last executing test programs: 19.964331467s ago: executing program 1 (id=59): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000133000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r1}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80dc5521, &(0x7f0000002300)=""/4115) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="140000003a000b63c55a80648c251b090ab5e9d1", 0x14}], 0x1}, 0x810) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r9 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$setperm(0x5, r9, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'e', 0x3a, '\x00\x00eh`\x1a\x00+^\x01\xa0\xfdZ\x020\x93-M\x93\xf4\x7fj\x05B\xf5,\xf4\xe8\x18<\xfd{\xe9\xd2\xfb\xf6\xa2COg\x84\xc8\xd7\x1c\x93\x87\xc2y\xe4%\xff\x14\x91\xfc\xbdRDs[\xc0\x03^~\x1d\xda\xd5\xf5\x83B\xc4?\xe9[:\x1d\xf9\x95\x8e\xfe\x10,\\^\x84\x8d\xb39\xfeu\xbd\x05cN ~\xbf:Z\xfd!$\xfc\x01@\xc0\xc2\xe0i+\xd7\xac\xaa\xd2!\b\x1b\xa8\x9f\x9f\xe3\x06\xe3~&\xe0x8\x84\xa9\xc3\xb6\xed\x92\x95\xa5\xbb\xb8\x04dB\xfd', 0x3a, './file1'}, 0xb5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 19.832373156s ago: executing program 0 (id=60): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) memfd_create(0x0, 0x3) 18.205410908s ago: executing program 2 (id=63): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400008110004b04000050297fb1000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba"], 0x0) 14.485803301s ago: executing program 2 (id=67): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r5 = socket(0x1d, 0x4, 0x6) r6 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r6, 0x89a0, &(0x7f0000000200)={@broadcast, @remote}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_j1939(r5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001811", @ANYRES32, @ANYRES32=r8, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 14.439060222s ago: executing program 0 (id=68): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000280)) r5 = getpid() r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000000300)=""/137, 0x89) ioctl$TIOCNOTTY(r6, 0x5422) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000880)={{0x0, 0x6, 0x6, 0x9, 0x9, 0x401, 0x6bd811fb, 0x0, 0xde7a, 0x4, 0x0, 0x6, 0x6, 0x5, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001880)={0x9, [{r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7, 0x0}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}], 0x12, "c3bfcae2e6c2b8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000fc100)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x8, "d7e210b12e2d45"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) read$msr(r1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x40018}, 0x800) 14.24677485s ago: executing program 4 (id=69): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10) 13.322164243s ago: executing program 0 (id=70): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x30044011) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') read$FUSE(r6, &(0x7f0000004dc0)={0x2020}, 0x2020) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000a14010d2bbd7000feeedf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @sco={0x1f, @none}, @llc={0x1a, 0x205, 0x1, 0x0, 0x1, 0x9, @local}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x8000}) dup3(r1, r9, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 11.53953947s ago: executing program 4 (id=72): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) read$FUSE(r5, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r5, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, r7, {0x9, 0xc5, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, r8, r9, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xb6d6, 0x2, 0x10000000}}}, 0x130) splice(r5, 0x0, r6, 0x0, 0x2000, 0x8) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r10, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc}) 10.985460014s ago: executing program 1 (id=73): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x30, 0x0, 0x1, 0x0, 0x0, 0x4044080}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000030615c800000000000000000100000905000100070000000900020073797a3100000000c1bea327bbc281edb61ae79c9db1e9f90cdac2637a2b511d30a7b33293cc3bb1b84ced9b9b6e6ebad5a35bb89796b7ff6dd8f8f9dcbad6707f0ed90316a6abb29c6fecec35d9b5ba574b2b048f3b07fc1d8cb3dbdd680b6cd7a949693514db281594d2"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8010) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) ioctl$LOOP_SET_FD(r6, 0x4c00, r3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x40800) 10.968302916s ago: executing program 2 (id=74): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) close(r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) 9.777868309s ago: executing program 0 (id=75): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f000000040000000600000007000000801300", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x2, 0x2, 0x1f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x800000}}}}}}}, 0x0) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x801) 9.512701414s ago: executing program 1 (id=77): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) keyctl$setperm(0x5, 0x0, 0x80000) keyctl$get_security(0x11, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001c80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24f73af4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x5, 0xf, 0x2, 0x4, {0x2, 0x2, 0x0, 0x1, 0xdc6, 0x4}, {0xf7, 0x2, 0x6, 0x5, 0x9, 0x9}, 0x0, 0x5, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x5d7, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x1, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x7, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x281, 0x4, 0x80000007, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x4, 0x2, 0x1, 0xfff, 0x3, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x8001, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82b, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x3, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xe, 0x20000, 0x9, 0x9e, 0x3, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x3, 0xfff, 0xcc, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x10101, 0xd, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1fe, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x10}, 0xe) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r7, 0x29, 0x10, 0x0, &(0x7f00000003c0)) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) sendto(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x3, 0x1, 0x4, {0xa, 0x4e22, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x80) 8.562379585s ago: executing program 1 (id=78): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) setgroups(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x32, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x90, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000480), &(0x7f00000005c0), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r5, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000280)) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r7, 0xee01, r8) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x50843, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf9}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2f}, 0x94) 8.216002471s ago: executing program 4 (id=79): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400008110004b04000050297fb1000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba"], 0x0) 8.04399675s ago: executing program 2 (id=80): setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x111, 0x5, 0x800}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x200400) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)}, 0x4db}, {{0x0, 0x0, 0x0}, 0x2}], 0x7, 0x20000, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x39, 0x0, @thr={0x0, &(0x7f00000007c0)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84"}}, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c) 6.873071975s ago: executing program 3 (id=81): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000380)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00'], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff0000000000", @ANYRES32, @ANYRES16=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x0, 0x0, &(0x7f0000000140)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.067581984s ago: executing program 2 (id=82): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r6, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000000)={0x0, 0x8, 0x4, "000000d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r3, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) 5.819400827s ago: executing program 3 (id=83): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x26c40, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) getxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000180)=""/13, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) 4.781127204s ago: executing program 4 (id=84): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x111, 0x5, 0x800}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_open_dev$usbmon(0x0, 0x0, 0x200400) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00), 0x0, 0x20000, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x39, 0x0, @thr={0x0, &(0x7f00000007c0)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36ffe1c3e68f042ed10a1f863ced625e85d7f9f4af20682290b554d83bf06d643f46ccf8175ba2ddaee81dcaf911659080acb21f9409d3db0ebf65ae1505cee46d24947b23050c1d5a017fc99af4e4e5a88c618ebb600cd3d68f2a3492643e6d47a1729c048a35e6bfb93abc581635dff2073e71015441d2da5aeba50c7b47d95b87b5e48c302573baa87b7f5af37f4d7caeaf582daf4809e83145e3b00353b05b8"}}, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.686305159s ago: executing program 1 (id=85): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x30323953}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000020e7040900000000000001090224000100000000090400000103000000092100000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x1, 0x5000003a, r6, 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') readv(r7, &(0x7f0000000080)=[{&(0x7f0000000240)=""/206, 0xce}], 0x1) r8 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0) 4.679542251s ago: executing program 3 (id=86): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000a40)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x3a, 0x0, "e17cceee61ca07c9150326ef44c45cc46f400f559251aab9b173a99f57815d49faa45af88ffc6d70efae753e541bba7c98d119ea196436f1e3be317b96c9f264401846688b483201b225ab880ad76bdc"}, 0xd8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x28a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi0\x00', 0x1c1800, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x80040306}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 4.17103976s ago: executing program 0 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x200000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) r7 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) epoll_create1(0x0) socket$inet(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000008}) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) 4.009799586s ago: executing program 3 (id=88): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000006000000010000000100000000040000", @ANYRES32=0x1, @ANYBLOB="350100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000008e57e9d000"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44030) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 3.063542373s ago: executing program 3 (id=89): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x80000018}) shutdown(r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0xff02, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca4bb6", "9ecb592c6ee49fbd"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x80000001}) socket$netlink(0x10, 0x3, 0x10) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x1, 0x1, 0x6e, 0x0, 0xd, 0x80000000, 0x4001}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.653122982s ago: executing program 4 (id=90): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x7e, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) read$msr(r0, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x50) socket$inet6(0xa, 0x2, 0x0) 1.106418032s ago: executing program 2 (id=91): openat$kvm(0xffffffffffffff9c, 0x0, 0x100402, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x404000000000008b}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x40, 0x9, 0x0, 0x2}, {0x28, 0x1, 0x4f, 0xffff7038}, {0x6, 0x1, 0x2f, 0x57c}]}, 0x10) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0x9ffc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x7fffffff, @mcast1, 0xf}], 0x4c) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "e51ed9bd16b05d3e50c82a93877b501c417d2c530d22a3ebe221bba38d1cb8f4671c6936af996cafd87f639f79250f1f1b6566fb839b796b0d3c"}, 0x4a) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r9, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r10, r11+60000000}}, 0x0) timer_delete(0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x1ff, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r0, @ANYBLOB="6dca87ce87c08e4754d58d0db601da01ff2cbd7000ff"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x12) 775.353726ms ago: executing program 0 (id=92): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="80fd020000408ccf2118c9fe182696da8a645953cffb347b60cbc0be9a4f04a773140e2338c0af39e185b28aedb8a127cf1573", 0x33}], 0x1, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x102, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0xfffffff8]}) read(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x90002, 0x0) 197.150207ms ago: executing program 4 (id=93): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x10001, 0x240000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000039302ce8", 0xfffffffffffffffd, 0x80000800, 0x16, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x136) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) fsopen(&(0x7f0000000040)='9p\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = getpgrp(0x0) ptrace$cont(0x1f, r10, 0x9, 0xfffffffffffffffa) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x21c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1ec, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x30, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x5, 0x7, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x0, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xd0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GI={0x88, 0x1, {0x9, 0x9, 0x7, 0xfffff000, 0x3a2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4, 0x3, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x7, 0x200, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffff54, 0x3, 0x1, 0x3c9, 0xc}}, @NETEM_LOSS_GE={0x9, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x9, 0x2}}, @NETEM_LOSS_GI={0xffffffffffffffad, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x40ae, 0x3, 0x3, 0x6}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x21c}}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2}, 0x80) 131.696976ms ago: executing program 3 (id=94): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000240)={{0x62, @local, 0x4e21, 0x0, 'lblc\x00', 0x0, 0x7, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4e23, 0x4, 0x6, 0x1, 0x9}}, 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = syz_open_procfs(0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) connect$qrtr(r6, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) r8 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=95): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', 'encrypted\x00'}, &(0x7f0000000200)='/dev/fuse\x00', 0xa, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES64=r4, @ANYRES16=0x0]) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r6, &(0x7f0000000000)=0x7, r6, 0x0, 0x7, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 58.262019][ T30] audit: type=1400 audit(1759626337.001:62): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.285277][ T30] audit: type=1400 audit(1759626337.021:63): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.287612][ T5807] cgroup: Unknown subsys name 'net' [ 58.314198][ T30] audit: type=1400 audit(1759626337.061:64): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.462886][ T5807] cgroup: Unknown subsys name 'cpuset' [ 58.470491][ T5807] cgroup: Unknown subsys name 'rlimit' [ 58.615476][ T30] audit: type=1400 audit(1759626337.351:65): avc: denied { setattr } for pid=5807 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.638763][ T30] audit: type=1400 audit(1759626337.351:66): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.677890][ T30] audit: type=1400 audit(1759626337.351:67): avc: denied { write } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.698469][ T30] audit: type=1400 audit(1759626337.351:68): avc: denied { read } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.718769][ T30] audit: type=1400 audit(1759626337.381:69): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.726373][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.743681][ T30] audit: type=1400 audit(1759626337.381:70): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.776129][ T30] audit: type=1400 audit(1759626337.401:71): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.693366][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.715729][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.724990][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.732536][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.740713][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.748474][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.757040][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.764720][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.765811][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.772554][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.785830][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.786794][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.801078][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.809286][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.812879][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.817183][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.823523][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.830656][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.838619][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.845371][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.851536][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.859621][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.867428][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.872512][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.886981][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.895985][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.241569][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 62.391402][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 62.408744][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.415861][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.423097][ T5819] bridge_slave_0: entered allmulticast mode [ 62.429711][ T5819] bridge_slave_0: entered promiscuous mode [ 62.448964][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 62.468148][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.475283][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.482807][ T5819] bridge_slave_1: entered allmulticast mode [ 62.489375][ T5819] bridge_slave_1: entered promiscuous mode [ 62.596075][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.605984][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 62.629136][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.682299][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 62.693591][ T5819] team0: Port device team_slave_0 added [ 62.699326][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.706688][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.714136][ T5817] bridge_slave_0: entered allmulticast mode [ 62.721048][ T5817] bridge_slave_0: entered promiscuous mode [ 62.745932][ T5819] team0: Port device team_slave_1 added [ 62.751886][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.759431][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.766538][ T5817] bridge_slave_1: entered allmulticast mode [ 62.773551][ T5817] bridge_slave_1: entered promiscuous mode [ 62.779918][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.787538][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.794708][ T5823] bridge_slave_0: entered allmulticast mode [ 62.801471][ T5823] bridge_slave_0: entered promiscuous mode [ 62.841103][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.848181][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.855947][ T5823] bridge_slave_1: entered allmulticast mode [ 62.862729][ T5823] bridge_slave_1: entered promiscuous mode [ 62.879204][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.886517][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.912402][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.948057][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.955014][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.981373][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.998309][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.026648][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.033904][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.041036][ T5822] bridge_slave_0: entered allmulticast mode [ 63.047615][ T5822] bridge_slave_0: entered promiscuous mode [ 63.056043][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.075862][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.095182][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.102273][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.109318][ T5822] bridge_slave_1: entered allmulticast mode [ 63.116126][ T5822] bridge_slave_1: entered promiscuous mode [ 63.130890][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.141602][ T5817] team0: Port device team_slave_0 added [ 63.177309][ T5817] team0: Port device team_slave_1 added [ 63.183181][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.190677][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.197735][ T5824] bridge_slave_0: entered allmulticast mode [ 63.204737][ T5824] bridge_slave_0: entered promiscuous mode [ 63.242477][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.249574][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.256900][ T5824] bridge_slave_1: entered allmulticast mode [ 63.263544][ T5824] bridge_slave_1: entered promiscuous mode [ 63.273160][ T5819] hsr_slave_0: entered promiscuous mode [ 63.279158][ T5819] hsr_slave_1: entered promiscuous mode [ 63.287059][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.297678][ T5823] team0: Port device team_slave_0 added [ 63.326102][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.344130][ T5823] team0: Port device team_slave_1 added [ 63.358893][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.365874][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.392076][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.413822][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.432457][ T5822] team0: Port device team_slave_0 added [ 63.445511][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.452653][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.479236][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.495789][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.505891][ T5822] team0: Port device team_slave_1 added [ 63.512186][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.519094][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.545048][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.580693][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.587620][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.613781][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.649874][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.656981][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.682992][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.705549][ T5824] team0: Port device team_slave_0 added [ 63.718655][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.725631][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.751829][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.774969][ T5824] team0: Port device team_slave_1 added [ 63.795621][ T5817] hsr_slave_0: entered promiscuous mode [ 63.801907][ T5817] hsr_slave_1: entered promiscuous mode [ 63.807747][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 63.813595][ T5817] Cannot create hsr debugfs directory [ 63.835997][ T5823] hsr_slave_0: entered promiscuous mode [ 63.842000][ T5823] hsr_slave_1: entered promiscuous mode [ 63.847798][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 63.853663][ T5823] Cannot create hsr debugfs directory [ 63.902208][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.909149][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.935230][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.956661][ T5822] hsr_slave_0: entered promiscuous mode [ 63.963177][ T5822] hsr_slave_1: entered promiscuous mode [ 63.969039][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 63.970737][ T5831] Bluetooth: hci3: command tx timeout [ 63.974843][ T5825] Bluetooth: hci4: command tx timeout [ 63.980301][ T5831] Bluetooth: hci1: command tx timeout [ 63.985659][ T5835] Bluetooth: hci0: command tx timeout [ 63.991129][ T53] Bluetooth: hci2: command tx timeout [ 63.996718][ T5822] Cannot create hsr debugfs directory [ 64.022140][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.029079][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.055116][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.179814][ T5824] hsr_slave_0: entered promiscuous mode [ 64.185893][ T5824] hsr_slave_1: entered promiscuous mode [ 64.191914][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 64.197616][ T5824] Cannot create hsr debugfs directory [ 64.329972][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.354528][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.363645][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.384057][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.457136][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.466218][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.487097][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.495969][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.547453][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.560823][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.571118][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.587171][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.678497][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.688891][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.708830][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.717905][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.747879][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.777256][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.812613][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.819771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.832478][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.864716][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.877971][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.888353][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.903097][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.912997][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.920155][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.930466][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.937537][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.948171][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.960490][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.987280][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.994366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.013883][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.026930][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.034050][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.067873][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.074995][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.157115][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.165478][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.165491][ T30] audit: type=1400 audit(1759626343.891:86): avc: denied { sys_module } for pid=5817 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.208401][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.293333][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.319657][ T2113] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.326779][ T2113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.384692][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.406814][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.413910][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.458817][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.493437][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.500532][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.520541][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.527587][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.555725][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.577247][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.591139][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.722954][ T5817] veth0_vlan: entered promiscuous mode [ 65.734732][ T5819] veth0_vlan: entered promiscuous mode [ 65.770741][ T5819] veth1_vlan: entered promiscuous mode [ 65.784631][ T5817] veth1_vlan: entered promiscuous mode [ 65.887965][ T5817] veth0_macvtap: entered promiscuous mode [ 65.906973][ T5819] veth0_macvtap: entered promiscuous mode [ 65.928289][ T5817] veth1_macvtap: entered promiscuous mode [ 65.937883][ T5819] veth1_macvtap: entered promiscuous mode [ 65.983430][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.005326][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.025786][ T5823] veth0_vlan: entered promiscuous mode [ 66.033507][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.041536][ T5831] Bluetooth: hci4: command tx timeout [ 66.041602][ T53] Bluetooth: hci0: command tx timeout [ 66.052961][ T53] Bluetooth: hci2: command tx timeout [ 66.058351][ T53] Bluetooth: hci1: command tx timeout [ 66.059028][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.064353][ T53] Bluetooth: hci3: command tx timeout [ 66.086387][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.095171][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.105162][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.119504][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.144896][ T5823] veth1_vlan: entered promiscuous mode [ 66.152020][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.160964][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.185035][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.194354][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.207394][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.244658][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.277018][ T5823] veth0_macvtap: entered promiscuous mode [ 66.316887][ T5823] veth1_macvtap: entered promiscuous mode [ 66.323174][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.340864][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.363946][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.372272][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.382099][ T5822] veth0_vlan: entered promiscuous mode [ 66.387809][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.393469][ T5822] veth1_vlan: entered promiscuous mode [ 66.418190][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.431929][ T5824] veth0_vlan: entered promiscuous mode [ 66.457706][ T2974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.467310][ T2974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.478930][ T2974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.501486][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.509399][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.522184][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.525680][ T5824] veth1_vlan: entered promiscuous mode [ 66.529993][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.545091][ T2974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.563179][ T30] audit: type=1400 audit(1759626345.301:87): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.456Xi2/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.582638][ T5822] veth0_macvtap: entered promiscuous mode [ 66.593267][ T30] audit: type=1400 audit(1759626345.301:88): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.632325][ T30] audit: type=1400 audit(1759626345.301:89): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.456Xi2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.632709][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.662564][ T30] audit: type=1400 audit(1759626345.301:90): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.712732][ T30] audit: type=1400 audit(1759626345.301:91): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.456Xi2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.713173][ T5822] veth1_macvtap: entered promiscuous mode [ 66.740026][ T30] audit: type=1400 audit(1759626345.301:92): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.456Xi2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.795112][ T5824] veth0_macvtap: entered promiscuous mode [ 66.823840][ T5824] veth1_macvtap: entered promiscuous mode [ 66.852026][ T30] audit: type=1400 audit(1759626345.311:93): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.885390][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.899961][ T30] audit: type=1400 audit(1759626345.341:94): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.913217][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.943788][ T30] audit: type=1400 audit(1759626345.341:95): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="gadgetfs" ino=7601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.978356][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.991307][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.079901][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.290445][ T5941] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 67.298239][ T5941] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.318037][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.349497][ T5941] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 67.357207][ T5941] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 67.364800][ T5941] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.409943][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.410263][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.418221][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.437659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.502031][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.519221][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.586514][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.600626][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.631276][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.711974][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725448][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.817180][ T5952] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 68.189216][ T53] Bluetooth: hci1: command tx timeout [ 68.194679][ T5835] Bluetooth: hci2: command tx timeout [ 68.200345][ T5831] Bluetooth: hci3: command tx timeout [ 68.205711][ T5831] Bluetooth: hci0: command tx timeout [ 68.211114][ T53] Bluetooth: hci4: command tx timeout [ 68.224271][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.232185][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.244568][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.320376][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.597976][ T5952] mmap: syz.2.6 (5952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.620664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.703710][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'. [ 68.850696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.860271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.436176][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.445144][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.513024][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.523725][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.280231][ T5835] Bluetooth: hci2: command tx timeout [ 70.285678][ T5825] Bluetooth: hci0: command tx timeout [ 70.285696][ T5831] Bluetooth: hci4: command tx timeout [ 70.291614][ T5835] Bluetooth: hci1: command tx timeout [ 70.296478][ T53] Bluetooth: hci3: command tx timeout [ 70.321093][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 70.321107][ T30] audit: type=1400 audit(1759626349.061:134): avc: denied { name_bind } for pid=5967 comm="syz.1.2" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.494290][ T30] audit: type=1400 audit(1759626349.091:135): avc: denied { node_bind } for pid=5967 comm="syz.1.2" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.516986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 70.612159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.714516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.817001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.011417][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.017807][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.989234][ T30] audit: type=1400 audit(1759626349.391:136): avc: denied { create } for pid=5967 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.020413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.029013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.243853][ T5977] Set syz1 is full, maxelem 65536 reached [ 72.383174][ T5986] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 72.417599][ T30] audit: type=1400 audit(1759626351.141:137): avc: denied { read } for pid=5965 comm="syz.0.8" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.441719][ T5989] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 73.081317][ T30] audit: type=1400 audit(1759626351.141:138): avc: denied { open } for pid=5965 comm="syz.0.8" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.173993][ T5991] syz.3.4 (5991): drop_caches: 2 [ 73.206173][ T5989] trusted_key: encrypted_key: insufficient parameters specified [ 73.278860][ T5997] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[5997] [ 73.330213][ T30] audit: type=1400 audit(1759626351.151:139): avc: denied { ioctl } for pid=5965 comm="syz.0.8" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.728019][ T30] audit: type=1400 audit(1759626351.251:140): avc: denied { read write } for pid=5984 comm="syz.1.10" name="video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.918243][ T30] audit: type=1400 audit(1759626351.251:141): avc: denied { open } for pid=5984 comm="syz.1.10" path="/dev/video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.052390][ T6003] program syz.4.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.450998][ T30] audit: type=1400 audit(1759626351.251:142): avc: denied { ioctl } for pid=5984 comm="syz.1.10" path="/dev/video0" dev="devtmpfs" ino=929 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.594227][ T30] audit: type=1400 audit(1759626351.801:143): avc: denied { create } for pid=5965 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.562432][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 75.562447][ T30] audit: type=1400 audit(1759626354.309:158): avc: denied { read } for pid=6019 comm="syz.2.15" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.942296][ T30] audit: type=1400 audit(1759626354.309:159): avc: denied { open } for pid=6019 comm="syz.2.15" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.081201][ T24] cfg80211: failed to load regulatory.db [ 76.105582][ T30] audit: type=1400 audit(1759626354.309:160): avc: denied { ioctl } for pid=6019 comm="syz.2.15" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.289991][ T6028] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 76.290641][ T30] audit: type=1400 audit(1759626354.959:161): avc: denied { append } for pid=6024 comm="syz.2.16" name="nvme-fabrics" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.752767][ T30] audit: type=1400 audit(1759626354.989:162): avc: denied { create } for pid=6025 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.959294][ T30] audit: type=1400 audit(1759626355.699:163): avc: denied { create } for pid=6025 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.986074][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'. [ 77.183569][ T30] audit: type=1400 audit(1759626355.729:164): avc: denied { write } for pid=6025 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.308239][ T6040] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.315354][ T6040] overlayfs: failed to set xattr on upper [ 77.322333][ T6040] overlayfs: ...falling back to redirect_dir=nofollow. [ 77.329205][ T6040] overlayfs: ...falling back to index=off. [ 77.335210][ T6040] overlayfs: ...falling back to uuid=null. [ 77.388289][ T6041] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 77.592590][ T30] audit: type=1400 audit(1759626355.749:165): avc: denied { audit_read } for pid=6025 comm="syz.4.17" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.613590][ T30] audit: type=1400 audit(1759626355.779:166): avc: denied { mount } for pid=6036 comm="syz.0.20" name="/" dev="ramfs" ino=9318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.636477][ T30] audit: type=1400 audit(1759626356.009:167): avc: denied { create } for pid=6036 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.791363][ T6045] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 77.807201][ T6045] batman_adv: batadv0: Adding interface: team0 [ 77.813423][ T6045] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.121841][ T6045] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 78.465213][ T6052] pim6reg: entered allmulticast mode [ 79.133972][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.876038][ T6074] Bluetooth: MGMT ver 1.23 [ 79.884241][ T6074] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 81.436314][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 81.436447][ T30] audit: type=1326 audit(1759626360.159:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 81.481727][ T6087] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 81.587787][ T30] audit: type=1326 audit(1759626360.159:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 81.710001][ T6095] evm: overlay not supported [ 81.728071][ T6092] macvlan2: entered promiscuous mode [ 81.908498][ T6092] macvlan2: entered allmulticast mode [ 81.913981][ T30] audit: type=1326 audit(1759626360.159:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 82.004790][ T30] audit: type=1326 audit(1759626360.159:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 82.032160][ T6088] Zero length message leads to an empty skb [ 82.239776][ T30] audit: type=1326 audit(1759626360.159:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 82.262962][ T30] audit: type=1326 audit(1759626360.159:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 82.491301][ T30] audit: type=1326 audit(1759626360.159:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 82.520206][ T30] audit: type=1326 audit(1759626360.159:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 82.677625][ T30] audit: type=1326 audit(1759626360.159:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 82.702922][ T30] audit: type=1326 audit(1759626360.159:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037358eec9 code=0x7ffc0000 [ 82.791870][ T6103] input: syz1 as /devices/virtual/input/input5 [ 84.331393][ T6115] netlink: 'syz.0.32': attribute type 4 has an invalid length. [ 84.358473][ T6115] netlink: 'syz.0.32': attribute type 4 has an invalid length. [ 84.744974][ T6125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.849535][ T6122] netlink: 'syz.4.35': attribute type 10 has an invalid length. [ 85.367318][ T6122] team0: Port device geneve1 added [ 87.047421][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 87.047434][ T30] audit: type=1400 audit(1759626365.309:266): avc: denied { ioctl } for pid=6141 comm="syz.4.37" path="socket:[8967]" dev="sockfs" ino=8967 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.360470][ T30] audit: type=1400 audit(1759626365.339:267): avc: denied { listen } for pid=6141 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.802113][ T6139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.162761][ T30] audit: type=1400 audit(1759626366.909:268): avc: denied { bind } for pid=6155 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.287136][ T6162] netlink: 244 bytes leftover after parsing attributes in process `syz.1.39'. [ 88.687085][ T30] audit: type=1400 audit(1759626367.429:269): avc: denied { ioctl } for pid=6155 comm="syz.3.40" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.319677][ T30] audit: type=1400 audit(1759626368.049:270): avc: denied { setopt } for pid=6163 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.143262][ T30] audit: type=1400 audit(1759626368.049:271): avc: denied { write } for pid=6163 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.384274][ T30] audit: type=1400 audit(1759626368.169:272): avc: denied { connect } for pid=6163 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.064085][ T30] audit: type=1400 audit(1759626369.799:273): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.120355][ T30] audit: type=1400 audit(1759626369.799:274): avc: denied { search } for pid=5489 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.206494][ T30] audit: type=1400 audit(1759626369.799:275): avc: denied { search } for pid=5489 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.510128][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 92.510145][ T30] audit: type=1400 audit(1759626370.469:281): avc: denied { write } for pid=6185 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.660110][ T30] audit: type=1400 audit(1759626370.469:282): avc: denied { kexec_image_load } for pid=6185 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 92.915831][ T30] audit: type=1400 audit(1759626371.649:283): avc: denied { create } for pid=6203 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.371012][ T30] audit: type=1400 audit(1759626371.649:284): avc: denied { ioctl } for pid=6203 comm="syz.1.49" path="socket:[9532]" dev="sockfs" ino=9532 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 93.395232][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.402165][ T30] audit: type=1400 audit(1759626371.659:285): avc: denied { read } for pid=6203 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.421343][ T30] audit: type=1400 audit(1759626371.919:286): avc: denied { create } for pid=6198 comm="syz.0.48" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.580736][ T30] audit: type=1400 audit(1759626371.919:287): avc: denied { link } for pid=6198 comm="syz.0.48" name="#9" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.602477][ T30] audit: type=1400 audit(1759626371.919:288): avc: denied { rename } for pid=6198 comm="syz.0.48" name="#a" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.105679][ T6229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.122452][ T30] audit: type=1400 audit(1759626372.189:289): avc: denied { write } for pid=6203 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.152859][ T6229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.178790][ T30] audit: type=1400 audit(1759626372.389:290): avc: denied { append } for pid=6203 comm="syz.1.49" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.421464][ T6214] hub 9-0:1.0: USB hub found [ 95.439076][ T6214] hub 9-0:1.0: 1 port detected [ 96.558198][ T6259] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 96.581553][ T6259] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 97.533404][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.835769][ T5875] usb 1-1: config 0 has no interfaces? [ 97.860251][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=1290, bcdDevice=dc.1b [ 97.883814][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.015713][ T5875] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 98.543235][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 98.543281][ T30] audit: type=1400 audit(1759626377.199:324): avc: denied { create } for pid=6268 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.648768][ T30] audit: type=1400 audit(1759626377.389:325): avc: denied { write } for pid=6268 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.652091][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 98.967480][ T6274] bridge_slave_1: left allmulticast mode [ 98.978176][ T6274] bridge_slave_1: left promiscuous mode [ 98.984880][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.291177][ T6274] bridge_slave_0: left allmulticast mode [ 99.375649][ T30] audit: type=1400 audit(1759626378.109:326): avc: denied { read write } for pid=6278 comm="syz.3.58" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.681211][ T6274] bridge_slave_0: left promiscuous mode [ 99.687434][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.721689][ T30] audit: type=1400 audit(1759626378.109:327): avc: denied { open } for pid=6278 comm="syz.3.58" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.890205][ T5954] apple-mfi-fastcharge 1-1: USB disconnect, device number 2 [ 100.236064][ T30] audit: type=1400 audit(1759626378.899:328): avc: denied { create } for pid=6302 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.305819][ T6304] binder: BINDER_SET_CONTEXT_MGR already set [ 100.312785][ T6304] binder: 6298:6304 ioctl 4018620d 200000000040 returned -16 [ 100.362457][ T30] audit: type=1400 audit(1759626379.039:329): avc: denied { ioctl } for pid=6298 comm="syz.0.60" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.854017][ T30] audit: type=1400 audit(1759626379.039:330): avc: denied { set_context_mgr } for pid=6298 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.885563][ T30] audit: type=1400 audit(1759626379.049:331): avc: denied { map } for pid=6298 comm="syz.0.60" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.610099][ T30] audit: type=1400 audit(1759626381.199:332): avc: denied { create } for pid=6318 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.642080][ T6300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.648082][ T6300] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 102.723732][ T30] audit: type=1400 audit(1759626381.199:333): avc: denied { bind } for pid=6318 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.930125][ T5882] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.095459][ T6300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.413407][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 104.103345][ T6300] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 104.568378][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 104.782300][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 104.904617][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024 [ 104.998714][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 104.998729][ T30] audit: type=1400 audit(1759626383.689:338): avc: denied { ioctl } for pid=6336 comm="syz.4.65" path="socket:[10457]" dev="sockfs" ino=10457 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.075406][ T6300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.102726][ T6300] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 105.130512][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 105.178085][ T6304] syz.0.60 (6304): drop_caches: 2 [ 105.200104][ T5882] usb 3-1: string descriptor 0 read error: -71 [ 105.206306][ T5882] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 105.230112][ T30] audit: type=1400 audit(1759626383.909:339): avc: denied { append } for pid=6340 comm="syz.3.66" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.254470][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.352307][ T5882] usb 3-1: config 0 descriptor?? [ 105.371234][ T6300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.443434][ T6300] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 105.468324][ T6300] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.475066][ T5882] usb 3-1: can't set config #0, error -71 [ 105.490284][ T5882] usb 3-1: USB disconnect, device number 2 [ 105.501276][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 105.507589][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 105.551909][ T6300] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 105.777919][ T6341] ceph: No mds server is up or the cluster is laggy [ 105.830273][ T30] audit: type=1400 audit(1759626384.439:340): avc: denied { ioctl } for pid=6349 comm="syz.0.68" path="socket:[9730]" dev="sockfs" ino=9730 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.866843][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 106.406191][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 106.486904][ T6359] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 106.500288][ T6359] netlink: 148 bytes leftover after parsing attributes in process `syz.4.69'. [ 107.648288][ T6359] syz.4.69 (6359): drop_caches: 2 [ 107.740397][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.901918][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 108.039412][ T5820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.081507][ T30] audit: type=1400 audit(1759626386.819:341): avc: denied { firmware_load } for pid=6365 comm="syz.0.70" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 108.082155][ T5820] usb 4-1: config 57 has an invalid interface number: 229 but max is 0 [ 108.141947][ T5820] usb 4-1: config 57 has no interface number 0 [ 108.148219][ T5820] usb 4-1: config 57 interface 229 has no altsetting 0 [ 108.210815][ T5820] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 108.240371][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.474517][ T6375] syz.0.70 (6375) used greatest stack depth: 18072 bytes left [ 108.519739][ T5820] usb 4-1: Product: syz [ 108.555826][ T5820] usb 4-1: Manufacturer: syz [ 108.571966][ T5820] usb 4-1: SerialNumber: syz [ 108.867322][ T30] audit: type=1400 audit(1759626387.579:342): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 110.077549][ T5820] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 110.151474][ T5820] usb 4-1: USB disconnect, device number 2 [ 110.248792][ T30] audit: type=1400 audit(1759626388.979:343): avc: denied { relabelfrom } for pid=6390 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 110.397460][ T30] audit: type=1400 audit(1759626388.979:344): avc: denied { relabelto } for pid=6390 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 110.765723][ T30] audit: type=1400 audit(1759626389.379:345): avc: denied { connect } for pid=6408 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.897491][ T30] audit: type=1400 audit(1759626389.409:346): avc: denied { bind } for pid=6408 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.078295][ T6426] bridge1: entered promiscuous mode [ 111.207882][ T30] audit: type=1400 audit(1759626389.409:347): avc: denied { write } for pid=6408 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.335333][ T30] audit: type=1400 audit(1759626389.679:348): avc: denied { open } for pid=6402 comm="syz.3.76" path="/dev/ptyqb" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.412701][ T30] audit: type=1400 audit(1759626389.679:349): avc: denied { ioctl } for pid=6402 comm="syz.3.76" path="/dev/ptyqb" dev="devtmpfs" ino=129 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.528175][ T30] audit: type=1400 audit(1759626389.689:350): avc: denied { mounton } for pid=6402 comm="syz.3.76" path="/proc/71/cgroup" dev="proc" ino=10655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 111.630173][ T30] audit: type=1400 audit(1759626390.069:351): avc: denied { map } for pid=6406 comm="syz.0.75" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.887694][ T30] audit: type=1400 audit(1759626390.599:352): avc: denied { read write } for pid=6432 comm="syz.4.79" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.122423][ T5820] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.635212][ T6444] : Can't lookup blockdev [ 112.700740][ T6444] bridge0: entered promiscuous mode [ 112.735941][ T6444] macsec1: entered promiscuous mode [ 112.758512][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 112.785476][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 112.963592][ T6444] bridge0: port 3(macsec1) entered blocking state [ 112.993546][ T6444] bridge0: port 3(macsec1) entered disabled state [ 113.001950][ T6444] macsec1: entered allmulticast mode [ 113.007319][ T6444] bridge0: entered allmulticast mode [ 113.033549][ T6444] macsec1: left allmulticast mode [ 113.038599][ T6444] bridge0: left allmulticast mode [ 113.054247][ T6444] bridge0: left promiscuous mode [ 113.170714][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'. [ 113.189609][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024 [ 113.222044][ T6456] netlink: 'syz.3.81': attribute type 16 has an invalid length. [ 113.229683][ T6456] netlink: 'syz.3.81': attribute type 17 has an invalid length. [ 113.263917][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 113.302284][ T5820] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 113.314275][ T6456] netlink: 'syz.3.81': attribute type 27 has an invalid length. [ 113.346436][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.432683][ T5820] usb 5-1: Product: syz [ 113.442126][ T5820] usb 5-1: Manufacturer: syz [ 113.446717][ T5820] usb 5-1: SerialNumber: syz [ 113.497943][ T5820] usb 5-1: config 0 descriptor?? [ 113.544577][ T6436] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.592656][ T6436] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.606131][ T5820] usb 5-1: ucan: probing device on interface #0 [ 114.445430][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 114.469419][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 114.479559][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 114.490224][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 114.777618][ T5882] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 114.837409][ T5820] usb 5-1: ucan: could not read protocol version, ret=-110 [ 114.912778][ T5820] usb 5-1: ucan: probe failed; try to update the device firmware [ 114.968740][ T5882] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 114.977363][ T5882] usb 3-1: config 0 has no interface number 0 [ 114.984965][ T5882] usb 3-1: config 0 interface 29 has no altsetting 0 [ 115.098200][ T5820] usb 5-1: USB disconnect, device number 2 [ 115.236926][ T5882] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 115.339018][ T6488] No control pipe specified [ 115.524600][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.576648][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.611560][ T6491] syz.4.84 (6491): drop_caches: 2 [ 115.628437][ T6491] syz.4.84 (6491): drop_caches: 2 [ 115.720212][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 115.726662][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.737019][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.750169][ T24] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 115.759181][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.818501][ T24] usb 2-1: config 0 descriptor?? [ 115.941110][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 116.168072][ T5882] usb 3-1: Product: syz [ 116.204269][ T5882] usb 3-1: Manufacturer: syz [ 116.211760][ T5882] usb 3-1: SerialNumber: syz [ 116.237457][ T5882] usb 3-1: config 0 descriptor?? [ 116.420276][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 116.420288][ T30] audit: type=1400 audit(1759626395.149:362): avc: denied { read } for pid=6492 comm="syz.0.87" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.563073][ T30] audit: type=1400 audit(1759626395.149:363): avc: denied { open } for pid=6492 comm="syz.0.87" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.830411][ T5882] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 117.637009][ T30] audit: type=1400 audit(1759626395.999:364): avc: denied { watch watch_reads } for pid=6483 comm="syz.1.85" path="/14" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.255265][ T6518] capability: warning: `syz.3.89' uses deprecated v2 capabilities in a way that may be insecure [ 118.692862][ T5882] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 118.718199][ T5882] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 118.794227][ T6529] SELinux: policydb version -1109844251 does not match my version range 15-35 [ 118.804037][ T6529] SELinux: failed to load policy [ 118.999104][ T30] audit: type=1400 audit(1759626397.539:365): avc: denied { load_policy } for pid=6527 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 119.197521][ T5882] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 119.307089][ T6535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.401792][ T30] audit: type=1400 audit(1759626398.129:366): avc: denied { append } for pid=6532 comm="syz.0.92" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.424969][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.560692][ T5882] usb 3-1: USB disconnect, device number 3 [ 119.577097][ T5820] usb 2-1: USB disconnect, device number 2 [ 119.843158][ T6543] ================================================================== [ 119.851228][ T6543] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 119.858415][ T6543] Read of size 8 at addr ffff888024829408 by task syz.4.93/6543 [ 119.866027][ T6543] [ 119.868333][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(full) [ 119.868348][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.868355][ T6543] Call Trace: [ 119.868361][ T6543] [ 119.868366][ T6543] dump_stack_lvl+0x116/0x1f0 [ 119.868385][ T6543] print_report+0xcd/0x630 [ 119.868400][ T6543] ? __virt_addr_valid+0x81/0x610 [ 119.868419][ T6543] ? __phys_addr+0xe8/0x180 [ 119.868439][ T6543] ? __cpa_addr+0x1d3/0x220 [ 119.868450][ T6543] kasan_report+0xe0/0x110 [ 119.868464][ T6543] ? __cpa_addr+0x1d3/0x220 [ 119.868478][ T6543] __cpa_addr+0x1d3/0x220 [ 119.868491][ T6543] cpa_flush+0x28b/0x8a0 [ 119.868504][ T6543] ? __pfx_cpa_flush+0x10/0x10 [ 119.868516][ T6543] ? pgprot2cachemode+0x9a/0x130 [ 119.868532][ T6543] ? __pfx_pgprot2cachemode+0x10/0x10 [ 119.868548][ T6543] ? drm_gem_get_pages+0x6a0/0xa10 [ 119.868563][ T6543] change_page_attr_set_clr+0x34e/0x4a0 [ 119.868578][ T6543] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 119.868596][ T6543] _set_pages_array+0x1ab/0x2c0 [ 119.868610][ T6543] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 119.868622][ T6543] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 119.868635][ T6543] drm_gem_shmem_pin_locked+0x223/0x470 [ 119.868646][ T6543] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 119.868657][ T6543] ? __pfx___might_resched+0x10/0x10 [ 119.868675][ T6543] drm_gem_map_attach+0x184/0x270 [ 119.868691][ T6543] ? __pfx_drm_gem_map_attach+0x10/0x10 [ 119.868707][ T6543] dma_buf_dynamic_attach+0x1f0/0x530 [ 119.868721][ T6543] ? __fget_files+0x20e/0x3c0 [ 119.868733][ T6543] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 119.868743][ T6543] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 119.868755][ T6543] drm_gem_prime_fd_to_handle+0x1a9/0x5f0 [ 119.868767][ T6543] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 119.868779][ T6543] drm_ioctl_kernel+0x1f4/0x3e0 [ 119.868793][ T6543] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 119.868805][ T6543] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 119.868821][ T6543] drm_ioctl+0x5c9/0xc30 [ 119.868835][ T6543] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 119.868847][ T6543] ? __pfx_drm_ioctl+0x10/0x10 [ 119.868860][ T6543] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.868875][ T6543] ? selinux_file_ioctl+0x180/0x270 [ 119.868888][ T6543] ? selinux_file_ioctl+0xb4/0x270 [ 119.868900][ T6543] ? __pfx_drm_ioctl+0x10/0x10 [ 119.868914][ T6543] __x64_sys_ioctl+0x18e/0x210 [ 119.868930][ T6543] do_syscall_64+0xcd/0x4e0 [ 119.868944][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.868956][ T6543] RIP: 0033:0x7f037358eec9 [ 119.868965][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.868976][ T6543] RSP: 002b:00007f037443e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.868987][ T6543] RAX: ffffffffffffffda RBX: 00007f03737e6090 RCX: 00007f037358eec9 [ 119.868994][ T6543] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000007 [ 119.869001][ T6543] RBP: 00007f0373611f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.869007][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.869013][ T6543] R13: 00007f03737e6128 R14: 00007f03737e6090 R15: 00007ffe181b6018 [ 119.869023][ T6543] [ 119.869028][ T6543] [ 120.189703][ T6543] Allocated by task 6543: [ 120.194013][ T6543] kasan_save_stack+0x33/0x60 [ 120.198687][ T6543] kasan_save_track+0x14/0x30 [ 120.203352][ T6543] __kasan_kmalloc+0xaa/0xb0 [ 120.207932][ T6543] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 120.213292][ T6543] drm_gem_get_pages+0x144/0xa10 [ 120.218221][ T6543] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 120.224277][ T6543] drm_gem_shmem_pin_locked+0x223/0x470 [ 120.229813][ T6543] drm_gem_map_attach+0x184/0x270 [ 120.234835][ T6543] dma_buf_dynamic_attach+0x1f0/0x530 [ 120.240198][ T6543] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 120.246424][ T6543] drm_gem_prime_fd_to_handle+0x1a9/0x5f0 [ 120.252129][ T6543] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 120.257921][ T6543] drm_ioctl_kernel+0x1f4/0x3e0 [ 120.262764][ T6543] drm_ioctl+0x5c9/0xc30 [ 120.266999][ T6543] __x64_sys_ioctl+0x18e/0x210 [ 120.271759][ T6543] do_syscall_64+0xcd/0x4e0 [ 120.276253][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.282136][ T6543] [ 120.284442][ T6543] The buggy address belongs to the object at ffff888024829000 [ 120.284442][ T6543] which belongs to the cache kmalloc-2k of size 2048 [ 120.298478][ T6543] The buggy address is located 0 bytes to the right of [ 120.298478][ T6543] allocated 1032-byte region [ffff888024829000, ffff888024829408) [ 120.313037][ T6543] [ 120.315345][ T6543] The buggy address belongs to the physical page: [ 120.321736][ T6543] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24828 [ 120.330480][ T6543] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.338966][ T6543] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 120.346497][ T6543] page_type: f5(slab) [ 120.350470][ T6543] raw: 00fff00000000040 ffff88801b027000 ffffea00008bae00 dead000000000002 [ 120.359039][ T6543] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 120.367615][ T6543] head: 00fff00000000040 ffff88801b027000 ffffea00008bae00 dead000000000002 [ 120.376276][ T6543] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 120.384933][ T6543] head: 00fff00000000003 ffffea0000920a01 00000000ffffffff 00000000ffffffff [ 120.393590][ T6543] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 120.402242][ T6543] page dumped because: kasan: bad access detected [ 120.408633][ T6543] page_owner tracks the page as allocated [ 120.414326][ T6543] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (syz-executor), ts 62090496154, free_ts 62072886534 [ 120.435680][ T6543] post_alloc_hook+0x1c0/0x230 [ 120.440449][ T6543] get_page_from_freelist+0x10a3/0x3a30 [ 120.445993][ T6543] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 120.451879][ T6543] alloc_pages_mpol+0x1fb/0x550 [ 120.456721][ T6543] new_slab+0x24a/0x360 [ 120.460873][ T6543] ___slab_alloc+0xdc4/0x1ae0 [ 120.465542][ T6543] __slab_alloc.constprop.0+0x63/0x110 [ 120.470994][ T6543] __kmalloc_node_noprof+0x4dd/0x8a0 [ 120.476267][ T6543] qdisc_alloc+0xbb/0xc50 [ 120.480590][ T6543] qdisc_create_dflt+0x94/0x490 [ 120.485429][ T6543] dev_activate+0x63f/0x12d0 [ 120.490010][ T6543] __dev_open+0x432/0x7c0 [ 120.494327][ T6543] __dev_change_flags+0x55d/0x720 [ 120.499342][ T6543] netif_change_flags+0x8d/0x160 [ 120.504270][ T6543] do_setlink.constprop.0+0xb53/0x4380 [ 120.509723][ T6543] rtnl_newlink+0x1446/0x2000 [ 120.514394][ T6543] page last free pid 5817 tgid 5817 stack trace: [ 120.520704][ T6543] __free_frozen_pages+0x7df/0x1160 [ 120.525898][ T6543] qlist_free_all+0x4d/0x120 [ 120.530475][ T6543] kasan_quarantine_reduce+0x195/0x1e0 [ 120.535921][ T6543] __kasan_slab_alloc+0x69/0x90 [ 120.540763][ T6543] __kmalloc_cache_noprof+0x274/0x780 [ 120.546132][ T6543] kset_create_and_add+0x4d/0x190 [ 120.551153][ T6543] netdev_register_kobject+0x1ef/0x3d0 [ 120.556610][ T6543] register_netdevice+0x13dc/0x2270 [ 120.561802][ T6543] register_netdev+0x34/0x50 [ 120.566386][ T6543] sit_init_net+0x286/0x630 [ 120.570885][ T6543] ops_init+0x1df/0x5f0 [ 120.575031][ T6543] setup_net+0x100/0x390 [ 120.579262][ T6543] copy_net_ns+0x2f8/0x690 [ 120.583671][ T6543] create_new_namespaces+0x3ea/0xa90 [ 120.588955][ T6543] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 120.594584][ T6543] ksys_unshare+0x45b/0xa40 [ 120.599073][ T6543] [ 120.601380][ T6543] Memory state around the buggy address: [ 120.606994][ T6543] ffff888024829300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.615039][ T6543] ffff888024829380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.623086][ T6543] >ffff888024829400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.631129][ T6543] ^ [ 120.635437][ T6543] ffff888024829480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.643480][ T6543] ffff888024829500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.651520][ T6543] ================================================================== [ 120.659600][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.686066][ T6544] netlink: 92 bytes leftover after parsing attributes in process `syz.4.93'. [ 120.695292][ T6544] netem: unknown loss type 0 [ 120.700328][ T6544] netem: change failed [ 120.705052][ T6543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.712240][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(full) [ 120.721340][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.731380][ T6543] Call Trace: [ 120.734647][ T6543] [ 120.737566][ T6543] dump_stack_lvl+0x3d/0x1f0 [ 120.742156][ T6543] vpanic+0x640/0x6f0 [ 120.746131][ T6543] panic+0xca/0xd0 [ 120.749841][ T6543] ? __pfx_panic+0x10/0x10 [ 120.754248][ T6543] ? __cpa_addr+0x1d3/0x220 [ 120.758744][ T6543] ? preempt_schedule_common+0x44/0xc0 [ 120.764197][ T6543] ? preempt_schedule_thunk+0x16/0x30 [ 120.769571][ T6543] check_panic_on_warn+0xab/0xb0 [ 120.774499][ T6543] end_report+0x107/0x170 [ 120.778822][ T6543] kasan_report+0xee/0x110 [ 120.783231][ T6543] ? __cpa_addr+0x1d3/0x220 [ 120.787726][ T6543] __cpa_addr+0x1d3/0x220 [ 120.792048][ T6543] cpa_flush+0x28b/0x8a0 [ 120.796290][ T6543] ? __pfx_cpa_flush+0x10/0x10 [ 120.801048][ T6543] ? pgprot2cachemode+0x9a/0x130 [ 120.805985][ T6543] ? __pfx_pgprot2cachemode+0x10/0x10 [ 120.811358][ T6543] ? drm_gem_get_pages+0x6a0/0xa10 [ 120.816468][ T6543] change_page_attr_set_clr+0x34e/0x4a0 [ 120.822009][ T6543] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 120.828079][ T6543] _set_pages_array+0x1ab/0x2c0 [ 120.832927][ T6543] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 120.838985][ T6543] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 120.845566][ T6543] drm_gem_shmem_pin_locked+0x223/0x470 [ 120.851101][ T6543] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 120.857159][ T6543] ? __pfx___might_resched+0x10/0x10 [ 120.862444][ T6543] drm_gem_map_attach+0x184/0x270 [ 120.867467][ T6543] ? __pfx_drm_gem_map_attach+0x10/0x10 [ 120.873013][ T6543] dma_buf_dynamic_attach+0x1f0/0x530 [ 120.878379][ T6543] ? __fget_files+0x20e/0x3c0 [ 120.883046][ T6543] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 120.889276][ T6543] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 120.896113][ T6543] drm_gem_prime_fd_to_handle+0x1a9/0x5f0 [ 120.901826][ T6543] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 120.907625][ T6543] drm_ioctl_kernel+0x1f4/0x3e0 [ 120.912472][ T6543] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 120.918879][ T6543] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 120.924249][ T6543] drm_ioctl+0x5c9/0xc30 [ 120.928489][ T6543] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 120.934915][ T6543] ? __pfx_drm_ioctl+0x10/0x10 [ 120.939675][ T6543] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.944869][ T6543] ? selinux_file_ioctl+0x180/0x270 [ 120.950057][ T6543] ? selinux_file_ioctl+0xb4/0x270 [ 120.955164][ T6543] ? __pfx_drm_ioctl+0x10/0x10 [ 120.959926][ T6543] __x64_sys_ioctl+0x18e/0x210 [ 120.964692][ T6543] do_syscall_64+0xcd/0x4e0 [ 120.969204][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.975086][ T6543] RIP: 0033:0x7f037358eec9 [ 120.979487][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.999081][ T6543] RSP: 002b:00007f037443e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.007484][ T6543] RAX: ffffffffffffffda RBX: 00007f03737e6090 RCX: 00007f037358eec9 [ 121.015447][ T6543] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000007 [ 121.023403][ T6543] RBP: 00007f0373611f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.031364][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.039322][ T6543] R13: 00007f03737e6128 R14: 00007f03737e6090 R15: 00007ffe181b6018 [ 121.047287][ T6543] [ 121.050479][ T6543] Kernel Offset: disabled [ 121.054775][ T6543] Rebooting in 86400 seconds..