last executing test programs: 16m33.846596397s ago: executing program 2 (id=3): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m33.195297026s ago: executing program 2 (id=6): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xde1, &(0x7f0000000280)={0x0, 0x3, 0x802, 0x0, 0x11}) io_uring_register$IORING_REGISTER_FILES2(r2, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 16m17.550329352s ago: executing program 32 (id=6): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xde1, &(0x7f0000000280)={0x0, 0x3, 0x802, 0x0, 0x11}) io_uring_register$IORING_REGISTER_FILES2(r2, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 13m58.936225533s ago: executing program 4 (id=404): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x80c, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x3d, 0x9, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0x6}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) 13m53.35839961s ago: executing program 4 (id=420): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000080)=0x7fffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) io_uring_enter(0xffffffffffffffff, 0x77a8, 0x408b, 0x20, &(0x7f0000000300)={[0x3]}, 0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x3, 0x0) 13m51.011786214s ago: executing program 4 (id=422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000186000/0x3000)=nil, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r1, 0x0, 0x0, 0x0, 0x80800}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 13m48.817197032s ago: executing program 4 (id=427): bind$inet(0xffffffffffffffff, 0x0, 0x0) ioperm(0x6, 0x3, 0xb017) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x12100) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f00000002c0)=""/59, 0x3b}], 0x2}}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 13m45.827514727s ago: executing program 4 (id=437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m43.882290081s ago: executing program 4 (id=444): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 13m28.497354787s ago: executing program 33 (id=444): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 10m58.642822227s ago: executing program 3 (id=845): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_async', 0x101581, 0x100) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0x68, 0x66, 0x5, "87036ec9419e9b9b353654c5293ac5ec7544a95c5c08b8916971f21e6b7ee03522ec3260f38881ee8e7f10979b408d2ca055375a6f9fd15e7fdfe23c5958b08eeee046389bda54009eae4f97d21689b5281fb006eef8d1ee76549437e841e44c87596d333dd17d0b"}) write$tcp_mem(r1, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 10m56.662122358s ago: executing program 3 (id=850): io_setup(0x3ff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x2000, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x3}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bind$can_raw(r5, &(0x7f0000000480)={0x1d, r6}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='binfmt_misc\x00', 0x10000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r6, {0xe, 0xb5d54cde5c199d9f}}}, 0x24}}, 0x40044) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220600"], 0x0}, 0x0) 10m51.607937053s ago: executing program 3 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) gettid() r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) 10m49.152028617s ago: executing program 3 (id=870): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x211) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 10m45.332218347s ago: executing program 3 (id=879): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @short}, 0xb, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4001) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 10m43.96865585s ago: executing program 3 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000006800010004000000000000000a00000000000000060007000800000008000500", @ANYRES32=r3, @ANYBLOB="28000880"], 0x50}}, 0x8884) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "bf631e4b"}, 0x0, 0x1, {}, 0xfffffffe}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x880) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3b, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@typed={0x6, 0x4b, 0x0, 0x0, @str='\x80\n'}]}, 0x1c}}, 0xc000) 10m43.291610574s ago: executing program 34 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000006800010004000000000000000a00000000000000060007000800000008000500", @ANYRES32=r3, @ANYBLOB="28000880"], 0x50}}, 0x8884) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "bf631e4b"}, 0x0, 0x1, {}, 0xfffffffe}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x880) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3b, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@typed={0x6, 0x4b, 0x0, 0x0, @str='\x80\n'}]}, 0x1c}}, 0xc000) 3m51.536227037s ago: executing program 6 (id=1883): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setreuid(0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x67) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x181301) mount$9p_unix(0x0, 0x0, &(0x7f0000000140), 0x8000a, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x0) lseek(r0, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)) 3m49.532188483s ago: executing program 6 (id=1888): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000300)=""/104, 0x68) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m47.494596072s ago: executing program 6 (id=1893): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23d) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) memfd_create(&(0x7f0000000240)='+\v\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\xfb\xe9\xd1\x97', 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f00000003c0)}, 0x10) 3m45.192349588s ago: executing program 6 (id=1896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3m44.970871939s ago: executing program 6 (id=1899): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) tgkill(r1, r1, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000080), 0xa0000, 0x48401) write$6lowpan_enable(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x3) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) 3m43.770818798s ago: executing program 6 (id=1902): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x620000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28008004) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000019140)=0x5f0afc3f495e25d9, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) 3m26.936675044s ago: executing program 35 (id=1902): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x620000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28008004) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000019140)=0x5f0afc3f495e25d9, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) 2m42.695699659s ago: executing program 8 (id=2027): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x82) write$P9_RCREATE(r7, &(0x7f0000000180)={0x18, 0x73, 0x2, {{0x8, 0x2, 0x7}, 0x6}}, 0x18) sendmmsg(r0, 0x0, 0x0, 0x0) 2m37.94685147s ago: executing program 8 (id=2034): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket(0x1000000000000010, 0x80802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000000040)=""/97, 0x61, 0x756) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) 2m35.640180433s ago: executing program 8 (id=2037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r6, 0x0, 0x0, 0x1, &(0x7f0000000180)='L', 0x5}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0xb) 2m34.377273685s ago: executing program 8 (id=2041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) mlock2(&(0x7f0000a8c000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x18) timer_create(0x0, &(0x7f0000002380)={0x0, 0x16, 0x1, @tid=r1}, &(0x7f00000023c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2m32.739974893s ago: executing program 8 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(r1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xc) lseek(r0, 0x400006, 0x1) r4 = syz_open_dev$radio(0x0, 0x2, 0x2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x4e) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x101400, 0x2) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0xc004510e, &(0x7f0000001b80)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0xffffffff, 0x1, 0x2088, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 2m26.763835427s ago: executing program 8 (id=2053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='percpu_alloc_percpu_fail\x00', r2}, 0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000001010000500307d13e4060d86d4d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b//\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x8000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4040025) poll(&(0x7f0000000100)=[{}], 0x1, 0x9d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x1a99000, 0x1, 0x0, 0xc, 0x3a4a, 0x7}, 0x20) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r5, 0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) timer_settime(r5, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0001800600060086dd00"], 0x528}}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = syz_open_dev$video(&(0x7f00000009c0), 0x7, 0x0) ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f0000000100)={0x0, 0x0, 0x0}) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 24.394467248s ago: executing program 0 (id=2340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000240)={0x281, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23.374287576s ago: executing program 5 (id=2341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0xae7e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x38}}, 0x0) 22.27227885s ago: executing program 0 (id=2342): listen(0xffffffffffffffff, 0x2e) pipe2$watch_queue(0x0, 0x80) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r1, 0x1, {0x3, 0xff}, 0x2}, 0x18) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3, {0x0, 0xf0, 0x3}, 0xff}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl(0xffffffffffffffff, 0x8b37, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x3, 0xdd, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002e8af1b10630715108781010203010902d900020804c0500904580901be5cf1410524060000052400ff070d240f0105000000ff01030006090501031000b0b0000904d30805ffae1239"], 0x0) 21.489985385s ago: executing program 5 (id=2345): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FIONCLEX(r2, 0x5450) mkdir(0x0, 0x80) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) set_mempolicy(0x5, &(0x7f0000000080)=0x4, 0x961) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xc1000000}], 0x0) write$UHID_INPUT(r5, &(0x7f0000001080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) chdir(0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 19.274704707s ago: executing program 7 (id=2350): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x8}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x4, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x10042, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40045}, 0x20000050) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}]}}]}, 0x40}}, 0x0) 17.218194768s ago: executing program 7 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x200) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x2) 17.17555428s ago: executing program 0 (id=2353): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "cfae1e8610332aaf073c8d7e23e24149747696f72937d0eaa72f3f6db551129c", "88525cd14f8eed12a8efcbb486d5f94e1f7192a907767ee928726d8541593048", "94ed2609f31e59a9041429955c25747ddc5a9aa68b65f79d739539ff50fe6bbc", "e6ece6330b875a499a782bbd0bde05326e338adc8f3a60c5212b04fb64fff642", "a4e30583baf6fdc385302137f3f6b686903632a36dd691e2f0de22424c816b2b", "69dcedab10ae79d6206beff9", 0x7fffffff, 0x0, 0x4, 0x1, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = mq_open(&(0x7f0000000180)='/:+!\x00', 0x1, 0xa8, &(0x7f00000001c0)={0x2, 0x3b29, 0x100, 0x9}) mq_timedsend(r0, &(0x7f0000000400), 0x0, 0x3, &(0x7f00000002c0)={0x0, 0x989680}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000280)={[0x2]}, &(0x7f0000000300), &(0x7f0000000380)={0x0, 0x989680}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1300000000020000feffffff0300000040000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="050000000200000001"], 0x50) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockname$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) 14.969043343s ago: executing program 0 (id=2355): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xb) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x7003, [0x80000000]}, &(0x7f0000000040)=0x54) syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@obj_user}, {@pcr={'pcr', 0x3d, 0x1}}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 14.888366559s ago: executing program 7 (id=2356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x18, 0x2}, @const={0x1, 0x0, 0x0, 0xa, 0x2}, @restrict={0xd}]}, {0x0, [0x5f, 0x61, 0x0, 0x0, 0x5f, 0x1e, 0x30]}}, &(0x7f0000000040)=""/55, 0x49, 0x37, 0x0, 0x4, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x2, '\x00', r6, r8, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) unlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f00000004c0)="ca4d64", 0x3, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 13.833465942s ago: executing program 1 (id=2357): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x330e470bd789f8d8) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x14, 0x8d, 0x0, 0x1, [@typed={0x4, 0x141}, @nested={0x4, 0x128}, @generic, @typed={0x8, 0x5d, 0x0, 0x0, @uid=0xee01}]}]}, 0x28}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'hsr0\x00', @broadcast}) 13.687081414s ago: executing program 7 (id=2358): ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) syz_usb_connect(0x0, 0x41, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0xfffffffffffffef2) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) ioperm(0x83, 0x6, 0x8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x69}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000240)={0xf0f080, 0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0x166676000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='mmap_lock_acquire_returned\x00', r3}, 0x18) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000500)=""/58, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) unshare(0x2040400) 13.258405319s ago: executing program 9 (id=2359): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 13.004514833s ago: executing program 5 (id=2360): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x80000000, @loopback, 0x8}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_macvtap\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="000086dd000012000000feff000062c9cdfc0f988801fe800000000000000000000000000044ff0200"/50], 0xfce) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0xd, 0xa, 0x3831354f, 0x6, 0x2, 0x4, 0x0, 0x8000, 0x1, 0x4, 0x0, 0x7}}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x2020) 12.209047652s ago: executing program 9 (id=2361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4100) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x24}}, 0x0) ioctl(r3, 0x0, &(0x7f0000000500)="7c64549941623b5c80d4b86a66359445fb0f3a35a01b31786b3804df82b757ca47bac24879ef6b73f5f3420c289d2a6bb0de") r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x48, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @random="a514a0ed377e", {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x40}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) ftruncate(0xffffffffffffffff, 0xfbff) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x1000, 0x100000000}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12.151647311s ago: executing program 1 (id=2362): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x5, 0x3}, 0xa}, 0x20, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f00000002c0)='1', 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000380)={0x404, 0x4, 0x10001, 0x7, 0x4, 0x8}) 9.624064643s ago: executing program 1 (id=2363): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) 9.573163973s ago: executing program 9 (id=2364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x40084503, &(0x7f0000001500)=""/4103) ioctl$KVM_RUN(r4, 0x8004ae98, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x20, 0x10, 0x7, 0x201, 0xe34e, 0x25dfdbfb, {0x2}, [@typed={0x8, 0x12b, 0x0, 0x0, @uid}, @nested={0x4, 0x3c}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) 8.124908651s ago: executing program 0 (id=2365): connect$netrom(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) umount2(0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x42000000) 8.122367196s ago: executing program 1 (id=2366): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, &(0x7f0000000280)=""/198, 0xc6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010400000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e0000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2004c044}, 0x0) ftruncate(0xffffffffffffffff, 0xffff) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r5, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10) 8.105816612s ago: executing program 9 (id=2367): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000400)="4c8d93", 0x3, 0xffffffffffffffff) sendfile(r4, r3, 0x0, 0x80009) socket(0x11, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000514210600addb000000000008000100000000000800030000100000bfdd00d7380aafe49db2abe59507ca7a9946ba61112dd2b5e192833ea51706c4b501e87a7c2b5a687c80b90a73c618820ad8302db3771b6ed1b0a5386ca468a10ca4db6f875090e7d4e3fab3021117ccb88a4d000000000000000000"], 0x20}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @private=0xa010102}, 0xc) keyctl$setperm(0x5, r5, 0xc) 6.461405856s ago: executing program 7 (id=2368): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = semget(0x2, 0x1, 0x3) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000180)=""/236) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x2) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f0000000040)=""/61) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r6, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000140)='2', 0x1}], 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='setgroups\x00') r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x0, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe]}}, 0x5c) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x17}) 6.46068904s ago: executing program 5 (id=2369): prctl$PR_GET_TIMERSLACK(0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x10043) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) 2.302251986s ago: executing program 1 (id=2370): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r8 = syz_io_uring_setup(0x4f26, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47f6, 0x1000000, 0x0, 0x0, 0x0) 1.996621666s ago: executing program 7 (id=2371): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x40140921, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}}) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000a40)) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee6ff80bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.993223947s ago: executing program 9 (id=2372): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x8, @loopback, 0x6}}, 0x4, 0xb46, 0x5, 0x7, 0x7f7b}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000210001000000000000000000020000000000000000eb39d171ab7f9b7747c00d1e000000140011006e65746465767369"], 0x30}}, 0x0) accept4(r5, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80, 0x800) 1.991276939s ago: executing program 5 (id=2373): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340002020202020200000a000600080a11000000000008004c0000000000080026006c09000042fa5ccf0cb5db55a09885e98b1d366b6847f15dcb00971030c78231ab001f44a5555e0857c1ea34fa372d8b9571559cabad9ebb332dcc0c975d2badbcd0b4805134367918dc265507724c45cd9fa488fa026be5e375c9df43c4ad8d81ed7ee649b73273ed424d37e84587069c746e2ba4445b26074a5f395b434acdbb"], 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 398.511µs ago: executing program 1 (id=2374): socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000340)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 9 (id=2375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0xa6040) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) close(0x3) sendmsg$inet(r2, 0x0, 0x4004) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): . [ 697.074399][ T12] tipc: Resetting bearer [ 697.180452][ T29] audit: type=1400 audit(1736302241.606:627): avc: denied { append } for pid=12207 comm="syz.6.1574" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 697.708486][T11292] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 697.773516][ T5895] usb 7-1: USB disconnect, device number 6 [ 698.322171][T11291] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 699.192520][T11291] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 699.849551][T12279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.194557][ T3485] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 700.591721][T12284] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 700.863932][ T29] audit: type=1400 audit(1736302245.276:628): avc: denied { getopt } for pid=12285 comm="syz.6.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 701.619770][ T7117] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 702.879015][ T7117] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.795019][ T7117] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 704.848421][ T12] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 705.452159][ T3485] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 707.036506][T11292] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 707.604545][T12335] netlink: 'syz.1.1604': attribute type 10 has an invalid length. [ 707.673090][T12341] input: syz1 as /devices/virtual/input/input11 [ 708.381663][T12344] overlayfs: failed to clone upperpath [ 708.698344][ T12] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.311937][ T12] batman_adv: batadv0: Local translation table size (64) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.981500][T12366] netlink: 'syz.5.1612': attribute type 10 has an invalid length. [ 713.164813][T12393] netlink: 'syz.0.1619': attribute type 10 has an invalid length. [ 714.071811][T12402] netlink: 'syz.7.1625': attribute type 10 has an invalid length. [ 715.352595][ T29] audit: type=1400 audit(1736302259.756:629): avc: denied { mount } for pid=12406 comm="syz.5.1621" name="/" dev="pstore" ino=4106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 715.457396][T12414] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.1626'. [ 715.715979][T12414] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.1626'. [ 716.482136][ T29] audit: type=1400 audit(1736302259.766:630): avc: denied { remount } for pid=12406 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 716.647029][ T29] audit: type=1400 audit(1736302261.066:631): avc: denied { unmount } for pid=6033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 716.690620][T12414] netlink: 69 bytes leftover after parsing attributes in process `syz.1.1626'. [ 717.770918][ T29] audit: type=1400 audit(1736302262.166:632): avc: denied { mount } for pid=12434 comm="syz.5.1630" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 718.339199][ T29] audit: type=1400 audit(1736302262.176:633): avc: denied { getopt } for pid=12434 comm="syz.5.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 718.374587][ T29] audit: type=1400 audit(1736302262.196:634): avc: denied { unmount } for pid=6033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 718.647115][ T29] audit: type=1400 audit(1736302262.816:635): avc: denied { write } for pid=12426 comm="syz.6.1631" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 718.822636][T12448] overlayfs: missing 'lowerdir' [ 718.844495][ T29] audit: type=1400 audit(1736302263.266:636): avc: denied { bind } for pid=12442 comm="syz.0.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 719.449841][T12455] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 719.745613][T12460] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.1638'. [ 719.755661][T12460] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.1638'. [ 722.731791][T12475] xt_socket: unknown flags 0xc [ 723.307724][T12500] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 723.316258][T12500] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 729.097129][ T29] audit: type=1400 audit(1736302273.196:637): avc: denied { bind } for pid=12534 comm="syz.6.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 729.240225][T12534] delete_channel: no stack [ 730.674626][T12564] netlink: 4079 bytes leftover after parsing attributes in process `syz.6.1664'. [ 731.129884][T12576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 731.145756][T12576] SELinux: failed to load policy [ 732.377196][T12585] pim6reg: entered allmulticast mode [ 732.387211][T12585] pim6reg: left allmulticast mode [ 735.097608][T12605] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 735.166935][ T29] audit: type=1400 audit(1736302279.556:638): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 735.197135][ T29] audit: type=1400 audit(1736302279.556:639): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.254149][ T29] audit: type=1400 audit(1736302279.556:640): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 735.293552][T12612] netlink: 'syz.7.1676': attribute type 10 has an invalid length. [ 735.333486][ T29] audit: type=1400 audit(1736302279.556:641): avc: denied { open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 735.846039][ T29] audit: type=1400 audit(1736302279.556:642): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 736.187787][ T29] audit: type=1400 audit(1736302279.596:643): avc: denied { read write } for pid=9526 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 736.220454][ T29] audit: type=1400 audit(1736302279.596:644): avc: denied { open } for pid=9526 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 736.239802][T12625] ebtables: ebtables: counters copy to user failed while replacing table [ 736.246547][ T29] audit: type=1400 audit(1736302279.596:645): avc: denied { ioctl } for pid=9526 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 736.278691][ T29] audit: type=1400 audit(1736302279.706:646): avc: denied { create } for pid=12608 comm="syz.0.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 736.298531][ T29] audit: type=1400 audit(1736302279.706:647): avc: denied { create } for pid=12611 comm="syz.7.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 739.829553][T12665] netlink: 'syz.5.1690': attribute type 10 has an invalid length. [ 740.675172][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 740.675213][ T29] audit: type=1400 audit(1736302285.076:700): avc: denied { create } for pid=12674 comm="syz.5.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 740.913428][ T29] audit: type=1400 audit(1736302285.336:701): avc: denied { create } for pid=12674 comm="syz.5.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 740.981313][ T29] audit: type=1400 audit(1736302285.386:702): avc: denied { setopt } for pid=12654 comm="syz.7.1689" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 742.383839][ T29] audit: type=1400 audit(1736302285.646:703): avc: denied { read open } for pid=12677 comm="syz.6.1695" path="time:[4026531834]" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 742.427269][ T29] audit: type=1400 audit(1736302285.736:704): avc: denied { connect } for pid=12679 comm="syz.0.1696" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 742.471511][ T29] audit: type=1400 audit(1736302285.846:705): avc: denied { create } for pid=12679 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 743.091643][ T29] audit: type=1400 audit(1736302286.286:706): avc: denied { write } for pid=12679 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.112248][ T29] audit: type=1400 audit(1736302286.286:707): avc: denied { read } for pid=12679 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.141484][ T29] audit: type=1400 audit(1736302286.286:708): avc: denied { create } for pid=12679 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 743.160979][ T29] audit: type=1400 audit(1736302286.356:709): avc: denied { write } for pid=12674 comm="syz.5.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 743.395739][T12704] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1701'. [ 744.642813][T12715] input: syz0 as /devices/virtual/input/input12 [ 745.688278][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 745.836988][ T29] audit: type=1400 audit(1736302290.106:723): avc: denied { map } for pid=12722 comm="syz.1.1706" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 745.861224][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.270427][ T29] audit: type=1400 audit(1736302290.116:724): avc: denied { read write } for pid=12722 comm="syz.1.1706" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 746.295483][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.472366][T12744] lo speed is unknown, defaulting to 1000 [ 747.481145][T12744] lo speed is unknown, defaulting to 1000 [ 747.487329][T12744] lo speed is unknown, defaulting to 1000 [ 747.560629][T12744] infiniband sz1: set down [ 747.565170][T12744] infiniband sz1: added lo [ 747.833800][ T5154] lo speed is unknown, defaulting to 1000 [ 748.401885][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.408338][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.437917][ T29] audit: type=1400 audit(1736302291.406:725): avc: denied { create } for pid=12735 comm="syz.5.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 748.475874][ T29] audit: type=1400 audit(1736302291.426:726): avc: denied { ioctl } for pid=12735 comm="syz.5.1709" path="socket:[32163]" dev="sockfs" ino=32163 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 748.501098][ T29] audit: type=1400 audit(1736302291.896:727): avc: denied { write } for pid=12734 comm="syz.1.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 748.521666][T12744] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 748.522743][T12744] infiniband sz1: Couldn't open port 1 [ 748.547726][T12744] RDS/IB: sz1: added [ 748.551774][T12744] smc: adding ib device sz1 with port count 1 [ 748.558039][T12744] smc: ib device sz1 port 1 has pnetid [ 748.565691][T12744] lo speed is unknown, defaulting to 1000 [ 748.641368][T12744] lo speed is unknown, defaulting to 1000 [ 748.717515][T12744] lo speed is unknown, defaulting to 1000 [ 748.728155][ T5868] lo speed is unknown, defaulting to 1000 [ 749.146827][ T29] audit: type=1400 audit(1736302293.566:728): avc: denied { setopt } for pid=12752 comm="syz.5.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 749.975488][ T29] audit: type=1400 audit(1736302293.576:729): avc: denied { write } for pid=12752 comm="syz.5.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 749.995406][ T29] audit: type=1400 audit(1736302293.576:730): avc: denied { create } for pid=12754 comm="syz.6.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 750.017156][ T29] audit: type=1400 audit(1736302293.936:731): avc: denied { create } for pid=12750 comm="syz.7.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 750.038835][ T29] audit: type=1400 audit(1736302294.446:732): avc: denied { read } for pid=12754 comm="syz.6.1715" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 750.061740][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.646575][T12744] lo speed is unknown, defaulting to 1000 [ 751.266272][T12744] lo speed is unknown, defaulting to 1000 [ 751.431208][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 751.431231][ T29] audit: type=1400 audit(1736302295.756:737): avc: denied { write } for pid=12754 comm="syz.6.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 751.457901][ T29] audit: type=1400 audit(1736302295.774:738): avc: denied { create } for pid=12775 comm="syz.5.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 751.510568][ T29] audit: type=1400 audit(1736302295.830:739): avc: denied { bind } for pid=12775 comm="syz.5.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 751.535694][ T29] audit: type=1400 audit(1736302295.830:740): avc: denied { write } for pid=12772 comm="syz.0.1718" path="socket:[31702]" dev="sockfs" ino=31702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 751.567229][ T29] audit: type=1400 audit(1736302295.877:741): avc: denied { setopt } for pid=12775 comm="syz.5.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 751.587666][ T29] audit: type=1400 audit(1736302295.877:742): avc: denied { execute } for pid=12780 comm="syz.1.1722" path="/423/pids.events" dev="tmpfs" ino=2271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 751.759159][ T29] audit: type=1400 audit(1736302296.074:743): avc: denied { ioctl } for pid=12791 comm="syz.6.1723" path="socket:[31732]" dev="sockfs" ino=31732 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 752.241833][ T29] audit: type=1400 audit(1736302296.251:744): avc: denied { create } for pid=12787 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 752.451053][ T29] audit: type=1400 audit(1736302296.251:745): avc: denied { bind } for pid=12787 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 752.471033][ T29] audit: type=1400 audit(1736302296.336:746): avc: denied { ioctl } for pid=12787 comm="syz.0.1724" path="socket:[32232]" dev="sockfs" ino=32232 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 754.252891][T12820] Process accounting resumed [ 754.926010][T12819] Process accounting resumed [ 756.480624][T12838] bio_check_eod: 2 callbacks suppressed [ 756.480660][T12838] syz.6.1731: attempt to access beyond end of device [ 756.480660][T12838] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 756.536138][T12838] syz.6.1731: attempt to access beyond end of device [ 756.536138][T12838] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 756.550339][T12838] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 756.560846][T12838] syz.6.1731: attempt to access beyond end of device [ 756.560846][T12838] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 756.574042][T12838] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 756.585808][T12838] syz.6.1731: attempt to access beyond end of device [ 756.585808][T12838] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 756.599669][T12838] syz.6.1731: attempt to access beyond end of device [ 756.599669][T12838] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 756.612923][T12838] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 756.623488][T12838] syz.6.1731: attempt to access beyond end of device [ 756.623488][T12838] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 756.636746][T12838] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 756.649833][T12838] syz.6.1731: attempt to access beyond end of device [ 756.649833][T12838] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 756.664591][T12838] syz.6.1731: attempt to access beyond end of device [ 756.664591][T12838] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 756.677828][T12838] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 756.687976][T12838] syz.6.1731: attempt to access beyond end of device [ 756.687976][T12838] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 756.701438][T12838] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 756.712790][T12838] syz.6.1731: attempt to access beyond end of device [ 756.712790][T12838] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 756.726327][T12838] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 756.858842][T12838] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 756.868472][T12838] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 757.085993][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 757.086027][ T29] audit: type=1400 audit(1736302300.498:752): avc: denied { mounton } for pid=12825 comm="syz.6.1731" path="/203/file1" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 757.115214][ T29] audit: type=1400 audit(1736302301.059:753): avc: denied { create } for pid=12840 comm="syz.7.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 758.075088][ T29] audit: type=1400 audit(1736302301.059:754): avc: denied { bind } for pid=12840 comm="syz.7.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 758.195912][ T29] audit: type=1400 audit(1736302301.059:755): avc: denied { connect } for pid=12840 comm="syz.7.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 761.013332][ T29] audit: type=1400 audit(1736302304.604:756): avc: denied { ioctl } for pid=12858 comm="syz.1.1738" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32308 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 762.151535][T12875] bio_check_eod: 2 callbacks suppressed [ 762.151644][T12875] syz.5.1742: attempt to access beyond end of device [ 762.151644][T12875] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 762.178038][T12875] syz.5.1742: attempt to access beyond end of device [ 762.178038][T12875] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 762.192333][T12875] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 762.200008][ T29] audit: type=1400 audit(1736302304.857:757): avc: denied { write } for pid=12869 comm="syz.6.1741" name="ip_tables_targets" dev="proc" ino=4026533448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 762.206869][T12875] syz.5.1742: attempt to access beyond end of device [ 762.206869][T12875] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 762.228941][ T29] audit: type=1400 audit(1736302305.259:758): avc: denied { ioctl } for pid=12869 comm="syz.6.1741" path="socket:[32835]" dev="sockfs" ino=32835 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 762.238903][T12875] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 762.598127][T12875] syz.5.1742: attempt to access beyond end of device [ 762.598127][T12875] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 762.613607][T12875] syz.5.1742: attempt to access beyond end of device [ 762.613607][T12875] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 762.627025][T12875] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 762.638988][T12875] syz.5.1742: attempt to access beyond end of device [ 762.638988][T12875] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 762.652611][T12875] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 762.666408][T12875] syz.5.1742: attempt to access beyond end of device [ 762.666408][T12875] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 762.682171][T12875] syz.5.1742: attempt to access beyond end of device [ 762.682171][T12875] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 762.695672][T12875] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 762.701311][ T29] audit: type=1400 audit(1736302306.120:759): avc: denied { getopt } for pid=12877 comm="syz.0.1744" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 762.725955][T12875] syz.5.1742: attempt to access beyond end of device [ 762.725955][T12875] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 762.739498][T12875] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 762.753149][T12875] syz.5.1742: attempt to access beyond end of device [ 762.753149][T12875] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 762.768751][T12875] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 762.780910][T12875] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 762.790746][T12875] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 764.578174][ T29] audit: type=1400 audit(1736302308.028:760): avc: denied { name_connect } for pid=12892 comm="syz.7.1749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 765.668635][ T29] audit: type=1400 audit(1736302308.374:761): avc: denied { setopt } for pid=12892 comm="syz.7.1749" lport=60429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 765.848027][T11354] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 765.859211][T11354] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 765.866540][ T29] audit: type=1400 audit(1736302309.281:762): avc: denied { read write } for pid=12904 comm="syz.7.1752" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 765.890790][ T29] audit: type=1400 audit(1736302309.281:763): avc: denied { open } for pid=12904 comm="syz.7.1752" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 766.033984][T12909] netlink: 'syz.5.1746': attribute type 1 has an invalid length. [ 766.107032][ T29] audit: type=1400 audit(1736302309.281:764): avc: denied { bind } for pid=12901 comm="syz.6.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 766.488076][ T29] audit: type=1400 audit(1736302309.281:765): avc: denied { name_bind } for pid=12901 comm="syz.6.1750" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 766.509265][ T29] audit: type=1400 audit(1736302309.281:766): avc: denied { node_bind } for pid=12901 comm="syz.6.1750" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 766.530502][ T29] audit: type=1400 audit(1736302309.281:767): avc: denied { listen } for pid=12901 comm="syz.6.1750" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 766.551508][ T29] audit: type=1400 audit(1736302309.281:768): avc: denied { connect } for pid=12901 comm="syz.6.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 768.230325][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 768.236534][ T29] audit: type=1400 audit(1736302311.452:774): avc: denied { mount } for pid=12931 comm="syz.6.1757" name="/" dev="ramfs" ino=32898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 768.925991][ T29] audit: type=1400 audit(1736302311.844:775): avc: denied { setopt } for pid=12933 comm="syz.7.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 769.047412][ T29] audit: type=1400 audit(1736302311.891:776): avc: denied { create } for pid=12933 comm="syz.7.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 769.090166][ T29] audit: type=1400 audit(1736302311.929:777): avc: denied { setopt } for pid=12933 comm="syz.7.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 769.183515][ T29] audit: type=1400 audit(1736302311.929:778): avc: denied { getopt } for pid=12933 comm="syz.7.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 769.338238][ T29] audit: type=1400 audit(1736302312.144:779): avc: denied { unmount } for pid=7967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 769.805023][ T29] audit: type=1400 audit(1736302312.733:780): avc: denied { execute_no_trans } for pid=12947 comm="syz.5.1761" path="/308/file0" dev="tmpfs" ino=1671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 769.880023][ T29] audit: type=1400 audit(1736302313.023:781): avc: denied { name_bind } for pid=12955 comm="syz.6.1764" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 769.913375][T12956] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1764'. [ 770.171638][T11354] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 770.180592][T11354] Bluetooth: hci4: Injecting HCI hardware error event [ 770.197591][ T5824] Bluetooth: hci4: hardware error 0x00 [ 771.093024][ T29] audit: type=1400 audit(1736302314.155:782): avc: denied { mount } for pid=12963 comm="syz.5.1768" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 771.357315][T12949] CIFS: Unable to determine destination address [ 772.382392][ T5824] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 773.106501][T12986] netlink: 'syz.5.1770': attribute type 9 has an invalid length. [ 773.114356][T12986] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1770'. [ 773.675909][ T29] audit: type=1400 audit(1736302316.016:783): avc: denied { create } for pid=12974 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 773.726551][ T29] audit: type=1400 audit(1736302316.026:784): avc: denied { bind } for pid=12974 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 773.845392][ T29] audit: type=1400 audit(1736302316.035:785): avc: denied { write } for pid=12974 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 773.891466][ T29] audit: type=1400 audit(1736302316.044:786): avc: denied { getopt } for pid=12974 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 774.386517][ T29] audit: type=1400 audit(1736302316.559:787): avc: denied { sqpoll } for pid=12984 comm="syz.1.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 774.435933][ T29] audit: type=1400 audit(1736302316.811:788): avc: denied { connect } for pid=12989 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 774.756592][ T29] audit: type=1400 audit(1736302316.811:789): avc: denied { write } for pid=12989 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 774.861099][ T29] audit: type=1400 audit(1736302316.933:790): avc: denied { ioctl } for pid=12989 comm="syz.5.1773" path="socket:[32535]" dev="sockfs" ino=32535 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 774.887055][ T29] audit: type=1400 audit(1736302316.933:791): avc: denied { write } for pid=12989 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 774.906459][ T29] audit: type=1400 audit(1736302316.933:792): avc: denied { read } for pid=12989 comm="syz.5.1773" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 775.184441][T13000] netlink: 'syz.6.1776': attribute type 10 has an invalid length. [ 775.228519][T13000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.237497][T13000] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 776.323496][T13005] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 777.623758][T13021] vxcan1: tx drop: invalid da for name 0x0800000000000000 [ 778.208669][T13023] tmpfs: Bad value for 'mpol' [ 779.715634][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 779.715665][ T29] audit: type=1400 audit(1736302321.965:803): avc: denied { accept } for pid=13031 comm="syz.0.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 780.225116][T13043] wlan1 speed is unknown, defaulting to 1000 [ 780.836519][ T29] audit: type=1400 audit(1736302321.965:804): avc: denied { write } for pid=13031 comm="syz.0.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 780.850154][T13043] lo speed is unknown, defaulting to 1000 [ 781.535558][ T29] audit: type=1400 audit(1736302322.377:805): avc: denied { read } for pid=13028 comm="syz.6.1784" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 782.344205][T13056] netlink: 'syz.7.1789': attribute type 10 has an invalid length. [ 782.361864][ T29] audit: type=1400 audit(1736302322.377:806): avc: denied { open } for pid=13028 comm="syz.6.1784" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 782.397739][ T29] audit: type=1400 audit(1736302322.386:807): avc: denied { ioctl } for pid=13028 comm="syz.6.1784" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 783.262420][T13066] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1793'. [ 783.272930][T13065] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1793'. [ 783.825475][ T29] audit: type=1400 audit(1736302325.548:808): avc: denied { write } for pid=13062 comm="syz.7.1792" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 784.465479][ T29] audit: type=1400 audit(1736302326.540:809): avc: denied { create } for pid=13073 comm="syz.5.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 788.004946][ T29] audit: type=1400 audit(1736302329.991:810): avc: denied { read write } for pid=13073 comm="syz.5.1794" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 788.764329][ T29] audit: type=1400 audit(1736302330.019:811): avc: denied { open } for pid=13073 comm="syz.5.1794" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 788.768715][T13089] openvswitch: netlink: IP tunnel dst address not specified [ 788.787680][ T29] audit: type=1400 audit(1736302330.019:812): avc: denied { ioctl } for pid=13073 comm="syz.5.1794" path="socket:[33082]" dev="sockfs" ino=33082 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 789.852224][ T29] audit: type=1400 audit(1736302331.516:813): avc: denied { mount } for pid=13078 comm="syz.0.1797" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 790.296063][ T29] audit: type=1400 audit(1736302332.124:814): avc: denied { ioctl } for pid=13093 comm="syz.7.1801" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 792.074613][ T29] audit: type=1400 audit(1736302333.667:815): avc: denied { bind } for pid=13091 comm="syz.1.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 792.094420][ T29] audit: type=1400 audit(1736302333.667:816): avc: denied { name_bind } for pid=13091 comm="syz.1.1798" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 792.116375][ T29] audit: type=1400 audit(1736302333.667:817): avc: denied { node_bind } for pid=13091 comm="syz.1.1798" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 793.635205][T13124] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 793.654456][T13124] VFS: Can't find a romfs filesystem on dev nullb0. [ 793.654456][T13124] [ 793.685092][T13123] Process accounting resumed [ 794.121304][T13123] Process accounting resumed [ 794.589707][T13140] can0: slcan on ttyS3. [ 795.721359][ T29] audit: type=1400 audit(1736302337.203:818): avc: denied { read } for pid=13130 comm="syz.5.1806" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 795.748744][ T29] audit: type=1400 audit(1736302337.231:819): avc: denied { open } for pid=13130 comm="syz.5.1806" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 795.773840][T13129] can0 (unregistered): slcan off ttyS3. [ 797.035099][ T29] audit: type=1400 audit(1736302338.195:820): avc: denied { bind } for pid=13130 comm="syz.5.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 797.055976][ T29] audit: type=1400 audit(1736302338.270:821): avc: denied { write } for pid=13130 comm="syz.5.1806" path="socket:[32713]" dev="sockfs" ino=32713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 797.241776][T13133] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 797.262464][ T29] audit: type=1400 audit(1736302338.307:822): avc: denied { listen } for pid=13156 comm="syz.7.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 797.375182][ T29] audit: type=1400 audit(1736302338.747:823): avc: denied { open } for pid=13153 comm="syz.6.1815" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 797.455234][ T29] audit: type=1400 audit(1736302338.775:824): avc: denied { read } for pid=13153 comm="syz.6.1815" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 797.732242][T13175] netlink: 'syz.7.1818': attribute type 10 has an invalid length. [ 798.265259][ T29] audit: type=1400 audit(1736302338.775:825): avc: denied { open } for pid=13153 comm="syz.6.1815" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 799.081122][ T29] audit: type=1400 audit(1736302339.888:826): avc: denied { ioctl } for pid=13177 comm="syz.5.1822" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 799.629408][ T29] audit: type=1400 audit(1736302340.861:827): avc: denied { write } for pid=13192 comm="syz.5.1824" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 799.897161][T13197] libceph: resolve '0.' (ret=-3): failed [ 800.338565][ T5824] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 800.348541][ T5824] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 800.530863][T13207] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1829'. [ 801.139777][T13207] netlink: 'syz.0.1829': attribute type 13 has an invalid length. [ 802.354377][T13222] bio_check_eod: 2 callbacks suppressed [ 802.354412][T13222] syz.6.1833: attempt to access beyond end of device [ 802.354412][T13222] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 802.375001][T13222] syz.6.1833: attempt to access beyond end of device [ 802.375001][T13222] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 802.388584][T13222] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 802.403594][T13222] syz.6.1833: attempt to access beyond end of device [ 802.403594][T13222] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 802.417841][T13222] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 802.430410][T13222] syz.6.1833: attempt to access beyond end of device [ 802.430410][T13222] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 802.444081][T13222] syz.6.1833: attempt to access beyond end of device [ 802.444081][T13222] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 802.457401][T13222] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 802.467693][T13222] syz.6.1833: attempt to access beyond end of device [ 802.467693][T13222] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 802.480919][T13222] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 802.492222][T13222] syz.6.1833: attempt to access beyond end of device [ 802.492222][T13222] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 802.505898][T13222] syz.6.1833: attempt to access beyond end of device [ 802.505898][T13222] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 802.519154][T13222] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 802.530093][T13222] syz.6.1833: attempt to access beyond end of device [ 802.530093][T13222] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 802.543883][T13222] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 802.555290][T13222] syz.6.1833: attempt to access beyond end of device [ 802.555290][T13222] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 802.568931][T13222] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 802.579074][T13222] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 802.588716][T13222] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 805.202617][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 805.202634][ T29] audit: type=1400 audit(1736302346.071:832): avc: denied { listen } for pid=13233 comm="syz.5.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 805.448691][ T29] audit: type=1400 audit(1736302346.108:833): avc: denied { accept } for pid=13233 comm="syz.5.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 805.762112][T13245] netlink: 'syz.6.1840': attribute type 10 has an invalid length. [ 805.770001][T13245] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1840'. [ 806.042848][T13246] bond0: (slave batadv0): Releasing backup interface [ 806.067495][T13246] bond0: (slave bond_slave_0): Releasing backup interface [ 806.665381][T13246] bond0: (slave bond_slave_1): Releasing backup interface [ 806.757612][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 806.850462][ T29] audit: type=1400 audit(1736302347.605:834): avc: denied { ioctl } for pid=13259 comm="syz.6.1844" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 807.078703][ T29] audit: type=1400 audit(1736302347.605:835): avc: denied { read } for pid=13251 comm="syz.5.1843" path="socket:[33854]" dev="sockfs" ino=33854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 807.081182][T13246] team0: Port device team_slave_0 removed [ 807.102126][ T29] audit: type=1400 audit(1736302347.633:836): avc: denied { mount } for pid=13259 comm="syz.6.1844" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 807.137561][ T29] audit: type=1400 audit(1736302347.652:837): avc: denied { setattr } for pid=13259 comm="syz.6.1844" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 807.304961][ T29] audit: type=1400 audit(1736302348.035:838): avc: denied { unmount } for pid=7967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 807.338097][T13246] team0: Port device team_slave_1 removed [ 807.348906][T13246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.361204][T13246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.374551][T13246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.424688][T13246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.821811][T13275] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 807.909922][ T29] audit: type=1400 audit(1736302348.596:839): avc: denied { setopt } for pid=13269 comm="syz.6.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 811.751576][ T29] audit: type=1400 audit(1736302351.823:840): avc: denied { getopt } for pid=13304 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 812.004886][ T29] audit: type=1400 audit(1736302352.441:841): avc: denied { ioctl } for pid=13312 comm="syz.6.1859" path="socket:[33968]" dev="sockfs" ino=33968 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 812.469225][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.478499][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.529691][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 812.604339][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 812.954705][T13319] ceph: No mds server is up or the cluster is laggy [ 812.987483][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 812.993955][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 813.129946][ T29] audit: type=1400 audit(1736302353.488:842): avc: denied { setopt } for pid=13312 comm="syz.6.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 814.330334][ T29] audit: type=1400 audit(1736302354.284:843): avc: denied { write } for pid=13342 comm="syz.5.1867" path="socket:[33650]" dev="sockfs" ino=33650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 814.547460][ T29] audit: type=1400 audit(1736302354.751:844): avc: denied { read } for pid=13345 comm="syz.6.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 814.766608][T13355] dlm: no locking on control device [ 816.041590][T13359] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 816.050161][T13359] VFS: Can't find a romfs filesystem on dev nullb0. [ 816.050161][T13359] [ 816.687206][T13372] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1874'. [ 817.316396][T13366] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 817.350238][T13366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.359227][T13366] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 818.422880][ T29] audit: type=1400 audit(1736302358.390:845): avc: denied { connect } for pid=13383 comm="syz.6.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 818.535914][ T29] audit: type=1400 audit(1736302358.437:846): avc: denied { listen } for pid=13383 comm="syz.6.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 818.635644][ T9580] libceph: connect (1)[c::]:6789 error -101 [ 818.715722][T13391] ceph: No mds server is up or the cluster is laggy [ 818.802347][ T9580] libceph: mon0 (1)[c::]:6789 connect error [ 819.993784][ T29] audit: type=1400 audit(1736302359.896:847): avc: denied { getopt } for pid=13402 comm="syz.6.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 820.290025][ T29] audit: type=1400 audit(1736302360.186:848): avc: denied { read } for pid=13409 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.745084][T11354] Bluetooth: hci1: command 0x0405 tx timeout [ 820.770834][T13416] netlink: 'syz.0.1885': attribute type 10 has an invalid length. [ 820.854408][ T29] audit: type=1400 audit(1736302360.710:849): avc: denied { unlink } for pid=13417 comm="syz.6.1888" name="#24" dev="tmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 821.066732][ T29] audit: type=1400 audit(1736302360.719:850): avc: denied { mount } for pid=13417 comm="syz.6.1888" name="/" dev="overlay" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 822.331016][T13434] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 822.356986][T13434] netlink: 'syz.0.1886': attribute type 9 has an invalid length. [ 822.364802][T13434] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1886'. [ 822.830530][ T29] audit: type=1400 audit(1736302362.403:851): avc: denied { read } for pid=13431 comm="syz.5.1890" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 822.854030][ T29] audit: type=1400 audit(1736302362.403:852): avc: denied { open } for pid=13431 comm="syz.5.1890" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 822.941255][ T29] audit: type=1400 audit(1736302362.646:853): avc: denied { ioctl } for pid=13436 comm="syz.1.1891" path="socket:[34819]" dev="sockfs" ino=34819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 824.330791][T13448] atomic_op ffff88807f5bc198 conn xmit_atomic 0000000000000000 [ 825.184407][ T29] audit: type=1400 audit(1736302363.974:854): avc: denied { read write } for pid=13431 comm="syz.5.1890" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 825.208833][ T29] audit: type=1400 audit(1736302363.974:855): avc: denied { open } for pid=13431 comm="syz.5.1890" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 825.413136][T13459] netlink: 'syz.7.1898': attribute type 10 has an invalid length. [ 826.578623][ T29] audit: type=1400 audit(1736302365.284:856): avc: denied { append } for pid=13463 comm="syz.6.1899" name="mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 829.489834][ T29] audit: type=1400 audit(1736302368.109:857): avc: denied { bind } for pid=13471 comm="syz.5.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 831.181233][T13493] hsr0: entered promiscuous mode [ 831.186219][T13493] hsr0: entered allmulticast mode [ 831.191314][T13493] hsr_slave_0: entered allmulticast mode [ 831.196944][T13493] hsr_slave_1: entered allmulticast mode [ 831.720646][ T29] audit: type=1400 audit(1736302370.868:858): avc: denied { create } for pid=13496 comm="syz.1.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 833.035731][T13500] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1908'. [ 834.932023][ T29] audit: type=1400 audit(1736302373.861:859): avc: denied { write } for pid=13507 comm="syz.7.1910" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 835.053881][ T46] libceph: connect (1)[c::]:6789 error -101 [ 835.060027][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 835.083976][T13512] ceph: No mds server is up or the cluster is laggy [ 835.226506][ T29] audit: type=1400 audit(1736302374.161:860): avc: denied { create } for pid=13520 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 835.257527][T13518] netlink: 'syz.0.1911': attribute type 10 has an invalid length. [ 835.942015][T13522] 9pnet_fd: Insufficient options for proto=fd [ 835.943376][ T29] audit: type=1400 audit(1736302374.236:861): avc: denied { listen } for pid=13523 comm="syz.7.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 835.971106][ T29] audit: type=1400 audit(1736302374.245:862): avc: denied { ioctl } for pid=13523 comm="syz.7.1914" path="socket:[34911]" dev="sockfs" ino=34911 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 836.000385][ T29] audit: type=1400 audit(1736302374.245:863): avc: denied { connect } for pid=13523 comm="syz.7.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 836.031645][ T29] audit: type=1400 audit(1736302374.834:864): avc: denied { sys_module } for pid=13519 comm="syz.1.1912" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 836.298228][T13538] xt_time: unknown flags 0xc [ 838.537659][ T29] audit: type=1400 audit(1736302377.248:865): avc: denied { wake_alarm } for pid=13547 comm="syz.7.1921" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 838.751346][T13558] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 839.120924][ T29] audit: type=1400 audit(1736302377.351:866): avc: denied { read write } for pid=13533 comm="syz.5.1917" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 839.173410][ T29] audit: type=1400 audit(1736302377.351:867): avc: denied { open } for pid=13533 comm="syz.5.1917" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 839.264435][ T29] audit: type=1400 audit(1736302377.360:868): avc: denied { ioctl } for pid=13533 comm="syz.5.1917" path="socket:[34322]" dev="sockfs" ino=34322 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 839.439860][T13569] netlink: 'syz.0.1926': attribute type 10 has an invalid length. [ 839.588958][T13570] input: syz1 as /devices/virtual/input/input13 [ 840.302083][T13575] ceph: No mds server is up or the cluster is laggy [ 840.305426][ T29] audit: type=1400 audit(1736302378.903:869): avc: denied { getopt } for pid=13581 comm="syz.7.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 840.309032][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 840.335491][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 840.920128][ T29] audit: type=1400 audit(1736302378.941:870): avc: denied { setopt } for pid=13581 comm="syz.7.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 840.940979][ T29] audit: type=1400 audit(1736302378.941:871): avc: denied { connect } for pid=13581 comm="syz.7.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 840.960866][ T29] audit: type=1400 audit(1736302378.941:872): avc: denied { setopt } for pid=13581 comm="syz.7.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 841.123357][ T29] audit: type=1400 audit(1736302379.670:873): avc: denied { connect } for pid=13585 comm="syz.1.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 843.015263][ T29] audit: type=1400 audit(1736302381.448:874): avc: denied { map } for pid=13599 comm="syz.7.1935" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 843.688917][T13612] netlink: 'syz.0.1938': attribute type 10 has an invalid length. [ 843.866487][T11354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 844.491216][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 844.491233][ T29] audit: type=1400 audit(1736302382.224:878): avc: denied { setopt } for pid=13610 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 844.756750][ T29] audit: type=1400 audit(1736302383.056:879): avc: denied { accept } for pid=13610 comm="syz.7.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 844.777214][T11354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 844.888723][T11354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 844.898320][T11354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 844.908108][T11354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 844.915429][T11354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 844.916811][ T29] audit: type=1400 audit(1736302383.113:880): avc: denied { write } for pid=13610 comm="syz.7.1939" path="socket:[34449]" dev="sockfs" ino=34449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 845.088636][ T29] audit: type=1400 audit(1736302383.365:881): avc: denied { mounton } for pid=13616 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 845.626539][T13616] wlan1 speed is unknown, defaulting to 1000 [ 846.279694][ T29] audit: type=1400 audit(1736302383.786:882): avc: denied { create } for pid=13627 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 846.322547][ T29] audit: type=1400 audit(1736302383.795:883): avc: denied { getopt } for pid=13627 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 846.353595][T13616] lo speed is unknown, defaulting to 1000 [ 847.520942][ T29] audit: type=1326 audit(1736302385.619:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0d985d29 code=0x7ffc0000 [ 847.629640][ T29] audit: type=1326 audit(1736302385.619:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0d985d29 code=0x7ffc0000 [ 847.700731][ T29] audit: type=1326 audit(1736302385.619:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e0d985d29 code=0x7ffc0000 [ 847.974871][ T29] audit: type=1326 audit(1736302385.619:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13635 comm="syz.1.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0d985d29 code=0x7ffc0000 [ 848.334957][T11354] Bluetooth: hci2: command tx timeout [ 848.431085][T13616] chnl_net:caif_netlink_parms(): no params data found [ 849.293503][ T7953] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.888273][T13616] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.906492][T13616] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.932324][T13616] bridge_slave_0: entered allmulticast mode [ 849.947188][T13616] bridge_slave_0: entered promiscuous mode [ 850.553508][T11354] Bluetooth: hci2: command tx timeout [ 850.668137][T13616] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.675503][T13616] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.687079][T13616] bridge_slave_1: entered allmulticast mode [ 850.697294][T13616] bridge_slave_1: entered promiscuous mode [ 850.770954][ T7953] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.664529][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 851.664544][ T29] audit: type=1400 audit(1736302389.146:895): avc: denied { create } for pid=13682 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 851.728191][ T29] audit: type=1400 audit(1736302389.445:896): avc: denied { setopt } for pid=13682 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 851.758146][ T29] audit: type=1400 audit(1736302389.529:897): avc: denied { connect } for pid=13682 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 852.783301][T11354] Bluetooth: hci2: command tx timeout [ 852.946308][ T7953] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.053690][ T29] audit: type=1400 audit(1736302391.765:898): avc: denied { setopt } for pid=13691 comm="syz.0.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 854.530326][T13616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.576514][T13616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.810331][ T29] audit: type=1400 audit(1736302392.420:899): avc: denied { write } for pid=13699 comm="syz.1.1956" path="socket:[34573]" dev="sockfs" ino=34573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 855.012135][ T5824] Bluetooth: hci2: command tx timeout [ 855.016667][T13710] bio_check_eod: 2 callbacks suppressed [ 855.016681][T13710] syz.5.1957: attempt to access beyond end of device [ 855.016681][T13710] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 855.038063][T13710] syz.5.1957: attempt to access beyond end of device [ 855.038063][T13710] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 855.051366][T13710] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 855.061866][T13710] syz.5.1957: attempt to access beyond end of device [ 855.061866][T13710] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 855.076300][T13710] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 855.089629][T13710] syz.5.1957: attempt to access beyond end of device [ 855.089629][T13710] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 855.103322][T13710] syz.5.1957: attempt to access beyond end of device [ 855.103322][T13710] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 855.116927][T13710] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 855.127374][T13710] syz.5.1957: attempt to access beyond end of device [ 855.127374][T13710] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 855.140994][T13710] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 855.155422][T13710] syz.5.1957: attempt to access beyond end of device [ 855.155422][T13710] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 855.169981][T13710] syz.5.1957: attempt to access beyond end of device [ 855.169981][T13710] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 855.185140][T13710] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 855.195847][T13710] syz.5.1957: attempt to access beyond end of device [ 855.195847][T13710] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 855.219826][T13710] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 855.240400][T13710] syz.5.1957: attempt to access beyond end of device [ 855.240400][T13710] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 855.254362][T13710] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 855.264574][T13710] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 855.274229][T13710] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 855.395729][ T7953] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.490799][T13704] pim6reg: entered allmulticast mode [ 855.496532][T13705] pim6reg: left allmulticast mode [ 855.532280][T13616] team0: Port device team_slave_0 added [ 855.556503][T13616] team0: Port device team_slave_1 added [ 855.706242][T13616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.713356][T13616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.740513][T13616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.766456][T13616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.792903][T13616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.858997][T13616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.811332][T13719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1960'. [ 857.011931][T13616] hsr_slave_0: entered promiscuous mode [ 857.942217][T13616] hsr_slave_1: entered promiscuous mode [ 857.960707][T13616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 857.968331][T13616] Cannot create hsr debugfs directory [ 857.982777][ T29] audit: type=1400 audit(1736302395.441:900): avc: denied { accept } for pid=13728 comm="syz.1.1963" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 861.486000][ T7953] bridge_slave_1: left allmulticast mode [ 861.493346][ T7953] bridge_slave_1: left promiscuous mode [ 861.501176][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.718207][ T7953] bridge_slave_0: left allmulticast mode [ 861.723991][ T7953] bridge_slave_0: left promiscuous mode [ 861.729699][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.775778][ T29] audit: type=1400 audit(1736302399.435:901): avc: denied { listen } for pid=13767 comm="syz.7.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 863.193114][T13784] overlayfs: failed to resolve './file1': -2 [ 864.018453][T13791] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 866.071062][ T7953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.090342][ T7953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.103378][ T7953] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 866.121208][ T7953] bond0 (unregistering): Released all slaves [ 866.202487][T13788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.210192][T13788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.996432][T13788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.004256][T13788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.235387][ T29] audit: type=1400 audit(1736302403.710:902): avc: denied { getopt } for pid=13806 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 867.411441][T13788] bond0: (slave batadv0): Releasing backup interface [ 867.547179][ T29] audit: type=1326 audit(1736302403.897:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13806 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684c585d29 code=0x7fc00000 [ 867.575894][ T29] audit: type=1800 audit(1736302403.963:904): pid=13814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1980" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 867.623798][T13801] mkiss: ax0: crc mode is auto. [ 867.839412][T13616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.868696][T13616] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.904906][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.912022][ T7117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.522230][T11291] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.529375][T11291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.644794][T13616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.933694][ T7953] hsr_slave_0: left promiscuous mode [ 868.945568][ T7953] hsr_slave_1: left promiscuous mode [ 869.517516][ T29] audit: type=1400 audit(1736302406.217:905): avc: denied { bind } for pid=13828 comm="syz.7.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 869.873471][ T7953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.881094][ T7953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.442620][ T7953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.468684][ T7953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.520252][ T7953] veth1_macvtap: left promiscuous mode [ 870.543487][ T7953] veth0_macvtap: left promiscuous mode [ 870.549062][ T7953] veth1_vlan: left promiscuous mode [ 870.578617][ T7953] veth0_vlan: left promiscuous mode [ 870.878979][T13855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1989'. [ 872.106728][ T7953] team0 (unregistering): Port device team_slave_1 removed [ 872.116779][T13867] gfs2: gfs2 mount does not exist [ 872.150231][ T7953] team0 (unregistering): Port device team_slave_0 removed [ 872.301281][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1992'. [ 872.317812][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1992'. [ 872.581219][T13841] wlan1 speed is unknown, defaulting to 1000 [ 872.659376][T13841] lo speed is unknown, defaulting to 1000 [ 872.713417][T13863] mkiss: ax0: crc mode is auto. [ 872.745011][T13870] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551607) [ 872.820645][T13870] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 873.427490][T13616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.482106][ T29] audit: type=1400 audit(1736302410.800:906): avc: denied { bind } for pid=13884 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 874.929272][ T29] audit: type=1400 audit(1736302411.287:907): avc: denied { create } for pid=13886 comm="syz.0.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 875.081369][T13616] veth0_vlan: entered promiscuous mode [ 875.090494][T13616] veth1_vlan: entered promiscuous mode [ 875.108377][T13616] veth0_macvtap: entered promiscuous mode [ 875.116235][T13616] veth1_macvtap: entered promiscuous mode [ 875.128953][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.139773][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.150483][T13616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.159586][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.170154][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.182323][T13616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.735036][T11291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.742880][T11291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.039169][T11292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.152123][T11292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.506905][ T29] audit: type=1400 audit(1736302413.710:908): avc: denied { mounton } for pid=13616 comm="syz-executor" path="/root/syzkaller.f2tI93/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 877.531707][ T29] audit: type=1400 audit(1736302413.719:909): avc: denied { mount } for pid=13616 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 877.575872][ T29] audit: type=1400 audit(1736302413.719:910): avc: denied { mounton } for pid=13616 comm="syz-executor" path="/root/syzkaller.f2tI93/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 877.676899][ T29] audit: type=1400 audit(1736302413.728:911): avc: denied { mounton } for pid=13616 comm="syz-executor" path="/root/syzkaller.f2tI93/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 877.724024][ T29] audit: type=1400 audit(1736302413.738:912): avc: denied { unmount } for pid=13616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 877.744244][ T29] audit: type=1400 audit(1736302413.766:913): avc: denied { mounton } for pid=13616 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 877.769116][ T29] audit: type=1400 audit(1736302413.766:914): avc: denied { mount } for pid=13616 comm="syz-executor" name="/" dev="gadgetfs" ino=7470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 877.792157][ T29] audit: type=1400 audit(1736302413.766:915): avc: denied { mount } for pid=13616 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 878.847419][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.853810][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.281767][T13937] Bluetooth: hci4: Frame reassembly failed (-84) [ 881.284992][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 881.285007][ T29] audit: type=1400 audit(1736302416.516:918): avc: denied { map } for pid=13943 comm="syz.1.2008" path="socket:[36231]" dev="sockfs" ino=36231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 881.434717][ T29] audit: type=1400 audit(1736302416.516:919): avc: denied { read } for pid=13943 comm="syz.1.2008" path="socket:[36231]" dev="sockfs" ino=36231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 881.828621][T11354] Bluetooth: hci4: command 0xfc11 tx timeout [ 881.835402][ T5824] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 883.810949][ T29] audit: type=1400 audit(1736302418.714:920): avc: denied { watch watch_reads } for pid=13967 comm="syz.7.2014" path="/193/file0" dev="tmpfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 884.961721][ T29] audit: type=1800 audit(1736302420.323:921): pid=13978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2017" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 885.184836][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2020'. [ 885.254540][ T29] audit: type=1400 audit(1736302420.959:922): avc: denied { write } for pid=13983 comm="syz.5.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 886.255934][T14000] tipc: Enabled bearer , priority 31 [ 886.321495][T14000] ªªªªªª: renamed from syzkaller0 [ 886.475606][T14000] tipc: Disabling bearer [ 887.039770][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2019'. [ 887.633829][ T5895] IPVS: starting estimator thread 0... [ 889.232806][T14012] IPVS: using max 62 ests per chain, 148800 per kthread [ 894.861050][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2036'. [ 897.415400][ T29] audit: type=1400 audit(1736302431.501:923): avc: denied { setattr } for pid=14074 comm="syz.8.2041" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 898.576756][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2043'. [ 898.823553][T14086] netlink: 216 bytes leftover after parsing attributes in process `syz.7.2043'. [ 899.164714][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2043'. [ 901.222862][ T29] audit: type=1400 audit(1736302434.915:924): avc: denied { getopt } for pid=14101 comm="syz.1.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 901.762654][ T29] audit: type=1400 audit(1736302436.384:925): avc: denied { mount } for pid=14113 comm="syz.7.2051" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 903.601391][ T29] audit: type=1400 audit(1736302438.114:926): avc: denied { unmount } for pid=9526 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 904.858998][ T29] audit: type=1400 audit(1736302439.237:927): avc: denied { map } for pid=14123 comm="syz.8.2053" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 904.901105][ T29] audit: type=1400 audit(1736302439.237:928): avc: denied { execute } for pid=14123 comm="syz.8.2053" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 905.051668][ T29] audit: type=1400 audit(1736302439.246:929): avc: denied { ioctl } for pid=14123 comm="syz.8.2053" path="/dev/sg0" dev="devtmpfs" ino=737 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 905.156702][T14140] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 906.117900][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'. [ 909.047674][ T29] audit: type=1326 audit(1736302443.203:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.7.2062" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0b3d85d29 code=0x0 [ 910.298104][ T29] audit: type=1400 audit(1736302444.306:931): avc: denied { listen } for pid=14174 comm="syz.0.2066" laddr=172.20.20.170 lport=34614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 910.590624][ T29] audit: type=1400 audit(1736302444.306:932): avc: denied { accept } for pid=14174 comm="syz.0.2066" laddr=172.20.20.170 lport=34614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 911.420652][ T29] audit: type=1400 audit(1736302444.971:933): avc: denied { read } for pid=14183 comm="syz.5.2069" path="socket:[37122]" dev="sockfs" ino=37122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 912.140769][ T5154] IPVS: starting estimator thread 0... [ 913.317528][T14193] IPVS: using max 62 ests per chain, 148800 per kthread [ 913.511982][T14211] hsr0: entered promiscuous mode [ 913.517017][T14211] hsr0: entered allmulticast mode [ 913.522141][T14211] hsr_slave_0: entered allmulticast mode [ 913.527824][T14211] hsr_slave_1: entered allmulticast mode [ 913.991803][T14217] bio_check_eod: 2 callbacks suppressed [ 913.991834][T14217] syz.5.2078: attempt to access beyond end of device [ 913.991834][T14217] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 914.011608][T14217] syz.5.2078: attempt to access beyond end of device [ 914.011608][T14217] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 914.024956][T14217] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 914.035350][T14217] syz.5.2078: attempt to access beyond end of device [ 914.035350][T14217] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 914.048536][T14217] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 914.060941][T14217] syz.5.2078: attempt to access beyond end of device [ 914.060941][T14217] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 914.075879][T14217] syz.5.2078: attempt to access beyond end of device [ 914.075879][T14217] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 914.092178][T14217] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 914.104522][T14217] syz.5.2078: attempt to access beyond end of device [ 914.104522][T14217] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 914.118821][T14217] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 914.135897][T14217] syz.5.2078: attempt to access beyond end of device [ 914.135897][T14217] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 914.150460][T14217] syz.5.2078: attempt to access beyond end of device [ 914.150460][T14217] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 914.267620][T14217] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 914.280844][T14217] syz.5.2078: attempt to access beyond end of device [ 914.280844][T14217] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 914.294197][T14217] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 914.307354][T14217] syz.5.2078: attempt to access beyond end of device [ 914.307354][T14217] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 914.942552][T14217] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 914.985644][T14217] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 914.995294][T14217] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 916.388260][T14236] hsr0: entered promiscuous mode [ 916.393355][T14236] hsr0: entered allmulticast mode [ 916.398550][T14236] hsr_slave_0: entered allmulticast mode [ 917.265872][ T29] audit: type=1400 audit(1736302450.798:934): avc: denied { create } for pid=14243 comm="syz.0.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 917.436429][ T29] audit: type=1326 audit(1736302451.060:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.463901][ T29] audit: type=1326 audit(1736302451.079:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.507178][ T29] audit: type=1326 audit(1736302451.079:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.530958][ T29] audit: type=1326 audit(1736302451.079:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.659676][ T29] audit: type=1326 audit(1736302451.079:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.659798][ T29] audit: type=1326 audit(1736302451.079:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.659912][ T29] audit: type=1326 audit(1736302451.079:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.660025][ T29] audit: type=1326 audit(1736302451.079:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.660137][ T29] audit: type=1326 audit(1736302451.079:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.0.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f684c585d29 code=0x7ffc0000 [ 917.762047][T14253] wlan1 speed is unknown, defaulting to 1000 [ 918.067007][T14253] lo speed is unknown, defaulting to 1000 [ 918.156467][T14251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2086'. [ 918.318644][ T5154] kernel write not supported for file /sg0 (pid: 5154 comm: kworker/1:2) [ 921.809270][T11354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 921.820514][T11354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 921.832015][T11354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 921.841191][T11354] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 921.850264][T11354] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 921.858441][T11354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 923.534213][T14284] wlan1 speed is unknown, defaulting to 1000 [ 923.741991][T14303] pim6reg: entered allmulticast mode [ 923.750701][T14284] lo speed is unknown, defaulting to 1000 [ 923.753838][T14303] delete_channel: no stack [ 923.765070][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 923.765080][ T29] audit: type=1400 audit(1736302456.981:1040): avc: denied { setopt } for pid=14302 comm="syz.0.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 923.951058][T14303] pim6reg: left allmulticast mode [ 923.962598][ T29] audit: type=1400 audit(1736302457.159:1041): avc: denied { connect } for pid=14305 comm="syz.5.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 925.118872][T14316] Process accounting resumed [ 925.123954][T14316] kernel write not supported for file task/1450/attr/sockcreate (pid: 14316 comm: syz.5.2098) [ 925.173378][ T29] audit: type=1400 audit(1736302458.169:1042): avc: denied { read } for pid=14305 comm="syz.5.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 925.579198][T14318] netlink: 'syz.5.2102': attribute type 10 has an invalid length. [ 925.665937][T14328] netlink: 'syz.5.2106': attribute type 10 has an invalid length. [ 926.080569][ T5824] Bluetooth: hci4: command tx timeout [ 926.183373][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2107'. [ 926.271935][T14338] hsr_slave_1 (unregistering): left promiscuous mode [ 926.288501][T14284] chnl_net:caif_netlink_parms(): no params data found [ 926.298039][T14341] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 926.320211][T14341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.395142][T14284] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.407954][T14284] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.440650][T14284] bridge_slave_0: entered allmulticast mode [ 926.454576][T14284] bridge_slave_0: entered promiscuous mode [ 926.484099][T14284] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.595910][T14284] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.604060][T14284] bridge_slave_1: entered allmulticast mode [ 926.621723][T14284] bridge_slave_1: entered promiscuous mode [ 926.673082][T14347] IPv6: NLM_F_CREATE should be specified when creating new route [ 926.681415][ T29] audit: type=1400 audit(1736302459.713:1043): avc: denied { bind } for pid=14346 comm="syz.0.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 927.161474][T14284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.805062][T14284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.895927][T14360] xt_bpf: check failed: parse error [ 927.943283][T14284] team0: Port device team_slave_0 added [ 927.959361][T14284] team0: Port device team_slave_1 added [ 928.025360][T14284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.043476][T14284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.424560][T14284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.435206][ T5824] Bluetooth: hci4: command tx timeout [ 928.446450][T14284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.453373][T14284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.529292][T14284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.548804][T14366] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2114'. [ 928.557962][ T29] audit: type=1400 audit(1736302461.443:1044): avc: denied { accept } for pid=14365 comm="syz.0.2114" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 928.795694][T14284] hsr_slave_0: entered promiscuous mode [ 928.812272][T14284] hsr_slave_1: entered promiscuous mode [ 928.832328][T14284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.850757][T14284] Cannot create hsr debugfs directory [ 928.966318][ T2905] bridge_slave_1: left allmulticast mode [ 929.352742][T14381] SET target dimension over the limit! [ 929.384779][ T29] audit: type=1400 audit(1736302462.210:1045): avc: denied { ioctl } for pid=14374 comm="syz.5.2117" path="cgroup:[4026533080]" dev="nsfs" ino=4026533080 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 929.526700][ T2905] bridge_slave_1: left promiscuous mode [ 929.529936][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.551803][ T2905] bridge_slave_0: left allmulticast mode [ 929.551858][ T2905] bridge_slave_0: left promiscuous mode [ 929.552636][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.743701][ T5824] Bluetooth: hci4: command tx timeout [ 931.628201][ T29] audit: type=1400 audit(1736302464.324:1046): avc: denied { watch watch_reads } for pid=14400 comm="syz.7.2123" path="/214" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 931.934770][T14408] overlayfs: failed to clone upperpath [ 931.997916][T14410] /dev/nullb0: Can't lookup blockdev [ 932.016182][ T2905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.060473][ T2905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.083043][ T2905] bond0 (unregistering): Released all slaves [ 932.177475][T14418] netlink: 'syz.1.2127': attribute type 2 has an invalid length. [ 932.194910][ T29] audit: type=1400 audit(1736302464.848:1047): avc: denied { audit_write } for pid=14413 comm="syz.1.2127" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 932.216335][ T29] audit: type=1107 audit(1736302464.848:1048): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='p?€†vãÊ&_q• ¨<ñ,PÊ~1çéîwOBÓi•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]Xf“êÆ? ‡âÖG·iMò]4Ð0p„ÕêtÖ³ñh`»ö~¬ÈŠÙÑYшxeGǦª<#u ?9Å0©¾ÇÜ\= G!í y-œ÷ [ 932.216335][ T29] hõ'ÃÆd”ÓÙù¶A) Œ×‚ßsó7©­ˆy †µ>|Ç3Weæ|¾¾üÜ¥#1ézŽ_R§?=' [ 932.784681][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 932.839657][T14421] hsr0: entered promiscuous mode [ 932.844677][T14421] hsr0: entered allmulticast mode [ 932.849848][T14421] hsr_slave_0: entered allmulticast mode [ 932.855483][T14421] hsr_slave_1: entered allmulticast mode [ 932.958655][ T5824] Bluetooth: hci4: command tx timeout [ 933.839632][T14433] tipc: Enabled bearer , priority 10 [ 933.870088][T14433] tipc: Enabling of bearer rejected, already enabled [ 933.909509][T14284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.955757][T14284] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.009715][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.016872][ T7117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.085416][ T29] audit: type=1400 audit(1736302466.625:1049): avc: denied { write } for pid=14427 comm="syz.1.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 934.255582][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.262723][ T7953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.042657][ T2905] hsr_slave_0: left promiscuous mode [ 935.054043][ T2905] hsr_slave_1: left promiscuous mode [ 935.144958][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.157229][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.179416][ T2905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.186842][ T2905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.765359][T14458] netlink: 'syz.7.2136': attribute type 10 has an invalid length. [ 935.784817][ T2905] veth1_macvtap: left promiscuous mode [ 935.790458][ T2905] veth0_macvtap: left promiscuous mode [ 935.796014][ T2905] veth1_vlan: left promiscuous mode [ 935.802109][ T2905] veth0_vlan: left promiscuous mode [ 936.751908][ T2905] team0 (unregistering): Port device team_slave_1 removed [ 936.790690][ T2905] team0 (unregistering): Port device team_slave_0 removed [ 938.564264][ T29] audit: type=1400 audit(1736302470.816:1050): avc: denied { read } for pid=14474 comm="syz.1.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 939.234541][T14284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.819577][T14507] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2150'. [ 939.832874][ T29] audit: type=1400 audit(1736302471.985:1051): avc: denied { bind } for pid=14503 comm="syz.7.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 939.860411][ T5824] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 939.869969][ T29] audit: type=1400 audit(1736302471.985:1052): avc: denied { connect } for pid=14503 comm="syz.7.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 940.467837][T14284] veth0_vlan: entered promiscuous mode [ 940.477293][T14284] veth1_vlan: entered promiscuous mode [ 940.542526][T14284] veth0_macvtap: entered promiscuous mode [ 940.608353][T14284] veth1_macvtap: entered promiscuous mode [ 940.640537][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.651295][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.664652][T14284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.680229][T14284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.690982][T14284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.703802][T14284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.266467][T14517] x_tables: unsorted underflow at hook 3 [ 945.885397][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 946.686969][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 946.709731][ T7385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.790530][ T7385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.194307][ T7117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.202825][ T7117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.213162][ T29] audit: type=1400 audit(1736302480.778:1053): avc: denied { unmount } for pid=6033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 950.292576][T14577] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 950.600591][ T29] audit: type=1400 audit(1736302482.078:1054): avc: denied { read } for pid=14575 comm="syz.5.2164" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 950.627214][ T29] audit: type=1400 audit(1736302482.078:1055): avc: denied { open } for pid=14575 comm="syz.5.2164" path="/396/file0" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 950.806090][ T29] audit: type=1400 audit(1736302482.153:1056): avc: denied { create } for pid=14579 comm="syz.1.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 951.426848][ T29] audit: type=1400 audit(1736302482.293:1057): avc: denied { bind } for pid=14583 comm="syz.0.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 951.632878][ T29] audit: type=1400 audit(1736302483.051:1058): avc: denied { unmount } for pid=9526 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 955.409716][T14625] hsr0: entered promiscuous mode [ 955.414719][T14625] hsr0: entered allmulticast mode [ 955.420394][T14625] hsr_slave_0: entered allmulticast mode [ 955.426029][T14625] hsr_slave_1: entered allmulticast mode [ 956.802283][T14633] bio_check_eod: 2 callbacks suppressed [ 956.802306][T14633] syz.7.2175: attempt to access beyond end of device [ 956.802306][T14633] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 956.822321][T14633] syz.7.2175: attempt to access beyond end of device [ 956.822321][T14633] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 956.835828][T14633] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 956.846090][T14633] syz.7.2175: attempt to access beyond end of device [ 956.846090][T14633] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 956.860980][T14633] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 956.879744][T14633] syz.7.2175: attempt to access beyond end of device [ 956.879744][T14633] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 956.895100][T14633] syz.7.2175: attempt to access beyond end of device [ 956.895100][T14633] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 956.909018][T14633] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 956.919497][T14633] syz.7.2175: attempt to access beyond end of device [ 956.919497][T14633] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 956.933613][T14633] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 956.946284][T14633] syz.7.2175: attempt to access beyond end of device [ 956.946284][T14633] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 956.960305][T14633] syz.7.2175: attempt to access beyond end of device [ 956.960305][T14633] nbd7: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 957.049587][T14633] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 957.082490][T14633] syz.7.2175: attempt to access beyond end of device [ 957.082490][T14633] nbd7: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 957.105023][T14633] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 957.118061][T14633] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 957.283889][ T5868] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 958.148835][ T5868] usb 10-1: Using ep0 maxpacket: 8 [ 959.179438][ T5868] usb 10-1: config 150 has an invalid interface number: 204 but max is 1 [ 959.198512][ T5868] usb 10-1: config 150 has no interface number 0 [ 959.205070][ T5868] usb 10-1: config 150 interface 204 has no altsetting 0 [ 960.228075][ T5868] usb 10-1: config 150 interface 1 has no altsetting 0 [ 960.442497][T14664] program syz.5.2185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 960.681550][ T5868] usb 10-1: string descriptor 0 read error: -71 [ 960.687929][ T5868] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 960.697114][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.851916][ T29] audit: type=1400 audit(1736302491.666:1059): avc: denied { mount } for pid=14667 comm="syz.9.2189" name="/" dev="hugetlbfs" ino=39219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 961.101209][ T5868] usb 10-1: can't set config #150, error -71 [ 961.198306][T14676] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 961.207327][T14676] overlayfs: failed to set xattr on upper [ 961.215094][T14676] overlayfs: ...falling back to redirect_dir=nofollow. [ 961.223970][T14676] overlayfs: ...falling back to index=off. [ 961.229812][T14676] overlayfs: ...falling back to uuid=null. [ 961.237643][T14676] overlayfs: maximum fs stacking depth exceeded [ 961.799145][ T29] audit: type=1400 audit(1736302491.984:1060): avc: denied { mounton } for pid=14667 comm="syz.9.2189" path="/4/file1/bus" dev="hugetlbfs" ino=39222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 961.845995][ T5868] usb 10-1: USB disconnect, device number 2 [ 961.995822][ T29] audit: type=1400 audit(1736302492.723:1061): avc: denied { unmount } for pid=14284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 962.045195][T14679] netlink: 'syz.0.2191': attribute type 10 has an invalid length. [ 962.246954][ T29] audit: type=1400 audit(1736302492.966:1062): avc: denied { getopt } for pid=14690 comm="syz.0.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 962.287734][T14700] mkiss: ax0: crc mode is auto. [ 962.345346][T14670] nbd7: detected capacity change from 0 to 12 [ 962.357700][T14135] block nbd7: Send control failed (result -89) [ 962.365614][T14135] block nbd7: Request send failed, requeueing [ 962.412618][ T43] block nbd7: Dead connection, failed to find a fallback [ 962.420995][ T43] block nbd7: shutting down sockets [ 962.429246][ T43] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 962.439139][ T43] buffer_io_error: 4 callbacks suppressed [ 962.439209][ T43] Buffer I/O error on dev nbd7, logical block 0, async page read [ 962.463588][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 962.472974][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 962.482962][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 962.495173][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 962.503554][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 962.526440][T14695] block nbd7: NBD_DISCONNECT [ 962.626195][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 962.848191][T14695] block nbd7: Send disconnect failed -89 [ 962.896857][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 963.201199][ T29] audit: type=1107 audit(1736302493.855:1063): pid=14706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 963.428237][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 963.482467][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 963.926808][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 963.934681][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.371780][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 965.429633][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.450875][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 965.513991][T14135] ldm_validate_partition_table(): Disk read failed. [ 965.967961][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.980719][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 966.649439][T14135] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 966.670740][T14135] Buffer I/O error on dev nbd7, logical block 0, async page read [ 966.680449][T14135] Dev nbd7: unable to read RDB block 0 [ 966.687680][T14135] nbd7: unable to read partition table [ 966.693596][T14135] nbd7: partition table beyond EOD, truncated [ 967.230117][T14135] ldm_validate_partition_table(): Disk read failed. [ 967.244841][T14135] Dev nbd7: unable to read RDB block 0 [ 967.250525][T14135] nbd7: unable to read partition table [ 967.293534][T14135] nbd7: partition table beyond EOD, truncated [ 968.118220][T14746] netlink: 'syz.7.2205': attribute type 10 has an invalid length. [ 974.385999][T14793] mkiss: ax0: crc mode is auto. [ 974.413552][T14793] misc userio: Invalid payload size [ 974.421836][T14793] misc userio: No port type given on /dev/userio [ 974.433123][T14793] misc userio: The device must be registered before sending interrupts [ 975.110381][ T29] audit: type=1400 audit(1736302504.911:1064): avc: denied { ioctl } for pid=14789 comm="syz.7.2215" path="socket:[38783]" dev="sockfs" ino=38783 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 975.362181][T14802] netlink: 'syz.5.2219': attribute type 10 has an invalid length. [ 975.385081][T14803] syz.7.2218[14803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.385127][T14803] syz.7.2218[14803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.397650][T14803] syz.7.2218[14803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 977.688949][ T29] audit: type=1400 audit(1736302507.418:1065): avc: denied { bind } for pid=14815 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 977.753211][ T29] audit: type=1400 audit(1736302507.418:1066): avc: denied { node_bind } for pid=14815 comm="syz.0.2223" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 979.428337][ T29] audit: type=1400 audit(1736302508.671:1067): avc: denied { bind } for pid=14828 comm="syz.0.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 979.449072][T14835] xt_CT: No such helper "snmp_trap" [ 979.618903][ T29] audit: type=1400 audit(1736302509.214:1068): avc: denied { ioctl } for pid=14840 comm="syz.7.2230" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 979.651975][ T5868] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 980.500818][ T29] audit: type=1400 audit(1736302509.906:1069): avc: denied { ioctl } for pid=14840 comm="syz.7.2230" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 980.860777][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 980.926268][T14855] netlink: 'syz.0.2231': attribute type 10 has an invalid length. [ 981.014112][ T29] audit: type=1400 audit(1736302510.514:1070): avc: denied { nlmsg_read } for pid=14851 comm="syz.9.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 981.897598][T14865] pim6reg: entered allmulticast mode [ 981.904706][T14865] pim6reg: left allmulticast mode [ 982.252107][ T5868] usb 6-1: unable to read config index 0 descriptor/all [ 982.259103][ T5868] usb 6-1: can't read configurations, error -71 [ 982.732150][ T5824] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 982.978687][T14873] netlink: 1608 bytes leftover after parsing attributes in process `syz.7.2236'. [ 983.617693][T14884] fuse: Bad value for 'fd' [ 983.638203][T14884] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2241'. [ 983.654257][T14884] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2241'. [ 984.627126][T14884] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2241'. [ 984.657640][T14884] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2241'. [ 987.286935][ T29] audit: type=1326 audit(1736302516.388:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.9.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f693a585d29 code=0x0 [ 988.273231][ T29] audit: type=1400 audit(1736302517.314:1072): avc: denied { getopt } for pid=14915 comm="syz.1.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 988.410811][T13633] libceph: connect (1)[c::]:6789 error -101 [ 988.416864][T13633] libceph: mon0 (1)[c::]:6789 connect error [ 988.485515][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2249'. [ 989.255202][T14918] ceph: No mds server is up or the cluster is laggy [ 989.345736][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2251'. [ 989.368803][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2251'. [ 989.821994][ T9580] libceph: connect (1)[c::]:6789 error -101 [ 989.828057][ T9580] libceph: mon0 (1)[c::]:6789 connect error [ 990.691554][ T9580] libceph: connect (1)[c::]:6789 error -101 [ 990.698270][ T9580] libceph: mon0 (1)[c::]:6789 connect error [ 990.785270][ T29] audit: type=1400 audit(1736302519.644:1073): avc: denied { append } for pid=14939 comm="syz.7.2253" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 991.906364][ T29] audit: type=1400 audit(1736302520.719:1074): avc: denied { write } for pid=14950 comm="syz.9.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 993.347857][T14971] /dev/nullb0: Can't lookup blockdev [ 997.343485][T15009] loop6: detected capacity change from 0 to 524287999 [ 997.979081][ T29] audit: type=1400 audit(1736302525.799:1075): avc: denied { append } for pid=15002 comm="syz.9.2270" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 998.005094][ T29] audit: type=1400 audit(1736302525.808:1076): avc: denied { map } for pid=15002 comm="syz.9.2270" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 998.034474][ T29] audit: type=1400 audit(1736302525.808:1077): avc: denied { execute } for pid=15002 comm="syz.9.2270" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 999.312971][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 999.327247][ T5824] Bluetooth: hci1: command 0x0405 tx timeout [ 1000.018432][T15045] overlayfs: failed to clone upperpath [ 1001.183537][T15060] overlayfs: failed to clone upperpath [ 1003.247139][T15072] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1004.168122][ T29] audit: type=1326 audit(1736302532.187:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b3d85d29 code=0x7ffc0000 [ 1004.336611][ T29] audit: type=1326 audit(1736302532.187:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b3d85d29 code=0x7ffc0000 [ 1004.510799][ T29] audit: type=1326 audit(1736302532.187:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0b3d85d29 code=0x7ffc0000 [ 1004.605661][ T29] audit: type=1326 audit(1736302532.187:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b3d85d29 code=0x7ffc0000 [ 1004.648947][ T29] audit: type=1326 audit(1736302532.187:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b3d85d29 code=0x7ffc0000 [ 1004.672414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.679327][ T29] audit: type=1326 audit(1736302532.187:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0b3d84690 code=0x7ffc0000 [ 1004.679361][ T29] audit: type=1326 audit(1736302532.187:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0b3d8592b code=0x7ffc0000 [ 1004.679391][ T29] audit: type=1326 audit(1736302532.187:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0b3d8592b code=0x7ffc0000 [ 1004.679421][ T29] audit: type=1326 audit(1736302532.187:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0b3d8592b code=0x7ffc0000 [ 1004.679450][ T29] audit: type=1326 audit(1736302532.187:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.7.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0b3d8592b code=0x7ffc0000 [ 1006.747478][T15113] netlink: 'syz.1.2297': attribute type 8 has an invalid length. [ 1007.260318][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2298'. [ 1007.434101][T15123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.241221][T15132] overlayfs: failed to clone upperpath [ 1009.822361][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1009.828676][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1011.248544][T15133] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2303'. [ 1011.472394][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 1012.233199][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1012.233232][ T29] audit: type=1400 audit(1736302539.409:1091): avc: denied { read } for pid=15148 comm="syz.7.2308" lport=39085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1012.553871][T15128] netlink: 24576 bytes leftover after parsing attributes in process `syz.9.2303'. [ 1012.836463][ T29] audit: type=1400 audit(1736302540.269:1092): avc: denied { setattr } for pid=15167 comm="syz.9.2314" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1013.189268][T15173] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1013.635439][T15175] @ÿ: renamed from bond_slave_0 (while UP) [ 1013.952464][ T29] audit: type=1400 audit(1736302541.336:1093): avc: denied { write } for pid=15180 comm="syz.5.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1014.080061][ T29] audit: type=1400 audit(1736302541.457:1094): avc: denied { setattr } for pid=15180 comm="syz.5.2315" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1014.102085][ T29] audit: type=1400 audit(1736302541.457:1095): avc: denied { write } for pid=15180 comm="syz.5.2315" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1014.435875][ T29] audit: type=1400 audit(1736302541.457:1096): avc: denied { open } for pid=15180 comm="syz.5.2315" path="/424/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1014.645224][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2315'. [ 1015.704355][ T29] audit: type=1326 audit(1736302542.982:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15201 comm="syz.1.2320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e0d985d29 code=0x0 [ 1016.911983][ T29] audit: type=1400 audit(1736302543.384:1098): avc: denied { listen } for pid=15203 comm="syz.9.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1017.588014][T15222] input: syz0 as /devices/virtual/input/input14 [ 1018.734375][ T29] audit: type=1400 audit(1736302544.965:1099): avc: denied { unmount } for pid=6033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1018.825932][ T29] audit: type=1400 audit(1736302545.124:1100): avc: denied { map } for pid=15221 comm="syz.9.2324" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1019.701669][ T29] audit: type=1400 audit(1736302545.124:1101): avc: denied { execute } for pid=15221 comm="syz.9.2324" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1021.678963][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2332'. [ 1021.690809][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2332'. [ 1024.104177][T15273] 9pnet_fd: Insufficient options for proto=fd [ 1024.115692][T15273] lo speed is unknown, defaulting to 1000 [ 1024.127100][T15273] lo speed is unknown, defaulting to 1000 [ 1024.136075][T15273] lo speed is unknown, defaulting to 1000 [ 1024.151549][T15273] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1024.180646][T15273] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1024.255975][T15273] lo speed is unknown, defaulting to 1000 [ 1024.263247][T15273] lo speed is unknown, defaulting to 1000 [ 1024.285626][T15273] lo speed is unknown, defaulting to 1000 [ 1024.306045][T15273] lo speed is unknown, defaulting to 1000 [ 1024.317327][T15273] lo speed is unknown, defaulting to 1000 [ 1025.755210][ T29] audit: type=1400 audit(1736302552.336:1102): avc: denied { mount } for pid=15279 comm="syz.0.2336" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1025.825202][ T29] audit: type=1400 audit(1736302552.383:1103): avc: denied { accept } for pid=15281 comm="syz.1.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1028.673326][ T29] audit: type=1400 audit(1736302555.095:1104): avc: denied { write } for pid=15306 comm="syz.9.2344" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1028.703561][ T29] audit: type=1400 audit(1736302555.105:1105): avc: denied { set_context_mgr } for pid=15306 comm="syz.9.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1028.869283][T15308] No such timeout policy "syz0" [ 1029.845150][ T29] audit: type=1400 audit(1736302555.685:1106): avc: denied { map } for pid=15306 comm="syz.9.2344" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1029.872871][ T29] audit: type=1400 audit(1736302555.685:1107): avc: denied { call } for pid=15306 comm="syz.9.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1032.138259][T15334] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1032.138333][T15334] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 1032.138533][T15334] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1032.138566][T15334] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 1032.157603][T15334] wlan1 speed is unknown, defaulting to 1000 [ 1032.163297][T15334] wlan1 speed is unknown, defaulting to 1000 [ 1032.165808][T15334] wlan1 speed is unknown, defaulting to 1000 [ 1032.454827][ T29] audit: type=1400 audit(1736302558.341:1108): avc: denied { create } for pid=15329 comm="syz.7.2350" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1032.541693][T15334] infiniband syz0: set active [ 1032.541735][T15334] infiniband syz0: added wlan1 [ 1032.546338][T13633] wlan1 speed is unknown, defaulting to 1000 [ 1032.597139][T15334] RDS/IB: syz0: added [ 1032.597179][T15334] smc: adding ib device syz0 with port count 1 [ 1032.597197][T15334] smc: ib device syz0 port 1 has pnetid [ 1032.599267][T15334] wlan1 speed is unknown, defaulting to 1000 [ 1032.677896][T15334] wlan1 speed is unknown, defaulting to 1000 [ 1032.752745][T15334] wlan1 speed is unknown, defaulting to 1000 [ 1032.818642][ T9580] wlan1 speed is unknown, defaulting to 1000 [ 1032.843517][T15342] tipc: Started in network mode [ 1032.843545][T15342] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1032.845053][T15342] tipc: Enabled bearer , priority 10 [ 1032.858816][T15334] wlan1 speed is unknown, defaulting to 1000 [ 1032.984122][T15334] wlan1 speed is unknown, defaulting to 1000 [ 1033.136709][ T29] audit: type=1400 audit(1736302559.276:1109): avc: denied { unlink } for pid=9526 comm="syz-executor" name="file0" dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1034.430370][ T46] tipc: Node number set to 4269801488 [ 1034.462295][ T29] audit: type=1400 audit(1736302559.735:1110): avc: denied { getattr } for pid=15345 comm="syz.0.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1037.950615][ T29] audit: type=1400 audit(1736302563.317:1111): avc: denied { create } for pid=15371 comm="syz.9.2359" name="#34" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1037.950653][ T29] audit: type=1400 audit(1736302563.317:1112): avc: denied { link } for pid=15371 comm="syz.9.2359" name="#34" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1038.148325][ T29] audit: type=1400 audit(1736302563.317:1113): avc: denied { rename } for pid=15371 comm="syz.9.2359" name="#35" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1044.748909][T15406] wlan1 speed is unknown, defaulting to 1000 [ 1044.842622][T15406] lo speed is unknown, defaulting to 1000 [ 1044.949503][T15406] lo speed is unknown, defaulting to 1000 [ 1044.957948][T15406] wlan1 speed is unknown, defaulting to 1000 [ 1045.220664][T15413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2366'. [ 1045.597519][ T29] audit: type=1326 audit(1736302570.847:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.9.2367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f693a585d29 code=0x0 [ 1047.450377][ T29] audit: type=1400 audit(1736302572.335:1115): avc: denied { audit_control } for pid=15417 comm="syz.7.2368" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1049.468526][ T29] audit: type=1400 audit(1736302574.552:1116): avc: denied { read } for pid=15427 comm="syz.7.2371" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1049.628253][ T29] audit: type=1400 audit(1736302574.552:1117): avc: denied { open } for pid=15427 comm="syz.7.2371" path="/260/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1049.881482][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 1050.064854][T15438] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2372'. [ 1050.854136][T15431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.032565][T15450] vlan2: entered promiscuous mode [ 1051.107142][T15437] [ 1051.109477][T15437] ====================================================== [ 1051.116466][T15437] WARNING: possible circular locking dependency detected [ 1051.123451][T15437] 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 Not tainted [ 1051.130543][T15437] ------------------------------------------------------ [ 1051.137526][T15437] syz.7.2371/15437 is trying to acquire lock: [ 1051.143560][T15437] ffff8880286ddde0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0 [ 1051.152921][T15437] [ 1051.152921][T15437] but task is already holding lock: [ 1051.160249][T15437] ffff8880286dde70 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 1051.169874][T15437] [ 1051.169874][T15437] which lock already depends on the new lock. [ 1051.169874][T15437] [ 1051.180250][T15437] [ 1051.180250][T15437] the existing dependency chain (in reverse order) is: [ 1051.189495][T15437] [ 1051.189495][T15437] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 1051.197367][T15437] __mutex_lock+0x19b/0xa60 [ 1051.202375][T15437] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 1051.208765][T15437] __blk_mq_update_nr_hw_queues+0x93f/0x14e0 [ 1051.215251][T15437] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 1051.221317][T15437] nbd_start_device+0x15b/0xd70 [ 1051.226691][T15437] nbd_ioctl+0x21a/0xfd0 [ 1051.231455][T15437] blkdev_ioctl+0x276/0x6d0 [ 1051.236504][T15437] __x64_sys_ioctl+0x190/0x200 [ 1051.241800][T15437] do_syscall_64+0xcd/0x250 [ 1051.246827][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.253220][T15437] [ 1051.253220][T15437] -> #4 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 1051.261792][T15437] blk_mq_submit_bio+0x1fb6/0x24c0 [ 1051.267406][T15437] __submit_bio+0x384/0x540 [ 1051.272405][T15437] submit_bio_noacct_nocheck+0x698/0xd70 [ 1051.278532][T15437] submit_bio_noacct+0x93a/0x1e20 [ 1051.284047][T15437] block_read_full_folio+0x812/0xa50 [ 1051.289823][T15437] filemap_read_folio+0xc6/0x2a0 [ 1051.295250][T15437] filemap_get_pages+0x155f/0x1be0 [ 1051.300853][T15437] filemap_read+0x3ca/0xd70 [ 1051.305845][T15437] blkdev_read_iter+0x187/0x480 [ 1051.311186][T15437] vfs_read+0x87f/0xbe0 [ 1051.315829][T15437] ksys_read+0x12b/0x250 [ 1051.320559][T15437] do_syscall_64+0xcd/0x250 [ 1051.325555][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.331941][T15437] [ 1051.331941][T15437] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1051.340440][T15437] down_read+0x9a/0x330 [ 1051.345088][T15437] page_cache_ra_unbounded+0x173/0x750 [ 1051.351036][T15437] page_cache_ra_order+0x8f2/0xc80 [ 1051.356635][T15437] filemap_fault+0x14a5/0x2820 [ 1051.361888][T15437] __do_fault+0x10a/0x490 [ 1051.366709][T15437] do_pte_missing+0xebd/0x3e00 [ 1051.371962][T15437] __handle_mm_fault+0x103c/0x2a40 [ 1051.377567][T15437] handle_mm_fault+0x3fa/0xaa0 [ 1051.382838][T15437] __get_user_pages+0x8d9/0x3b50 [ 1051.388275][T15437] get_user_pages_unlocked+0x1c2/0x780 [ 1051.394224][T15437] hva_to_pfn+0x8be/0xc20 [ 1051.399053][T15437] kvm_follow_pfn+0x29f/0x3f0 [ 1051.404222][T15437] __kvm_faultin_pfn+0x11c/0x1a0 [ 1051.409650][T15437] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 1051.415350][T15437] kvm_tdp_page_fault+0x182/0x3d0 [ 1051.420880][T15437] kvm_mmu_do_page_fault+0x58d/0x690 [ 1051.426670][T15437] kvm_mmu_page_fault+0x20f/0x1bb0 [ 1051.432287][T15437] handle_ept_violation+0x25a/0x640 [ 1051.438002][T15437] vmx_handle_exit+0x733/0x1f70 [ 1051.443348][T15437] vcpu_run+0x3047/0x4f50 [ 1051.448184][T15437] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 1051.454226][T15437] kvm_vcpu_ioctl+0x6ce/0x1520 [ 1051.459480][T15437] __x64_sys_ioctl+0x190/0x200 [ 1051.464753][T15437] do_syscall_64+0xcd/0x250 [ 1051.469753][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.476141][T15437] [ 1051.476141][T15437] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 1051.483666][T15437] __might_fault+0x11b/0x190 [ 1051.488752][T15437] _copy_from_user+0x29/0xd0 [ 1051.493842][T15437] __blk_trace_setup+0xa8/0x180 [ 1051.499185][T15437] blk_trace_ioctl+0x163/0x290 [ 1051.504437][T15437] blkdev_ioctl+0x109/0x6d0 [ 1051.509435][T15437] __x64_sys_ioctl+0x190/0x200 [ 1051.514704][T15437] do_syscall_64+0xcd/0x250 [ 1051.519699][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.526093][T15437] [ 1051.526093][T15437] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1051.533876][T15437] __mutex_lock+0x19b/0xa60 [ 1051.538897][T15437] blk_register_queue+0x13c/0x4f0 [ 1051.544418][T15437] add_disk_fwnode+0x785/0x1300 [ 1051.549761][T15437] brd_alloc.isra.0+0x5a2/0x840 [ 1051.555104][T15437] brd_init+0x12b/0x1d0 [ 1051.559752][T15437] do_one_initcall+0x128/0x700 [ 1051.565010][T15437] kernel_init_freeable+0x5c7/0x900 [ 1051.570704][T15437] kernel_init+0x1c/0x2b0 [ 1051.575536][T15437] ret_from_fork+0x45/0x80 [ 1051.580444][T15437] ret_from_fork_asm+0x1a/0x30 [ 1051.585701][T15437] [ 1051.585701][T15437] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 1051.593223][T15437] __lock_acquire+0x249e/0x3c40 [ 1051.598565][T15437] lock_acquire.part.0+0x11b/0x380 [ 1051.604166][T15437] __mutex_lock+0x19b/0xa60 [ 1051.609164][T15437] blk_register_queue+0x132/0x4f0 [ 1051.614680][T15437] add_disk_fwnode+0x785/0x1300 [ 1051.620020][T15437] md_alloc+0x3c2/0x1080 [ 1051.624753][T15437] md_probe+0x6e/0xd0 [ 1051.629224][T15437] blk_request_module+0x115/0x1e0 [ 1051.634751][T15437] blkdev_get_no_open+0x7a/0xe0 [ 1051.640099][T15437] blkdev_open+0x13c/0x400 [ 1051.645006][T15437] do_dentry_open+0xf59/0x1ea0 [ 1051.650262][T15437] vfs_open+0x82/0x3f0 [ 1051.654825][T15437] path_openat+0x1e6a/0x2d60 [ 1051.659902][T15437] do_filp_open+0x20c/0x470 [ 1051.664895][T15437] do_sys_openat2+0x17a/0x1e0 [ 1051.670066][T15437] __x64_sys_openat+0x175/0x210 [ 1051.675588][T15437] do_syscall_64+0xcd/0x250 [ 1051.680583][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.686982][T15437] [ 1051.686982][T15437] other info that might help us debug this: [ 1051.686982][T15437] [ 1051.697179][T15437] Chain exists of: [ 1051.697179][T15437] &q->sysfs_lock --> &q->q_usage_counter(io)#56 --> &q->sysfs_dir_lock [ 1051.697179][T15437] [ 1051.711328][T15437] Possible unsafe locking scenario: [ 1051.711328][T15437] [ 1051.718752][T15437] CPU0 CPU1 [ 1051.724101][T15437] ---- ---- [ 1051.729434][T15437] lock(&q->sysfs_dir_lock); [ 1051.734105][T15437] lock(&q->q_usage_counter(io)#56); [ 1051.741973][T15437] lock(&q->sysfs_dir_lock); [ 1051.749160][T15437] lock(&q->sysfs_lock); [ 1051.753470][T15437] [ 1051.753470][T15437] *** DEADLOCK *** [ 1051.753470][T15437] [ 1051.761585][T15437] 3 locks held by syz.7.2371/15437: [ 1051.766744][T15437] #0: ffffffff8ecc0d88 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x29/0x1e0 [ 1051.776625][T15437] #1: ffffffff8fa43a88 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x1080 [ 1051.785289][T15437] #2: ffff8880286dde70 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 1051.795340][T15437] [ 1051.795340][T15437] stack backtrace: [ 1051.801195][T15437] CPU: 0 UID: 0 PID: 15437 Comm: syz.7.2371 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 1051.811922][T15437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1051.821948][T15437] Call Trace: [ 1051.825200][T15437] [ 1051.828103][T15437] dump_stack_lvl+0x116/0x1f0 [ 1051.832757][T15437] print_circular_bug+0x419/0x5d0 [ 1051.837762][T15437] check_noncircular+0x31a/0x400 [ 1051.842677][T15437] ? __pfx_check_noncircular+0x10/0x10 [ 1051.848104][T15437] ? lock_acquire+0x2f/0xb0 [ 1051.852578][T15437] ? lockdep_lock+0x1b8/0x200 [ 1051.857230][T15437] ? __pfx_lockdep_lock+0x10/0x10 [ 1051.862226][T15437] __lock_acquire+0x249e/0x3c40 [ 1051.867046][T15437] ? __pfx___lock_acquire+0x10/0x10 [ 1051.872220][T15437] ? sysfs_add_file_mode_ns+0x227/0x3b0 [ 1051.877749][T15437] lock_acquire.part.0+0x11b/0x380 [ 1051.882829][T15437] ? blk_register_queue+0x132/0x4f0 [ 1051.888006][T15437] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1051.893609][T15437] ? rcu_is_watching+0x12/0xc0 [ 1051.898346][T15437] ? trace_lock_acquire+0x14e/0x1f0 [ 1051.903533][T15437] ? blk_register_queue+0x132/0x4f0 [ 1051.908704][T15437] ? lock_acquire+0x2f/0xb0 [ 1051.913185][T15437] ? blk_register_queue+0x132/0x4f0 [ 1051.918367][T15437] __mutex_lock+0x19b/0xa60 [ 1051.922857][T15437] ? blk_register_queue+0x132/0x4f0 [ 1051.928046][T15437] ? kobject_add_internal+0x54e/0x990 [ 1051.933464][T15437] ? blk_register_queue+0x132/0x4f0 [ 1051.938661][T15437] ? __pfx___mutex_lock+0x10/0x10 [ 1051.943671][T15437] ? kobject_add+0x17c/0x240 [ 1051.948241][T15437] ? blk_register_queue+0x132/0x4f0 [ 1051.953417][T15437] blk_register_queue+0x132/0x4f0 [ 1051.958425][T15437] add_disk_fwnode+0x785/0x1300 [ 1051.963249][T15437] md_alloc+0x3c2/0x1080 [ 1051.967463][T15437] ? match_exception_partial+0x239/0x2d0 [ 1051.973081][T15437] md_probe+0x6e/0xd0 [ 1051.977035][T15437] ? __pfx_md_probe+0x10/0x10 [ 1051.981684][T15437] blk_request_module+0x115/0x1e0 [ 1051.986683][T15437] blkdev_get_no_open+0x7a/0xe0 [ 1051.991506][T15437] blkdev_open+0x13c/0x400 [ 1051.995899][T15437] do_dentry_open+0xf59/0x1ea0 [ 1052.000635][T15437] ? __pfx_blkdev_open+0x10/0x10 [ 1052.005545][T15437] ? inode_permission+0xdd/0x5f0 [ 1052.010459][T15437] vfs_open+0x82/0x3f0 [ 1052.014504][T15437] ? may_open+0x1f2/0x400 [ 1052.018811][T15437] path_openat+0x1e6a/0x2d60 [ 1052.023375][T15437] ? __pfx_path_openat+0x10/0x10 [ 1052.028294][T15437] ? __pfx___lock_acquire+0x10/0x10 [ 1052.033463][T15437] ? lock_acquire.part.0+0x11b/0x380 [ 1052.038726][T15437] ? find_held_lock+0x2d/0x110 [ 1052.043470][T15437] do_filp_open+0x20c/0x470 [ 1052.047946][T15437] ? __pfx_do_filp_open+0x10/0x10 [ 1052.052937][T15437] ? find_held_lock+0x2d/0x110 [ 1052.057676][T15437] ? alloc_fd+0x41f/0x760 [ 1052.061980][T15437] do_sys_openat2+0x17a/0x1e0 [ 1052.066627][T15437] ? __pfx_do_sys_openat2+0x10/0x10 [ 1052.071810][T15437] __x64_sys_openat+0x175/0x210 [ 1052.076634][T15437] ? __pfx___x64_sys_openat+0x10/0x10 [ 1052.081979][T15437] do_syscall_64+0xcd/0x250 [ 1052.086454][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.092327][T15437] RIP: 0033:0x7ff0b3d85d29 [ 1052.096712][T15437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.116287][T15437] RSP: 002b:00007ff0b4bd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1052.124670][T15437] RAX: ffffffffffffffda RBX: 00007ff0b3f76080 RCX: 00007ff0b3d85d29 [ 1052.132613][T15437] RDX: 0000000000000000 RSI: 0000000020000a80 RDI: ffffffffffffff9c [ 1052.140555][T15437] RBP: 00007ff0b3e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1052.148584][T15437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.156533][T15437] R13: 0000000000000000 R14: 00007ff0b3f76080 R15: 00007ffd0ab2f658 [ 1052.164491][T15437] [ 1052.318348][T15437] block device autoloading is deprecated and will be removed. [ 1052.423953][ T29] audit: type=1400 audit(1736302577.330:1118): avc: denied { append } for pid=15448 comm="syz.9.2375" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1053.244546][T15453] base_sock_release(ffff88805cf12400) sk=ffff8880478f7000 [ 1055.469969][ T5824] Bluetooth: hci4: command 0x0406 tx timeout