.867:422): avc: denied { shutdown } for pid=7155 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.730281][ T6125] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 191.040183][ T6125] usb 5-1: Using ep0 maxpacket: 32 [ 191.046807][ T6125] usb 5-1: config 32 has an invalid interface number: 85 but max is 0 [ 191.055395][ T6125] usb 5-1: config 32 has no interface number 0 [ 191.061812][ T6125] usb 5-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.073047][ T6125] usb 5-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.083170][ T6125] usb 5-1: config 32 interface 85 has no altsetting 0 [ 191.235144][ T6125] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 191.249410][ T30] audit: type=1400 audit(1766796118.287:423): avc: denied { shutdown } for pid=7174 comm="syz.2.235" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.523722][ T6125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.544484][ T6125] usb 5-1: Product: syz [ 191.552900][ T6125] usb 5-1: Manufacturer: syz [ 191.606056][ T6125] usb 5-1: SerialNumber: syz [ 191.684535][ T30] audit: type=1400 audit(1766796118.287:424): avc: denied { read } for pid=7174 comm="syz.2.235" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.740653][ T30] audit: type=1400 audit(1766796118.687:425): avc: denied { open } for pid=7177 comm="syz.0.236" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 193.235597][ T6125] appletouch 5-1:32.85: Failed to read mode from device. [ 193.277192][ T6125] appletouch 5-1:32.85: probe with driver appletouch failed with error -5 [ 193.329391][ T6125] usb 5-1: USB disconnect, device number 4 [ 194.025440][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.031800][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.140208][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 196.140225][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.146264][ T52] Bluetooth: hci0: command 0x0401 tx timeout [ 196.152248][ T5139] Bluetooth: hci1: command 0x0406 tx timeout [ 196.158567][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 198.324187][ T30] audit: type=1400 audit(1766796125.637:426): avc: denied { name_bind } for pid=7241 comm="syz.3.248" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 199.221391][ T30] audit: type=1400 audit(1766796125.647:427): avc: denied { setopt } for pid=7241 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.445324][ T7259] syz_tun: entered allmulticast mode [ 199.604166][ T7255] syz_tun: left allmulticast mode [ 200.084731][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 200.090450][ T7265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7265 comm=syz.0.253 [ 201.179840][ T7277] atomic_op ffff888032bbe198 conn xmit_atomic 0000000000000000 [ 203.900275][ T30] audit: type=1400 audit(1766796130.927:428): avc: denied { setopt } for pid=7282 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 205.781827][ T7319] netlink: 'syz.4.263': attribute type 10 has an invalid length. [ 205.870755][ T7320] netlink: 'syz.4.263': attribute type 10 has an invalid length. [ 205.933239][ T7319] team0: Port device netdevsim0 added [ 206.523224][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 206.793976][ T7320] team0: Port device netdevsim0 removed [ 206.802761][ T7320] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 206.876774][ T30] audit: type=1326 audit(1766796134.237:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053238f749 code=0x7ffc0000 [ 206.976448][ T30] audit: type=1326 audit(1766796134.237:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053238f749 code=0x7ffc0000 [ 207.546156][ T30] audit: type=1326 audit(1766796134.237:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f053238f749 code=0x7ffc0000 [ 207.828415][ T7342] Bluetooth: MGMT ver 1.23 [ 208.283783][ T30] audit: type=1326 audit(1766796134.237:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053238f749 code=0x7ffc0000 [ 208.419262][ T30] audit: type=1326 audit(1766796134.247:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f053238df90 code=0x7ffc0000 [ 208.486130][ T30] audit: type=1326 audit(1766796134.247:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053238f749 code=0x7ffc0000 [ 208.540304][ T30] audit: type=1326 audit(1766796134.247:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f053238f749 code=0x7ffc0000 [ 208.573792][ T30] audit: type=1326 audit(1766796134.247:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053238f749 code=0x7ffc0000 [ 208.597689][ T30] audit: type=1326 audit(1766796134.247:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f053238f749 code=0x7ffc0000 [ 209.713419][ T7355] ceph: No mds server is up or the cluster is laggy [ 209.720478][ T6125] libceph: connect (1)[c::]:6789 error -101 [ 209.726508][ T6125] libceph: mon0 (1)[c::]:6789 connect error [ 211.380501][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 211.806723][ T30] audit: type=1400 audit(1766796138.637:448): avc: denied { setattr } for pid=7368 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 212.228979][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 213.035014][ T7404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.281'. [ 213.198109][ T7395] nbd3: detected capacity change from 0 to 63 [ 213.265106][ T7399] block nbd3: NBD_DISCONNECT [ 213.994221][ T7399] block nbd3: Disconnected due to user request. [ 214.028269][ T7399] block nbd3: shutting down sockets [ 214.035127][ T5834] blk_print_req_error: 138 callbacks suppressed [ 214.035143][ T5834] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 214.193430][ T5834] buffer_io_error: 138 callbacks suppressed [ 214.193448][ T5834] Buffer I/O error on dev nbd3, logical block 0, async page read [ 214.527275][ T7417] trusted_key: syz.4.284 sent an empty control message without MSG_MORE. [ 214.553894][ T30] audit: type=1400 audit(1766796141.907:449): avc: denied { setattr } for pid=7414 comm="syz.4.284" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.935895][ T56] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 214.945578][ T56] Buffer I/O error on dev nbd3, logical block 1, async page read [ 214.953495][ T56] Buffer I/O error on dev nbd3, logical block 2, async page read [ 214.961327][ T56] Buffer I/O error on dev nbd3, logical block 3, async page read [ 214.987374][ T5834] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 215.039695][ T5834] Buffer I/O error on dev nbd3, logical block 0, async page read [ 215.081824][ T5834] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 215.358709][ T5834] Buffer I/O error on dev nbd3, logical block 1, async page read [ 215.378995][ T5834] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 215.603901][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 216.238324][ T5834] Buffer I/O error on dev nbd3, logical block 2, async page read [ 216.476818][ T5834] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.610637][ T5834] Buffer I/O error on dev nbd3, logical block 3, async page read [ 216.980318][ T5834] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.990253][ T5834] Buffer I/O error on dev nbd3, logical block 0, async page read [ 216.998656][ T5834] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.008253][ T5834] Buffer I/O error on dev nbd3, logical block 1, async page read [ 217.032058][ T5834] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.087000][ T5834] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.363434][ T5834] ldm_validate_partition_table(): Disk read failed. [ 217.371447][ T5834] Dev nbd3: unable to read RDB block 0 [ 217.377481][ T5834] nbd3: unable to read partition table [ 217.388177][ T5834] ldm_validate_partition_table(): Disk read failed. [ 217.395600][ T5834] Dev nbd3: unable to read RDB block 0 [ 217.534492][ T5834] nbd3: unable to read partition table [ 220.319781][ T30] audit: type=1400 audit(1766796147.247:450): avc: denied { read } for pid=7466 comm="syz.4.295" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 220.590228][ T30] audit: type=1400 audit(1766796147.257:451): avc: denied { map } for pid=7466 comm="syz.4.295" path="/dev/sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 220.661989][ T30] audit: type=1400 audit(1766796147.257:452): avc: denied { execute } for pid=7466 comm="syz.4.295" path="/dev/sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.482393][ T7485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.297'. [ 221.641613][ T7488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 222.994123][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 223.187658][ T7493] bridge_slave_1: left allmulticast mode [ 223.203136][ T7493] bridge_slave_1: left promiscuous mode [ 223.240806][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.272983][ T7493] bridge_slave_0: left allmulticast mode [ 223.325241][ T7493] bridge_slave_0: left promiscuous mode [ 223.365546][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.454107][ T30] audit: type=1400 audit(1766796150.807:453): avc: denied { write } for pid=7508 comm="syz.2.303" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.034697][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 227.078671][ T30] audit: type=1400 audit(1766796154.427:454): avc: denied { setopt } for pid=7536 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.765758][ T7543] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 227.840651][ T7543] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 229.140204][ T5934] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.784987][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 229.930087][ T30] audit: type=1400 audit(1766796157.287:455): avc: denied { shutdown } for pid=7557 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.139034][ T5934] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 230.189258][ T5934] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 230.307860][ T7568] Illegal XDP return value 4294967274 on prog (id 87) dev N/A, expect packet loss! [ 230.328469][ T5934] usb 5-1: config 127 has no interface number 1 [ 230.350754][ T5934] usb 5-1: config 127 interface 171 has no altsetting 0 [ 230.390561][ T5934] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 230.403903][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.419815][ T5934] usb 5-1: Product: syz [ 230.427276][ T5934] usb 5-1: Manufacturer: syz [ 230.444858][ T5934] usb 5-1: SerialNumber: syz [ 230.574490][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 232.050213][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 233.100531][ T7596] kthread_run failed with err -4 [ 234.583481][ T5934] xr_serial 5-1:127.171: xr_serial converter detected [ 234.647289][ T5934] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 234.692820][ T5934] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 234.860633][ T5934] usb 5-1: USB disconnect, device number 5 [ 234.893546][ T5934] xr_serial 5-1:127.171: device disconnected [ 235.058953][ T30] audit: type=1400 audit(1766796162.417:456): avc: denied { write } for pid=7618 comm="syz.1.325" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 237.930252][ T30] audit: type=1400 audit(1766796164.787:457): avc: denied { accept } for pid=7643 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.227886][ T7678] bond0: entered promiscuous mode [ 240.233027][ T7678] bond_slave_0: entered promiscuous mode [ 240.239651][ T7678] bond_slave_1: entered promiscuous mode [ 240.247138][ T7678] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 240.277660][ T7678] dummy0: entered promiscuous mode [ 240.289088][ T7678] hsr1: entered promiscuous mode [ 240.294143][ T7678] hsr1: entered allmulticast mode [ 240.299190][ T7678] bond0: entered allmulticast mode [ 240.304352][ T7678] bond_slave_0: entered allmulticast mode [ 240.310519][ T7678] bond_slave_1: entered allmulticast mode [ 240.316310][ T7678] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 240.323769][ T7678] dummy0: entered allmulticast mode [ 240.920238][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.922874][ T7683] netlink: 444 bytes leftover after parsing attributes in process `syz.2.340'. [ 240.936794][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 241.200373][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 241.221508][ T9] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 241.281019][ T30] audit: type=1400 audit(1766796168.647:458): avc: denied { create } for pid=7684 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 241.304950][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.332019][ T9] usb 5-1: config 0 descriptor?? [ 243.037965][ T5904] usb 5-1: USB disconnect, device number 6 [ 245.371972][ T30] audit: type=1400 audit(1766796172.557:459): avc: denied { bind } for pid=7717 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.941343][ T30] audit: type=1400 audit(1766796174.197:460): avc: denied { mounton } for pid=7735 comm="syz.2.353" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 247.500187][ T6067] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 247.737922][ T6067] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 21 [ 248.250435][ T6067] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.287901][ T6067] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 248.480229][ T6067] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 248.591051][ T6067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.114184][ T6067] usb 3-1: config 0 descriptor?? [ 249.120640][ T7741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.917432][ T6067] sony 0003:1345:3008.0002: unknown main item tag 0x0 [ 249.941129][ T6067] sony 0003:1345:3008.0002: unknown main item tag 0x0 [ 249.961356][ T6067] sony 0003:1345:3008.0002: unknown main item tag 0x0 [ 249.978577][ T6067] sony 0003:1345:3008.0002: unknown main item tag 0x0 [ 249.992932][ T6067] sony 0003:1345:3008.0002: unknown main item tag 0x0 [ 250.189495][ T6067] sony 0003:1345:3008.0002: hiddev0,hidraw0: USB HID v81.01 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 250.331524][ T6067] sony 0003:1345:3008.0002: failed to claim input [ 250.993363][ T6067] usb 3-1: USB disconnect, device number 7 [ 251.298271][ T7772] fido_id[7772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 252.000833][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 255.266677][ T7828] siw: device registration error -23 [ 255.446140][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.452963][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.015913][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 256.026660][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 256.035722][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 256.045274][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 256.054198][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 256.291342][ T7838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.375'. [ 256.355919][ T7839] fuse: Unknown parameter 'K¹ƒf0x0000000000000007¬y ' [ 256.486616][ T30] audit: type=1400 audit(1766796183.717:461): avc: denied { mounton } for pid=7834 comm="syz.0.375" path="/77/file0" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 256.676012][ T5826] IPVS: starting estimator thread 0... [ 256.727837][ T7844] 9p: Bad value for 'rfdno' [ 256.735271][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 256.747714][ T30] audit: type=1400 audit(1766796184.047:462): avc: denied { create } for pid=7836 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 256.833325][ T30] audit: type=1400 audit(1766796184.047:463): avc: denied { write } for pid=7836 comm="syz.2.374" path="socket:[17011]" dev="sockfs" ino=17011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 257.204417][ T30] audit: type=1400 audit(1766796184.057:464): avc: denied { read } for pid=7836 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 257.317622][ T7843] IPVS: using max 63 ests per chain, 151200 per kthread [ 258.501476][ T30] audit: type=1400 audit(1766796184.087:465): avc: denied { read } for pid=7836 comm="syz.2.374" dev="sockfs" ino=16998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.570234][ T30] audit: type=1400 audit(1766796184.517:466): avc: denied { write } for pid=7836 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.617235][ T7847] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.377'. [ 259.811539][ T7873] netlink: 'syz.0.383': attribute type 1 has an invalid length. [ 260.056431][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.108425][ T7883] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 260.117726][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'. [ 260.229574][ T7881] bond1: (slave veth3): Enslaving as an active interface with a down link [ 260.592557][ T7882] bond1: (slave dummy0): making interface the new active one [ 260.668980][ T7882] dummy0: entered promiscuous mode [ 260.756042][ T7882] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 260.955722][ T7890] overlayfs: missing 'lowerdir' [ 261.024017][ T7883] bond1: (slave dummy0): Releasing active interface [ 262.656938][ T7908] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 264.941349][ T7948] netlink: 68 bytes leftover after parsing attributes in process `syz.3.395'. [ 266.612889][ T30] audit: type=1326 audit(1766796193.967:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 267.205151][ T30] audit: type=1326 audit(1766796193.967:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 267.228602][ T30] audit: type=1326 audit(1766796193.967:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 267.257818][ T30] audit: type=1326 audit(1766796193.967:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 267.360455][ T30] audit: type=1326 audit(1766796193.977:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 267.552323][ T30] audit: type=1326 audit(1766796193.977:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 267.587581][ T30] audit: type=1326 audit(1766796193.977:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 267.814172][ T7975] dummy0: left promiscuous mode [ 268.120223][ T7975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.258973][ T7974] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 268.390161][ T30] audit: type=1326 audit(1766796194.537:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 268.640499][ T30] audit: type=1326 audit(1766796194.537:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 268.740771][ T30] audit: type=1326 audit(1766796194.647:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6050f8f749 code=0x7ffc0000 [ 270.051556][ T7988] syz.1.408 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 271.316566][ T8000] No such timeout policy "syz1" [ 271.692753][ T8004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.413'. [ 271.701944][ T8004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.413'. [ 272.466169][ T8004] Process accounting resumed [ 274.456898][ T8028] Process accounting resumed [ 275.179555][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 275.179569][ T30] audit: type=1400 audit(1766796202.507:496): avc: denied { map } for pid=8039 comm="syz.3.422" path="socket:[17426]" dev="sockfs" ino=17426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.294617][ T30] audit: type=1400 audit(1766796202.507:497): avc: denied { accept } for pid=8039 comm="syz.3.422" path="socket:[17426]" dev="sockfs" ino=17426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 276.044768][ T30] audit: type=1400 audit(1766796202.877:498): avc: denied { write } for pid=8039 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.076225][ T8056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.424'. [ 277.760539][ T30] audit: type=1326 audit(1766796205.117:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.1.427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f053238f749 code=0x0 [ 279.126795][ T30] audit: type=1400 audit(1766796206.477:500): avc: denied { mounton } for pid=8069 comm="syz.1.428" path="/syzcgroup/unified/syz1" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 279.157398][ T8070] ./cgroup: Can't lookup blockdev [ 279.536217][ T8072] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 279.966951][ T30] audit: type=1400 audit(1766796206.907:501): avc: denied { relabelto } for pid=8069 comm="syz.1.428" name="74" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 280.050709][ T30] audit: type=1400 audit(1766796206.907:502): avc: denied { associate } for pid=8069 comm="syz.1.428" name="74" dev="tmpfs" ino=410 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 280.103192][ T30] audit: type=1400 audit(1766796207.467:503): avc: denied { remove_name } for pid=5813 comm="syz-executor" name="binderfs" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 280.136940][ T30] audit: type=1400 audit(1766796207.467:504): avc: denied { rmdir } for pid=5813 comm="syz-executor" name="74" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 281.092285][ T8080] No control pipe specified [ 282.089385][ T8090] wg1: entered promiscuous mode [ 282.094337][ T8090] wg1: entered allmulticast mode [ 282.243126][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.432'. [ 284.064501][ T8116] netlink: 35 bytes leftover after parsing attributes in process `syz.0.440'. [ 284.619440][ T8118] netlink: 'syz.0.440': attribute type 4 has an invalid length. [ 284.687282][ T30] audit: type=1400 audit(1766796211.567:505): avc: denied { shutdown } for pid=8108 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.909984][ T30] audit: type=1400 audit(1766796213.147:506): avc: denied { write } for pid=8124 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 287.936196][ T8151] : entered promiscuous mode [ 288.190438][ T8152] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 288.534504][ T30] audit: type=1400 audit(1766796215.897:507): avc: denied { listen } for pid=8157 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.371292][ T30] audit: type=1400 audit(1766796217.727:508): avc: denied { bind } for pid=8171 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.612295][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.451'. [ 290.642207][ T30] audit: type=1400 audit(1766796217.787:509): avc: denied { setopt } for pid=8171 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.694024][ T30] audit: type=1326 audit(1766796218.607:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 291.820306][ T30] audit: type=1326 audit(1766796218.617:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 291.869202][ T30] audit: type=1326 audit(1766796218.617:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 291.929852][ T30] audit: type=1326 audit(1766796218.617:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 292.039644][ T30] audit: type=1326 audit(1766796218.617:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 292.104178][ T30] audit: type=1326 audit(1766796218.627:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 292.170274][ T30] audit: type=1326 audit(1766796218.627:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 292.956119][ T30] audit: type=1326 audit(1766796218.627:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 294.110530][ T5817] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 294.700810][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.710664][ T5817] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 294.719667][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.776660][ T5817] usb 2-1: config 0 descriptor?? [ 294.876988][ T5817] usbhid 2-1:0.0: can't add hid device: -22 [ 294.895417][ T5817] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 296.764793][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.467'. [ 296.893190][ T6067] usb 2-1: USB disconnect, device number 6 [ 299.553740][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 299.553751][ T30] audit: type=1400 audit(1766796226.917:548): avc: denied { bind } for pid=8276 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 299.761028][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 303.001317][ T8311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.643003][ T8328] siw: device registration error -23 [ 304.730440][ T8329] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 304.805435][ T8329] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 305.948731][ T8340] affs: No valid root block on device nullb0 [ 307.460466][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 307.611354][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 307.873435][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.893344][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 308.067891][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.110181][ T9] usb 2-1: config 0 descriptor?? [ 308.812395][ T9] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 310.963176][ T6014] usb 2-1: USB disconnect, device number 7 [ 312.002123][ T8423] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 312.010056][ T8423] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 312.020186][ T8423] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 312.027983][ T8423] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 312.205800][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 316.203809][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 316.853534][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.990228][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.745974][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'. [ 320.826488][ T8510] random: crng reseeded on system resumption [ 321.000542][ T30] audit: type=1400 audit(1766796248.187:549): avc: denied { write } for pid=8507 comm="syz.4.520" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 321.414966][ T30] audit: type=1400 audit(1766796248.187:550): avc: denied { open } for pid=8507 comm="syz.4.520" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 321.686609][ T8519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.522'. [ 323.590792][ T30] audit: type=1400 audit(1766796250.957:551): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 325.212177][ T8548] netlink: 444 bytes leftover after parsing attributes in process `syz.2.529'. [ 325.221381][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 330.178323][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 330.299300][ T8594] 9p: Bad value for 'rfdno' [ 330.306531][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 330.466682][ T8595] wg1: entered promiscuous mode [ 330.480251][ T8595] wg1: entered allmulticast mode [ 332.704601][ T30] audit: type=1400 audit(1766796259.997:552): avc: denied { bind } for pid=8612 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.631382][ T8619] futex_wake_op: syz.1.543 tries to shift op by -1; fix this program [ 334.328378][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 334.345191][ T8619] team1: entered promiscuous mode [ 334.350250][ T8619] team1: entered allmulticast mode [ 334.669741][ T8642] wg1: entered promiscuous mode [ 334.674736][ T8642] wg1: entered allmulticast mode [ 335.544031][ T8654] netlink: 'syz.0.551': attribute type 10 has an invalid length. [ 336.110558][ T8654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.458664][ T8680] futex_wake_op: syz.4.558 tries to shift op by -1; fix this program [ 339.353479][ T8694] hfs: can't find a HFS filesystem on dev nullb0 [ 340.188274][ T8695] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.196087][ T8695] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 340.204751][ T8695] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.212592][ T8695] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 340.293654][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 340.450286][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 341.640250][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 341.646721][ T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 341.654869][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.680177][ T9] usb 2-1: config 0 has no interface number 0 [ 341.687840][ T9] usb 2-1: config 0 interface 52 has no altsetting 0 [ 342.245597][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 342.307236][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.317539][ T9] usb 2-1: config 0 descriptor?? [ 342.331508][ T9] usb 2-1: can't set config #0, error -71 [ 342.378510][ T9] usb 2-1: USB disconnect, device number 8 [ 344.784447][ T8730] evm: overlay not supported [ 345.080268][ T30] audit: type=1400 audit(1766796272.167:553): avc: denied { watch } for pid=8722 comm="syz.3.568" path="/119/bus/file1" dev="overlay" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 345.575936][ T8732] netlink: 'syz.4.567': attribute type 2 has an invalid length. [ 345.719329][ T30] audit: type=1400 audit(1766796272.167:554): avc: denied { watch_sb watch_reads } for pid=8722 comm="syz.3.568" path="/119/bus/file1" dev="overlay" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 346.320338][ T8732] : entered promiscuous mode [ 346.586399][ T8732] GUP no longer grows the stack in syz.4.567 (8732): 200000005000-200000008000 (200000004000) [ 346.604993][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.4.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.605029][ T8732] Tainted: [L]=SOFTLOCKUP [ 346.605037][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.605055][ T8732] Call Trace: [ 346.605063][ T8732] [ 346.605072][ T8732] dump_stack_lvl+0x16c/0x1f0 [ 346.605108][ T8732] gup_vma_lookup+0x1d2/0x220 [ 346.605138][ T8732] fixup_user_fault+0x26e/0x540 [ 346.605169][ T8732] ? futex_lock_pi+0x687/0x7c0 [ 346.605194][ T8732] fault_in_user_writeable+0x70/0xe0 [ 346.605226][ T8732] futex_lock_pi+0x690/0x7c0 [ 346.605252][ T8732] ? __pfx_futex_lock_pi+0x10/0x10 [ 346.605273][ T8732] ? __futex_wait+0x24b/0x2f0 [ 346.605325][ T8732] ? futex_private_hash_put+0x160/0x1b0 [ 346.605360][ T8732] ? __pfx_futex_wake_mark+0x10/0x10 [ 346.605401][ T8732] do_futex+0x11a/0x350 [ 346.605435][ T8732] ? __pfx_do_futex+0x10/0x10 [ 346.605469][ T8732] ? __vm_munmap+0x1d2/0x380 [ 346.605499][ T8732] __x64_sys_futex+0x1e0/0x4c0 [ 346.605535][ T8732] ? __pfx___x64_sys_futex+0x10/0x10 [ 346.605567][ T8732] ? xfd_validate_state+0x61/0x180 [ 346.605601][ T8732] do_syscall_64+0xcd/0xf80 [ 346.605633][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.605656][ T8732] RIP: 0033:0x7f6050f8f749 [ 346.605674][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.605697][ T8732] RSP: 002b:00007f6051d9a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 346.605722][ T8732] RAX: ffffffffffffffda RBX: 00007f60511e6270 RCX: 00007f6050f8f749 [ 346.605738][ T8732] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 346.605752][ T8732] RBP: 00007f6051013f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.605767][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.605781][ T8732] R13: 00007f60511e6308 R14: 00007f60511e6270 R15: 00007fffde37f908 [ 346.605813][ T8732] [ 347.335783][ T8742] ceph: No mds server is up or the cluster is laggy [ 347.438041][ T6067] libceph: connect (1)[c::]:6789 error -101 [ 347.454293][ T6067] libceph: mon0 (1)[c::]:6789 connect error [ 351.196052][ T8784] fuse: Unknown parameter 'fd0x0000000000000004' [ 351.892093][ T8791] program syz.4.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.000186][ T8791] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 353.409213][ T8816] ceph: No mds server is up or the cluster is laggy [ 353.664637][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 353.680359][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 357.137530][ T30] audit: type=1400 audit(1766796283.717:555): avc: denied { write } for pid=8837 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 357.529720][ T30] audit: type=1326 audit(1766796284.887:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.2.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d80f8f749 code=0x0 [ 357.572486][ T8847] netlink: 35 bytes leftover after parsing attributes in process `syz.4.588'. [ 357.871870][ T8858] netlink: 'syz.0.593': attribute type 11 has an invalid length. [ 358.890580][ T30] audit: type=1326 audit(1766796285.757:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.2.592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d80f8f749 code=0x0 [ 358.914876][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 362.437120][ T8888] infiniband !yz!: set active [ 362.442025][ T8888] infiniband !yz!: added team_slave_0 [ 362.935654][ T8888] RDS/IB: !yz!: added [ 362.940751][ T8888] smc: adding ib device !yz! with port count 1 [ 362.947041][ T8888] smc: ib device !yz! port 1 has no pnetid [ 364.109158][ T8903] tipc: Can't bind to reserved service type 1 [ 364.116615][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'. [ 366.187051][ T30] audit: type=1400 audit(1766796293.107:558): avc: denied { getopt } for pid=8914 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 366.518685][ T30] audit: type=1400 audit(1766796293.877:559): avc: denied { bind } for pid=8925 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.760169][ T30] audit: type=1400 audit(1766796294.097:560): avc: denied { mount } for pid=8925 comm="syz.4.609" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 366.980329][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 367.132167][ T5904] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.140845][ T5904] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 367.180220][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.210969][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 367.271011][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 367.318047][ T5904] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.471892][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.498862][ T5904] usb 5-1: Product: syz [ 367.653727][ T8933] Bluetooth: hci5: Frame reassembly failed (-84) [ 367.990757][ T5904] usb 5-1: Manufacturer: syz [ 367.990901][ T30] audit: type=1400 audit(1766796294.937:561): avc: denied { write } for pid=8930 comm="syz.3.608" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 368.019659][ T3747] Bluetooth: hci5: Frame reassembly failed (-84) [ 368.104687][ T5904] cdc_wdm 5-1:1.0: skipping garbage [ 368.249171][ T5904] cdc_wdm 5-1:1.0: skipping garbage [ 368.269503][ T5904] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 368.290343][ T5904] cdc_wdm 5-1:1.0: Unknown control protocol [ 368.333372][ T30] audit: type=1400 audit(1766796295.667:562): avc: denied { read write } for pid=8925 comm="syz.4.609" name="cdc-wdm0" dev="devtmpfs" ino=2880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 368.736757][ T30] audit: type=1400 audit(1766796295.667:563): avc: denied { open } for pid=8925 comm="syz.4.609" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 369.199739][ T30] audit: type=1400 audit(1766796296.557:564): avc: denied { append } for pid=8946 comm="syz.1.612" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.226096][ T8948] loop5: detected capacity change from 0 to 7 [ 369.243192][ T8929] Dev loop5: unable to read RDB block 7 [ 369.251361][ T8929] loop5: AHDI p1 p2 p3 [ 369.255551][ T8929] loop5: partition table partially beyond EOD, truncated [ 369.287105][ T8949] netlink: 64 bytes leftover after parsing attributes in process `syz.1.612'. [ 369.336340][ T8929] loop5: p1 start 1601398130 is beyond EOD, truncated [ 369.392516][ T8929] loop5: p2 start 1702059890 is beyond EOD, truncated [ 369.434236][ T8948] Dev loop5: unable to read RDB block 7 [ 369.444038][ T8948] loop5: AHDI p1 p2 p3 [ 369.450834][ T8948] loop5: partition table partially beyond EOD, truncated [ 369.483177][ T8948] loop5: p1 start 1601398130 is beyond EOD, truncated [ 369.494705][ T8948] loop5: p2 start 1702059890 is beyond EOD, truncated [ 370.256813][ T30] audit: type=1400 audit(1766796297.227:565): avc: denied { mount } for pid=8955 comm="syz.0.614" name="/" dev="configfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 370.279508][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 370.290318][ T30] audit: type=1400 audit(1766796297.237:566): avc: denied { search } for pid=8955 comm="syz.0.614" name="/" dev="configfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 370.313716][ T30] audit: type=1400 audit(1766796297.237:567): avc: denied { search } for pid=8955 comm="syz.0.614" name="/" dev="configfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 370.776548][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'. [ 370.899245][ T5817] usb 5-1: USB disconnect, device number 7 [ 371.604181][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 371.604285][ T30] audit: type=1400 audit(1766796298.747:571): avc: denied { map } for pid=8977 comm="syz.4.620" path="socket:[20875]" dev="sockfs" ino=20875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 372.287445][ T6067] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 372.420454][ T5817] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 372.911485][ T6067] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.920211][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 372.938038][ T5817] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 373.004898][ T6067] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 373.021941][ T6067] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.031246][ T6067] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 373.054627][ T6067] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 373.066365][ T5817] usb 5-1: config 0 has no interface number 0 [ 373.067694][ T6067] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.084159][ T5817] usb 5-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=ca.f7 [ 373.085646][ T6067] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.110451][ T6067] usb 2-1: Product: syz [ 373.114905][ T6067] usb 2-1: Manufacturer: syz [ 373.126681][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.136789][ T8993] 9p: Bad value for 'rfdno' [ 373.148598][ T6067] cdc_wdm 2-1:1.0: skipping garbage [ 373.166430][ T5817] usb 5-1: config 0 descriptor?? [ 373.172583][ T6067] cdc_wdm 2-1:1.0: skipping garbage [ 373.179432][ T6067] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 373.216643][ T8993] overlayfs: failed to clone upperpath [ 373.222297][ T6067] cdc_wdm 2-1:1.0: Unknown control protocol [ 374.560570][ T30] audit: type=1400 audit(1766796301.307:572): avc: denied { create } for pid=9003 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.686714][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 375.139035][ T5924] usb 2-1: USB disconnect, device number 9 [ 376.140891][ T5817] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in cold state, will try to load a firmware [ 376.397255][ T30] audit: type=1400 audit(1766796303.757:573): avc: denied { firmware_load } for pid=5817 comm="kworker/0:3" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 376.423815][ T5817] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 376.435134][ T5817] dib0700: firmware download failed at 7 with -22 [ 376.535782][ T5817] usb 5-1: USB disconnect, device number 8 [ 377.965462][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 378.197291][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 378.208473][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 378.293852][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.350300][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.602905][ T9124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.610320][ T9124] IPv6: NLM_F_CREATE should be set when creating new route [ 386.617761][ T9124] IPv6: NLM_F_CREATE should be set when creating new route [ 387.320876][ T30] audit: type=1400 audit(1766796314.687:574): avc: denied { setopt } for pid=9128 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 390.680920][ T30] audit: type=1400 audit(1766796318.037:575): avc: denied { connect } for pid=9153 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 391.671623][ T9171] netlink: 120 bytes leftover after parsing attributes in process `syz.3.661'. [ 393.140564][ T9185] 9p: Bad value for 'rfdno' [ 393.146910][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 393.344523][ T30] audit: type=1400 audit(1766796320.707:576): avc: denied { ioctl } for pid=9188 comm="syz.1.664" path="socket:[20249]" dev="sockfs" ino=20249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.725974][ T30] audit: type=1400 audit(1766796320.737:577): avc: denied { write } for pid=9188 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.880224][ T30] audit: type=1400 audit(1766796320.997:578): avc: denied { append } for pid=9189 comm="syz.4.665" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.050517][ T30] audit: type=1400 audit(1766796321.427:579): avc: denied { map } for pid=9189 comm="syz.4.665" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 395.261912][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 396.884759][ T30] audit: type=1400 audit(1766796324.197:580): avc: denied { name_connect } for pid=9203 comm="syz.4.667" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 397.445094][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 397.471949][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 398.086525][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 398.092606][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 398.422398][ T9215] ceph: No mds server is up or the cluster is laggy [ 398.651752][ T9234] vivid-007: disconnect [ 399.421799][ T9231] vivid-007: reconnect [ 401.737971][ T9264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9264 comm=syz.3.679 [ 402.432405][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 402.448074][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 402.613659][ T9274] capability: warning: `syz.0.682' uses deprecated v2 capabilities in a way that may be insecure [ 403.878264][ T30] audit: type=1326 audit(1766796331.237:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.010230][ T30] audit: type=1326 audit(1766796331.237:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.107058][ T30] audit: type=1326 audit(1766796331.287:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.184677][ T30] audit: type=1326 audit(1766796331.287:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.240368][ T30] audit: type=1326 audit(1766796331.287:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.536651][ T30] audit: type=1326 audit(1766796331.287:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.560544][ T30] audit: type=1326 audit(1766796331.287:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.585740][ T30] audit: type=1326 audit(1766796331.287:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.672420][ T30] audit: type=1326 audit(1766796331.287:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 404.906124][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 405.017763][ T30] audit: type=1326 audit(1766796331.297:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984538f749 code=0x7ffc0000 [ 406.213814][ T9317] netlink: 64 bytes leftover after parsing attributes in process `syz.3.691'. [ 408.537504][ T9334] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 409.638879][ T9344] overlayfs: failed to clone upperpath [ 409.752344][ T9347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.376381][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 412.384330][ T30] audit: type=1400 audit(1766796339.737:628): avc: denied { set_context_mgr } for pid=9367 comm="syz.4.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 412.384530][ T9373] binder: 9367:9373 ioctl c0306201 0 returned -14 [ 412.420786][ T9373] binder: 9367:9373 ioctl c0306201 200000000140 returned -11 [ 416.182344][ T9401] netlink: 'syz.0.720': attribute type 4 has an invalid length. [ 416.193248][ T9401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.531956][ T9422] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 418.840436][ T5826] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 419.522827][ T9441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.719'. [ 420.276725][ T5830] Bluetooth: hci0: command 0x0401 tx timeout [ 420.298096][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 420.338423][ T5826] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 420.354810][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.417806][ T5826] usb 3-1: config 0 descriptor?? [ 420.430914][ T9429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.801421][ T30] audit: type=1400 audit(1766796348.167:629): avc: denied { execute } for pid=9427 comm="syz.2.716" path="/file1" dev="ramfs" ino=21850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 421.248775][ T30] audit: type=1400 audit(1766796348.247:630): avc: denied { read } for pid=9449 comm="syz.0.723" path="socket:[22761]" dev="sockfs" ino=22761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.030166][ T30] audit: type=1400 audit(1766796349.087:631): avc: denied { unmount } for pid=9452 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 422.118396][ T5826] usbhid 3-1:0.0: can't add hid device: -71 [ 422.138188][ T5826] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 422.220503][ T5826] usb 3-1: USB disconnect, device number 8 [ 422.840295][ T9480] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 426.146469][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'. [ 426.581113][ T9530] input: syz0 as /devices/virtual/input/input8 [ 428.726648][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 428.733166][ T5826] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 429.579060][ T9547] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 430.860200][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 430.870628][ T5826] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 430.883916][ T5826] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 433.001700][ T9584] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 433.059880][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 433.080367][ T5826] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 433.125582][ T5826] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 433.212391][ T30] audit: type=1400 audit(1766796360.417:632): avc: denied { getopt } for pid=9580 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 433.266085][ T30] audit: type=1400 audit(1766796360.417:633): avc: denied { create } for pid=9580 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 433.308840][ T30] audit: type=1400 audit(1766796360.417:634): avc: denied { write } for pid=9580 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 433.547204][ T9588] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.758'. [ 433.610841][ T30] audit: type=1400 audit(1766796360.977:635): avc: denied { map } for pid=9593 comm="syz.1.759" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 433.637867][ T30] audit: type=1400 audit(1766796360.977:636): avc: denied { execute } for pid=9593 comm="syz.1.759" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 435.250498][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 435.256647][ T5826] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 435.265037][ T5826] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 435.923253][ T30] audit: type=1400 audit(1766796362.847:637): avc: denied { bind } for pid=9610 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 436.969055][ T30] audit: type=1400 audit(1766796364.317:638): avc: denied { read } for pid=9632 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 437.672634][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 437.688836][ T30] audit: type=1400 audit(1766796364.657:639): avc: denied { getopt } for pid=9632 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.709441][ T5826] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 437.717347][ T5826] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 438.932506][ T9648] netlink: 220 bytes leftover after parsing attributes in process `syz.4.771'. [ 439.742666][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.749113][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.691619][ T30] audit: type=1400 audit(1766796370.057:640): avc: denied { block_suspend } for pid=9677 comm="syz.1.779" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 445.023201][ T9719] siw: device registration error -23 [ 446.859207][ T30] audit: type=1400 audit(1766796374.217:641): avc: denied { bind } for pid=9729 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 446.884775][ T30] audit: type=1400 audit(1766796374.217:642): avc: denied { setopt } for pid=9729 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 455.966049][ T30] audit: type=1400 audit(1766796383.327:643): avc: denied { getopt } for pid=9785 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 501.172412][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.178766][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.612463][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.618836][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.172423][ T31] INFO: task kworker/1:3:5826 blocked for more than 143 seconds. [ 581.180796][ T31] Tainted: G L syzkaller #0 [ 581.187279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.195969][ T31] task:kworker/1:3 state:D stack:24792 pid:5826 tgid:5826 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 581.208037][ T31] Workqueue: events rfkill_op_handler [ 581.213590][ T31] Call Trace: [ 581.216859][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 581.219766][ T31] ? __schedule+0x10b9/0x6150 [ 581.225333][ T31] __schedule+0x1139/0x6150 [ 581.229877][ T31] ? __pfx___schedule+0x10/0x10 [ 581.234872][ T31] ? find_held_lock+0x2b/0x80 [ 581.239568][ T31] ? schedule+0x2d7/0x3a0 [ 581.244743][ T31] schedule+0xe7/0x3a0 [ 581.250179][ T31] schedule_preempt_disabled+0x13/0x30 [ 581.255652][ T31] __mutex_lock+0xc69/0x1ca0 [ 581.270192][ T31] ? nfc_dev_down+0x2d/0x310 [ 581.274820][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 581.279859][ T31] ? netif_close+0xa2/0x230 [ 581.310150][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 581.315199][ T31] ? nfc_dev_down+0x2d/0x310 [ 581.319766][ T31] nfc_dev_down+0x2d/0x310 [ 581.334099][ T31] nfc_rfkill_set_block+0x39/0x110 [ 581.339237][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 581.345034][ T31] rfkill_set_block+0x1fe/0x550 [ 581.349883][ T31] rfkill_epo+0x8e/0x1d0 [ 581.354870][ T31] rfkill_op_handler+0x25c/0x270 [ 581.359818][ T31] process_one_work+0x9ba/0x1b20 [ 581.364787][ T31] ? __pfx_br_fdb_cleanup+0x10/0x10 [ 581.369977][ T31] ? __pfx_process_one_work+0x10/0x10 [ 581.375505][ T31] ? assign_work+0x1a0/0x250 [ 581.380140][ T31] worker_thread+0x6c8/0xf10 [ 581.384747][ T31] ? __kthread_parkme+0x19e/0x250 [ 581.389749][ T31] ? __pfx_worker_thread+0x10/0x10 [ 581.394895][ T31] kthread+0x3c5/0x780 [ 581.398962][ T31] ? __pfx_kthread+0x10/0x10 [ 581.403559][ T31] ? rcu_is_watching+0x12/0xc0 [ 581.408317][ T31] ? __pfx_kthread+0x10/0x10 [ 581.413314][ T31] ret_from_fork+0x983/0xb10 [ 581.417900][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 581.423118][ T31] ? rcu_is_watching+0x12/0xc0 [ 581.427881][ T31] ? __switch_to+0x7af/0x10d0 [ 581.432582][ T31] ? __pfx_kthread+0x10/0x10 [ 581.437172][ T31] ret_from_fork_asm+0x1a/0x30 [ 581.442592][ T31] [ 581.445624][ T31] INFO: task kworker/1:5:5924 blocked for more than 143 seconds. [ 581.453433][ T31] Tainted: G L syzkaller #0 [ 581.459921][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.468606][ T31] task:kworker/1:5 state:D stack:23064 pid:5924 tgid:5924 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 581.481079][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 581.487754][ T31] Call Trace: [ 581.493289][ T31] [ 581.496208][ T31] ? __schedule+0x10b9/0x6150 [ 581.501691][ T31] __schedule+0x1139/0x6150 [ 581.506202][ T31] ? __lock_acquire+0x436/0x2890 [ 581.511265][ T31] ? __pfx___schedule+0x10/0x10 [ 581.516114][ T31] ? find_held_lock+0x2b/0x80 [ 581.520860][ T31] ? schedule+0x2d7/0x3a0 [ 581.525193][ T31] schedule+0xe7/0x3a0 [ 581.529267][ T31] schedule_preempt_disabled+0x13/0x30 [ 581.534781][ T31] __mutex_lock+0xc69/0x1ca0 [ 581.539373][ T31] ? register_lock_class+0x41/0x4b0 [ 581.544597][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 581.551123][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 581.556158][ T31] ? __pfx___schedule+0x10/0x10 [ 581.561064][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 581.567398][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 581.573682][ T31] process_one_work+0x9ba/0x1b20 [ 581.578623][ T31] ? __pfx_process_one_work+0x10/0x10 [ 581.584111][ T31] ? assign_work+0x1a0/0x250 [ 581.588706][ T31] worker_thread+0x6c8/0xf10 [ 581.593347][ T31] ? __kthread_parkme+0x19e/0x250 [ 581.598633][ T31] ? __pfx_worker_thread+0x10/0x10 [ 581.603775][ T31] kthread+0x3c5/0x780 [ 581.607842][ T31] ? __pfx_kthread+0x10/0x10 [ 581.612535][ T31] ? rcu_is_watching+0x12/0xc0 [ 581.617296][ T31] ? __pfx_kthread+0x10/0x10 [ 581.621928][ T31] ret_from_fork+0x983/0xb10 [ 581.626520][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 581.631777][ T31] ? __switch_to+0x7af/0x10d0 [ 581.636464][ T31] ? __pfx_kthread+0x10/0x10 [ 581.641121][ T31] ret_from_fork_asm+0x1a/0x30 [ 581.645905][ T31] [ 581.648922][ T31] INFO: task syz.2.739:9516 blocked for more than 143 seconds. [ 581.656611][ T31] Tainted: G L syzkaller #0 [ 581.663287][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.671970][ T31] task:syz.2.739 state:D stack:24952 pid:9516 tgid:9516 ppid:5816 task_flags:0x400040 flags:0x00080002 [ 581.683962][ T31] Call Trace: [ 581.687221][ T31] [ 581.690212][ T31] ? __schedule+0x10b9/0x6150 [ 581.694891][ T31] __schedule+0x1139/0x6150 [ 581.699380][ T31] ? __pfx___schedule+0x10/0x10 [ 581.704246][ T31] ? find_held_lock+0x2b/0x80 [ 581.708931][ T31] ? schedule+0x2d7/0x3a0 [ 581.713275][ T31] schedule+0xe7/0x3a0 [ 581.717344][ T31] schedule_preempt_disabled+0x13/0x30 [ 581.722919][ T31] __mutex_lock+0xc69/0x1ca0 [ 581.727513][ T31] ? find_held_lock+0x2b/0x80 [ 581.732254][ T31] ? rfkill_unregister+0xec/0x2c0 [ 581.737282][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 581.742352][ T31] ? kobject_put+0xaf/0x6f0 [ 581.746859][ T31] ? device_del+0x6b6/0x9f0 [ 581.751394][ T31] ? __pfx_device_del+0x10/0x10 [ 581.756260][ T31] ? rfkill_unregister+0xec/0x2c0 [ 581.761306][ T31] rfkill_unregister+0xec/0x2c0 [ 581.766152][ T31] nfc_unregister_device+0x94/0x390 [ 581.771557][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 581.777260][ T31] virtual_ncidev_close+0x4b/0xa0 [ 581.782307][ T31] __fput+0x402/0xb70 [ 581.786286][ T31] task_work_run+0x150/0x240 [ 581.790989][ T31] ? __pfx_task_work_run+0x10/0x10 [ 581.796102][ T31] ? __do_sys_close_range+0x278/0x730 [ 581.801526][ T31] exit_to_user_mode_loop+0xfb/0x540 [ 581.806825][ T31] do_syscall_64+0x4ee/0xf80 [ 581.811576][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.817472][ T31] RIP: 0033:0x7f7d80f8f749 [ 581.821914][ T31] RSP: 002b:00007ffddde19038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 581.830358][ T31] RAX: 0000000000000000 RBX: 00007f7d811e7da0 RCX: 00007f7d80f8f749 [ 581.838323][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 581.846416][ T31] RBP: 00007f7d811e7da0 R08: 00000000000521b4 R09: 0000001cdde1932f [ 581.854429][ T31] R10: 00007f7d811e7cb0 R11: 0000000000000246 R12: 00000000000682ec [ 581.862524][ T31] R13: 00007f7d811e6180 R14: ffffffffffffffff R15: 00007ffddde19150 [ 581.870527][ T31] [ 581.873543][ T31] [ 581.873543][ T31] Showing all locks held in the system: [ 581.885252][ T31] 1 lock held by khungtaskd/31: [ 581.890304][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 581.900267][ T31] 2 locks held by getty/5575: [ 581.904916][ T31] #0: ffff88814d2590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 581.914664][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 581.924804][ T31] 4 locks held by kworker/1:3/5826: [ 581.929971][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 581.940542][ T31] #1: ffffc900021afc90 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 581.950956][ T31] #2: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 581.960739][ T31] #3: ffff8880349fb100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x310 [ 581.969736][ T31] 3 locks held by kworker/1:5/5924: [ 581.975324][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 581.985848][ T31] #1: ffffc900044cfc90 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 581.999129][ T31] #2: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 582.010652][ T31] 2 locks held by syz.2.739/9516: [ 582.015666][ T31] #0: ffff8880349fb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x390 [ 582.025426][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 582.035559][ T31] 3 locks held by syz.1.779/9697: [ 582.040582][ T31] #0: ffffffff901e8250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 582.048772][ T31] #1: ffffffff901e8308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 582.057861][ T31] #2: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.067815][ T31] 2 locks held by syz-executor/9682: [ 582.073120][ T31] #0: ffff88805603d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.082595][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.092570][ T31] 2 locks held by syz.0.785/9706: [ 582.097579][ T31] #0: ffffffff901e8250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 582.105929][ T31] #1: ffffffff901e8308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 582.114949][ T31] 2 locks held by syz.3.796/9752: [ 582.119942][ T31] #0: ffffffff901e8250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 582.128119][ T31] #1: ffffffff901e8308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 582.137253][ T31] 2 locks held by syz.3.796/9753: [ 582.142303][ T31] #0: ffffffff901e8250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 582.150582][ T31] #1: ffffffff901e8308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 582.159520][ T31] 2 locks held by syz-executor/9791: [ 582.164814][ T31] #0: ffff88807b5ff118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.174253][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.184183][ T31] 2 locks held by syz-executor/9801: [ 582.189451][ T31] #0: ffff88805535c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.198860][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.208814][ T31] 2 locks held by syz.4.814/9815: [ 582.214005][ T31] #0: ffffffff901e8250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 582.222295][ T31] #1: ffffffff901e8308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 582.231350][ T31] 2 locks held by syz-executor/9820: [ 582.236627][ T31] #0: ffff888056553118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.246088][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.256049][ T31] 2 locks held by syz-executor/9823: [ 582.261450][ T31] #0: ffff88805585d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.270883][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.280843][ T31] 2 locks held by syz-executor/9829: [ 582.286110][ T31] #0: ffff88805708e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.295618][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.305829][ T31] 2 locks held by syz-executor/9833: [ 582.311142][ T31] #0: ffff888057f88918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.320660][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.330589][ T31] 2 locks held by syz-executor/9836: [ 582.335857][ T31] #0: ffff888031664918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.345261][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.355231][ T31] 2 locks held by syz-executor/9838: [ 582.360613][ T31] #0: ffff8880341bf918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.370026][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.379986][ T31] 2 locks held by syz-executor/9841: [ 582.385289][ T31] #0: ffff888056fd7918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.394762][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.405782][ T31] 2 locks held by syz-executor/9847: [ 582.411685][ T31] #0: ffff888076788118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.421173][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.431268][ T31] 2 locks held by syz-executor/9851: [ 582.436522][ T31] #0: ffff88802abb2918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.445948][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.455899][ T31] 2 locks held by syz-executor/9854: [ 582.461228][ T31] #0: ffff888076739118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 582.470736][ T31] #1: ffffffff905fa488 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 582.480741][ T31] [ 582.483053][ T31] ============================================= [ 582.483053][ T31] [ 582.491574][ T31] NMI backtrace for cpu 0 [ 582.491590][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 582.491619][ T31] Tainted: [L]=SOFTLOCKUP [ 582.491627][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.491638][ T31] Call Trace: [ 582.491645][ T31] [ 582.491653][ T31] dump_stack_lvl+0x116/0x1f0 [ 582.491681][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 582.491720][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 582.491750][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 582.491800][ T31] sys_info+0x133/0x180 [ 582.491828][ T31] watchdog+0xe66/0x1180 [ 582.491857][ T31] ? rcu_is_watching+0x12/0xc0 [ 582.491878][ T31] ? __pfx_watchdog+0x10/0x10 [ 582.491898][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 582.491926][ T31] ? __kthread_parkme+0x19e/0x250 [ 582.491949][ T31] ? __pfx_watchdog+0x10/0x10 [ 582.491971][ T31] kthread+0x3c5/0x780 [ 582.491996][ T31] ? __pfx_kthread+0x10/0x10 [ 582.492022][ T31] ? rcu_is_watching+0x12/0xc0 [ 582.492041][ T31] ? __pfx_kthread+0x10/0x10 [ 582.492079][ T31] ret_from_fork+0x983/0xb10 [ 582.492102][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 582.492128][ T31] ? __switch_to+0x7af/0x10d0 [ 582.492155][ T31] ? __pfx_kthread+0x10/0x10 [ 582.492180][ T31] ret_from_fork_asm+0x1a/0x30 [ 582.492230][ T31] [ 582.492238][ T31] Sending NMI from CPU 0 to CPUs 1: [ 582.632196][ C1] NMI backtrace for cpu 1 [ 582.632213][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.632241][ C1] Tainted: [L]=SOFTLOCKUP [ 582.632247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.632258][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 582.632286][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 582.632304][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 582.632323][ C1] RAX: 0000000001e2ff59 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 582.632336][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 582.632348][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 582.632360][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 582.632372][ C1] R13: ffff88801dac24c0 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 582.632385][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 582.632403][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.632415][ C1] CR2: 000055cc2e192be0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 582.632427][ C1] Call Trace: [ 582.632433][ C1] [ 582.632439][ C1] default_idle+0x13/0x20 [ 582.632465][ C1] default_idle_call+0x6c/0xb0 [ 582.632491][ C1] do_idle+0x38d/0x510 [ 582.632520][ C1] ? __pfx_do_idle+0x10/0x10 [ 582.632547][ C1] ? do_idle+0x2e2/0x510 [ 582.632575][ C1] cpu_startup_entry+0x4f/0x60 [ 582.632602][ C1] start_secondary+0x21d/0x2d0 [ 582.632621][ C1] ? __pfx_start_secondary+0x10/0x10 [ 582.632643][ C1] common_startup_64+0x13e/0x148 [ 582.632671][ C1] [ 582.807706][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 582.814530][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 582.825177][ T31] Tainted: [L]=SOFTLOCKUP [ 582.829472][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.839502][ T31] Call Trace: [ 582.842765][ T31] [ 582.845680][ T31] dump_stack_lvl+0x3d/0x1f0 [ 582.850252][ T31] vpanic+0x640/0x6f0 [ 582.854211][ T31] panic+0xca/0xd0 [ 582.857907][ T31] ? __pfx_panic+0x10/0x10 [ 582.862303][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 582.868284][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 582.874439][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 582.880589][ T31] ? watchdog+0xe83/0x1180 [ 582.884991][ T31] ? watchdog+0xe76/0x1180 [ 582.889393][ T31] watchdog+0xe94/0x1180 [ 582.893628][ T31] ? rcu_is_watching+0x12/0xc0 [ 582.898378][ T31] ? __pfx_watchdog+0x10/0x10 [ 582.903041][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 582.908244][ T31] ? __kthread_parkme+0x19e/0x250 [ 582.913257][ T31] ? __pfx_watchdog+0x10/0x10 [ 582.917925][ T31] kthread+0x3c5/0x780 [ 582.921986][ T31] ? __pfx_kthread+0x10/0x10 [ 582.926566][ T31] ? rcu_is_watching+0x12/0xc0 [ 582.931314][ T31] ? __pfx_kthread+0x10/0x10 [ 582.935894][ T31] ret_from_fork+0x983/0xb10 [ 582.940473][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 582.945574][ T31] ? __switch_to+0x7af/0x10d0 [ 582.950243][ T31] ? __pfx_kthread+0x10/0x10 [ 582.954830][ T31] ret_from_fork_asm+0x1a/0x30 [ 582.959601][ T31] [ 582.962883][ T31] Kernel Offset: disabled [ 582.967185][ T31] Rebooting in 86400 seconds..