last executing test programs: 16.895066158s ago: executing program 0 (id=2918): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001900)=""/94) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="b6", 0x1}], 0x1}}], 0x2, 0x48800) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$UHID_INPUT(r7, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) close(r1) 14.196175099s ago: executing program 0 (id=2922): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x3c1c, 0xc000, 0x3, 0x38}) r4 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0x72d5, 0x8, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00)) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0xd, 0x3, 0x81, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0xe8aa, 0x58, 0x1, 0xfffffffe, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x100003, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000000)='#\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xcc:rC\xb3=\x17\x02/x\x84=\x17\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\x00\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) fsopen(0x0, 0x0) 13.463623107s ago: executing program 1 (id=2924): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000", @ANYBLOB, @ANYRES32], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x25, &(0x7f0000001600)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x14070, r7, 0x218b9000) 13.272959676s ago: executing program 2 (id=2926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x1ff, 0xa8e81) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000180)=""/110, &(0x7f00000002c0)=0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000000)=0x3, 0x40, 0xc) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="a92f342e134b24181a8e39de75e0d82493655c48af4d110e3a40df5c2115bc9ed4b7137ed023729550000000000000000681fe46984a927e1952e6f8dd056271146124b4cf40d81a9f1882b44e21d5693700007d1e38be904a457bd4cfff2ace545f6475ad7f2bfd883bfbabda141a000000000000000000000000000000fa40daa343d05dfe47553b3565ab1d60b8e902d1dda3fb1a17bbb5e5433b535ab1bb6c0b0000250180293f2bab9de0efcd9ad535876bef323b82b2c2"]) 11.872150305s ago: executing program 3 (id=2927): socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000340)={0x80000000, 0x2, 0x0, "640d816f2d7088aecb8c5d2ed7b7728103a87cda8d537858abf95403e26dd96a", 0x50424752}) socket$kcm(0x23, 0x2, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x80, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x2}}}}}}}, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 11.807486566s ago: executing program 4 (id=2928): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 11.77742381s ago: executing program 2 (id=2929): close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911", 0x11, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r3) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r6, 0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = io_uring_setup(0x3717, &(0x7f0000000540)={0x0, 0x1673, 0x80, 0x3, 0x318}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000740)={0x0}, 0x1) 10.38887222s ago: executing program 4 (id=2930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x1d0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_ife={0xd4, 0x1, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}, {0xe4, 0x1, [@m_simple={0xe0, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xf, 0x10000000, 0x7, 0xa0e7}}, @TCA_DEF_DATA={0x7, 0x3, '%^\x00'}]}, {0x94, 0x6, "329ca8633f3b5360a4d4933da92a1c36a4175eeee4859275954bd0f06bd413d171dce1ef5346e316d649818b3bc695624a7f911f6ead8a88a8fd682f76cdee9d8e159d9d50d2c430f0affcf06e4b3c0b2733e5b72c7abf263d02e822e7fc1043fc9e8c624107ff4d39cef67918a1d48a2891ccfb0317df3b82efc8471bc43bb08f6b272926168d6230bf512bea613367"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1d0}}, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="0500f9ffffff000001000f00000008000300", @ANYRES32=r3, @ANYBLOB="49000e00800000000802110000000802110000010802110000000000000000000000000008000b040006020202020202050301b7012a010072060303030303037107ff00010000036000000008000c006400000008000d00000000000800350006000000"], 0x80}, 0x1, 0x0, 0x0, 0x4800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x400008, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="97f09726"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x8a}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2a4}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000040)={0x11009000, 0xc000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, 0x0, 0x0) readv(r7, &(0x7f0000001500)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x11a, 0x23, 0x0, 0x0) ptrace$pokeuser(0x6, r8, 0x8, 0x800000000004) 10.021738836s ago: executing program 1 (id=2931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_fc_replay\x00', r0}, 0x18) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000480)="0f79df0f20c06635040000000f22c00f1c229a5b00c7000f01cb80c7e7360f01c5baf80c66b83a7c658b66efbafc0ced66b9800000c00f326635000100000f300f09"}], 0x1, 0x30, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0xfffdffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000180)='4\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.249369936s ago: executing program 2 (id=2932): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 9.215424103s ago: executing program 4 (id=2933): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001900)=""/94) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="b6", 0x1}], 0x1}}], 0x2, 0x48800) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$UHID_INPUT(r7, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) close(r1) 8.124240748s ago: executing program 4 (id=2934): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0xa0000006}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 7.814316967s ago: executing program 2 (id=2935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_CMD(r3, 0x80406409, &(0x7f0000000040)={0x0, 0x30000, 0x20, 0x5, 0x10, 0xb9, 0x40, 0x100, 0x1, 0x1174, 0x80, 0x4, 0x0, 0x0, 0x0}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = openat$sndtimer(0xffffff9c, 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT=r5], 0x11c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000a00)=""/126, 0x7e, 0x8) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x5802000, 0x2ec83) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) bind$netlink(r6, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000001300)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_b, @random="3dba655e3cb3", {0x3, 0x3}, "", @value={0xb, 0x1, 0x2, 0x1, 0x6}}, @random="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"}, 0x851) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) 7.677108741s ago: executing program 0 (id=2936): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r5, &(0x7f00000000c0)=""/57, 0x39, 0x60, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x38, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) 7.640023582s ago: executing program 1 (id=2937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) fsopen(0x0, 0x0) 6.604913232s ago: executing program 3 (id=2938): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') syz_open_procfs(0x0, &(0x7f0000000300)='net/rt_acct\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1df9b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r6 = fanotify_init(0x0, 0x80000) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r6, 0x1, 0x40001019, r7, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 6.533093923s ago: executing program 1 (id=2939): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000180)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}]}, 0x88}}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r4, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 5.710168085s ago: executing program 3 (id=2940): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4044080) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) set_mempolicy(0x2000, 0x0, 0x4) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r7, 0x0, 0x6000000000000000, 0xd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r7, 0x0, 0x0, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000000040)={0x8, r8}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@getpolicy={0x50, 0x15, 0x400, 0x70bd2b, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x4e20, 0x5, 0x4e23, 0x0, 0x2, 0x20, 0xa0}, 0x6e6bba, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0xc000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_control_io(r0, 0x0, 0x0) 5.112845545s ago: executing program 0 (id=2941): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r7 = memfd_create(0x0, 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x8000}) r9 = fcntl$dupfd(r8, 0x406, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r10, 0x7001) 4.956297234s ago: executing program 2 (id=2942): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) gettid() r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 4.085458276s ago: executing program 0 (id=2943): close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911", 0x11, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r3) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r6, 0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = io_uring_setup(0x3717, &(0x7f0000000540)={0x0, 0x1673, 0x80, 0x3, 0x318}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000740)={0x0}, 0x1) 4.085012576s ago: executing program 4 (id=2944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x1ff, 0xa8e81) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000180)=""/110, &(0x7f00000002c0)=0x6e) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xe0b1}) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000000)=0x3, 0x40, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="a92f342e134b24181a8e39de75e0d82493655c48af4d110e3a40df5c2115bc9ed4b7137ed023729550000000000000000681fe46984a927e1952e6f8dd056271146124b4cf40d81a9f1882b44e21d5693700007d1e38be904a457bd4cfff2ace545f6475ad7f2bfd883bfbabda141a000000000000000000000000000000fa40daa343d05dfe47553b3565ab1d60b8e902d1dda3fb1a17bbb5e5433b535ab1bb6c0b0000250180293f2bab9de0efcd9ad535876bef323b82b2c2"]) 3.919816951s ago: executing program 1 (id=2945): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 2.852232186s ago: executing program 1 (id=2946): preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getdents(r1, &(0x7f0000000040)=""/227, 0xe3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x2}, 0x50) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xa1a, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x2000, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, 0x0, 0x0) 1.847472386s ago: executing program 3 (id=2947): r0 = syz_io_uring_setup(0x4d71, &(0x7f00000001c0)={0x0, 0xc20e, 0x400, 0x2, 0xbfd00000}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@local, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) sendfile(r4, r4, 0x0, 0x40008) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x0) r6 = dup(r5) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x7, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x4, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) bind$unix(0xffffffffffffffff, 0x0, 0x0) 1.051047089s ago: executing program 3 (id=2948): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x1, {0x2, @pix={0x204, 0x8, 0x71070474, 0x3, 0x20829, 0x4, 0x4, 0x6, 0x1, 0x0, 0x1, 0x3}}}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x2c004) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r7}) socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}}]}, 0x88}}, 0x20000000) syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 1.023068334s ago: executing program 0 (id=2949): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002880)={{0x0, 0x5, 0x2a3ab49a, 0xfffffffffffffffe, 0x8, 0x4, 0x6, 0x200, 0x4, 0x1c2d, 0x8000, 0xffffffffffff6649, 0x8, 0x9, 0x6}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000083c0)={r1, r2, "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", "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"}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x1069f483, 0x4af2, 0x5fff, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0xffffffffffffffff, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$pid(0x2, 0x0, 0x6000) chmod(&(0x7f0000000180)='./file0\x00', 0x3) r5 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x64581, 0xd5) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r5, r3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) 715.079879ms ago: executing program 2 (id=2950): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18) sysinfo(&(0x7f0000000000)=""/35) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x0, 0x3) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) setresgid(0xee00, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) pread64(0xffffffffffffffff, &(0x7f0000001b80)=""/4084, 0xff4, 0x140dbc8d) listen(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(0xffffffffffffffff, 0x802) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4040814) r4 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4048850) connect$inet6(r4, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2951): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x300}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xfffffd63, &(0x7f00000002c0)={0x0, 0x41, 0x0, &(0x7f00000003c0)=""/166, 0xab}}, 0x10) r4 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x250}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xc7, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) io_uring_enter(r4, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xc}, {0x2, 0x0, 0x0, 0x4}, {0x0, 0x4, 0xb0009}], 0x10, 0xfffffff6}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) kernel console output (not intermixed with test programs): omm="syz.4.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1104.259380][T16882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16882 comm=syz.4.2265 [ 1105.162465][ T9] usb 2-1: Direct firmware load for ti_3410.fw failed with error -2 [ 1105.220214][ T9] usb 2-1: Falling back to sysfs fallback for: ti_3410.fw [ 1105.943221][ T30] audit: type=1400 audit(1757369968.432:1710): avc: denied { nosuid_transition } for pid=16889 comm="syz.2.2273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 1106.330190][ T30] audit: type=1400 audit(1757369968.432:1711): avc: denied { transition } for pid=16889 comm="syz.2.2273" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 1106.487374][ T30] audit: type=1400 audit(1757369968.432:1712): avc: denied { entrypoint } for pid=16889 comm="syz.2.2273" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=484 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1106.541809][ T30] audit: type=1400 audit(1757369968.432:1713): avc: denied { noatsecure } for pid=16889 comm="syz.2.2273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 1106.788511][T16901] overlayfs: failed to resolve './file0': -2 [ 1106.950396][T16902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1108.423370][ T30] audit: type=1400 audit(1757369970.682:1714): avc: denied { map } for pid=16900 comm="syz.3.2276" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1108.460359][ T30] audit: type=1400 audit(1757369970.682:1715): avc: denied { execute } for pid=16900 comm="syz.3.2276" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1108.825621][T16922] lo: left promiscuous mode [ 1108.831538][T16922] lo: left allmulticast mode [ 1108.838463][T16922] tunl0: left promiscuous mode [ 1108.844455][T16922] tunl0: left allmulticast mode [ 1108.852461][T16922] gre0: left promiscuous mode [ 1108.857167][T16922] gre0: left allmulticast mode [ 1108.865363][T16922] 0ªî{X¹¦: left allmulticast mode [ 1108.873211][T16922] erspan0: left promiscuous mode [ 1108.878221][T16922] erspan0: left allmulticast mode [ 1108.886196][T16922] ip_vti0: left promiscuous mode [ 1108.892339][T16922] ip_vti0: left allmulticast mode [ 1108.900558][T16922] ip6_vti0: left promiscuous mode [ 1108.905629][T16922] ip6_vti0: left allmulticast mode [ 1108.913831][T16922] sit0: left promiscuous mode [ 1108.918537][T16922] sit0: left allmulticast mode [ 1108.961090][T16922] ip6tnl0: left promiscuous mode [ 1108.966076][T16922] ip6tnl0: left allmulticast mode [ 1108.973592][T16922] ip6gre0: left promiscuous mode [ 1108.978559][T16922] ip6gre0: left allmulticast mode [ 1108.985945][T16922] syz_tun: left promiscuous mode [ 1108.991189][T16922] syz_tun: left allmulticast mode [ 1108.997987][T16922] ip6gretap0: left promiscuous mode [ 1109.003854][T16922] ip6gretap0: left allmulticast mode [ 1109.011254][T16922] bridge0: left promiscuous mode [ 1109.016277][T16922] bridge0: left allmulticast mode [ 1109.022925][T16922] vcan0: left promiscuous mode [ 1109.027687][T16922] vcan0: left allmulticast mode [ 1109.033886][T16922] team0: left promiscuous mode [ 1109.038672][T16922] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1109.046260][T16922] team0: left allmulticast mode [ 1109.051783][T16922] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 1109.058843][T16922] tipc: Resetting bearer [ 1109.065552][T16922] tipc: Resetting bearer [ 1109.072028][T16922] dummy0: left promiscuous mode [ 1109.076870][T16922] dummy0: left allmulticast mode [ 1109.082819][T16922] nlmon0: left promiscuous mode [ 1109.087658][T16922] nlmon0: left allmulticast mode [ 1109.104771][T16922] caif0: left promiscuous mode [ 1109.110680][T16922] caif0: left allmulticast mode [ 1109.115525][T16922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1110.489309][T16939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1112.571113][T16954] overlayfs: failed to clone lowerpath [ 1112.822357][T16956] overlayfs: failed to clone upperpath [ 1113.548015][T16964] lo speed is unknown, defaulting to 1000 [ 1113.554942][T16964] lo speed is unknown, defaulting to 1000 [ 1114.280662][T16973] binder: 16972:16973 ioctl c0306201 0 returned -14 [ 1114.749604][T16976] binder: 16972:16976 ioctl c0306201 0 returned -14 [ 1115.119342][ T30] audit: type=1400 audit(1757369977.602:1716): avc: denied { open } for pid=16972 comm="syz.2.2290" path="/dev/ttyq8" dev="devtmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1115.142996][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.392274][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.398647][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.855344][T16988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1116.212019][ T30] audit: type=1400 audit(1757369978.662:1717): avc: denied { bind } for pid=16984 comm="syz.1.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1116.814886][T17000] input: syz0 as /devices/virtual/input/input16 [ 1117.459635][T17006] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1119.099211][T17027] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2301'. [ 1119.108766][T17027] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1119.291733][T17027] 0ªî{X¹¦: entered allmulticast mode [ 1119.420217][T17027] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1120.613315][T17044] loop2: detected capacity change from 0 to 7 [ 1120.630497][T17044] loop2: p1 p4 [ 1120.634768][T17044] loop2: partition table partially beyond EOD, truncated [ 1120.647543][T17044] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1121.020651][T17044] loop2: p4 start 2495 is beyond EOD, truncated [ 1121.825425][T17051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1122.376137][T17058] rdma_rxe: rxe_newlink: failed to add lo [ 1122.625379][T17066] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2307'. [ 1123.227283][T17073] 0ªî{X¹¦: left allmulticast mode [ 1123.640032][T17073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1124.879310][ T30] audit: type=1400 audit(1757369987.242:1718): avc: denied { read } for pid=17081 comm="syz.2.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1125.649552][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 1126.125479][ T30] audit: type=1400 audit(1757369988.612:1719): avc: denied { connect } for pid=17101 comm="syz.1.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1126.964589][ T30] audit: type=1400 audit(1757369988.612:1720): avc: denied { write } for pid=17101 comm="syz.1.2317" laddr=172.20.20.10 lport=3 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1128.036629][T17120] rdma_rxe: rxe_newlink: failed to add lo [ 1128.283049][T17128] sz1: rxe_newlink: already configured on lo [ 1128.439186][T17130] befs: (nullb0): No write support. Marking filesystem read-only [ 1128.449949][T17130] befs: (nullb0): invalid magic header [ 1128.478674][ T30] audit: type=1400 audit(1757369990.922:1721): avc: denied { mounton } for pid=17125 comm="syz.1.2323" path="/442/bus" dev="tmpfs" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1128.479898][T17130] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1129.549367][T11349] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1130.157950][ T30] audit: type=1400 audit(1757369992.612:1722): avc: denied { setopt } for pid=17143 comm="syz.2.2328" lport=52240 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1130.343992][ T30] audit: type=1400 audit(1757369992.612:1723): avc: denied { write } for pid=17143 comm="syz.2.2328" lport=52240 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1130.426052][T11349] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1130.433130][T17154] tipc: Resetting bearer [ 1130.598200][T11349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.949966][T17154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1131.077033][T11349] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1131.225514][T11349] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1131.246507][T11349] usb 4-1: Manufacturer: syz [ 1131.324264][T11349] usb 4-1: config 0 descriptor?? [ 1131.499136][T11349] rc_core: IR keymap rc-hauppauge not found [ 1131.505104][T11349] Registered IR keymap rc-empty [ 1131.518220][T17173] 9pnet_fd: Insufficient options for proto=fd [ 1131.529550][T11349] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1131.558863][T11349] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 1133.133981][ T5897] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1133.292006][T11349] usb 4-1: USB disconnect, device number 37 [ 1133.420252][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 1133.432063][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.460304][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.481239][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1133.500776][ T5897] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1133.520260][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.530979][ T5897] usb 3-1: config 0 descriptor?? [ 1133.942011][T17188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.950910][T17188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.404799][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 1134.414196][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1134.523597][ T5897] usb 3-1: USB disconnect, device number 16 [ 1135.625204][T17196] tipc: Resetting bearer [ 1135.873450][ T30] audit: type=1400 audit(1757369998.362:1724): avc: denied { connect } for pid=17220 comm="syz.0.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1136.408186][T17196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.453013][T17196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.458919][T17223] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 1137.539609][T17252] hugetlbfs: syz.1.2343 (17252): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1137.856833][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.891590][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.934633][T17229] lo speed is unknown, defaulting to 1000 [ 1137.943399][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.943439][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.964761][T17229] lo speed is unknown, defaulting to 1000 [ 1138.232474][T17261] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1140.669822][T17283] lo speed is unknown, defaulting to 1000 [ 1140.675923][T17283] lo speed is unknown, defaulting to 1000 [ 1140.687221][T17283] lo speed is unknown, defaulting to 1000 [ 1140.734168][T17283] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1140.874157][T17283] lo speed is unknown, defaulting to 1000 [ 1140.889465][T17283] lo speed is unknown, defaulting to 1000 [ 1140.899887][T17283] lo speed is unknown, defaulting to 1000 [ 1140.910000][T17283] lo speed is unknown, defaulting to 1000 [ 1140.919945][T17283] lo speed is unknown, defaulting to 1000 [ 1142.259398][T17232] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1142.722040][T17304] Invalid ELF header magic: != ELF [ 1142.732316][ T30] audit: type=1400 audit(1757370005.212:1725): avc: denied { module_load } for pid=17296 comm="syz.1.2354" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1142.833608][T17232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1143.168540][T17307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2357'. [ 1143.197383][T17232] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1143.210963][ T30] audit: type=1400 audit(1757370005.692:1726): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1143.214008][T17232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.334754][T17232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.374745][T17295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1143.578879][T17311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.586645][T17311] tipc: Resetting bearer [ 1143.593030][T17311] tipc: Resetting bearer [ 1143.616492][T17311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1143.637468][T17232] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1145.029247][T17324] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1145.543616][T17244] usb 3-1: USB disconnect, device number 17 [ 1146.741724][T17340] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2363'. [ 1147.079992][T17344] rdma_rxe: rxe_newlink: failed to add lo [ 1147.482576][T17349] tipc: Resetting bearer [ 1147.489629][T17349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1149.447817][T17361] tipc: Resetting bearer [ 1149.484475][T17361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1152.022013][ T30] audit: type=1400 audit(1757370014.502:1727): avc: denied { read } for pid=17381 comm="syz.0.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1152.724402][T17398] tipc: Resetting bearer [ 1152.751942][T17398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1153.111936][T17407] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1156.173524][T17446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1156.261170][T17454] sz1: rxe_newlink: already configured on lo [ 1156.440810][T17457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2387'. [ 1157.661433][T17457] sctp: [Deprecated]: syz.2.2387 (pid 17457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1157.661433][T17457] Use struct sctp_sack_info instead [ 1157.690199][ T30] audit: type=1400 audit(1757370020.152:1728): avc: denied { getopt } for pid=17456 comm="syz.2.2387" lport=40562 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1160.134578][T17504] tipc: Resetting bearer [ 1160.259356][T17504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1161.773946][ T30] audit: type=1326 audit(1757370024.222:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17520 comm="syz.3.2396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28d518ebe9 code=0x0 [ 1163.000762][ T30] audit: type=1400 audit(1757370025.492:1730): avc: denied { read } for pid=17527 comm="syz.1.2398" path="socket:[46500]" dev="sockfs" ino=46500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1163.342273][ T30] audit: type=1326 audit(1757370025.772:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17524 comm="syz.3.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1163.430409][ T30] audit: type=1326 audit(1757370025.772:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17524 comm="syz.3.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1163.939744][T17553] netlink: 'syz.2.2402': attribute type 142 has an invalid length. [ 1164.108680][T17553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2402'. [ 1164.140302][T17554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1164.157152][T17247] lo speed is unknown, defaulting to 1000 [ 1164.715279][T17565] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1164.836176][T17570] ieee802154 phy0 wpan0: encryption failed: -22 [ 1164.854417][T17565] bridge2: entered allmulticast mode [ 1165.052420][T17572] tipc: Resetting bearer [ 1165.078475][T17572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1167.132902][ T9] usb 2-1: ti_download_firmware - firmware not found [ 1167.156395][ T9] ti_usb_3410_5052 2-1:0.0: probe with driver ti_usb_3410_5052 failed with error -2 [ 1167.533363][ T9] usb 2-1: USB disconnect, device number 20 [ 1167.718464][T17596] futex_wake_op: syz.0.2409 tries to shift op by 32; fix this program [ 1171.097507][ T30] audit: type=1400 audit(1757370033.582:1733): avc: denied { associate } for pid=17632 comm="syz.1.2431" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1171.971175][T17649] tipc: Resetting bearer [ 1172.076982][T17637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1172.268387][T17649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1172.624785][T17650] geneve2: entered promiscuous mode [ 1173.066810][T17660] lo speed is unknown, defaulting to 1000 [ 1173.075189][T17660] lo speed is unknown, defaulting to 1000 [ 1173.163503][T17660] lo speed is unknown, defaulting to 1000 [ 1173.478293][T17628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1174.643712][ T30] audit: type=1400 audit(1757370037.122:1734): avc: denied { map } for pid=17681 comm="syz.2.2429" path="socket:[46789]" dev="sockfs" ino=46789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1174.779158][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1175.301696][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1175.371039][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.404394][ T9] usb 2-1: Product: syz [ 1175.416454][ T9] usb 2-1: Manufacturer: syz [ 1175.436523][ T9] usb 2-1: SerialNumber: syz [ 1175.467779][ T9] usb 2-1: config 0 descriptor?? [ 1175.694922][T17690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 1175.704122][T17690] netlink: 'syz.3.2430': attribute type 14 has an invalid length. [ 1175.730931][T17690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 1175.740027][T17690] netlink: 'syz.3.2430': attribute type 14 has an invalid length. [ 1175.810348][ T6227] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.063186][ T6227] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.112805][ T6227] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.122054][ T6227] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.682390][T17700] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.727895][ T9] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1176.853463][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.859905][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.354484][T17718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2437'. [ 1179.053674][ T9] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1179.070897][ T9] usb 2-1: USB disconnect, device number 21 [ 1180.674521][T17739] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1181.311615][T17749] overlayfs: failed to clone upperpath [ 1182.219566][T17761] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2444'. [ 1184.715918][T17779] rdma_rxe: rxe_newlink: failed to add lo [ 1185.423858][T17784] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2451'. [ 1185.720752][ T30] audit: type=1326 audit(1757370048.162:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1185.865313][ T30] audit: type=1326 audit(1757370048.162:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1185.889854][ T30] audit: type=1326 audit(1757370048.162:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1185.920455][ T30] audit: type=1326 audit(1757370048.162:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1186.043700][T17796] input: syz0 as /devices/virtual/input/input18 [ 1186.335779][ T30] audit: type=1326 audit(1757370048.172:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1186.393339][ T30] audit: type=1326 audit(1757370048.172:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1186.424444][ T30] audit: type=1326 audit(1757370048.172:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1186.722131][ T30] audit: type=1326 audit(1757370048.172:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1186.745979][ T30] audit: type=1326 audit(1757370048.172:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1187.373709][ T30] audit: type=1326 audit(1757370048.172:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f784298ebe9 code=0x7ffc0000 [ 1188.938836][T17822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1189.204513][T17832] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1189.974140][T17836] tipc: Resetting bearer [ 1190.132220][T17836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1190.163949][T17837] lo speed is unknown, defaulting to 1000 [ 1190.170615][T17837] lo speed is unknown, defaulting to 1000 [ 1190.255023][T17837] lo speed is unknown, defaulting to 1000 [ 1190.753563][T17843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1191.052890][T17848] rdma_rxe: rxe_newlink: failed to add lo [ 1192.441590][T17871] sz1: rxe_newlink: already configured on lo [ 1194.089261][T17883] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2470'. [ 1194.109301][T17883] netlink: 'syz.3.2470': attribute type 32 has an invalid length. [ 1194.555062][T17885] overlayfs: failed to clone upperpath [ 1194.704306][T17884] lo speed is unknown, defaulting to 1000 [ 1195.651373][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 1195.741986][T17884] lo speed is unknown, defaulting to 1000 [ 1195.762874][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 1197.078616][T17922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1197.184629][T17924] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2477'. [ 1197.396773][T17884] lo speed is unknown, defaulting to 1000 [ 1198.325719][T17938] rdma_rxe: rxe_newlink: failed to add lo [ 1199.469363][T17949] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1200.541431][T17960] binder: 17954:17960 ioctl c0306201 0 returned -14 [ 1201.401908][T17969] rdma_rxe: rxe_newlink: failed to add lo [ 1201.984010][T17232] libceph: connect (1)[c::]:6789 error -101 [ 1202.011268][T17232] libceph: mon0 (1)[c::]:6789 connect error [ 1202.040561][T17971] ceph: No mds server is up or the cluster is laggy [ 1202.071882][T17232] libceph: connect (1)[b::]:6789 error -101 [ 1202.080089][T17232] libceph: mon0 (1)[b::]:6789 connect error [ 1202.087595][T17975] ceph: No mds server is up or the cluster is laggy [ 1202.099703][T17232] libceph: connect (1)[b::]:6789 error -101 [ 1202.120101][T17232] libceph: mon0 (1)[b::]:6789 connect error [ 1202.279551][T17232] libceph: connect (1)[c::]:6789 error -101 [ 1202.288933][T17232] libceph: mon0 (1)[c::]:6789 connect error [ 1202.554036][T17232] libceph: connect (1)[b::]:6789 error -101 [ 1202.575075][T17232] libceph: mon0 (1)[b::]:6789 connect error [ 1203.629851][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1203.629866][ T30] audit: type=1326 audit(1757370066.102:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1203.808576][ T30] audit: type=1326 audit(1757370066.102:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1203.918446][ T30] audit: type=1326 audit(1757370066.112:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1203.981055][ T30] audit: type=1326 audit(1757370066.112:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1204.011933][ T30] audit: type=1326 audit(1757370066.112:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1204.041595][ T30] audit: type=1326 audit(1757370066.112:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1204.386613][T18003] No source specified [ 1204.431603][T18003] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1204.714238][ T30] audit: type=1326 audit(1757370066.112:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1204.737980][ T30] audit: type=1326 audit(1757370066.112:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1204.761647][ T30] audit: type=1326 audit(1757370066.112:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1204.807365][ T30] audit: type=1326 audit(1757370066.112:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f28d518ebe9 code=0x7ffc0000 [ 1204.944347][T18007] overlayfs: failed to clone upperpath [ 1206.168434][T18017] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1206.875224][T18024] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1206.884799][T18024] CPU: 1 UID: 0 PID: 18024 Comm: syz.2.2496 Not tainted syzkaller #0 PREEMPT(full) [ 1206.884824][T18024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1206.884836][T18024] Call Trace: [ 1206.884842][T18024] [ 1206.884848][T18024] dump_stack_lvl+0x16c/0x1f0 [ 1206.884877][T18024] sysfs_warn_dup+0x7f/0xa0 [ 1206.884901][T18024] sysfs_do_create_link_sd+0x124/0x140 [ 1206.884928][T18024] sysfs_create_link+0x61/0xc0 [ 1206.884953][T18024] device_add+0x62c/0x1aa0 [ 1206.884983][T18024] ? __pfx_device_add+0x10/0x10 [ 1206.885008][T18024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1206.885032][T18024] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1206.885061][T18024] wiphy_register+0x1df4/0x29f0 [ 1206.885083][T18024] ? netdev_run_todo+0x864/0x1320 [ 1206.885108][T18024] ? __dev_printk+0x1f0/0x270 [ 1206.885140][T18024] ? __pfx_wiphy_register+0x10/0x10 [ 1206.885174][T18024] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1206.885202][T18024] ieee80211_register_hw+0x2546/0x4120 [ 1206.885237][T18024] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1206.885270][T18024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1206.885292][T18024] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1206.885316][T18024] ? __hrtimer_setup+0x176/0x280 [ 1206.885339][T18024] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1206.885381][T18024] ? trace_kmalloc+0x2b/0xd0 [ 1206.885403][T18024] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1206.885424][T18024] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1206.885450][T18024] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1206.885478][T18024] ? __asan_memcpy+0x3c/0x60 [ 1206.885508][T18024] hwsim_new_radio_nl+0xb51/0x12c0 [ 1206.885539][T18024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1206.885576][T18024] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1206.885605][T18024] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1206.885640][T18024] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1206.885670][T18024] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1206.885706][T18024] ? bpf_lsm_capable+0x9/0x10 [ 1206.885732][T18024] ? security_capable+0x7e/0x260 [ 1206.885755][T18024] ? ns_capable+0xd7/0x110 [ 1206.885779][T18024] genl_rcv_msg+0x55c/0x800 [ 1206.885809][T18024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1206.885837][T18024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1206.885875][T18024] netlink_rcv_skb+0x155/0x420 [ 1206.885900][T18024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1206.885930][T18024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1206.885971][T18024] genl_rcv+0x28/0x40 [ 1206.885994][T18024] netlink_unicast+0x5aa/0x870 [ 1206.886018][T18024] ? __pfx_netlink_unicast+0x10/0x10 [ 1206.886036][T18024] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1206.886060][T18024] netlink_sendmsg+0x8d1/0xdd0 [ 1206.886081][T18024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.886108][T18024] ____sys_sendmsg+0xa98/0xc70 [ 1206.886136][T18024] ? copy_msghdr_from_user+0x10a/0x160 [ 1206.886153][T18024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.886186][T18024] ___sys_sendmsg+0x134/0x1d0 [ 1206.886205][T18024] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.886252][T18024] __sys_sendmsg+0x16d/0x220 [ 1206.886272][T18024] ? __pfx___sys_sendmsg+0x10/0x10 [ 1206.886290][T18024] ? __x64_sys_futex+0x1e0/0x4c0 [ 1206.886328][T18024] do_syscall_64+0xcd/0x4c0 [ 1206.886348][T18024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.886361][T18024] RIP: 0033:0x7f7c4218ebe9 [ 1206.886373][T18024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.886387][T18024] RSP: 002b:00007f7c403b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.886400][T18024] RAX: ffffffffffffffda RBX: 00007f7c423c6180 RCX: 00007f7c4218ebe9 [ 1206.886409][T18024] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 1206.886417][T18024] RBP: 00007f7c42211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1206.886424][T18024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.886432][T18024] R13: 00007f7c423c6218 R14: 00007f7c423c6180 R15: 00007ffda5845908 [ 1206.886451][T18024] [ 1207.560304][T18029] loop7: detected capacity change from 0 to 3 [ 1207.858036][T16277] Dev loop7: unable to read RDB block 3 [ 1207.863921][T16277] loop7: unable to read partition table [ 1207.879755][T16277] loop7: partition table beyond EOD, truncated [ 1207.957007][T18029] Dev loop7: unable to read RDB block 3 [ 1208.108961][T18029] loop7: unable to read partition table [ 1208.215310][T18029] loop7: partition table beyond EOD, truncated [ 1209.217066][T18029] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 1210.712682][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1210.712714][ T30] audit: type=1326 audit(1757370072.932:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18046 comm="syz.1.2500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f784298ebe9 code=0x0 [ 1211.341097][ T30] audit: type=1400 audit(1757370073.592:1810): avc: denied { bind } for pid=18055 comm="syz.3.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1214.164871][T18085] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1216.735374][T18101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1216.741975][T18101] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1216.767387][T18101] vhci_hcd vhci_hcd.0: Device attached [ 1216.780879][T18102] vhci_hcd: connection closed [ 1216.863021][ T7077] vhci_hcd: stop threads [ 1216.915416][ T7077] vhci_hcd: release socket [ 1217.006143][T17244] vhci_hcd: vhci_device speed not set [ 1217.060888][ T7077] vhci_hcd: disconnect device [ 1217.080763][T17244] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 1217.616968][T18116] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 1217.624827][T18116] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2516'. [ 1219.524691][T18130] block nbd2: Send control failed (result -22) [ 1219.528531][ T30] audit: type=1400 audit(1757370082.012:1811): avc: denied { write } for pid=18124 comm="syz.2.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1219.551856][T18130] block nbd2: Request send failed, requeueing [ 1219.905108][T17197] block nbd2: Dead connection, failed to find a fallback [ 1219.913990][T17197] block nbd2: shutting down sockets [ 1219.921017][T17197] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1220.177453][T18149] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1222.206496][T17244] vhci_hcd: vhci_device speed not set [ 1222.240617][T18169] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2528'. [ 1223.025532][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2531'. [ 1223.123132][T18183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2531'. [ 1223.563664][T18190] netlink: 'syz.4.2532': attribute type 9 has an invalid length. [ 1227.568578][T18223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1227.587104][T18224] rdma_rxe: rxe_newlink: failed to add lo [ 1227.993797][T18231] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1229.842976][T18257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'. [ 1229.894493][ T30] audit: type=1400 audit(1757370092.322:1812): avc: denied { getopt } for pid=18251 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1230.133965][ T30] audit: type=1400 audit(1757370092.342:1813): avc: denied { setopt } for pid=18251 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1230.389958][T18263] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1231.764227][T18271] lo speed is unknown, defaulting to 1000 [ 1231.781475][T18271] lo speed is unknown, defaulting to 1000 [ 1232.054605][T18271] lo speed is unknown, defaulting to 1000 [ 1232.266181][ T30] audit: type=1400 audit(1757370094.742:1814): avc: denied { ioctl } for pid=18265 comm="syz.3.2547" path="socket:[49605]" dev="sockfs" ino=49605 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1232.659517][ T9] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 1232.911999][ T9] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 1233.081971][ T9] usb 4-1: config 0 has no interface number 0 [ 1233.088086][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 1233.199063][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.230048][ T9] usb 4-1: config 0 descriptor?? [ 1233.307665][ T9] usb 4-1: selecting invalid altsetting 3 [ 1233.479059][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 1233.713249][ T30] audit: type=1400 audit(1757370096.182:1815): avc: denied { read } for pid=18280 comm="syz.2.2550" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1233.860695][ T9] usbdux 4-1:0.207: driver 'usbdux' failed to auto-configure device. [ 1233.910137][ T30] audit: type=1400 audit(1757370096.182:1816): avc: denied { open } for pid=18280 comm="syz.2.2550" path="/487/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1233.937649][ T9] usbdux 4-1:0.207: probe with driver usbdux failed with error -22 [ 1234.045485][ T9] usb 4-1: USB disconnect, device number 38 [ 1234.245452][T17244] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1234.255632][ T30] audit: type=1400 audit(1757370096.192:1817): avc: denied { ioctl } for pid=18280 comm="syz.2.2550" path="/487/file0/file0" dev="fuse" ino=3 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1234.347242][T18293] netlink: 'syz.1.2552': attribute type 2 has an invalid length. [ 1234.831254][T17244] usb 3-1: Using ep0 maxpacket: 16 [ 1234.837698][T17244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.513193][T17244] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1235.555179][T17244] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1235.567503][T17244] usb 3-1: Manufacturer: syz [ 1235.784491][T18302] rdma_rxe: rxe_newlink: failed to add lo [ 1236.234612][T17244] usb 3-1: config 0 descriptor?? [ 1236.521664][ T9] usb 3-1: USB disconnect, device number 18 [ 1236.628979][T18312] tipc: Resetting bearer [ 1237.088021][T18312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1237.544333][T18320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1238.274888][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.351347][T18334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1238.365022][T18334] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1238.374424][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1238.383885][T18334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1238.563238][T18334] syz.3.2560 (18334): drop_caches: 2 [ 1238.769135][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1238.984316][ T9] usb 3-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 1238.994925][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 1239.222016][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1239.251953][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.262306][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.285101][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1239.296760][ T9] usb 3-1: invalid MIDI out EP 0 [ 1239.458850][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1239.545597][ T9] usb 3-1: USB disconnect, device number 19 [ 1239.564713][T18331] delete_channel: no stack [ 1239.986564][T16501] udevd[16501]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.661046][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1240.668094][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1241.079351][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1241.085403][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1241.533342][T18353] ceph: No mds server is up or the cluster is laggy [ 1241.609331][T17232] libceph: connect (1)[c::]:6789 error -101 [ 1241.615403][T17232] libceph: mon0 (1)[c::]:6789 connect error [ 1241.904581][T18373] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2569'. [ 1243.107710][ T30] audit: type=1400 audit(1757370105.592:1818): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.95 dest=57324 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1243.428630][ T30] audit: type=1400 audit(1757370105.812:1819): avc: denied { execmem } for pid=18385 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1243.589620][T18388] tipc: Resetting bearer [ 1243.864377][T18388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1244.013835][ T30] audit: type=1400 audit(1757370105.882:1820): avc: denied { egress } for pid=54 comm="kworker/u8:3" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1244.193199][ T30] audit: type=1400 audit(1757370105.882:1821): avc: denied { sendto } for pid=54 comm="kworker/u8:3" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1244.216411][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.223544][ T30] audit: type=1400 audit(1757370106.022:1822): avc: denied { map_create } for pid=18385 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1244.260275][ T30] audit: type=1400 audit(1757370106.032:1823): avc: denied { map_read map_write } for pid=18385 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1244.280449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.714211][ T30] audit: type=1400 audit(1757370106.042:1824): avc: denied { prog_load } for pid=18385 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1244.736664][ T30] audit: type=1400 audit(1757370106.042:1825): avc: denied { bpf } for pid=18385 comm="syz.4.2570" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1244.811400][T18398] sz1: rxe_newlink: already configured on lo [ 1245.356614][ T30] audit: type=1400 audit(1757370106.042:1826): avc: denied { perfmon } for pid=18385 comm="syz.4.2570" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1245.385817][T18402] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2573'. [ 1245.551546][ T30] audit: type=1400 audit(1757370106.052:1827): avc: denied { prog_run } for pid=18385 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1246.648658][T18417] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2576'. [ 1247.596706][T18426] Lens A: ================= START STATUS ================= [ 1247.604177][T18426] Lens A: Focus, Absolute: 0 [ 1247.610416][T18426] Lens A: ================== END STATUS ================== [ 1248.163026][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1248.172247][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1248.172256][ T30] audit: type=1400 audit(1757370110.652:1881): avc: denied { name_bind } for pid=18431 comm="syz.4.2581" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1248.394118][ T30] audit: type=1400 audit(1757370110.652:1882): avc: denied { node_bind } for pid=18431 comm="syz.4.2581" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1249.492029][ T30] audit: type=1400 audit(1757370111.982:1883): avc: denied { create } for pid=18442 comm="syz.1.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1249.694479][ T30] audit: type=1400 audit(1757370112.182:1884): avc: denied { create } for pid=18442 comm="syz.1.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1249.763782][ T30] audit: type=1400 audit(1757370112.232:1885): avc: denied { write } for pid=18442 comm="syz.1.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1250.295427][ T30] audit: type=1400 audit(1757370112.772:1886): avc: denied { create } for pid=18427 comm="syz.3.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1250.856732][ T30] audit: type=1400 audit(1757370112.772:1887): avc: denied { write } for pid=18427 comm="syz.3.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1250.879872][ T30] audit: type=1400 audit(1757370112.772:1888): avc: denied { connect } for pid=18427 comm="syz.3.2580" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1250.967110][ T30] audit: type=1400 audit(1757370112.782:1889): avc: denied { create } for pid=18427 comm="syz.3.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1250.991143][ T30] audit: type=1400 audit(1757370112.932:1890): avc: denied { connect } for pid=18453 comm="syz.0.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1252.110741][T18469] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2587'. [ 1253.760891][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1253.762941][ T30] audit: type=1400 audit(1757370116.252:1911): avc: denied { setopt } for pid=18470 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1253.803836][ T30] audit: type=1400 audit(1757370116.252:1912): avc: denied { ioctl } for pid=18470 comm="syz.0.2589" path="socket:[50019]" dev="sockfs" ino=50019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1254.622831][ T30] audit: type=1400 audit(1757370117.102:1913): avc: denied { setopt } for pid=18486 comm="syz.2.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1255.163281][T18501] lo speed is unknown, defaulting to 1000 [ 1255.210830][T18501] lo speed is unknown, defaulting to 1000 [ 1255.398987][ T30] audit: type=1400 audit(1757370117.522:1914): avc: denied { ioctl } for pid=18495 comm="syz.1.2594" path="socket:[50058]" dev="sockfs" ino=50058 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1255.462859][T18501] lo speed is unknown, defaulting to 1000 [ 1255.532466][ T30] audit: type=1400 audit(1757370117.542:1915): avc: denied { connect } for pid=18495 comm="syz.1.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1256.439818][ T30] audit: type=1400 audit(1757370118.792:1916): avc: denied { read } for pid=18508 comm="syz.1.2597" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1256.491699][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'. [ 1256.563740][ T30] audit: type=1400 audit(1757370118.792:1917): avc: denied { open } for pid=18508 comm="syz.1.2597" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1256.610031][T18519] sch_fq: defrate 6 ignored. [ 1257.024871][ T30] audit: type=1400 audit(1757370118.802:1918): avc: denied { read } for pid=18508 comm="syz.1.2597" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1257.327553][ T30] audit: type=1400 audit(1757370118.802:1919): avc: denied { open } for pid=18508 comm="syz.1.2597" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1257.365012][ T30] audit: type=1400 audit(1757370118.882:1920): avc: denied { bind } for pid=18492 comm="syz.4.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1257.403138][T18527] sctp: [Deprecated]: syz.0.2598 (pid 18527) Use of int in maxseg socket option. [ 1257.403138][T18527] Use struct sctp_assoc_value instead [ 1257.650910][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056065800: rx timeout, send abort [ 1258.721848][T18536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1260.267329][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1260.267359][ T30] audit: type=1400 audit(1757370122.752:1931): avc: denied { bind } for pid=18541 comm="syz.3.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1260.570827][ T30] audit: type=1400 audit(1757370122.992:1932): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=42524 daddr=10.128.1.95 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1260.938607][ T30] audit: type=1326 audit(1757370123.222:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1261.108851][T18567] lo speed is unknown, defaulting to 1000 [ 1261.115265][T18567] lo speed is unknown, defaulting to 1000 [ 1261.195566][T18567] lo speed is unknown, defaulting to 1000 [ 1261.256907][ T30] audit: type=1326 audit(1757370123.222:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1262.439245][ T30] audit: type=1326 audit(1757370123.222:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1262.462709][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.667424][ T30] audit: type=1326 audit(1757370123.222:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1262.690913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.746652][ T30] audit: type=1326 audit(1757370123.222:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1262.806033][ T30] audit: type=1326 audit(1757370123.222:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1262.829473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1263.094947][T18579] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2608'. [ 1263.191052][ T30] audit: type=1326 audit(1757370123.222:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1263.275326][T18580] overlayfs: failed to clone upperpath [ 1263.902505][ T30] audit: type=1326 audit(1757370123.222:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1264.176611][T18587] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1265.180878][T18592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1265.340976][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1265.340985][ T30] audit: type=1400 audit(1757370127.822:1981): avc: denied { watch watch_reads } for pid=18595 comm="syz.0.2612" path="/538" dev="tmpfs" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1266.883131][T18613] lo speed is unknown, defaulting to 1000 [ 1266.890185][T18613] lo speed is unknown, defaulting to 1000 [ 1267.504894][T18613] lo speed is unknown, defaulting to 1000 [ 1267.603809][T18612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1267.637090][T18612] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2617'. [ 1267.707424][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2617'. [ 1267.727290][ T30] audit: type=1400 audit(1757370130.212:1982): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1267.887582][T18612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2617'. [ 1268.306642][ T30] audit: type=1400 audit(1757370130.442:1983): avc: denied { mounton } for pid=18616 comm="syz.1.2618" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1268.641612][ T30] audit: type=1400 audit(1757370131.012:1984): avc: denied { read } for pid=18619 comm="syz.2.2619" name="binder0" dev="binder" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1268.666368][T18626] binder: 18619:18626 ioctl c0306201 200000000240 returned -11 [ 1268.992694][ T30] audit: type=1400 audit(1757370131.022:1985): avc: denied { open } for pid=18619 comm="syz.2.2619" path="/dev/binderfs/binder0" dev="binder" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1269.031376][ T30] audit: type=1400 audit(1757370131.122:1986): avc: denied { ioctl } for pid=18619 comm="syz.2.2619" path="/dev/binderfs/binder0" dev="binder" ino=226 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1269.178835][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2620'. [ 1269.323297][ T30] audit: type=1400 audit(1757370131.122:1987): avc: denied { set_context_mgr } for pid=18619 comm="syz.2.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1269.430437][ T30] audit: type=1400 audit(1757370131.422:1988): avc: denied { write } for pid=18623 comm="syz.3.2620" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1270.381354][T18649] tipc: Resetting bearer [ 1270.453290][T18649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1271.230226][ T30] audit: type=1400 audit(1757370133.712:1989): avc: denied { bind } for pid=18654 comm="syz.4.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1271.741115][T18657] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.787898][ T30] audit: type=1400 audit(1757370134.232:1990): avc: denied { write } for pid=18651 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1271.833030][ T30] audit: type=1400 audit(1757370134.272:1991): avc: denied { ioctl } for pid=18651 comm="syz.3.2625" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=50987 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1272.129216][ T30] audit: type=1400 audit(1757370134.582:1992): avc: denied { map } for pid=18660 comm="syz.4.2627" path="socket:[51476]" dev="sockfs" ino=51476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1272.152945][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.346450][ T30] audit: type=1400 audit(1757370134.832:1993): avc: denied { read write } for pid=18668 comm="syz.1.2629" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1272.369806][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.908234][ T30] audit: type=1400 audit(1757370134.832:1994): avc: denied { open } for pid=18668 comm="syz.1.2629" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1272.931562][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.941815][ T30] audit: type=1400 audit(1757370134.832:1995): avc: denied { mounton } for pid=18668 comm="syz.1.2629" path="/507/file0" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1272.964608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1273.029095][ T30] audit: type=1400 audit(1757370134.832:1996): avc: denied { mount } for pid=18668 comm="syz.1.2629" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1273.051080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1274.843294][ T30] audit: type=1400 audit(1757370137.332:1997): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1276.692039][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1276.701013][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1277.318365][ T30] audit: type=1400 audit(1757370139.202:1998): avc: denied { write } for pid=18693 comm="syz.0.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1277.407558][T17232] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1277.592064][T17232] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1277.676663][T17232] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1277.703083][T17232] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1278.506637][ T30] audit: type=1400 audit(1757370140.992:1999): avc: denied { setopt } for pid=18713 comm="syz.4.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1278.529195][T17232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.548410][T18717] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2641'. [ 1278.774482][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 1278.950163][ T30] audit: type=1400 audit(1757370141.392:2000): avc: denied { read } for pid=18728 comm="syz.0.2642" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1279.019501][T17232] usb 2-1: can't set config #27, error -71 [ 1279.153493][T17232] usb 2-1: USB disconnect, device number 22 [ 1279.160875][ T30] audit: type=1400 audit(1757370141.512:2001): avc: denied { read } for pid=18735 comm="syz.3.2643" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1279.239753][T18739] deleting an unspecified loop device is not supported. [ 1279.799745][ T30] audit: type=1400 audit(1757370141.512:2002): avc: denied { open } for pid=18735 comm="syz.3.2643" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1280.011457][ T30] audit: type=1400 audit(1757370141.732:2003): avc: denied { ioctl } for pid=18735 comm="syz.3.2643" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1280.064681][ T30] audit: type=1400 audit(1757370141.802:2004): avc: denied { name_connect } for pid=18735 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1280.680974][ T30] audit: type=1400 audit(1757370141.822:2005): avc: denied { accept } for pid=18735 comm="syz.3.2643" lport=43825 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1280.719840][T18746] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2645'. [ 1280.870893][ T30] audit: type=1400 audit(1757370141.822:2006): avc: denied { setopt } for pid=18735 comm="syz.3.2643" lport=43825 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1280.904598][ T30] audit: type=1400 audit(1757370141.832:2007): avc: denied { create } for pid=18735 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1281.176390][T18758] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2647'. [ 1281.185509][T18758] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 1281.272637][T18758] 0ªX¹¦D: entered allmulticast mode [ 1281.280754][T18758] veth0_macvtap: entered allmulticast mode [ 1281.287005][T18758] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1281.381633][T17247] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1281.542530][T17247] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.553942][T17247] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1281.569802][T17247] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1281.591139][T17247] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1281.667529][T17247] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1281.708181][T17247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.744835][T17247] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1281.842437][T17247] usb 2-1: invalid MIDI out EP 0 [ 1282.351238][T18755] delete_channel: no stack [ 1282.372876][T18768] lo speed is unknown, defaulting to 1000 [ 1282.380214][T18768] lo speed is unknown, defaulting to 1000 [ 1282.387513][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1282.387525][ T30] audit: type=1400 audit(1757370144.832:2019): avc: denied { ioctl } for pid=18763 comm="syz.3.2650" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1283.535180][T17247] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1283.588513][T17247] usb 2-1: USB disconnect, device number 23 [ 1283.991065][ T30] audit: type=1400 audit(1757370146.472:2020): avc: denied { getopt } for pid=18780 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1284.044713][T18768] lo speed is unknown, defaulting to 1000 [ 1284.186862][T17245] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1284.352524][T17245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.363765][T17245] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1284.435323][T17245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.471021][T17245] usb 3-1: config 0 descriptor?? [ 1284.486872][T17245] usbhid 3-1:0.0: can't add hid device: -22 [ 1284.494205][T17245] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1285.240966][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 1285.333104][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 1286.179026][ T30] audit: type=1400 audit(1757370148.362:2021): avc: denied { kexec_image_load } for pid=18783 comm="syz.2.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1286.611754][ T30] audit: type=1400 audit(1757370149.102:2022): avc: denied { read write } for pid=18803 comm="syz.3.2657" dev="sockfs" ino=52426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1287.504396][T18811] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 1288.046888][T17245] usb 3-1: USB disconnect, device number 20 [ 1288.345350][ T30] audit: type=1400 audit(1757370150.812:2023): avc: denied { node_bind } for pid=18813 comm="syz.0.2659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1288.365412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.603068][ T30] audit: type=1400 audit(1757370150.902:2024): avc: denied { unlink } for pid=18815 comm="syz.1.2658" name="#31" dev="tmpfs" ino=2771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1288.805112][T18829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=18829 comm=syz.1.2658 [ 1289.238182][ T30] audit: type=1400 audit(1757370150.902:2025): avc: denied { mount } for pid=18815 comm="syz.1.2658" name="/" dev="overlay" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1289.519612][ T30] audit: type=1400 audit(1757370151.994:2026): avc: denied { mount } for pid=18833 comm="syz.4.2662" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1289.919668][T18845] ieee802154 phy1 wpan1: encryption failed: -22 [ 1290.132938][ T30] audit: type=1400 audit(1757370152.614:2027): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1290.336231][T18848] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1290.380439][ T30] audit: type=1400 audit(1757370152.804:2028): avc: denied { create } for pid=18846 comm="syz.1.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1290.753607][ T30] audit: type=1400 audit(1757370152.834:2029): avc: denied { ioctl } for pid=18846 comm="syz.1.2664" path="socket:[52517]" dev="sockfs" ino=52517 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1290.874465][T18854] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1291.221702][T18856] program syz.1.2666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1291.435290][ T30] audit: type=1400 audit(1757370153.704:2030): avc: denied { read } for pid=18851 comm="syz.1.2666" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1291.497210][ T30] audit: type=1400 audit(1757370153.704:2031): avc: denied { open } for pid=18851 comm="syz.1.2666" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1291.539312][T17245] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1291.698311][ T30] audit: type=1400 audit(1757370153.824:2032): avc: denied { bind } for pid=18849 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1291.726725][T17245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1291.740948][T17245] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1291.750388][T17245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.758354][T17245] usb 2-1: Product: syz [ 1291.765545][T17245] usb 2-1: Manufacturer: syz [ 1291.773119][T17245] usb 2-1: SerialNumber: syz [ 1291.783103][T17245] usb 2-1: config 0 descriptor?? [ 1292.415733][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 1292.516222][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 1292.621199][T18863] overlayfs: failed to clone upperpath [ 1292.808387][T18870] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 1292.875003][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 1293.914762][T18889] No control pipe specified [ 1293.938501][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1293.938514][ T30] audit: type=1400 audit(1757370156.414:2037): avc: denied { write } for pid=18885 comm="syz.2.2671" path="socket:[52613]" dev="sockfs" ino=52613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1295.012398][T18911] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1295.322004][ T30] audit: type=1400 audit(1757370157.794:2038): avc: denied { getopt } for pid=18899 comm="syz.0.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1295.784251][T17245] usb 2-1: USB disconnect, device number 24 [ 1296.807212][ T30] audit: type=1400 audit(1757370159.284:2039): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1297.128256][T18922] netlink: 'syz.1.2676': attribute type 10 has an invalid length. [ 1297.447329][ T30] audit: type=1400 audit(1757370159.584:2040): avc: denied { read write } for pid=18914 comm="syz.1.2676" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1297.471872][ T30] audit: type=1400 audit(1757370159.584:2041): avc: denied { open } for pid=18914 comm="syz.1.2676" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1298.888551][ T30] audit: type=1400 audit(1757370161.324:2042): avc: denied { getopt } for pid=18933 comm="syz.4.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1299.310612][ T30] audit: type=1400 audit(1757370161.434:2043): avc: denied { bind } for pid=18933 comm="syz.4.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1299.363063][T18929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.370324][T18929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.487833][T18929] batman_adv: batadv0: Interface deactivated: team0 [ 1299.614003][ T30] audit: type=1400 audit(1757370162.094:2044): avc: denied { create } for pid=18948 comm="syz.0.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1299.725675][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.740782][ T30] audit: type=1400 audit(1757370162.094:2045): avc: denied { name_bind } for pid=18948 comm="syz.0.2682" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1300.416758][ T30] audit: type=1400 audit(1757370162.334:2046): avc: denied { bind } for pid=18948 comm="syz.0.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1301.009106][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.094149][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.173685][T18929] veth0_macvtap: left allmulticast mode [ 1301.334893][T18932] : entered promiscuous mode [ 1301.510140][ T30] audit: type=1400 audit(1757370163.984:2047): avc: denied { execute } for pid=18959 comm="syz.0.2686" path="/dev/nullb0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1302.489141][ T30] audit: type=1800 audit(1757370163.984:2048): pid=18960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2686" name="nullb0" dev="tmpfs" ino=507 res=0 errno=0 [ 1302.511176][ T30] audit: type=1400 audit(1757370164.144:2049): avc: denied { name_bind } for pid=18963 comm="syz.2.2688" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1302.533361][ T30] audit: type=1400 audit(1757370164.204:2050): avc: denied { ioctl } for pid=18963 comm="syz.2.2688" path="socket:[51946]" dev="sockfs" ino=51946 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1302.602466][T17244] syz1: Port: 1 Link DOWN [ 1302.608894][ T746] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.624367][ T746] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.728538][ T746] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.796364][ T746] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.907827][T18981] rdma_rxe: rxe_newlink: failed to add lo [ 1303.604214][ T30] audit: type=1400 audit(1757370165.694:2051): avc: denied { create } for pid=18975 comm="syz.2.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1303.628789][T18987] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.636400][ T30] audit: type=1400 audit(1757370165.714:2052): avc: denied { bind } for pid=18975 comm="syz.2.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1305.213661][ T30] audit: type=1400 audit(1757370167.694:2053): avc: denied { create } for pid=19002 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1305.233660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1305.409054][ T30] audit: type=1326 audit(1757370167.884:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19002 comm="syz.0.2696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f057678ebe9 code=0x0 [ 1305.476782][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2696'. [ 1305.517096][ T30] audit: type=1400 audit(1757370167.944:2055): avc: denied { write } for pid=19002 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1309.961553][ T30] audit: type=1400 audit(1757370172.434:2056): avc: denied { firmware_load } for pid=19040 comm="syz.1.2704" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1310.862166][T19062] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2708'. [ 1311.086977][T19067] sz1: rxe_newlink: already configured on lo [ 1313.080386][T19077] ieee802154 phy1 wpan1: encryption failed: -22 [ 1313.200637][ T30] audit: type=1400 audit(1757370175.604:2057): avc: denied { execute_no_trans } for pid=19078 comm="syz.0.2713" path="/561/file1" dev="tmpfs" ino=3027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1313.622660][ T30] audit: type=1400 audit(1757370176.094:2058): avc: denied { bind } for pid=19086 comm="syz.2.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1313.811371][T19092] netlink: 'syz.2.2725': attribute type 4 has an invalid length. [ 1313.878006][ T30] audit: type=1800 audit(1757370176.344:2059): pid=19095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2715" name="bus" dev="ramfs" ino=52963 res=0 errno=0 [ 1313.954525][T19095] Lens A: ================= START STATUS ================= [ 1313.963660][T19095] Lens A: Focus, Absolute: 0 [ 1313.968266][T19095] Lens A: ================== END STATUS ================== [ 1313.969152][T17232] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1315.131280][T19101] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2716'. [ 1315.149173][T19101] 1ªX¹¦D: renamed from 30ªX¹¦D [ 1315.261111][T19101] veth0_macvtap: entered allmulticast mode [ 1315.288523][T19101] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1315.328307][T19100] hub 1-0:1.0: USB hub found [ 1315.337939][T19100] hub 1-0:1.0: 1 port detected [ 1317.035560][ T30] audit: type=1400 audit(1757370179.514:2060): avc: denied { read } for pid=19113 comm="syz.1.2720" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1317.990651][ T30] audit: type=1400 audit(1757370179.514:2061): avc: denied { open } for pid=19113 comm="syz.1.2720" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1318.049828][ T30] audit: type=1400 audit(1757370179.544:2062): avc: denied { ioctl } for pid=19113 comm="syz.1.2720" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1318.328746][ T30] audit: type=1326 audit(1757370180.774:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1318.560569][ T30] audit: type=1326 audit(1757370180.774:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1318.590591][ T30] audit: type=1326 audit(1757370180.774:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1318.631745][T19141] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 1318.631745][T19141] program syz.1.2723 not setting count and/or reply_len properly [ 1318.758164][ T30] audit: type=1326 audit(1757370180.844:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1318.960911][ T30] audit: type=1326 audit(1757370180.844:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4218ebe9 code=0x7ffc0000 [ 1319.077155][ T30] audit: type=1400 audit(1757370181.114:2068): avc: denied { write } for pid=19132 comm="syz.1.2723" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1319.814839][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1320.390664][T19159] ieee802154 phy1 wpan1: encryption failed: -22 [ 1320.694376][ T30] audit: type=1400 audit(1757370183.174:2069): avc: denied { accept } for pid=19161 comm="syz.0.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1320.773442][ T30] audit: type=1400 audit(1757370183.174:2070): avc: denied { ioctl } for pid=19161 comm="syz.0.2729" path="socket:[53418]" dev="sockfs" ino=53418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1321.073592][T19173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.384910][T19173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1323.516434][ T30] audit: type=1400 audit(1757370185.994:2071): avc: denied { write } for pid=19193 comm="syz.1.2736" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1324.550071][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1324.634946][ T30] audit: type=1400 audit(1757370187.024:2072): avc: denied { getopt } for pid=19206 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1324.656181][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.672265][ T30] audit: type=1400 audit(1757370187.054:2073): avc: denied { name_bind } for pid=19206 comm="syz.0.2739" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1325.674863][ T30] audit: type=1400 audit(1757370187.714:2074): avc: denied { ioctl } for pid=19211 comm="syz.2.2740" path="socket:[53523]" dev="sockfs" ino=53523 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1326.341620][T19225] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 1326.341620][T19225] program syz.2.2742 not setting count and/or reply_len properly [ 1326.518613][ T30] audit: type=1400 audit(1757370188.994:2075): avc: denied { read } for pid=19230 comm="syz.1.2744" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1326.541688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.880849][ T30] audit: type=1400 audit(1757370188.994:2076): avc: denied { open } for pid=19230 comm="syz.1.2744" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1327.487015][ T30] audit: type=1400 audit(1757370189.964:2077): avc: denied { bind } for pid=19240 comm="syz.4.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1327.506325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.756061][ T30] audit: type=1400 audit(1757370190.114:2078): avc: denied { ioctl } for pid=19240 comm="syz.4.2746" path="socket:[54277]" dev="sockfs" ino=54277 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1328.886057][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 1329.829111][T17232] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1330.606587][T19279] tipc: Resetting bearer [ 1330.960523][T19279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1330.986451][T17232] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1331.015480][T17232] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1331.033007][T17232] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1331.131947][T17232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.220479][T19266] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1331.273859][T17232] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1331.682557][T19292] tipc: Resetting bearer [ 1332.010910][T19292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1332.445850][T17244] usb 4-1: USB disconnect, device number 39 [ 1333.581342][ T30] audit: type=1400 audit(1757370195.624:2079): avc: denied { append } for pid=19281 comm="syz.2.2756" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1333.626261][T19305] tipc: Resetting bearer [ 1333.634301][T19305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1334.291293][T19314] tipc: Resetting bearer [ 1335.197298][ T30] audit: type=1400 audit(1757370196.334:2080): avc: denied { search } for pid=5514 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1335.635992][ T30] audit: type=1400 audit(1757370196.334:2081): avc: denied { search } for pid=5514 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1335.661683][ T30] audit: type=1400 audit(1757370196.334:2082): avc: denied { search } for pid=5514 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1335.685395][ T30] audit: type=1400 audit(1757370196.334:2083): avc: denied { read } for pid=5514 comm="dhcpcd" name="n115" dev="tmpfs" ino=9072 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1336.026457][ T30] audit: type=1400 audit(1757370196.334:2084): avc: denied { open } for pid=5514 comm="dhcpcd" path="/run/udev/data/n115" dev="tmpfs" ino=9072 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1336.808039][ T30] audit: type=1400 audit(1757370196.334:2085): avc: denied { getattr } for pid=5514 comm="dhcpcd" path="/run/udev/data/n115" dev="tmpfs" ino=9072 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1336.885829][T19341] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[19341] [ 1337.255631][ T30] audit: type=1400 audit(1757370198.564:2086): avc: denied { read open } for pid=19324 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1337.424641][ T30] audit: type=1400 audit(1757370198.564:2087): avc: denied { getattr } for pid=19324 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1338.044457][ T30] audit: type=1400 audit(1757370200.524:2088): avc: denied { add_name } for pid=19322 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1338.691571][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1338.691584][ T30] audit: type=1400 audit(1757370201.174:2106): avc: denied { mounton } for pid=19365 comm="syz.1.2769" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1338.908169][ T30] audit: type=1400 audit(1757370201.174:2107): avc: denied { mount } for pid=19365 comm="syz.1.2769" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1339.059275][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1339.231204][ T30] audit: type=1400 audit(1757370201.174:2108): avc: denied { wake_alarm } for pid=19365 comm="syz.1.2769" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1339.536813][ T30] audit: type=1326 audit(1757370201.364:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19346 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff34958ebe9 code=0x7ffc0000 [ 1339.643706][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2774'. [ 1339.694243][ T30] audit: type=1326 audit(1757370201.374:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19346 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34958ebe9 code=0x7ffc0000 [ 1339.848184][ T30] audit: type=1326 audit(1757370201.374:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19346 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34958ebe9 code=0x7ffc0000 [ 1339.880285][ T30] audit: type=1326 audit(1757370201.374:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19346 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff34958ebe9 code=0x7ffc0000 [ 1339.918064][ T30] audit: type=1326 audit(1757370201.384:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19346 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34958ebe9 code=0x7ffc0000 [ 1340.011568][ T30] audit: type=1326 audit(1757370201.424:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19346 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34958ebe9 code=0x7ffc0000 [ 1340.121135][ T30] audit: type=1326 audit(1757370201.424:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19346 comm="syz.4.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff34958ebe9 code=0x7ffc0000 [ 1341.149745][T19409] netlink: 'syz.4.2779': attribute type 4 has an invalid length. [ 1342.104886][T17232] lo speed is unknown, defaulting to 1000 [ 1342.114750][T17232] sz1: Port: 1 Link DOWN [ 1342.127397][T17232] lo speed is unknown, defaulting to 1000 [ 1343.640404][T19438] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2783'. [ 1343.743713][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1343.743730][ T30] audit: type=1400 audit(1757370206.094:2149): avc: denied { read } for pid=19431 comm="syz.3.2784" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1343.899352][ T30] audit: type=1400 audit(1757370206.094:2150): avc: denied { open } for pid=19431 comm="syz.3.2784" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1344.132196][ T30] audit: type=1400 audit(1757370206.104:2151): avc: denied { ioctl } for pid=19431 comm="syz.3.2784" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1345.282116][T19458] tipc: Enabling of bearer rejected, failed to enable media [ 1345.296068][T19458] siw: device registration error -23 [ 1346.058655][T19464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.098071][T19464] batman_adv: batadv0: Interface activated: team0 [ 1346.372414][T19464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1347.863613][T19489] netlink: 'syz.1.2794': attribute type 10 has an invalid length. [ 1348.279826][T19484] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2793'. [ 1349.780580][T19507] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2797'. [ 1350.197221][T19522] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2799'. [ 1350.554369][T19527] netlink: 'syz.3.2801': attribute type 10 has an invalid length. [ 1350.563877][T19527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2801'. [ 1350.574373][T19527] team0: entered promiscuous mode [ 1350.585147][T19527] team_slave_0: entered promiscuous mode [ 1350.595423][T19527] team_slave_1: entered promiscuous mode [ 1350.666248][T19527] batadv1: entered promiscuous mode [ 1350.675028][T19527] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 1350.684333][T19527] team0: entered allmulticast mode [ 1350.689607][T19527] team_slave_0: entered allmulticast mode [ 1350.695407][T19527] team_slave_1: entered allmulticast mode [ 1350.701277][T19527] batadv1: entered allmulticast mode [ 1350.706694][T19527] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 1350.718194][T19527] tipc: Resetting bearer [ 1350.726782][T19527] tipc: Resetting bearer [ 1350.749022][T19527] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1351.291107][ T30] audit: type=1400 audit(1757370213.744:2152): avc: denied { shutdown } for pid=19531 comm="syz.2.2802" laddr=::ac14:140b lport=53023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1351.557653][ T30] audit: type=1400 audit(1757370214.034:2153): avc: denied { ioctl } for pid=19541 comm="syz.4.2804" path="socket:[54837]" dev="sockfs" ino=54837 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1351.583855][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2804'. [ 1351.623733][T17244] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1351.800021][T17244] usb 3-1: Using ep0 maxpacket: 16 [ 1352.032032][ T30] audit: type=1400 audit(1757370214.514:2154): avc: denied { execute } for pid=19549 comm="syz.1.2805" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=54863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1352.511106][ T30] audit: type=1400 audit(1757370214.664:2155): avc: denied { listen } for pid=19539 comm="syz.3.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1352.696974][T19556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2806'. [ 1352.836990][ T30] audit: type=1400 audit(1757370215.164:2156): avc: denied { create } for pid=19555 comm="syz.4.2806" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1352.867943][ T30] audit: type=1400 audit(1757370215.164:2157): avc: denied { setattr } for pid=19555 comm="syz.4.2806" name="file0" dev="tmpfs" ino=3329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1352.989155][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1353.203077][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.242068][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1353.334836][ T9] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1353.360224][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.409360][ T9] usb 2-1: config 0 descriptor?? [ 1353.918900][T17245] usb 2-1: USB disconnect, device number 25 [ 1354.711162][T17244] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1355.174504][ T30] audit: type=1400 audit(1757370217.634:2158): avc: denied { connect } for pid=19581 comm="syz.4.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1355.211878][ T30] audit: type=1400 audit(1757370217.684:2159): avc: denied { watch watch_reads } for pid=19581 comm="syz.4.2811" path="/627/file0" dev="tmpfs" ino=3341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1355.237724][T17244] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1355.248824][T17244] usb 3-1: can't read configurations, error -71 [ 1355.273732][T19587] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2812'. [ 1356.221738][T19602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2814'. [ 1356.231752][T19602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2814'. [ 1356.244424][T19604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1356.584934][ T30] audit: type=1326 audit(1757370219.054:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19613 comm="syz.4.2817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff34958ebe9 code=0x0 [ 1356.638628][T19617] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2816'. [ 1356.727633][T19618] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.2817'. [ 1356.965431][T19624] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2815'. [ 1358.946896][T19643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1358.960044][T19643] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1359.032029][ T30] audit: type=1400 audit(1757370221.374:2161): avc: denied { mount } for pid=19637 comm="syz.3.2820" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1359.303094][ T30] audit: type=1400 audit(1757370221.767:2162): avc: denied { cmd } for pid=19640 comm="syz.4.2821" path="socket:[54973]" dev="sockfs" ino=54973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1359.722429][ T30] audit: type=1400 audit(1757370222.057:2163): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1359.800159][ T30] audit: type=1400 audit(1757370222.107:2164): avc: denied { create } for pid=19646 comm="syz.4.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1360.524236][T19665] input: syz1 as /devices/virtual/input/input19 [ 1361.462128][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.937935][T19692] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1362.395978][ T30] audit: type=1400 audit(1757370224.877:2165): avc: denied { read } for pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=3156 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1362.486934][ T30] audit: type=1400 audit(1757370224.877:2166): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3156 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1362.547725][ T30] audit: type=1400 audit(1757370224.877:2167): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3156 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1362.572705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.443019][T19710] rdma_rxe: rxe_newlink: failed to add lo [ 1364.187931][ T30] audit: type=1400 audit(1757370226.667:2168): avc: denied { ioctl } for pid=19716 comm="syz.1.2832" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1364.338110][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'. [ 1364.925869][ T30] audit: type=1400 audit(1757370226.747:2169): avc: denied { write } for pid=19719 comm="syz.2.2833" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1366.056823][ T30] audit: type=1400 audit(1757370226.867:2170): avc: denied { ioctl } for pid=19719 comm="syz.2.2833" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1366.081669][ T30] audit: type=1400 audit(1757370226.897:2171): avc: denied { ioctl } for pid=19716 comm="syz.1.2832" path="socket:[55080]" dev="sockfs" ino=55080 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1366.740222][T17247] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1366.880744][T17247] usb 4-1: device descriptor read/64, error -71 [ 1367.199860][T17247] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1367.450132][T17247] usb 4-1: device descriptor read/64, error -71 [ 1367.561369][T17247] usb usb4-port1: attempt power cycle [ 1368.349874][T17247] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1368.383173][T17247] usb 4-1: device descriptor read/8, error -71 [ 1368.751871][T19758] program syz.1.2840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1368.909749][ T30] audit: type=1400 audit(1757370231.387:2172): avc: denied { map } for pid=19750 comm="syz.4.2838" path="socket:[55130]" dev="sockfs" ino=55130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1368.965541][ T30] audit: type=1400 audit(1757370231.387:2173): avc: denied { read write } for pid=19750 comm="syz.4.2838" path="socket:[55130]" dev="sockfs" ino=55130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1369.084916][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1369.100139][T17247] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1369.126285][T17247] usb 4-1: device descriptor read/8, error -71 [ 1369.254821][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.266364][T17247] usb usb4-port1: unable to enumerate USB device [ 1369.430458][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1370.009084][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1370.148715][T19769] overlayfs: failed to clone upperpath [ 1371.011911][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.048917][ T9] usb 2-1: Product: syz [ 1371.383477][ T9] usb 2-1: Manufacturer: syz [ 1371.388137][ T9] usb 2-1: SerialNumber: syz [ 1371.409504][ T9] usb 2-1: config 0 descriptor?? [ 1371.748167][T19779] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2844'. [ 1371.804858][ T9] usb 2-1: can't set config #0, error -71 [ 1372.067641][T19783] tipc: Resetting bearer [ 1372.338597][ T9] usb 2-1: USB disconnect, device number 26 [ 1372.426424][T19783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1372.443290][T17244] lo speed is unknown, defaulting to 1000 [ 1372.450302][T17244] sz1: Port: 1 Link ACTIVE [ 1372.455644][T17244] lo speed is unknown, defaulting to 1000 [ 1372.781621][T19788] rdma_rxe: rxe_newlink: failed to add lo [ 1374.223130][ T30] audit: type=1400 audit(1757370236.627:2174): avc: denied { create } for pid=19795 comm="syz.2.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1374.580186][ T30] audit: type=1400 audit(1757370237.057:2175): avc: denied { create } for pid=19800 comm="syz.4.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1376.182127][T19817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2854'. [ 1376.192055][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 1376.216530][ T30] audit: type=1400 audit(1757370238.687:2176): avc: denied { mount } for pid=19816 comm="syz.4.2854" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1376.220580][T17244] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1377.118440][ T30] audit: type=1400 audit(1757370238.697:2177): avc: denied { remount } for pid=19816 comm="syz.4.2854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1377.141848][ T30] audit: type=1400 audit(1757370239.027:2178): avc: denied { read } for pid=19818 comm="syz.3.2855" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1377.343633][ T30] audit: type=1400 audit(1757370239.027:2179): avc: denied { open } for pid=19818 comm="syz.3.2855" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1377.637130][T17244] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1377.663611][T17244] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1377.741860][T19838] rdma_rxe: rxe_newlink: failed to add lo [ 1378.840112][ T30] audit: type=1400 audit(1757370241.307:2180): avc: denied { ioctl } for pid=19843 comm="syz.0.2860" path="socket:[55559]" dev="sockfs" ino=55559 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1379.608601][T17244] usb 3-1: string descriptor 0 read error: -71 [ 1379.665421][T17244] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1379.675914][T17244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1379.723326][T17244] usb 3-1: can't set config #1, error -71 [ 1379.795107][T17244] usb 3-1: USB disconnect, device number 24 [ 1380.820885][ T30] audit: type=1800 audit(1757370243.307:2181): pid=19858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2861" name="bus" dev="ramfs" ino=56343 res=0 errno=0 [ 1381.649692][ T30] audit: type=1400 audit(1757370244.127:2182): avc: denied { accept } for pid=19861 comm="syz.0.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1381.745136][T19875] rdma_rxe: rxe_newlink: failed to add lo [ 1382.458215][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'. [ 1383.079592][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1383.393423][T19889] rdma_rxe: rxe_newlink: failed to add lo [ 1383.719026][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1383.752837][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1383.805381][T19893] netlink: 'syz.4.2868': attribute type 16 has an invalid length. [ 1383.817666][T19893] netlink: 'syz.4.2868': attribute type 17 has an invalid length. [ 1383.843948][ T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1383.862904][T19895] netlink: 408 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1383.863018][T19893] tipc: Resetting bearer [ 1383.888784][ T9] usb 2-1: Product: syz [ 1383.904406][ T9] usb 2-1: Manufacturer: syz [ 1383.926790][ T9] usb 2-1: SerialNumber: syz [ 1383.932390][T19895] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1384.011578][ T9] usb 2-1: config 0 descriptor?? [ 1384.353048][ T30] audit: type=1400 audit(1757370246.767:2183): avc: denied { mount } for pid=19897 comm="syz.2.2869" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1384.632164][T19885] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2866'. [ 1386.308294][T17232] usb 2-1: USB disconnect, device number 27 [ 1387.115285][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 1387.993423][ T30] audit: type=1400 audit(1757370250.477:2184): avc: denied { setopt } for pid=19943 comm="syz.0.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1388.082786][T19950] rdma_rxe: rxe_newlink: failed to add lo [ 1388.749081][T17232] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1389.358542][T17232] usb 2-1: Using ep0 maxpacket: 8 [ 1389.428125][T17232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.542488][ T30] audit: type=1400 audit(1757370251.927:2185): avc: denied { watch } for pid=19960 comm="syz.4.2885" path="/648/file0" dev="tmpfs" ino=3453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1389.565525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.573337][ T30] audit: type=1400 audit(1757370251.927:2186): avc: denied { watch_sb } for pid=19960 comm="syz.4.2885" path="/648/file0" dev="tmpfs" ino=3453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1390.184005][T17232] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1390.204838][T17232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1390.216476][T17232] usb 2-1: SerialNumber: syz [ 1390.224577][T17232] usb 2-1: config 0 descriptor?? [ 1390.244256][T17232] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1390.330105][T17232] usb 2-1: Failed to create links for entity 255 [ 1390.336558][T17232] usb 2-1: Failed to register entities (-22). [ 1390.579182][ T30] audit: type=1400 audit(1757370252.857:2187): avc: denied { mount } for pid=19963 comm="syz.0.2886" name="/" dev="autofs" ino=55823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1391.269692][T17247] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1391.301959][ T30] audit: type=1400 audit(1757370253.047:2188): avc: denied { getopt } for pid=19963 comm="syz.0.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1391.450285][T17247] usb 3-1: device descriptor read/64, error -71 [ 1391.781024][ T30] audit: type=1400 audit(1757370254.207:2189): avc: denied { create } for pid=19979 comm="syz.3.2889" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1391.870025][T17247] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1392.010310][T17247] usb 3-1: device descriptor read/64, error -71 [ 1392.120843][T17247] usb usb3-port1: attempt power cycle [ 1392.229139][ T30] audit: type=1400 audit(1757370254.707:2190): avc: denied { unlink } for pid=5851 comm="syz-executor" name="file0" dev="tmpfs" ino=2879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1392.507500][T17247] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1392.641676][T17232] usb 2-1: USB disconnect, device number 28 [ 1392.671654][T17247] usb 3-1: device descriptor read/8, error -71 [ 1393.296695][T19996] tipc: Resetting bearer [ 1393.583586][T17247] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1393.593242][T19996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1393.898583][T17247] usb 3-1: device descriptor read/8, error -71 [ 1394.140037][T17247] usb usb3-port1: unable to enumerate USB device [ 1395.114094][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 1395.899227][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1396.230810][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1396.293081][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1396.310764][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1396.350714][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1396.371751][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1396.387559][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.502131][ T9] usb 2-1: config 0 descriptor?? [ 1397.856413][T20034] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.365491][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1398.371570][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1398.531437][T20043] virtio-fs: tag not found [ 1398.548342][T17232] libceph: connect (1)[c::]:6789 error -101 [ 1398.554465][T17232] libceph: mon0 (1)[c::]:6789 connect error [ 1398.662205][T20046] tipc: Resetting bearer [ 1399.531247][T20038] ceph: No mds server is up or the cluster is laggy [ 1399.538195][ T9] usb 2-1: USB disconnect, device number 29 [ 1399.875054][T17232] libceph: connect (1)[c::]:6789 error -101 [ 1399.884131][T17232] libceph: mon0 (1)[c::]:6789 connect error [ 1400.692679][T20055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1400.821393][T20061] sz1: rxe_newlink: already configured on lo [ 1402.123322][T20071] rdma_rxe: rxe_newlink: failed to add lo [ 1403.174093][T20085] tipc: Resetting bearer [ 1403.184865][T20085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1403.265441][T20087] rdma_rxe: rxe_newlink: failed to add lo [ 1404.031004][T20096] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 1404.038055][T20096] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 1404.045968][T20096] 0ªî{X¹¦: entered allmulticast mode [ 1404.061063][T20096] 0ªî{X¹¦: entered promiscuous mode [ 1404.071588][T20096] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 1404.078329][T20096] bridge0: port 1(30ªî{X¹¦) entered forwarding state [ 1406.670775][T20107] overlayfs: failed to clone upperpath [ 1407.818136][ T30] audit: type=1400 audit(1757370269.967:2191): avc: denied { setopt } for pid=20112 comm="syz.3.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1408.005963][T20115] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20115 comm=syz.1.2920 [ 1408.690251][ T30] audit: type=1400 audit(1757370270.317:2192): avc: denied { read } for pid=20114 comm="syz.1.2920" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1408.940886][ T30] audit: type=1400 audit(1757370270.317:2193): avc: denied { open } for pid=20114 comm="syz.1.2920" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1408.966725][ T30] audit: type=1400 audit(1757370270.327:2194): avc: denied { connect } for pid=20112 comm="syz.3.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1409.034063][T20130] team0: left promiscuous mode [ 1409.038867][T20130] team_slave_0: left promiscuous mode [ 1409.046740][T20130] team_slave_1: left promiscuous mode [ 1409.054721][T20130] batadv1: left promiscuous mode [ 1409.062192][T20130] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 1409.071461][T20130] team0: left allmulticast mode [ 1409.076337][T20130] team_slave_0: left allmulticast mode [ 1409.083531][T20130] team_slave_1: left allmulticast mode [ 1409.090720][T20130] batadv1: left allmulticast mode [ 1409.095786][T20130] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 1409.105930][T20130] tipc: Resetting bearer [ 1409.113953][T20130] tipc: Resetting bearer [ 1409.175213][T20130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1409.200148][ T30] audit: type=1400 audit(1757370270.867:2195): avc: denied { ioctl } for pid=20114 comm="syz.1.2920" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1409.275065][ T30] audit: type=1400 audit(1757370270.877:2196): avc: denied { read } for pid=20114 comm="syz.1.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1410.686157][T20151] tipc: Resetting bearer [ 1410.778711][T20151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1411.011808][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'. [ 1411.705647][T20155] netlink: 'syz.3.2927': attribute type 10 has an invalid length. [ 1412.653130][T20155] tipc: Resetting bearer [ 1412.784214][T20155] batman_adv: batadv0: Adding interface: team0 [ 1412.810968][T20155] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.836808][T20155] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1414.233585][T20179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1414.861028][ T30] audit: type=1400 audit(1757370277.337:2197): avc: denied { block_suspend } for pid=20181 comm="syz.4.2934" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1414.994738][T20199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.266027][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 1415.301941][T20199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1416.502940][T20214] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1416.549969][ T30] audit: type=1400 audit(1757370278.987:2198): avc: denied { bind } for pid=20206 comm="syz.1.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1416.607616][T20214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1416.709213][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1416.760817][ T30] audit: type=1400 audit(1757370278.987:2199): avc: denied { setopt } for pid=20206 comm="syz.1.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1416.869743][ T30] audit: type=1400 audit(1757370278.987:2200): avc: denied { read write } for pid=20206 comm="syz.1.2939" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1416.899276][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1416.917630][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.942117][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1417.070274][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1417.129004][ T30] audit: type=1400 audit(1757370278.987:2201): avc: denied { open } for pid=20206 comm="syz.1.2939" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1417.283149][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.649465][ T9] usb 4-1: config 0 descriptor?? [ 1417.691254][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1418.828637][T20238] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1418.928086][T20239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1418.983682][ T30] audit: type=1400 audit(1757370281.427:2202): avc: denied { nlmsg_read } for pid=20211 comm="syz.3.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1419.208086][T20236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1419.296557][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2943'. [ 1420.128200][T11349] usb 4-1: USB disconnect, device number 44 [ 1420.519421][T20252] input: syz1 as /devices/virtual/input/input21 [ 1421.153449][ T30] audit: type=1400 audit(1757370283.637:2203): avc: denied { append } for pid=20254 comm="syz.3.2948" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1421.270446][ T30] audit: type=1400 audit(1757370283.657:2204): avc: denied { map } for pid=20254 comm="syz.3.2948" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1421.425637][ T30] audit: type=1400 audit(1757370283.657:2205): avc: denied { write execute } for pid=20254 comm="syz.3.2948" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1422.651115][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1527.688883][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1527.695829][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20257/3:b..l P12/1:b..l [ 1527.705208][ C1] rcu: (detected by 1, t=10502 jiffies, g=82513, q=243 ncpus=2) [ 1527.712893][ C1] task:kworker/u8:0 state:R running task stack:22264 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1527.727037][ C1] Workqueue: bat_events batadv_nc_worker [ 1527.732649][ C1] Call Trace: [ 1527.735898][ C1] [ 1527.738802][ C1] __schedule+0x1190/0x5de0 [ 1527.743277][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1527.749413][ C1] ? __pfx___schedule+0x10/0x10 [ 1527.754232][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1527.759575][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 1527.765011][ C1] ? mark_held_locks+0x49/0x80 [ 1527.769751][ C1] preempt_schedule_irq+0x51/0x90 [ 1527.774745][ C1] irqentry_exit+0x36/0x90 [ 1527.779131][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1527.785080][ C1] RIP: 0010:lock_acquire+0x3b/0x350 [ 1527.790250][ C1] Code: 89 d5 41 54 45 89 c4 55 89 cd 53 48 89 fb 48 83 ec 38 65 48 8b 05 bd e6 3e 12 48 89 44 24 30 31 c0 66 90 65 8b 05 d9 e6 3e 12 <83> f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 a2 13 0f 0f 82 74 [ 1527.809828][ C1] RSP: 0018:ffffc90000117a40 EFLAGS: 00000246 [ 1527.815863][ C1] RAX: 0000000000000000 RBX: ffffffff8e5c1260 RCX: 0000000000000002 [ 1527.823804][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e5c1260 [ 1527.831753][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1527.839706][ C1] R10: 000000000000000a R11: 0000000000000000 R12: 0000000000000000 [ 1527.847654][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1527.855608][ C1] ? batadv_nc_process_nc_paths.part.0+0x215/0x3e0 [ 1527.862100][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1527.867702][ C1] batadv_nc_process_nc_paths.part.0+0xe4/0x3e0 [ 1527.873911][ C1] ? batadv_nc_process_nc_paths.part.0+0xd3/0x3e0 [ 1527.880317][ C1] batadv_nc_worker+0xcd3/0x1030 [ 1527.885234][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1527.891013][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1527.896358][ C1] ? rcu_is_watching+0x12/0xc0 [ 1527.901100][ C1] process_one_work+0x9cc/0x1b70 [ 1527.906013][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1527.913527][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1527.918874][ C1] ? assign_work+0x1a0/0x250 [ 1527.923444][ C1] worker_thread+0x6c8/0xf10 [ 1527.928020][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1527.933101][ C1] kthread+0x3c2/0x780 [ 1527.937138][ C1] ? __pfx_kthread+0x10/0x10 [ 1527.941708][ C1] ? rcu_is_watching+0x12/0xc0 [ 1527.946442][ C1] ? __pfx_kthread+0x10/0x10 [ 1527.951000][ C1] ret_from_fork+0x5d4/0x6f0 [ 1527.955557][ C1] ? __pfx_kthread+0x10/0x10 [ 1527.960115][ C1] ret_from_fork_asm+0x1a/0x30 [ 1527.964854][ C1] [ 1527.967843][ C1] task:syz.0.2949 state:R running task stack:26312 pid:20257 tgid:20256 ppid:5843 task_flags:0x400040 flags:0x00004002 [ 1527.981280][ C1] Call Trace: [ 1527.984530][ C1] [ 1527.987434][ C1] __schedule+0x1190/0x5de0 [ 1527.991916][ C1] ? __pfx___schedule+0x10/0x10 [ 1527.996752][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1528.002095][ C1] preempt_schedule_common+0x44/0xc0 [ 1528.007351][ C1] preempt_schedule_thunk+0x16/0x30 [ 1528.012528][ C1] _raw_spin_unlock+0x3e/0x50 [ 1528.017176][ C1] filemap_map_pages+0xe15/0x1670 [ 1528.022178][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1528.027611][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1528.033040][ C1] do_pte_missing+0xe36/0x3ba0 [ 1528.037777][ C1] ? find_held_lock+0x2b/0x80 [ 1528.042426][ C1] ? __handle_mm_fault+0x14fd/0x2a50 [ 1528.047685][ C1] __handle_mm_fault+0x152a/0x2a50 [ 1528.052772][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1528.058202][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1528.063633][ C1] ? find_held_lock+0x2b/0x80 [ 1528.068284][ C1] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1528.074333][ C1] handle_mm_fault+0x589/0xd10 [ 1528.079076][ C1] __get_user_pages+0x551/0x34a0 [ 1528.083988][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1528.089341][ C1] populate_vma_page_range+0x267/0x3f0 [ 1528.094775][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1528.100725][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1528.106500][ C1] ? do_mmap+0x69c/0x1210 [ 1528.110801][ C1] __mm_populate+0x1d8/0x380 [ 1528.115375][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1528.120465][ C1] ? up_write+0x1b2/0x520 [ 1528.124764][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1528.129335][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1528.134430][ C1] ? find_held_lock+0x2b/0x80 [ 1528.139079][ C1] ? find_held_lock+0x2b/0x80 [ 1528.143728][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 1528.148378][ C1] __x64_sys_mmap+0x125/0x190 [ 1528.153028][ C1] do_syscall_64+0xcd/0x4c0 [ 1528.157506][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.163367][ C1] RIP: 0033:0x7f057678ebe9 [ 1528.167762][ C1] RSP: 002b:00007f0577571038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1528.176140][ C1] RAX: ffffffffffffffda RBX: 00007f05769c5fa0 RCX: 00007f057678ebe9 [ 1528.184079][ C1] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1528.192019][ C1] RBP: 00007f0576811e19 R08: ffffffffffffffff R09: 0000000094eb2000 [ 1528.199968][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1528.207908][ C1] R13: 00007f05769c6038 R14: 00007f05769c5fa0 R15: 00007fff1cf84f78 [ 1528.215854][ C1] [ 1528.218845][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10551 jiffies! g82513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1528.231135][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=129741 [ 1528.239075][ C1] rcu: rcu_preempt kthread starved for 10557 jiffies! g82513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1528.250404][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1528.260344][ C1] rcu: RCU grace-period kthread stack dump: [ 1528.266210][ C1] task:rcu_preempt state:I stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1528.278089][ C1] Call Trace: [ 1528.281346][ C1] [ 1528.284252][ C1] __schedule+0x1190/0x5de0 [ 1528.288735][ C1] ? __pfx___schedule+0x10/0x10 [ 1528.293570][ C1] ? find_held_lock+0x2b/0x80 [ 1528.298220][ C1] ? schedule+0x2d7/0x3a0 [ 1528.302523][ C1] schedule+0xe7/0x3a0 [ 1528.306561][ C1] schedule_timeout+0x123/0x290 [ 1528.311380][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1528.316728][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1528.321987][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1528.327763][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1528.333195][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1528.337930][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1528.343185][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1528.348356][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1528.353270][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1528.358092][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1528.363880][ C1] rcu_gp_kthread+0x270/0x380 [ 1528.368539][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1528.373716][ C1] ? rcu_is_watching+0x12/0xc0 [ 1528.378453][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1528.383622][ C1] ? __kthread_parkme+0x19e/0x250 [ 1528.388635][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1528.393802][ C1] kthread+0x3c2/0x780 [ 1528.397841][ C1] ? __pfx_kthread+0x10/0x10 [ 1528.402404][ C1] ? rcu_is_watching+0x12/0xc0 [ 1528.407141][ C1] ? __pfx_kthread+0x10/0x10 [ 1528.411702][ C1] ret_from_fork+0x5d4/0x6f0 [ 1528.416262][ C1] ? __pfx_kthread+0x10/0x10 [ 1528.420820][ C1] ret_from_fork_asm+0x1a/0x30 [ 1528.425563][ C1] [ 1528.428556][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1528.434848][ C1] CPU: 1 UID: 0 PID: 1297 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1528.443852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1528.453878][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1528.460263][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 be 00 f6 48 89 df e8 0e 12 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 0e f1 f5 65 8b 05 be ab 3f 08 85 c0 74 16 5b [ 1528.479841][ C1] RSP: 0000:ffffc900048bf978 EFLAGS: 00000246 [ 1528.485878][ C1] RAX: 0000000000000002 RBX: ffffffff9b115ba0 RCX: 0000000000000002 [ 1528.493820][ C1] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 1528.501760][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 1528.509698][ C1] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: ffffffff9b115ca8 [ 1528.517636][ C1] R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003 [ 1528.525587][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 1528.534487][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1528.541042][ C1] CR2: 00002000000a5030 CR3: 000000004f227000 CR4: 00000000003526f0 [ 1528.548983][ C1] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1528.556933][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1528.564872][ C1] Call Trace: [ 1528.568121][ C1] [ 1528.571024][ C1] uart_write+0x4c1/0xb30 [ 1528.575335][ C1] handle_tx+0x204/0x630 [ 1528.579554][ C1] dev_hard_start_xmit+0x94/0x740 [ 1528.584552][ C1] __dev_queue_xmit+0xa46/0x4490 [ 1528.589461][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1528.594642][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 1528.600430][ C1] ? rcu_is_watching+0x12/0xc0 [ 1528.605163][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1528.610514][ C1] ? __schedule+0x11a3/0x5de0 [ 1528.615160][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1528.620087][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1528.625080][ C1] ? find_held_lock+0x2b/0x80 [ 1528.629729][ C1] ? skb_dequeue+0x126/0x180 [ 1528.634293][ C1] ? find_held_lock+0x2b/0x80 [ 1528.638944][ C1] ? rcu_is_watching+0x12/0xc0 [ 1528.643682][ C1] tx+0xcc/0x190 [ 1528.647201][ C1] ? __pfx_tx+0x10/0x10 [ 1528.651331][ C1] kthread+0x1e4/0x3e0 [ 1528.655374][ C1] ? find_held_lock+0x2b/0x80 [ 1528.660027][ C1] ? __pfx_kthread+0x10/0x10 [ 1528.664597][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1528.670373][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1528.675548][ C1] ? __kthread_parkme+0x19e/0x250 [ 1528.680544][ C1] ? __pfx_kthread+0x10/0x10 [ 1528.685102][ C1] kthread+0x3c2/0x780 [ 1528.689141][ C1] ? __pfx_kthread+0x10/0x10 [ 1528.693700][ C1] ? rcu_is_watching+0x12/0xc0 [ 1528.698434][ C1] ? __pfx_kthread+0x10/0x10 [ 1528.702993][ C1] ret_from_fork+0x5d4/0x6f0 [ 1528.707551][ C1] ? __pfx_kthread+0x10/0x10 [ 1528.712110][ C1] ret_from_fork_asm+0x1a/0x30 [ 1528.716861][ C1]