last executing test programs: 17m6.566421271s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x100) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$inet(0x2, 0xa, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}]}}]}, 0x38}}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af9234751", 0x78}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffff6a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 17m5.447117672s ago: executing program 0 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) msgctl$IPC_RMID(r1, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000240), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0}], 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0x5, 0xa20, 0x5, 0xb, 0xc, 0x5, 0x80, 0xe72, 0xb0c, 0x9, 0x35, 0x27, {0x6fc, 0x8001}, 0x3, 0xed}}) ioctl$TCFLSH(r3, 0x540b, 0x2) msgsnd(r1, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000000008010500000000000000000a0000020900010073797a300000000006000240000500000500"], 0x34}, 0x1, 0x0, 0x0, 0x4004880}, 0x8040) 16m48.904817151s ago: executing program 32 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) msgctl$IPC_RMID(r1, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000240), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0}], 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0x5, 0xa20, 0x5, 0xb, 0xc, 0x5, 0x80, 0xe72, 0xb0c, 0x9, 0x35, 0x27, {0x6fc, 0x8001}, 0x3, 0xed}}) ioctl$TCFLSH(r3, 0x540b, 0x2) msgsnd(r1, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000000008010500000000000000000a0000020900010073797a300000000006000240000500000500"], 0x34}, 0x1, 0x0, 0x0, 0x4004880}, 0x8040) 16m37.583467949s ago: executing program 1 (id=43): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1106000, 0x1000, 0xe9, 0x6}, 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) gettid() bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x1) write(r1, &(0x7f0000000380)="ecc31b33e3db531e4b5ea24c56aa8ad6ec918d5b75014e963046a7bd5a", 0x1d) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 16m35.090462371s ago: executing program 1 (id=44): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0xb361ae6, 0x721, 0xfd, 0x7], 0xffffffffffffe24, 0x0, 0x0, [{}, {}]}, 0x78) ioctl$BLKPG(r1, 0x1269, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) fsopen(0x0, 0x1) 16m33.767893114s ago: executing program 1 (id=48): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x2) fsopen(&(0x7f0000000340)='ceph\x00', 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r7, 0x4b6a, 0x0) 16m30.490213104s ago: executing program 1 (id=50): socket(0x1e, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff05) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xf, 0x0, &(0x7f0000000100)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) 16m25.555293279s ago: executing program 1 (id=56): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x1}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x12c9bc095037d560}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040084) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000004c0)={r5, 0x63, 0x0, 0x0, 0x0, [0x0], [], [0x3, 0xe]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={r6}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06464ce, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, [], [0x2], [], [0x0, 0x0, 0x1]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x2000402) lseek(r8, 0x0, 0x3) 16m22.028925647s ago: executing program 1 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000180)={0x1, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x8, &(0x7f00000001c0)={[{@nofavordynmods}]}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000080)={0x0, 0x9e6}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f00000001c0)={0x0, 0x5, 0x5001, 0x1}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 16m6.719989769s ago: executing program 33 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000180)={0x1, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x8, &(0x7f00000001c0)={[{@nofavordynmods}]}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000080)={0x0, 0x9e6}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f00000001c0)={0x0, 0x5, 0x5001, 0x1}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 17.619041192s ago: executing program 5 (id=1772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 16.224801651s ago: executing program 5 (id=1776): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff96) sysfs$2(0x2, 0xde, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(r1, &(0x7f0000000380)=&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)}}, &(0x7f00000003c0)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23894) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180800dc58000200000000ffff0000004681f941a4846eaf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 14.856804319s ago: executing program 5 (id=1778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80800) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={@null, 0xa, 'ip_vti0\x00'}) set_mempolicy(0x1, 0x0, 0xd9b) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x8c}}, 0x0) set_mempolicy(0x8000, 0x0, 0xfffffffffffffff0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r3, 0x0, 0x0) socket(0x8, 0x5, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 12.384089712s ago: executing program 2 (id=1781): socket$kcm(0x10, 0xa, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40488e4) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 11.687772836s ago: executing program 2 (id=1782): socket$kcm(0x10, 0xa, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xffffffffff600000, 0x0) sendmmsg$inet(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40488e4) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 11.687228248s ago: executing program 4 (id=1783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 11.546078115s ago: executing program 3 (id=1784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a40), r0) r2 = socket(0x18, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a80)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x404c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x44000}, 0x93) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TCXONC(r8, 0x540a, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x28, 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x28, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 9.128608049s ago: executing program 3 (id=1785): socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000b080001400000001208000340000000000800"], 0x122}}, 0x4008090) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fspick(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000001280)}, 0x20054892) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) 9.128131269s ago: executing program 2 (id=1786): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 9.093251343s ago: executing program 4 (id=1788): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a01040000000000000000020000000900010073797a30000000000900020073797a3289000000001400000011000100"/84], 0x54}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000440)={{0x6, 0x4, 0x3, 0x9, '\x00', 0x4}, 0x1, [0x4, 0x9, 0x5, 0xf, 0x6, 0x7, 0xfffffffffffffffb, 0x0, 0xfffffffffffffc00, 0xfffffffffffffffe, 0x6, 0x9, 0x5, 0xe0df, 0x7, 0x3, 0x6, 0xfc0f, 0x8, 0x1000, 0x3, 0x7, 0x9, 0xf1a, 0x5, 0xa26, 0x8, 0x80, 0x3, 0x1, 0x100000000, 0x27f, 0x40, 0x4, 0x9, 0x7, 0xb1a, 0x2, 0x3, 0x800, 0x200, 0x2, 0x5b9, 0x3, 0x8, 0xfffffffffffffffe, 0x8, 0x5, 0x0, 0x401, 0xffff, 0x6, 0x2, 0x0, 0xfd, 0x6fc, 0x80000000, 0xb, 0xff, 0x4, 0x101, 0x1, 0x8, 0xeda, 0x5, 0x1, 0x0, 0x4c, 0x1ff, 0xfffffffffffff33a, 0x8000, 0x7, 0xb3a, 0x5, 0x7fffffff, 0x1, 0x2, 0x5, 0x9, 0x7, 0xe28, 0x7, 0x36b, 0x800611b, 0x7fff, 0x15, 0x7, 0x668b3653, 0x1, 0x8, 0x10, 0x65a519f6, 0x9f, 0x120bcaa3, 0x9, 0x3, 0x5d, 0xffffffff00000001, 0x0, 0x405b80a5, 0x200000, 0xd1e, 0x400, 0x40, 0x8, 0x4, 0x3, 0x3, 0x7, 0x9, 0x4, 0xfffffffffffffffe, 0x2, 0x3, 0xd, 0x6f, 0x8, 0x4, 0x8000000000000001, 0x1, 0x81, 0x7, 0x1, 0x8, 0x80, 0xffffffff, 0x101, 0x2]}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c0005006c000000000000000c0002000000000000000000040007800c0008000000000000000000080001007f"], 0x90}, 0x1, 0x0, 0x0, 0x884}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 7.912850263s ago: executing program 2 (id=1789): socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x101) msgsnd(0x0, 0x0, 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1, 0x2c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x8, 0x4, 0xf066}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1556071, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x40) msgrcv(r3, 0x0, 0x0, 0x1, 0x5800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 6.793117719s ago: executing program 4 (id=1791): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480202, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x803, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000950) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3, 0xaf, 0x1, 0x5, 0x2, 0xa}) unshare(0x6a040000) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x1fe, 0x1c14, 0xffffffff, 0x42, 0x2]}, &(0x7f00000002c0)=0x54) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCXONC(r0, 0x5608, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) fchmod(r8, 0x20049549e2a2d659) fchown(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0x7be1, &(0x7f0000000080)={0x0, 0xf420, 0x13100, 0xfffffffa, 0x45, 0x0, r8}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x1) 6.769798664s ago: executing program 3 (id=1792): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0xc1086201, 0x20000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r7, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) recvmsg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) 6.229327955s ago: executing program 6 (id=1793): socket$kcm(0x10, 0xa, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40488e4) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 5.806142744s ago: executing program 6 (id=1794): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x20e, 0x2, 0x0, {{0x500, 0xcd, 0x500, 0xbf, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x9b\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20e) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x3, 0x0, 0x0, 0x0, "0f0390fc31f3da6d5c430000ffffff017fffde00cc4ded69ba6fbf01fa9a9d32c7627ffe7a5400000000000000060000000000000000deff00", 0x1}, 0x60) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800000}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000180)={0x401, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000480), 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 4.758078509s ago: executing program 6 (id=1795): r0 = socket(0xa, 0x40000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000280), &(0x7f0000000300)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@can_delroute={0x2c, 0x19, 0x1, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "8ab30d47c869f2cf"}, 0x6}}]}, 0x2c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 4.754604923s ago: executing program 4 (id=1796): socket$kcm(0x10, 0xa, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xffffffffff600000, 0x0) sendmmsg$inet(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40488e4) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 4.74647614s ago: executing program 2 (id=1797): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x28, r1, 0xa120c752484010ff, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x810) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x14, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0xc4401) socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 4.68017418s ago: executing program 5 (id=1798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 4.67805074s ago: executing program 3 (id=1799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 2.535238632s ago: executing program 6 (id=1800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r6, 0x409, 0xb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x80) 2.531728807s ago: executing program 4 (id=1801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) socket$inet_udplite(0x2, 0x2, 0x88) r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 2.255224434s ago: executing program 5 (id=1802): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a01040000000000000000020000000900010073797a30000000000900020073797a3289000000001400000011000100"/84], 0x54}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000440)={{0x6, 0x4, 0x3, 0x9, '\x00', 0x4}, 0x1, [0x4, 0x9, 0x5, 0xf, 0x6, 0x7, 0xfffffffffffffffb, 0x0, 0xfffffffffffffc00, 0xfffffffffffffffe, 0x6, 0x9, 0x5, 0xe0df, 0x7, 0x3, 0x6, 0xfc0f, 0x8, 0x1000, 0x3, 0x7, 0x9, 0xf1a, 0x5, 0xa26, 0x8, 0x80, 0x3, 0x1, 0x100000000, 0x27f, 0x40, 0x4, 0x9, 0x7, 0xb1a, 0x2, 0x3, 0x800, 0x200, 0x2, 0x5b9, 0x3, 0x8, 0xfffffffffffffffe, 0x8, 0x5, 0x0, 0x401, 0xffff, 0x6, 0x2, 0x0, 0xfd, 0x6fc, 0x80000000, 0xb, 0xff, 0x4, 0x101, 0x1, 0x8, 0xeda, 0x5, 0x1, 0x0, 0x4c, 0x1ff, 0xfffffffffffff33a, 0x8000, 0x7, 0xb3a, 0x5, 0x7fffffff, 0x1, 0x2, 0x5, 0x9, 0x7, 0xe28, 0x7, 0x36b, 0x800611b, 0x7fff, 0x15, 0x7, 0x668b3653, 0x1, 0x8, 0x10, 0x65a519f6, 0x9f, 0x120bcaa3, 0x9, 0x3, 0x5d, 0xffffffff00000001, 0x0, 0x405b80a5, 0x200000, 0xd1e, 0x400, 0x40, 0x8, 0x4, 0x3, 0x3, 0x7, 0x9, 0x4, 0xfffffffffffffffe, 0x2, 0x3, 0xd, 0x6f, 0x8, 0x4, 0x8000000000000001, 0x1, 0x81, 0x7, 0x1, 0x8, 0x80, 0xffffffff, 0x101, 0x2]}) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c0005006c000000000000000c0002000000000000000000040007800c0008000000000000000000080001007f"], 0x90}, 0x1, 0x0, 0x0, 0x884}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 2.252092482s ago: executing program 3 (id=1803): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x24000060) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000400)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r5, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000440)={0x8, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r4, 0x0, &(0x7f0000883000/0x3000)=nil, 0x3000, 0x2}) clock_settime(0x2, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$kcm(0x2b, 0x1, 0x0) 1.004212875s ago: executing program 6 (id=1804): socket$kcm(0x10, 0xa, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40488e4) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 1.00343353s ago: executing program 4 (id=1805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @pix_mp={0x8, 0x41, 0x0, 0x3, 0xb, [{0xaef, 0x1}, {0x4, 0x3}, {0xffffffff, 0x5}, {0x9, 0x10}, {0x5, 0x2}, {0x8, 0x6}, {0x100, 0x9}, {0x0, 0x7}], 0xb, 0x7, 0x7, 0x2, 0x5}}, 0x8}) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) iopl(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 518.066962ms ago: executing program 6 (id=1806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/173, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) tkill(r1, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, r7, r0], &(0x7f0000000700)=[{0x1, 0x4, 0x9, 0x7}], 0x10, 0x6, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) 285.04488ms ago: executing program 3 (id=1807): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB="9feb010018000000000000007e0000007e00000007000000030000005fa5bb965e55c6510000001202000000040000000700000f020000000308000000000000030000000500000000000080050000000400000008000000bf00000004000000ffffff7f000400000100000001000000000000000400000006000000b309"], &(0x7f00000024c0)=""/223, 0x9f, 0xdf, 0x1, 0x3, 0x10000, @value}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x0, "9048d8d5d59be87d48b421df09030b734bbd3767161ed499223689aa39646fd5"}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r4, 0x0, 0x23b) shutdown(r1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x200000, 0x81, 0x3ff, 0x1}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r7, 0x5602, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x8001}, 0x8) 154.800449ms ago: executing program 5 (id=1808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80800) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={@null, 0xa, 'ip_vti0\x00'}) set_mempolicy(0x1, 0x0, 0xd9b) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x8c}}, 0x0) set_mempolicy(0x8000, 0x0, 0xfffffffffffffff0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r3, 0x0, 0x0) socket(0x8, 0x5, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1809): openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0xc401, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xd1ce, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b26, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_open_dev$loop(0x0, 0xfffffffffffff751, 0x2101) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002880)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000500)={0xd, @output}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r7, 0x1, 0xff1f0000, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="500007a6", @ANYRES16=r7, @ANYBLOB="000226bd7000fddbdf250b000000340001800600010002000000080003007f0000010800060008000000060001000200000008000300e000000108000300ac1414270800020002000000"], 0x50}}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400e90002060500000000000000f5000000000005000400fd0000000900020073797a31000000000c00078008001740040007"], 0x34}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): sadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 521.980954][T10044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 522.235820][T10046] hub 2-0:1.0: USB hub found [ 522.242668][T10046] hub 2-0:1.0: 1 port detected [ 522.360370][ T29] audit: type=1400 audit(1737373032.011:701): avc: denied { node_bind } for pid=10012 comm="syz.6.742" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 522.394377][ T29] audit: type=1400 audit(1737373032.021:702): avc: denied { connect } for pid=10012 comm="syz.6.742" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.770068][ T29] audit: type=1400 audit(1737373032.021:703): avc: denied { setopt } for pid=10012 comm="syz.6.742" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.793067][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.827686][ T29] audit: type=1400 audit(1737373032.021:704): avc: denied { write } for pid=10012 comm="syz.6.742" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.944708][ T29] audit: type=1400 audit(1737373033.251:705): avc: denied { listen } for pid=10009 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 523.020723][ T29] audit: type=1400 audit(1737373033.261:706): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 523.385674][ T29] audit: type=1400 audit(1737373033.381:707): avc: denied { write } for pid=10030 comm="syz.4.745" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.444053][ T29] audit: type=1400 audit(1737373034.031:708): avc: denied { name_bind } for pid=10033 comm="syz.3.746" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 523.666351][ T968] IPVS: starting estimator thread 0... [ 523.772085][T10059] IPVS: using max 45 ests per chain, 108000 per kthread [ 524.216836][T10065] netlink: 'syz.2.750': attribute type 6 has an invalid length. [ 524.227077][T10075] fuse: Bad value for 'fd' [ 525.164119][T10069] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 526.164389][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 526.164407][ T29] audit: type=1400 audit(1737373038.881:716): avc: denied { create } for pid=10093 comm="syz.6.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 527.031995][ T29] audit: type=1400 audit(1737373039.011:717): avc: denied { mount } for pid=10095 comm="syz.4.758" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 528.044881][ T29] audit: type=1400 audit(1737373040.141:718): avc: denied { mounton } for pid=10089 comm="syz.3.756" path="/171/file0" dev="tmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 528.364345][ T29] audit: type=1400 audit(1737373040.151:719): avc: denied { mount } for pid=10089 comm="syz.3.756" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 528.585759][ T29] audit: type=1400 audit(1737373040.761:720): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 528.657636][ T29] audit: type=1400 audit(1737373041.361:721): avc: denied { create } for pid=10111 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 528.738814][T10114] NILFS (loop4): device size too small [ 529.726661][T10121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.762'. [ 530.702082][ T29] audit: type=1400 audit(1737373043.391:722): avc: denied { ioctl } for pid=10113 comm="syz.3.761" path="socket:[22434]" dev="sockfs" ino=22434 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 531.912451][T10129] fuse: Bad value for 'fd' [ 532.300515][ T29] audit: type=1400 audit(1737373045.001:723): avc: denied { connect } for pid=10132 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 532.350904][ T29] audit: type=1400 audit(1737373045.011:724): avc: denied { execute } for pid=10123 comm="syz.4.764" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 532.390036][ T29] audit: type=1400 audit(1737373045.061:725): avc: denied { mount } for pid=10123 comm="syz.4.764" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 532.574280][ T29] audit: type=1400 audit(1737373045.281:726): avc: denied { read } for pid=10139 comm="syz.2.768" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 532.574686][T10136] can0: slcan on ttyS3. [ 532.596818][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.727583][ T29] audit: type=1400 audit(1737373045.281:727): avc: denied { open } for pid=10139 comm="syz.2.768" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 533.322781][ T29] audit: type=1400 audit(1737373045.291:728): avc: denied { ioctl } for pid=10139 comm="syz.2.768" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 533.347234][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.445829][ T29] audit: type=1400 audit(1737373045.381:729): avc: denied { accept } for pid=10132 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 533.515691][ T29] audit: type=1400 audit(1737373045.381:730): avc: denied { write } for pid=10132 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.616540][ T29] audit: type=1400 audit(1737373046.141:731): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 533.668034][T10144] can0 (unregistered): slcan off ttyS3. [ 534.952708][ T29] audit: type=1400 audit(1737373047.661:732): avc: denied { create } for pid=10163 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 535.513362][T10168] NILFS (loop5): device size too small [ 536.529760][T10186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.303632][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 537.303648][ T29] audit: type=1400 audit(1737373050.001:736): avc: denied { write } for pid=10154 comm="syz.2.772" path="socket:[23692]" dev="sockfs" ino=23692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 538.080994][ T29] audit: type=1400 audit(1737373050.011:737): avc: denied { create } for pid=10154 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 538.143086][ T29] audit: type=1400 audit(1737373050.011:738): avc: denied { getopt } for pid=10154 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 538.264407][T10209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 538.565423][ T29] audit: type=1400 audit(1737373050.071:739): avc: denied { read } for pid=10201 comm="syz.3.778" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 538.658653][ T29] audit: type=1400 audit(1737373050.071:740): avc: denied { open } for pid=10201 comm="syz.3.778" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 538.681639][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.684694][T10215] tipc: Started in network mode [ 538.727364][ T29] audit: type=1400 audit(1737373050.081:741): avc: denied { ioctl } for pid=10201 comm="syz.3.778" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 538.804322][T10215] tipc: Node identity ac14140f, cluster identity 4711 [ 538.863542][ T29] audit: type=1400 audit(1737373051.521:742): avc: denied { ioctl } for pid=10214 comm="syz.5.782" path="socket:[23699]" dev="sockfs" ino=23699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.710429][T10215] tipc: New replicast peer: 255.255.255.255 [ 539.805458][T10215] tipc: Enabled bearer , priority 10 [ 539.961448][ T29] audit: type=1400 audit(1737373051.531:743): avc: denied { getopt } for pid=10214 comm="syz.5.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 540.348726][T10215] random: crng reseeded on system resumption [ 540.362342][ T29] audit: type=1400 audit(1737373052.301:744): avc: denied { read } for pid=10216 comm="syz.6.783" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 540.641119][T10240] syz.4.785: attempt to access beyond end of device [ 540.641119][T10240] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 540.654987][T10240] hfsplus: unable to find HFS+ superblock [ 541.106198][ T5865] tipc: Node number set to 2886997007 [ 541.251483][ T29] audit: type=1400 audit(1737373052.301:745): avc: denied { open } for pid=10216 comm="syz.6.783" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 542.524735][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 542.524751][ T29] audit: type=1400 audit(1737373055.231:760): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 543.441981][ T29] audit: type=1400 audit(1737373056.151:761): avc: denied { write } for pid=10267 comm="syz.3.791" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 543.689032][T10279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.582849][T10287] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 544.590279][T10287] overlayfs: failed to set xattr on upper [ 544.596122][T10287] overlayfs: ...falling back to redirect_dir=nofollow. [ 544.603053][T10287] overlayfs: ...falling back to index=off. [ 544.608901][T10287] overlayfs: ...falling back to uuid=null. [ 544.962109][ T29] audit: type=1400 audit(1737373057.271:762): avc: denied { mount } for pid=10281 comm="syz.3.794" name="/" dev="ramfs" ino=22799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 545.158420][ T29] audit: type=1400 audit(1737373057.281:763): avc: denied { mounton } for pid=10281 comm="syz.3.794" path="/180/file0/bus" dev="ramfs" ino=22802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 545.182097][ T29] audit: type=1400 audit(1737373057.331:764): avc: denied { mount } for pid=10281 comm="syz.3.794" name="/" dev="overlay" ino=22800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 545.264189][ T29] audit: type=1400 audit(1737373057.351:765): avc: denied { create } for pid=10281 comm="syz.3.794" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 545.286836][ T29] audit: type=1400 audit(1737373057.371:766): avc: denied { link } for pid=10281 comm="syz.3.794" name="file1" dev="overlay" ino=22806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 545.544955][ T29] audit: type=1400 audit(1737373057.381:767): avc: denied { setattr } for pid=10281 comm="syz.3.794" name="#b" dev="ramfs" ino=22807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 545.586402][ T29] audit: type=1400 audit(1737373057.391:768): avc: denied { rename } for pid=10281 comm="syz.3.794" name="#b" dev="ramfs" ino=22807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 545.804304][T10299] NILFS (loop3): device size too small [ 546.010692][T10301] befs: (nbd6): No write support. Marking filesystem read-only [ 546.020650][T10301] syz.6.798: attempt to access beyond end of device [ 546.020650][T10301] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 546.033667][T10301] befs: (nbd6): unable to read superblock [ 546.612318][ T29] audit: type=1400 audit(1737373057.901:769): avc: denied { mounton } for pid=10284 comm="syz.4.793" path="/proc/772/task" dev="proc" ino=23857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 547.593262][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 547.593281][ T29] audit: type=1400 audit(1737373060.241:782): avc: denied { create } for pid=10306 comm="syz.6.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 549.027037][ T29] audit: type=1400 audit(1737373061.031:783): avc: denied { create } for pid=10316 comm="syz.5.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 549.857549][ T29] audit: type=1400 audit(1737373062.541:784): avc: denied { bind } for pid=10331 comm="syz.6.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 549.903063][ T29] audit: type=1400 audit(1737373062.541:785): avc: denied { listen } for pid=10331 comm="syz.6.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 549.993211][ T29] audit: type=1400 audit(1737373062.651:786): avc: denied { read } for pid=10335 comm="syz.3.806" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 550.031484][T10340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 550.475185][ T29] audit: type=1400 audit(1737373062.651:787): avc: denied { open } for pid=10335 comm="syz.3.806" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 550.526922][ T29] audit: type=1400 audit(1737373062.701:788): avc: denied { ioctl } for pid=10335 comm="syz.3.806" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 550.603814][ T29] audit: type=1400 audit(1737373062.761:789): avc: denied { set_context_mgr } for pid=10335 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 550.642179][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 551.228958][ T29] audit: type=1400 audit(1737373063.471:790): avc: denied { map } for pid=10335 comm="syz.3.806" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 551.263185][ T29] audit: type=1400 audit(1737373063.471:791): avc: denied { call } for pid=10335 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 551.802037][ T5830] usb 3-1: device not accepting address 5, error -71 [ 551.902447][T10350] NILFS (loop6): device size too small [ 553.214791][ T29] audit: type=1400 audit(1737373065.871:792): avc: denied { bind } for pid=10352 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 553.707228][ T29] audit: type=1400 audit(1737373065.871:793): avc: denied { name_bind } for pid=10352 comm="syz.3.813" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 553.755595][ T29] audit: type=1400 audit(1737373065.881:794): avc: denied { node_bind } for pid=10352 comm="syz.3.813" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 553.810584][T10369] Cannot find add_set index 0 as target [ 554.017260][ T29] audit: type=1400 audit(1737373065.881:795): avc: denied { listen } for pid=10352 comm="syz.3.813" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 554.148144][ T29] audit: type=1400 audit(1737373065.891:796): avc: denied { connect } for pid=10352 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 554.260854][ T29] audit: type=1400 audit(1737373065.891:797): avc: denied { name_connect } for pid=10352 comm="syz.3.813" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 554.318912][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 554.711361][ T29] audit: type=1400 audit(1737373065.901:798): avc: denied { setopt } for pid=10352 comm="syz.3.813" laddr=::1 lport=51466 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 554.869482][ T29] audit: type=1400 audit(1737373065.901:799): avc: denied { accept } for pid=10352 comm="syz.3.813" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 555.390372][T10383] netlink: 'syz.4.818': attribute type 11 has an invalid length. [ 555.644820][ T29] audit: type=1326 audit(1737373066.361:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.5.812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x0 [ 555.710360][ T29] audit: type=1400 audit(1737373066.731:801): avc: denied { name_bind } for pid=10351 comm="syz.2.811" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 556.988477][T10399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.744696][T10405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.947231][ T29] audit: type=1400 audit(1737373071.661:802): avc: denied { read } for pid=10410 comm="syz.4.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 559.451022][ T29] audit: type=1400 audit(1737373071.751:803): avc: denied { getopt } for pid=10410 comm="syz.4.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 559.907184][T10421] orangefs: client-core tried to read wrong size [ 559.910433][ T29] audit: type=1400 audit(1737373072.621:804): avc: denied { read } for pid=10419 comm="syz.4.827" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 560.419194][ T29] audit: type=1400 audit(1737373072.621:805): avc: denied { open } for pid=10419 comm="syz.4.827" path="/190/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 560.472294][T10421] syz.4.827 (10421): drop_caches: 2 [ 560.478071][T10421] syz.4.827 (10421): drop_caches: 2 [ 560.841377][ T29] audit: type=1400 audit(1737373072.881:806): avc: denied { write } for pid=10417 comm="syz.2.828" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 561.052883][ T29] audit: type=1400 audit(1737373072.881:807): avc: denied { open } for pid=10417 comm="syz.2.828" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 561.960445][ T29] audit: type=1400 audit(1737373072.881:808): avc: denied { ioctl } for pid=10417 comm="syz.2.828" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 562.206401][ T29] audit: type=1400 audit(1737373074.511:809): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 562.272124][ T29] audit: type=1400 audit(1737373074.591:810): avc: denied { mount } for pid=10427 comm="syz.6.830" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 562.337214][ T29] audit: type=1400 audit(1737373074.651:811): avc: denied { remount } for pid=10427 comm="syz.6.830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 562.758183][T10445] can0: slcan on ptm0. [ 563.342960][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.349787][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.682729][T10443] ceph: No mds server is up or the cluster is laggy [ 563.694360][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 563.700729][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 563.724499][ T48] IPVS: starting estimator thread 0... [ 563.779137][T10439] can0 (unregistered): slcan off ptm0. [ 564.002238][T10451] IPVS: using max 26 ests per chain, 62400 per kthread [ 564.862656][ T968] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 565.383209][ T968] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 565.397451][ T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.408720][ T968] usb 5-1: Product: syz [ 565.419228][ T968] usb 5-1: Manufacturer: syz [ 565.482266][ T968] usb 5-1: SerialNumber: syz [ 566.144554][ T968] usb 5-1: config 0 descriptor?? [ 566.498355][ T968] hso 5-1:0.0: Failed to find BULK IN ep [ 566.504726][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 566.504741][ T29] audit: type=1326 audit(1737373079.221:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb385d29 code=0x7fc00000 [ 566.582913][ T968] usb-storage 5-1:0.0: USB Mass Storage device detected [ 566.591190][T10477] geneve2: entered promiscuous mode [ 566.752199][T10458] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 567.475417][T10457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.567596][ T968] usb 5-1: USB disconnect, device number 5 [ 568.997755][ T29] audit: type=1326 audit(1737373081.711:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bbb385d29 code=0x7fc00000 [ 570.313539][T10506] ubi0: attaching mtd0 [ 570.327620][T10506] ubi0: scanning is finished [ 570.332373][T10506] ubi0: empty MTD device detected [ 570.996999][T10506] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 571.853533][ T29] audit: type=1400 audit(1737373084.571:821): avc: denied { ioctl } for pid=10519 comm="syz.3.851" path="socket:[23328]" dev="sockfs" ino=23328 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 571.962394][ T29] audit: type=1400 audit(1737373084.571:822): avc: denied { setopt } for pid=10519 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 572.088714][ T29] audit: type=1400 audit(1737373084.571:823): avc: denied { write } for pid=10519 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 572.178973][T10522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.187051][ T29] audit: type=1400 audit(1737373084.771:824): avc: denied { create } for pid=10519 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 572.260153][ T29] audit: type=1400 audit(1737373084.781:825): avc: denied { ioctl } for pid=10519 comm="syz.3.851" path="socket:[23340]" dev="sockfs" ino=23340 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 572.326329][T10522] bond0: (slave rose0): Enslaving as an active interface with an up link [ 572.365448][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz.5.853'. [ 572.422691][ T29] audit: type=1400 audit(1737373085.141:826): avc: denied { read } for pid=10528 comm="syz.5.853" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 572.587386][ T29] audit: type=1400 audit(1737373085.141:827): avc: denied { open } for pid=10528 comm="syz.5.853" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 573.032058][ T29] audit: type=1400 audit(1737373085.281:828): avc: denied { bind } for pid=10528 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 573.223719][ T29] audit: type=1400 audit(1737373085.451:829): avc: denied { listen } for pid=10528 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 573.982135][ T29] audit: type=1400 audit(1737373085.451:830): avc: denied { create } for pid=10528 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 574.277095][T10557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.589231][T10566] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.471803][T10569] 9pnet_virtio: no channels available for device syz [ 577.518848][T10581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 580.650178][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 580.650197][ T29] audit: type=1400 audit(1737373092.891:836): avc: denied { accept } for pid=10599 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 581.998916][T10618] pimreg: entered allmulticast mode [ 582.112997][ T29] audit: type=1400 audit(1737373094.821:837): avc: denied { setopt } for pid=10613 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 582.113039][ T29] audit: type=1400 audit(1737373094.821:838): avc: denied { write } for pid=10613 comm="syz.2.869" path="socket:[24359]" dev="sockfs" ino=24359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 583.286819][T10637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.838720][ T29] audit: type=1400 audit(1737373096.551:839): avc: denied { sys_module } for pid=10625 comm="syz.3.874" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 584.527524][ T29] audit: type=1326 audit(1737373097.241:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10649 comm="syz.3.876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb385d29 code=0x0 [ 584.550410][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.026799][ T29] audit: type=1400 audit(1737373097.381:841): avc: denied { write } for pid=10649 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 586.072584][ T29] audit: type=1400 audit(1737373098.781:842): avc: denied { write } for pid=10668 comm="syz.3.879" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 586.355782][ T29] audit: type=1400 audit(1737373098.781:843): avc: denied { append } for pid=10668 comm="syz.3.879" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.530996][ T29] audit: type=1400 audit(1737373098.781:844): avc: denied { map } for pid=10668 comm="syz.3.879" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.600691][ T29] audit: type=1400 audit(1737373098.781:845): avc: denied { execute } for pid=10668 comm="syz.3.879" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.905382][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.882'. [ 587.494259][ T29] audit: type=1400 audit(1737373100.201:846): avc: denied { read } for pid=10682 comm="syz.5.881" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 587.901110][ T29] audit: type=1400 audit(1737373100.201:847): avc: denied { open } for pid=10682 comm="syz.5.881" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 588.056072][ T29] audit: type=1400 audit(1737373100.201:848): avc: denied { nlmsg_read } for pid=10682 comm="syz.5.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 589.107853][ T29] audit: type=1800 audit(1737373101.461:849): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.884" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 589.129474][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.491549][T10715] input: syz0 as /devices/virtual/input/input14 [ 589.598783][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.887'. [ 589.683292][T10715] bond1: entered promiscuous mode [ 589.688509][T10715] bond1: entered allmulticast mode [ 589.695190][T10715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.906044][ T29] audit: type=1400 audit(1737373102.591:850): avc: denied { read } for pid=5177 comm="acpid" name="event4" dev="devtmpfs" ino=2838 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 590.026759][ T29] audit: type=1400 audit(1737373102.601:851): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2838 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 591.308317][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 591.316614][ T29] audit: type=1400 audit(1737373103.921:858): avc: denied { read } for pid=10729 comm="syz.4.891" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 592.012215][ T29] audit: type=1400 audit(1737373103.981:859): avc: denied { audit_write } for pid=10729 comm="syz.4.891" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 592.231131][ T29] audit: type=1107 audit(1737373103.991:860): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 592.451054][T10745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.224487][ T968] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 594.516178][T10763] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 594.525533][T10763] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 594.534511][T10763] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 594.543440][T10763] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 594.813518][ T29] audit: type=1400 audit(1737373107.191:861): avc: denied { create } for pid=10758 comm="syz.5.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 595.082038][ T968] usb 5-1: Using ep0 maxpacket: 32 [ 595.126047][ T968] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 595.178387][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.182417][T10768] tipc: New replicast peer: 255.255.255.255 [ 595.208351][ T29] audit: type=1400 audit(1737373107.921:862): avc: denied { write } for pid=10762 comm="syz.6.899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 595.264622][ T968] usb 5-1: config 0 descriptor?? [ 595.305960][T10768] tipc: Enabled bearer , priority 10 [ 595.479917][ T968] usb 5-1: can't set config #0, error -71 [ 595.500660][ T968] usb 5-1: USB disconnect, device number 6 [ 595.521801][T10768] random: crng reseeded on system resumption [ 596.892960][ T29] audit: type=1400 audit(1737373108.671:863): avc: denied { ioctl } for pid=10767 comm="syz.2.900" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 596.917751][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.376099][T10788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.948396][ T29] audit: type=1400 audit(1737373110.641:864): avc: denied { getopt } for pid=10783 comm="syz.6.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 598.229494][ T29] audit: type=1400 audit(1737373110.931:865): avc: denied { write } for pid=10795 comm="syz.6.909" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 598.320098][ T29] audit: type=1400 audit(1737373111.011:866): avc: denied { map } for pid=10795 comm="syz.6.909" path="socket:[25785]" dev="sockfs" ino=25785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 598.413440][ T29] audit: type=1400 audit(1737373111.011:867): avc: denied { read } for pid=10795 comm="syz.6.909" path="socket:[25785]" dev="sockfs" ino=25785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 598.487946][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.910'. [ 598.875290][T10807] lo speed is unknown, defaulting to 1000 [ 599.449938][T10805] overlayfs: failed to resolve './file1': -2 [ 599.459113][ T29] audit: type=1400 audit(1737373111.491:868): avc: denied { getopt } for pid=10796 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 599.478403][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.498214][ T29] audit: type=1400 audit(1737373111.521:869): avc: denied { watch_mount } for pid=10801 comm="syz.5.910" path="/126" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 600.882068][T10819] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 601.439422][T10832] lo speed is unknown, defaulting to 1000 [ 602.053717][ T29] audit: type=1400 audit(1737373114.751:870): avc: denied { connect } for pid=10822 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 605.852723][ T968] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 606.682774][T10877] NILFS (loop4): device size too small [ 607.393669][ T968] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 607.406742][ T968] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 607.432080][ T968] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 607.452415][ T968] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 607.606877][ T968] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 12336, setting to 64 [ 608.382955][ T29] audit: type=1400 audit(1737373121.051:871): avc: denied { map } for pid=10883 comm="syz.4.925" path="socket:[25891]" dev="sockfs" ino=25891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 608.630661][ T29] audit: type=1400 audit(1737373121.051:872): avc: denied { read } for pid=10883 comm="syz.4.925" path="socket:[25891]" dev="sockfs" ino=25891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 608.682074][ T968] usb 3-1: string descriptor 0 read error: -71 [ 608.688315][ T968] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 608.809049][ T968] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 608.867966][ T968] usb 3-1: can't set config #1, error -71 [ 609.270074][ T29] audit: type=1400 audit(1737373121.611:873): avc: denied { connect } for pid=10888 comm="syz.5.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 609.306641][ T968] usb 3-1: USB disconnect, device number 7 [ 609.808470][T10907] ubi1: attaching mtd0 [ 610.455083][T10905] can0: slcan on ttyS3. [ 611.054876][ T29] audit: type=1400 audit(1737373123.721:874): avc: denied { read } for pid=10904 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 611.438731][T10903] can0 (unregistered): slcan off ttyS3. [ 612.133561][ T29] audit: type=1400 audit(1737373124.401:875): avc: denied { ioctl } for pid=10916 comm="syz.2.933" path="socket:[25012]" dev="sockfs" ino=25012 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 612.792312][ T29] audit: type=1800 audit(1737373125.151:876): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.934" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 614.092514][T10935] NILFS (loop5): device size too small [ 614.283064][T10938] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 614.532026][ T29] audit: type=1400 audit(1737373127.241:877): avc: denied { sqpoll } for pid=10939 comm="syz.6.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 614.642077][ T29] audit: type=1400 audit(1737373127.311:878): avc: denied { read } for pid=10939 comm="syz.6.937" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 615.179970][ T29] audit: type=1400 audit(1737373127.311:879): avc: denied { open } for pid=10939 comm="syz.6.937" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 615.284712][ T29] audit: type=1400 audit(1737373127.631:880): avc: denied { listen } for pid=10946 comm="syz.5.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 616.463796][T10972] input: syz0 as /devices/virtual/input/input16 [ 617.270123][T10977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 618.640485][T10984] delete_channel: no stack [ 619.018308][T10990] can0: slcan on ttyS3. [ 619.600971][T11000] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 620.900977][T11006] fuse: Bad value for 'fd' [ 621.603459][T10987] can0 (unregistered): slcan off ttyS3. [ 622.169707][T11030] tipc: Started in network mode [ 622.177514][T11030] tipc: Node identity ac14140f, cluster identity 4711 [ 622.194477][T11030] tipc: New replicast peer: 255.255.255.255 [ 622.231436][T11030] tipc: Enabled bearer , priority 10 [ 622.392360][T11030] random: crng reseeded on system resumption [ 623.387545][ T5868] tipc: Node number set to 2886997007 [ 623.511524][T11051] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.923763][ T29] audit: type=1400 audit(1737373136.641:881): avc: denied { write } for pid=11040 comm="syz.5.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 624.345312][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.352690][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.662931][T11064] NILFS (loop2): device size too small [ 626.230461][ T25] libceph: connect (1)[c::]:6789 error -101 [ 626.242144][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 626.279107][ T29] audit: type=1400 audit(1737373138.991:882): avc: denied { create } for pid=11075 comm="syz.5.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 626.314988][ T29] audit: type=1400 audit(1737373139.011:883): avc: denied { setopt } for pid=11075 comm="syz.5.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 626.335326][ T29] audit: type=1400 audit(1737373139.011:884): avc: denied { write } for pid=11075 comm="syz.5.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 626.395632][T11071] ceph: No mds server is up or the cluster is laggy [ 626.874713][T11080] lo speed is unknown, defaulting to 1000 [ 627.216189][ T29] audit: type=1400 audit(1737373139.311:885): avc: denied { write } for pid=11075 comm="syz.5.963" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 628.203561][T11088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 628.423582][T11089] syz.6.961: attempt to access beyond end of device [ 628.423582][T11089] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 629.710731][ T29] audit: type=1400 audit(1737373142.421:886): avc: denied { transfer } for pid=11090 comm="syz.6.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 631.674635][ T29] audit: type=1400 audit(1737373143.631:887): avc: denied { write } for pid=11096 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 631.929332][ T29] audit: type=1400 audit(1737373144.641:888): avc: denied { read } for pid=11090 comm="syz.6.966" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 631.965274][T11092] binder_alloc: 11090: binder_alloc_buf, no vma [ 632.220998][ T29] audit: type=1400 audit(1737373144.641:889): avc: denied { open } for pid=11090 comm="syz.6.966" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 633.417640][ T29] audit: type=1400 audit(1737373144.721:890): avc: denied { shutdown } for pid=11090 comm="syz.6.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 634.354662][T11116] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 634.747061][T11133] NILFS (loop6): device size too small [ 636.063552][T11145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11145 comm=syz.3.983 [ 636.076328][T11145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=11145 comm=syz.3.983 [ 636.089092][T11145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11145 comm=syz.3.983 [ 637.728467][T11163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.798691][T11171] netlink: 'syz.5.979': attribute type 10 has an invalid length. [ 640.707214][ T29] audit: type=1400 audit(1737373153.421:891): avc: denied { ioctl } for pid=11167 comm="syz.3.981" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 640.813763][T11171] batman_adv: batadv0: Adding interface: team0 [ 640.827457][T11171] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.861506][T11171] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 640.975816][T11185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.534498][ T5821] Bluetooth: hci0: command 0x0405 tx timeout [ 642.117729][T11194] can0: slcan on ttyS3. [ 642.748228][ T29] audit: type=1400 audit(1737373155.461:892): avc: denied { lock } for pid=11191 comm="syz.3.985" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 643.062000][T11196] can0 (unregistered): slcan off ttyS3. [ 643.130522][ T29] audit: type=1400 audit(1737373155.841:893): avc: denied { create } for pid=11191 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 644.022333][T11214] lo speed is unknown, defaulting to 1000 [ 644.384545][ T29] audit: type=1400 audit(1737373157.101:894): avc: denied { accept } for pid=11208 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 644.756593][ T29] audit: type=1400 audit(1737373157.391:895): avc: denied { create } for pid=11217 comm="syz.6.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 644.989040][T11225] loop6: detected capacity change from 0 to 524287999 [ 645.119278][ C0] blk_print_req_error: 25 callbacks suppressed [ 645.119303][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 645.177648][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.186937][ C0] buffer_io_error: 25 callbacks suppressed [ 645.186954][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.209743][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.219022][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.820994][ T29] audit: type=1400 audit(1737373158.501:896): avc: denied { name_connect } for pid=11217 comm="syz.6.990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 646.367725][ T29] audit: type=1400 audit(1737373158.631:897): avc: denied { shutdown } for pid=11217 comm="syz.6.990" lport=47045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 646.537663][ T29] audit: type=1400 audit(1737373158.791:898): avc: denied { read } for pid=11217 comm="syz.6.990" lport=47045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 646.956900][ T29] audit: type=1326 audit(1737373159.671:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.6.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x0 [ 647.346164][T11249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 649.203584][T11257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.065796][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.999'. [ 651.263905][T11275] netlink: 'syz.4.999': attribute type 12 has an invalid length. [ 651.492447][ T29] audit: type=1400 audit(1737373163.971:900): avc: denied { write } for pid=11266 comm="syz.4.999" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 651.988728][ T5913] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 652.302066][ T5913] usb 7-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 652.331984][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.372395][ T5913] usb 7-1: config 0 descriptor?? [ 652.418535][ T5913] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 653.437525][ T5913] gspca_sn9c2028: read1 error -110 [ 653.452018][ T5913] gspca_sn9c2028: read1 error -32 [ 653.469119][ T5913] gspca_sn9c2028: read1 error -32 [ 653.662095][ T5913] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -32 [ 653.793895][T11307] NILFS (loop4): device size too small [ 654.676067][T11311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.869980][ T29] audit: type=1800 audit(1737373168.071:901): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1007" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 656.421580][T11103] usb 7-1: USB disconnect, device number 2 [ 657.691870][ T29] audit: type=1326 audit(1737373170.391:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.5.1012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x0 [ 658.153878][T11350] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1013'. [ 659.282725][T11364] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 660.092909][T11373] can0: slcan on ttyS3. [ 660.610079][T11375] loop6: detected capacity change from 0 to 524287999 [ 660.655207][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 660.668931][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 660.678989][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.688183][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.703551][T11375] capability: warning: `syz.3.1017' uses deprecated v2 capabilities in a way that may be insecure [ 660.723191][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 660.733126][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 660.742491][T11373] can0 (unregistered): slcan off ttyS3. [ 661.273484][T11383] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 661.939442][T11391] trusted_key: encrypted_key: insufficient parameters specified [ 663.678068][T11403] libceph: resolve '+ælc' (ret=-3): failed [ 664.220242][T11410] libceph: resolve '+ælc' (ret=-3): failed [ 664.740964][T11422] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 664.895144][T11419] can0: slcan on ttyS3. [ 665.442866][T11419] can0 (unregistered): slcan off ttyS3. [ 665.526948][ T48] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 666.660227][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 666.720570][ T48] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 666.731679][ T48] usb 4-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 666.749438][ T48] usb 4-1: config 0 has no interface number 0 [ 666.752567][ T5913] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 666.763282][ T48] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 666.785488][ T48] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 666.853703][T11447] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 666.911599][ T48] usb 4-1: config 0 interface 49 has no altsetting 0 [ 666.921503][ T48] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 666.936169][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.953953][ T48] usb 4-1: Product: syz [ 666.963627][ T48] usb 4-1: Manufacturer: syz [ 666.974773][ T48] usb 4-1: SerialNumber: syz [ 666.997416][ T5913] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 667.027110][ T5913] usb 6-1: config 0 has no interface number 0 [ 667.033395][ T5913] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 667.044985][ T5913] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 667.050765][ T48] usb 4-1: config 0 descriptor?? [ 667.075821][ T5913] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 667.100438][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.341177][ T29] audit: type=1400 audit(1737373179.921:903): avc: denied { getopt } for pid=11450 comm="syz.6.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 667.644548][T11458] input: syz0 as /devices/virtual/input/input18 [ 667.695355][T11443] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 667.718109][ T5913] usb 6-1: config 0 descriptor?? [ 667.724898][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.746927][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.766658][T11440] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 667.796768][ T5913] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 668.417763][ T48] imon 4-1:0.49: unable to register, err -19 [ 668.432706][ T48] usb 4-1: USB disconnect, device number 2 [ 669.887591][ T9938] usb 6-1: USB disconnect, device number 4 [ 672.934010][T11492] pimreg: entered allmulticast mode [ 675.843066][T11503] can0: slcan on ttyS3. [ 676.498471][T11506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 677.003038][T11503] can0 (unregistered): slcan off ttyS3. [ 677.006867][T11515] tc_dump_action: action bad kind [ 677.908463][T11518] input: syz0 as /devices/virtual/input/input19 [ 679.602909][ T5820] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 680.730143][T11557] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1048'. [ 680.739466][T11557] openvswitch: netlink: Flow actions attr not present in new flow. [ 680.893505][ T29] audit: type=1400 audit(1737373193.491:904): avc: denied { watch } for pid=11547 comm="syz.2.1048" path="/230" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 681.192487][T11557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 681.199538][T11557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 681.206784][T11557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 681.214468][T11557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 681.223227][T11557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 681.453589][ T29] audit: type=1400 audit(1737373193.501:905): avc: denied { read } for pid=11547 comm="syz.2.1048" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 682.512242][ T29] audit: type=1400 audit(1737373195.211:906): avc: denied { bind } for pid=11564 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 683.592280][ T9309] Bluetooth: hci2: command 0x0406 tx timeout [ 683.598502][ T9309] Bluetooth: hci4: command 0x0406 tx timeout [ 684.036110][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 684.043530][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 685.305441][ T29] audit: type=1400 audit(1737373197.731:907): avc: denied { compute_member } for pid=11579 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 685.802791][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.809570][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.555874][T11600] fuse: Bad value for 'fd' [ 686.948301][T11608] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 687.870141][T11611] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 689.272424][T11623] tipc: Started in network mode [ 689.291022][T11623] tipc: Node identity ac14140f, cluster identity 4711 [ 689.322895][T11623] tipc: New replicast peer: 255.255.255.255 [ 689.345979][T11623] tipc: Enabled bearer , priority 10 [ 689.506993][T11623] random: crng reseeded on system resumption [ 689.890297][T11630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 690.464090][ T48] tipc: Node number set to 2886997007 [ 692.986759][T11644] evm: overlay not supported [ 692.994366][T11644] Invalid ELF header magic: != ELF [ 693.002397][ T29] audit: type=1804 audit(1737373205.701:908): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1081" name="/newroot/189/bus/bus" dev="overlay" ino=1050 res=1 errno=0 [ 693.492459][ T29] audit: type=1400 audit(1737373205.711:909): avc: denied { module_load } for pid=11639 comm="syz.6.1081" path="/189/bus/bus" dev="overlay" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 693.856897][ T29] audit: type=1326 audit(1737373206.561:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc10385d29 code=0x0 [ 693.857949][T11656] fuse: Bad value for 'fd' [ 693.967132][T11658] syz.6.1072: attempt to access beyond end of device [ 693.967132][T11658] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 693.980788][T11658] hfsplus: unable to find HFS+ superblock [ 695.911493][T11677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1082'. [ 695.921582][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1082'. [ 696.797493][T11677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1082'. [ 696.808032][T11677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1082'. [ 696.953290][T11681] lo speed is unknown, defaulting to 1000 [ 698.937996][T11691] can0: slcan on ttyS3. [ 699.903074][T11694] can0 (unregistered): slcan off ttyS3. [ 700.523371][T11710] fuse: Bad value for 'fd' [ 703.636371][T11733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.339211][T11777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.949293][T11781] syz.4.1104: attempt to access beyond end of device [ 710.949293][T11781] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 711.414562][ T29] audit: type=1400 audit(1737373224.131:911): avc: denied { read } for pid=11773 comm="syz.6.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 711.519739][ T29] audit: type=1400 audit(1737373224.211:912): avc: denied { ioctl } for pid=11773 comm="syz.6.1105" path="socket:[27293]" dev="sockfs" ino=27293 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 711.638212][T11791] can0: slcan on ttyS3. [ 712.351092][T11773] delete_channel: no stack [ 713.103794][T11806] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 713.632502][T11791] can0 (unregistered): slcan off ttyS3. [ 713.802203][ T29] audit: type=1400 audit(1737373226.511:913): avc: denied { write } for pid=11807 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 713.983288][T11821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.818249][ T29] audit: type=1326 audit(1737373227.531:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc10385d29 code=0x7fc00000 [ 715.044386][T11829] geneve2: entered promiscuous mode [ 715.471656][T11839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 717.326612][ T29] audit: type=1326 audit(1737373230.031:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc10385d29 code=0x7fc00000 [ 718.960360][T11874] NILFS (loop6): device size too small [ 722.672690][ T29] audit: type=1326 audit(1737373235.381:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.6.1130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x0 [ 723.342348][T11916] overlayfs: failed to resolve './file0': -2 [ 726.455290][ T29] audit: type=1326 audit(1737373239.171:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11938 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x7fc00000 [ 726.649892][ T29] audit: type=1326 audit(1737373239.291:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.5.1142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x0 [ 726.686893][T11946] geneve2: entered promiscuous mode [ 728.139047][T11958] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 728.198910][ T29] audit: type=1326 audit(1737373240.851:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11938 comm="syz.6.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d57b85d29 code=0x7fc00000 [ 731.502208][ T29] audit: type=1400 audit(1737373244.181:920): avc: denied { ioctl } for pid=11987 comm="syz.3.1153" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 731.505742][T11991] can0: slcan on ttyS3. [ 732.234299][T11995] can0 (unregistered): slcan off ttyS3. [ 732.993359][T12006] NILFS (loop6): device size too small [ 738.109927][T12055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.759006][T12080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.247611][T12096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.111535][T12100] lo speed is unknown, defaulting to 1000 [ 744.906208][T12121] tipc: Enabling of bearer rejected, failed to enable media [ 745.315921][T12127] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 747.139512][T12136] libceph: resolve '+ælc' (ret=-3): failed [ 747.223502][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.242104][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.560011][T12145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.850283][ T29] audit: type=1400 audit(1737373260.561:921): avc: denied { setopt } for pid=12146 comm="syz.5.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 748.454344][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1183'. [ 749.963737][ T29] audit: type=1400 audit(1737373262.671:922): avc: denied { mount } for pid=12160 comm="syz.3.1188" name="/" dev="pstore" ino=1805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 750.031157][T12163] can0: slcan on ttyS3. [ 750.040381][T12159] NILFS (loop5): device size too small [ 750.697720][T12171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.515441][T12165] can0 (unregistered): slcan off ttyS3. [ 752.877122][T12192] trusted_key: encrypted_key: insufficient parameters specified [ 755.408120][T12211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.536513][ T29] audit: type=1326 audit(1737373269.251:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.2.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef53185d29 code=0x0 [ 757.865925][T12245] NILFS (loop3): device size too small [ 758.122191][ T29] audit: type=1326 audit(1737373270.831:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.4.1203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc10385d29 code=0x0 [ 758.600647][T12257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.121876][T12271] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 760.405008][T12274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.885349][T12284] lo speed is unknown, defaulting to 1000 [ 761.698614][T12300] netlink: 'syz.6.1213': attribute type 1 has an invalid length. [ 762.569876][T12304] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 763.566920][T12323] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1218'. [ 763.937440][ T29] audit: type=1326 audit(1737373276.651:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12317 comm="syz.3.1220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb385d29 code=0x0 [ 764.362272][T12334] Invalid source name [ 765.026021][T12340] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 774.050845][T12427] syz.6.1243: attempt to access beyond end of device [ 774.050845][T12427] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 774.065519][T12427] syz.6.1243: attempt to access beyond end of device [ 774.065519][T12427] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 774.080296][T12427] syz.6.1243: attempt to access beyond end of device [ 774.080296][T12427] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 774.099601][T12427] syz.6.1243: attempt to access beyond end of device [ 774.099601][T12427] nbd6: rw=0, sector=18, nr_sectors = 2 limit=0 [ 774.118203][T12427] syz.6.1243: attempt to access beyond end of device [ 774.118203][T12427] nbd6: rw=0, sector=30, nr_sectors = 2 limit=0 [ 774.135982][T12427] syz.6.1243: attempt to access beyond end of device [ 774.135982][T12427] nbd6: rw=0, sector=36, nr_sectors = 2 limit=0 [ 774.323010][T12426] trusted_key: encrypted_key: insufficient parameters specified [ 774.565800][T12430] can0: slcan on ttyS3. [ 775.907534][ T29] audit: type=1400 audit(1737373288.621:926): avc: denied { remount } for pid=12441 comm="syz.6.1248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 775.944261][T12430] can0 (unregistered): slcan off ttyS3. [ 776.112261][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 776.562509][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.056195][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.310229][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 777.816656][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.827658][ T9] usb 5-1: config 0 descriptor?? [ 778.781306][ T9] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 778.806853][ T9] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 778.928593][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.945431][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0002/input/input24 [ 778.953112][ T29] audit: type=1400 audit(1737373291.641:927): avc: denied { setopt } for pid=12440 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 779.002222][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.150134][ T9] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 780.039362][T12504] trusted_key: encrypted_key: insufficient parameters specified [ 780.389943][T12468] NILFS (loop5): device size too small [ 781.312980][ T5866] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 782.510222][ T9938] usb 5-1: USB disconnect, device number 7 [ 783.108305][ T29] audit: type=1400 audit(1737373295.811:928): avc: denied { write } for pid=12533 comm="syz.6.1263" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 783.392146][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 783.631932][T12543] trusted_key: encrypted_key: insufficient parameters specified [ 784.152676][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 784.197810][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 130, setting to 64 [ 784.231334][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 784.250990][ T9] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 784.275963][ T9] usb 7-1: Product: syz [ 784.296899][ T9] usb 7-1: config 0 descriptor?? [ 784.574185][ T29] audit: type=1400 audit(1737373297.281:929): avc: denied { listen } for pid=12533 comm="syz.6.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 784.602002][T12535] overlayfs: failed to resolve './file1': -2 [ 784.620093][ T9] ath6kl: Failed to submit usb control message: -71 [ 784.627327][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 784.638959][ T9] ath6kl: Unable to send get target info: -71 [ 784.654512][ T9] ath6kl: Failed to init ath6kl core: -71 [ 784.670439][ T9] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 784.675753][ T29] audit: type=1400 audit(1737373297.281:930): avc: denied { accept } for pid=12533 comm="syz.6.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 784.691045][ T9] usb 7-1: USB disconnect, device number 3 [ 785.290681][T12563] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 786.570280][T12569] tipc: Enabling of bearer rejected, already enabled [ 786.949658][T12576] trusted_key: encrypted_key: insufficient parameters specified [ 789.449331][T12590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.431129][ T29] audit: type=1326 audit(1737373303.131:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.5.1277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x0 [ 790.587418][ T29] audit: type=1400 audit(1737373303.301:932): avc: denied { append } for pid=12606 comm="syz.6.1278" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 790.754544][ T5820] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 790.807580][ T29] audit: type=1400 audit(1737373303.521:933): avc: denied { write } for pid=12606 comm="syz.6.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 791.508438][T12621] NILFS (loop4): device size too small [ 794.225561][T12644] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 795.233232][ T5820] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 795.256749][ T5820] Bluetooth: hci4: Injecting HCI hardware error event [ 795.266554][ T5820] Bluetooth: hci4: hardware error 0x00 [ 795.861930][T12655] trusted_key: encrypted_key: insufficient parameters specified [ 797.216041][T12652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.303175][ T5820] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 797.418236][ T29] audit: type=1326 audit(1737373310.131:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12663 comm="syz.6.1292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x0 [ 797.823831][T12673] NILFS (loop4): device size too small [ 798.636822][ T29] audit: type=1400 audit(1737373311.291:935): avc: denied { write } for pid=12674 comm="syz.5.1295" path="socket:[31075]" dev="sockfs" ino=31075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 799.828287][T12680] NILFS (loop3): device size too small [ 800.112102][ T29] audit: type=1400 audit(1737373312.641:936): avc: denied { listen } for pid=12686 comm="syz.6.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 800.274101][ T29] audit: type=1400 audit(1737373312.641:937): avc: denied { accept } for pid=12686 comm="syz.6.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 800.353011][T12691] bridge0: port 3(erspan0) entered disabled state [ 800.359576][T12691] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.366753][T12691] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.377364][T12691] bridge0: entered allmulticast mode [ 802.034612][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1301'. [ 802.044256][ T29] audit: type=1400 audit(1737373314.741:938): avc: denied { name_bind } for pid=12702 comm="syz.5.1301" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 802.065115][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.140572][T12716] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 803.147138][T12716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 803.155911][T12716] vhci_hcd vhci_hcd.0: Device attached [ 803.658259][T12717] vhci_hcd: connection closed [ 803.677699][ T8990] vhci_hcd: stop threads [ 803.748684][ T8990] vhci_hcd: release socket [ 803.932409][ T5901] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 804.775756][ T8990] vhci_hcd: disconnect device [ 807.787273][ T29] audit: type=1400 audit(1737373320.481:939): avc: denied { write } for pid=12737 comm="syz.2.1309" path="socket:[31842]" dev="sockfs" ino=31842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 807.820974][T12739] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 807.828236][T12739] overlayfs: failed to set xattr on upper [ 807.834041][T12739] overlayfs: ...falling back to redirect_dir=nofollow. [ 807.840939][T12739] overlayfs: ...falling back to index=off. [ 807.846818][T12739] overlayfs: ...falling back to uuid=null. [ 807.852692][T12739] overlayfs: maximum fs stacking depth exceeded [ 807.928166][ T29] audit: type=1400 audit(1737373320.531:940): avc: denied { mount } for pid=12733 comm="syz.6.1308" name="/" dev="hugetlbfs" ino=31843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 808.260634][ T29] audit: type=1400 audit(1737373320.531:941): avc: denied { mounton } for pid=12733 comm="syz.6.1308" path="/247/file1/bus" dev="hugetlbfs" ino=31846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 808.618763][ T29] audit: type=1400 audit(1737373320.771:942): avc: denied { unmount } for pid=6321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 808.683011][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.689444][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.700528][T12757] can0: slcan on ttyS3. [ 809.520581][ T29] audit: type=1400 audit(1737373322.171:943): avc: denied { read } for pid=12751 comm="syz.3.1314" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 809.788362][ T29] audit: type=1400 audit(1737373322.181:944): avc: denied { open } for pid=12751 comm="syz.3.1314" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 809.864162][ T5901] vhci_hcd: vhci_device speed not set [ 810.922829][T12757] can0 (unregistered): slcan off ttyS3. [ 812.932221][ T29] audit: type=1400 audit(1737373325.611:945): avc: denied { watch_reads } for pid=12791 comm="syz.4.1320" path="/276" dev="tmpfs" ino=1494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 813.100143][T12793] Cannot find map_set index 0 as target [ 815.112114][T12804] trusted_key: encrypted_key: key user:syz not found [ 818.994451][T12833] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1328'. [ 822.379581][ T29] audit: type=1400 audit(1737373334.481:946): avc: denied { setopt } for pid=12848 comm="syz.6.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 826.438136][ T29] audit: type=1400 audit(1737373339.111:947): avc: denied { ioctl } for pid=12881 comm="syz.4.1339" path="socket:[31504]" dev="sockfs" ino=31504 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 829.143203][T11103] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 830.493472][T11103] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 830.521434][T11103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.604649][T11103] usb 4-1: config 0 descriptor?? [ 830.712411][T11103] usb 4-1: can't set config #0, error -71 [ 830.730707][T11103] usb 4-1: USB disconnect, device number 3 [ 832.468546][ T29] audit: type=1326 audit(1737373345.171:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 832.692210][ T29] audit: type=1326 audit(1737373345.171:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 832.727551][ T29] audit: type=1326 audit(1737373345.171:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 832.751042][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.126122][ T29] audit: type=1326 audit(1737373345.171:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 833.149539][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.465386][ T29] audit: type=1326 audit(1737373345.171:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 833.523461][ T29] audit: type=1326 audit(1737373345.181:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 833.871174][T12953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 834.059638][ T29] audit: type=1326 audit(1737373345.181:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 834.157382][ T29] audit: type=1326 audit(1737373345.181:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 834.276653][ T29] audit: type=1326 audit(1737373345.181:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 834.490504][ T29] audit: type=1326 audit(1737373345.181:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9db185d29 code=0x7ffc0000 [ 835.084366][T12958] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 835.352007][ T5865] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 835.444964][T12967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.495109][T12969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.547629][T12969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.659388][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 835.782738][ T5865] usb 6-1: not running at top speed; connect to a high speed hub [ 835.922606][T12971] 9pnet_virtio: no channels available for device syz [ 836.197945][ T5865] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 836.248694][ T5865] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 836.307361][ T5865] usb 6-1: config 17 has no interface number 0 [ 836.333003][ T5865] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 116, changing to 4 [ 836.380343][ T5865] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 30307, setting to 1023 [ 836.421494][T12973] netlink: 'syz.6.1360': attribute type 4 has an invalid length. [ 836.466202][ T5865] usb 6-1: config 17 interface 8 has no altsetting 0 [ 836.499497][ T5865] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 836.532006][T11103] lo speed is unknown, defaulting to 1000 [ 836.567490][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.596898][ T5865] usb 6-1: Product: syz [ 837.672446][ T5865] usb 6-1: Manufacturer: syz [ 837.984169][ T5865] usb 6-1: SerialNumber: syz [ 839.363565][ T5865] usb 6-1: can't set config #17, error -71 [ 839.383472][ T5865] usb 6-1: USB disconnect, device number 5 [ 839.644440][T12994] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1364'. [ 839.665078][T12980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 839.672917][T12980] IPv6: NLM_F_CREATE should be set when creating new route [ 839.680176][T12980] IPv6: NLM_F_CREATE should be set when creating new route [ 840.328290][T12980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 840.529351][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 842.104890][T13019] netlink: 'syz.3.1370': attribute type 5 has an invalid length. [ 842.781808][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 842.781830][ T29] audit: type=1400 audit(1737373355.011:963): avc: denied { map } for pid=13013 comm="syz.3.1370" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 843.005922][T13020] Invalid source name [ 843.289354][ T29] audit: type=1400 audit(1737373355.011:964): avc: denied { execute } for pid=13013 comm="syz.3.1370" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 843.988353][ T29] audit: type=1400 audit(1737373356.701:965): avc: denied { listen } for pid=13031 comm="syz.4.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 844.073842][T13033] syz.4.1374: attempt to access beyond end of device [ 844.073842][T13033] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 844.087475][T13033] FAT-fs (nbd4): unable to read boot sector [ 844.478306][ T29] audit: type=1400 audit(1737373356.701:966): avc: denied { accept } for pid=13031 comm="syz.4.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 845.320632][T13046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 847.921983][T13067] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 847.933111][T13067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.003847][ T5865] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 850.913046][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.946277][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.976899][ T5865] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 851.020463][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.040099][ T5865] usb 4-1: config 0 descriptor?? [ 851.052245][ T29] audit: type=1400 audit(1737373363.761:967): avc: denied { ioctl } for pid=13096 comm="syz.6.1391" path="socket:[32489]" dev="sockfs" ino=32489 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 851.076900][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.139294][T13099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 851.358070][ T29] audit: type=1400 audit(1737373363.761:968): avc: denied { bind } for pid=13096 comm="syz.6.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 851.377320][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.399605][ T29] audit: type=1400 audit(1737373364.051:969): avc: denied { create } for pid=13096 comm="syz.6.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 851.916561][T13106] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 852.338397][ T5865] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 852.418186][ T5865] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 852.464097][T13100] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1391'. [ 852.470063][ T5865] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0003/input/input26 [ 853.057274][ T5865] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 853.875357][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 854.492073][ T5865] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 855.152834][T13131] block nbd5: shutting down sockets [ 856.194326][ T48] usb 4-1: USB disconnect, device number 4 [ 858.002723][T13154] netlink: 'syz.6.1403': attribute type 10 has an invalid length. [ 858.014275][T13152] bridge0: entered promiscuous mode [ 858.065389][T13155] netlink: 'syz.6.1403': attribute type 10 has an invalid length. [ 858.073568][T13155] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1403'. [ 858.200387][T13154] batman_adv: batadv0: Adding interface: team0 [ 858.206878][T13154] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.231996][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.253500][ T29] audit: type=1400 audit(1737373370.951:970): avc: denied { bind } for pid=13145 comm="syz.6.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 858.367602][T13154] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 858.462494][T13155] team0: entered promiscuous mode [ 858.467558][T13155] team_slave_0: entered promiscuous mode [ 858.473703][T13155] team_slave_1: entered promiscuous mode [ 858.480915][T13155] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.488110][T13155] batman_adv: batadv0: Interface activated: team0 [ 858.494917][T13155] batman_adv: batadv0: Interface deactivated: team0 [ 858.501553][T13155] batman_adv: batadv0: Removing interface: team0 [ 858.684501][T13160] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 859.180423][ T29] audit: type=1400 audit(1737373371.291:971): avc: denied { append } for pid=13145 comm="syz.6.1403" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 859.707415][ T29] audit: type=1400 audit(1737373371.291:972): avc: denied { map } for pid=13145 comm="syz.6.1403" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 859.744871][T13155] bridge0: port 4(team0) entered blocking state [ 859.759712][T13162] fuse: Bad value for 'fd' [ 859.772062][T13155] bridge0: port 4(team0) entered disabled state [ 859.790611][ T29] audit: type=1400 audit(1737373371.291:973): avc: denied { execute } for pid=13145 comm="syz.6.1403" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 859.814419][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.829603][T13155] team0: entered allmulticast mode [ 859.834917][T13155] team_slave_0: entered allmulticast mode [ 859.841235][T13155] team_slave_1: entered allmulticast mode [ 860.004263][T13170] syz.2.1398 (13170): drop_caches: 2 [ 860.086997][T13165] syz.2.1398 (13165): drop_caches: 2 [ 860.097074][T13170] syz.2.1398 (13170): drop_caches: 2 [ 860.106790][T13165] syz.2.1398 (13165): drop_caches: 2 [ 860.215281][ T29] audit: type=1400 audit(1737373372.921:974): avc: denied { read } for pid=13174 comm="syz.4.1408" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 860.334953][ T29] audit: type=1400 audit(1737373372.921:975): avc: denied { open } for pid=13174 comm="syz.4.1408" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 860.431774][ T29] audit: type=1400 audit(1737373372.921:976): avc: denied { ioctl } for pid=13174 comm="syz.4.1408" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 861.316427][T13182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1408'. [ 861.332119][ T29] audit: type=1400 audit(1737373374.021:977): avc: denied { write } for pid=13193 comm="syz.2.1413" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 862.882571][T13202] vivid-000: disconnect [ 863.451089][T13193] vivid-000: reconnect [ 864.697605][T13213] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 865.392047][T13215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 867.059116][T13230] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.066855][T13230] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.078339][T13230] bridge0: entered allmulticast mode [ 868.777544][ T29] audit: type=1400 audit(1737373381.491:978): avc: denied { getopt } for pid=13237 comm="syz.4.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 870.104360][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.110738][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.414185][ T29] audit: type=1326 audit(1737373384.121:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13267 comm="syz.4.1433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc10385d29 code=0x0 [ 878.932115][T13319] tipc: Enabling of bearer rejected, already enabled [ 879.035320][T13322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 879.097141][T13319] random: crng reseeded on system resumption [ 879.345797][T13330] Invalid source name [ 880.807237][ T29] audit: type=1400 audit(1737373393.521:980): avc: denied { connect } for pid=13335 comm="syz.2.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 881.810083][ T29] audit: type=1400 audit(1737373394.521:981): avc: denied { lock } for pid=13343 comm="syz.5.1451" path="socket:[33385]" dev="sockfs" ino=33385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 881.959519][T13345] block device autoloading is deprecated and will be removed. [ 883.152560][ T5865] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 883.285610][T13361] Invalid source name [ 883.312616][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 883.385776][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.534904][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 883.673506][ T5865] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 883.692016][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.711354][ T5865] usb 5-1: Product: syz [ 883.820831][ T5865] usb 5-1: Manufacturer: syz [ 883.825789][ T5865] usb 5-1: SerialNumber: syz [ 883.840696][ T5865] usb 5-1: config 0 descriptor?? [ 883.860979][ T5865] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 883.872096][ T5865] imon 5-1:0.0: unable to initialize intf0, err -19 [ 883.879792][ T5865] imon:imon_probe: failed to initialize context! [ 884.498548][ T5865] imon 5-1:0.0: unable to register, err -19 [ 884.599178][T13351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.625387][T13351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.903795][ T48] usb 5-1: USB disconnect, device number 8 [ 887.756893][ T29] audit: type=1400 audit(1737373400.471:982): avc: denied { getopt } for pid=13382 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 888.632051][T13387] tipc: Enabling of bearer rejected, already enabled [ 890.489552][T13387] random: crng reseeded on system resumption [ 894.652885][T13431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 896.633158][ T29] audit: type=1400 audit(1737373409.351:983): avc: denied { getopt } for pid=13442 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 896.853846][ T29] audit: type=1400 audit(1737373409.551:984): avc: denied { ioctl } for pid=13452 comm="syz.3.1480" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 899.683824][ T29] audit: type=1400 audit(1737373412.381:985): avc: denied { create } for pid=13463 comm="syz.5.1482" name="#23" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 899.743817][ T29] audit: type=1400 audit(1737373412.391:986): avc: denied { link } for pid=13463 comm="syz.5.1482" name="#23" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 899.921100][ T29] audit: type=1400 audit(1737373412.391:987): avc: denied { rename } for pid=13463 comm="syz.5.1482" name="#24" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 900.207015][T13475] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 900.396814][T13474] syz.6.1484 (13474): /proc/13469/oom_adj is deprecated, please use /proc/13469/oom_score_adj instead. [ 900.683950][ T29] audit: type=1326 audit(1737373413.191:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13466 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb385d29 code=0x7ffc0000 [ 901.115103][ T29] audit: type=1326 audit(1737373413.201:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13466 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb385d29 code=0x7ffc0000 [ 901.296851][ T29] audit: type=1400 audit(1737373414.011:990): avc: denied { getopt } for pid=13479 comm="syz.3.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 902.408784][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'. [ 902.422139][T13482] netem: change failed [ 903.010144][T13499] tmpfs: Unknown parameter 'p} ' [ 903.902765][T13506] fuse: Bad value for 'fd' [ 904.368326][T13503] syz.5.1491 (13503): drop_caches: 2 [ 905.066554][T13503] syz.5.1491 (13503): drop_caches: 2 [ 905.300401][T13506] syz.5.1491 (13506): drop_caches: 2 [ 905.338406][T13506] syz.5.1491 (13506): drop_caches: 2 [ 905.756720][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 905.766091][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 905.856056][ T29] audit: type=1400 audit(1737373418.521:991): avc: denied { setopt } for pid=13511 comm="syz.4.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 906.841247][ T29] audit: type=1400 audit(1737373419.291:992): avc: denied { mount } for pid=13522 comm="syz.3.1496" name="/" dev="autofs" ino=34308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 907.076359][ T29] audit: type=1400 audit(1737373419.791:993): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 910.285156][T13538] tipc: Enabling of bearer rejected, already enabled [ 912.099088][ T29] audit: type=1400 audit(1737373424.751:994): avc: denied { ioctl } for pid=13549 comm="syz.5.1502" path="socket:[34359]" dev="sockfs" ino=34359 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 913.218304][T13556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 913.376787][T13565] tipc: Can't bind to reserved service type 2 [ 913.629817][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1506'. [ 913.806139][T13570] loop9: detected capacity change from 0 to 6 [ 916.079430][T13589] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 917.458212][ T29] audit: type=1400 audit(1737373430.171:995): avc: denied { map } for pid=13584 comm="syz.5.1512" path="/dev/vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 917.545061][T13596] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1512'. [ 918.048086][T13597] Invalid source name [ 918.933135][ T9309] Bluetooth: hci3: command 0x0406 tx timeout [ 919.823151][ T29] audit: type=1400 audit(1737373432.531:996): avc: denied { connect } for pid=13606 comm="syz.4.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 920.398144][ T29] audit: type=1400 audit(1737373433.011:997): avc: granted { setsecparam } for pid=13611 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 922.640756][T13643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 923.895202][T13651] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 926.304148][T13667] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1529'. [ 927.113656][ T5913] IPVS: starting estimator thread 0... [ 927.302182][T13674] IPVS: using max 29 ests per chain, 69600 per kthread [ 927.389740][T13678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 928.582576][T13691] lo speed is unknown, defaulting to 1000 [ 930.200051][T13707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 930.209204][T13708] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 931.593074][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.336593][T13718] Invalid source name [ 932.780697][T13719] Invalid source name [ 935.491435][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 935.622166][T13743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.097673][T13764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 939.133117][ T9309] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 940.256943][T13779] Invalid source name [ 945.296234][T13810] Invalid source name [ 946.068227][T13819] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 948.363209][T13833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 948.619338][T13837] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 952.523194][T13866] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 953.399894][T13873] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 953.992421][T13870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 953.999024][T13870] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 954.008217][T13870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 954.014189][T13870] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 954.022626][T13870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 954.028626][T13870] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 954.096239][T13870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 954.102760][T13870] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 954.433740][T13885] NILFS (loop5): device size too small [ 958.159088][T13894] NILFS (loop4): device size too small [ 959.294512][T13919] overlayfs: overlapping lowerdir path [ 959.993003][T13918] random: crng reseeded on system resumption [ 960.021113][T13928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1586'. [ 960.052101][ T29] audit: type=1400 audit(1737373472.761:998): avc: denied { ioctl } for pid=13925 comm="syz.3.1585" path="socket:[35310]" dev="sockfs" ino=35310 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 960.291519][ T29] audit: type=1400 audit(1737373472.901:999): avc: denied { accept } for pid=13925 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 960.739426][ T29] audit: type=1400 audit(1737373472.911:1000): avc: denied { bind } for pid=13925 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 961.572638][ T29] audit: type=1400 audit(1737373473.801:1001): avc: denied { checkpoint_restore } for pid=13933 comm="syz.5.1587" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 963.184605][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1589'. [ 963.690323][ T29] audit: type=1326 audit(1737373476.401:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.3.1590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb385d29 code=0x0 [ 963.921369][T13954] netlink: 'syz.2.1591': attribute type 4 has an invalid length. [ 964.224178][T13947] syz.5.1589 (13947) used greatest stack depth: 20544 bytes left [ 965.152033][ T29] audit: type=1400 audit(1737373477.531:1003): avc: denied { bind } for pid=13953 comm="syz.2.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 966.124345][T13972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1592'. [ 966.591275][ T29] audit: type=1400 audit(1737373479.251:1004): avc: denied { execute } for pid=13953 comm="syz.2.1591" dev="tmpfs" ino=1579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 966.846566][ T9938] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 966.870832][T13980] Process accounting resumed [ 967.011229][T13982] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 967.302860][ T9938] usb 3-1: Using ep0 maxpacket: 8 [ 967.318540][ T9938] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 967.333050][ T9938] usb 3-1: config 0 has no interface number 0 [ 968.569683][ T9938] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 968.792153][ T9938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.985168][ T29] audit: type=1400 audit(1737373481.661:1005): avc: denied { watch } for pid=13994 comm="syz.4.1600" path="/328" dev="tmpfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 969.112042][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 969.342429][ T9938] usb 3-1: config 0 descriptor?? [ 969.362714][ T9938] usb 3-1: can't set config #0, error -71 [ 969.392457][ T29] audit: type=1400 audit(1737373481.661:1006): avc: denied { watch_sb } for pid=13994 comm="syz.4.1600" path="/328" dev="tmpfs" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 969.421318][T14002] random: crng reseeded on system resumption [ 969.442235][ T9938] usb 3-1: USB disconnect, device number 8 [ 969.502055][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 969.520882][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.561838][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 969.624486][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 969.644993][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 969.664206][ T9] usb 4-1: Product: syz [ 969.671983][ T9] usb 4-1: Manufacturer: syz [ 969.682027][ T9] usb 4-1: SerialNumber: syz [ 969.823718][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 970.588175][ T9] appletouch 4-1:1.0: Could not find int-in endpoint [ 970.602812][ T9] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 970.621371][ T9] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 970.964410][T14012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.014184][T14012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.071793][T14012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.397291][ T5830] usb 4-1: USB disconnect, device number 5 [ 972.716954][ T29] audit: type=1400 audit(1737373485.411:1007): avc: denied { getopt } for pid=14017 comm="syz.2.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 973.637776][ T29] audit: type=1400 audit(1737373486.351:1008): avc: denied { write } for pid=14024 comm="syz.3.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 977.022020][ T29] audit: type=1400 audit(1737373489.731:1009): avc: granted { setsecparam } for pid=14050 comm="syz.5.1614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 978.315108][T14061] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 979.019045][T14062] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 981.982407][ T29] audit: type=1326 audit(1737373493.971:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 983.408368][ T29] audit: type=1326 audit(1737373493.971:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 983.954974][T14094] veth0_to_team: entered promiscuous mode [ 983.962308][T14094] veth0_to_team: entered allmulticast mode [ 984.015272][ T29] audit: type=1326 audit(1737373493.971:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 984.059247][ T29] audit: type=1326 audit(1737373493.971:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 984.084213][ T29] audit: type=1326 audit(1737373493.971:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 984.107725][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.116270][ T29] audit: type=1326 audit(1737373493.971:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d57b84690 code=0x7ffc0000 [ 984.139951][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.194759][ T29] audit: type=1326 audit(1737373493.971:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 984.237306][ T29] audit: type=1326 audit(1737373493.971:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 984.351202][ T29] audit: type=1326 audit(1737373493.971:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 984.374673][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.420870][ T29] audit: type=1326 audit(1737373493.971:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.6.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d57b85d29 code=0x7ffc0000 [ 987.024535][T14118] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 987.033240][T14116] wg2: entered promiscuous mode [ 987.038668][T14116] wg2: entered allmulticast mode [ 987.589955][T14124] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 988.583128][T14127] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 990.571825][T14142] usb usb8: usbfs: process 14142 (syz.6.1631) did not claim interface 0 before use [ 990.978962][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 990.978973][ T29] audit: type=1400 audit(1737373503.691:1059): avc: denied { mount } for pid=14146 comm="syz.4.1634" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 991.025870][T14140] lo speed is unknown, defaulting to 1000 [ 991.054909][ T29] audit: type=1400 audit(1737373503.741:1060): avc: denied { search } for pid=14146 comm="syz.4.1634" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 991.102734][ T29] audit: type=1400 audit(1737373503.741:1061): avc: denied { read } for pid=14146 comm="syz.4.1634" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 991.131049][ T29] audit: type=1400 audit(1737373503.741:1062): avc: denied { open } for pid=14146 comm="syz.4.1634" path="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 991.386096][T14153] 9pnet_fd: Insufficient options for proto=fd [ 992.603645][T14158] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 993.026794][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.694075][T14170] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 998.421069][ T29] audit: type=1400 audit(1737373511.131:1063): avc: denied { ioctl } for pid=14198 comm="syz.2.1646" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 999.557651][ T29] audit: type=1400 audit(1737373511.761:1064): avc: denied { shutdown } for pid=14203 comm="syz.6.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 999.592684][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 999.842670][ T29] audit: type=1400 audit(1737373512.361:1065): avc: denied { getopt } for pid=14196 comm="syz.4.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1000.043668][T14222] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1000.572565][T14220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1645'. [ 1002.531143][ T29] audit: type=1400 audit(1737373515.241:1066): avc: denied { create } for pid=14232 comm="syz.6.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1003.162018][ T29] audit: type=1400 audit(1737373515.241:1067): avc: denied { getopt } for pid=14232 comm="syz.6.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1003.924901][T14249] lo speed is unknown, defaulting to 1000 [ 1009.429535][T14284] syzkaller1: entered promiscuous mode [ 1009.435059][T14284] syzkaller1: entered allmulticast mode [ 1009.448508][T14284] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1009.460459][T14284] batman_adv: batadv0: Adding interface: gretap1 [ 1009.466945][T14284] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.492414][T14284] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1012.476868][T14311] xt_NFQUEUE: number of queues (3) out of range (got 65536) [ 1012.517739][T14311] binder: 14307:14311 ioctl c00c620f 200001c0 returned -22 [ 1012.529349][ T29] audit: type=1400 audit(1737373525.211:1068): avc: denied { write } for pid=14307 comm="syz.3.1670" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1019.946149][ T29] audit: type=1400 audit(1737373532.401:1069): avc: denied { setattr } for pid=14362 comm="syz.2.1683" name="ns" dev="proc" ino=36953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1020.026017][T14367] NILFS (loop5): device size too small [ 1021.055652][ T29] audit: type=1400 audit(1737373533.761:1070): avc: denied { write } for pid=14362 comm="syz.2.1683" lport=39819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1021.569026][ T29] audit: type=1400 audit(1737373533.761:1071): avc: denied { setopt } for pid=14362 comm="syz.2.1683" lport=39819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1021.732229][T14376] can0: slcan on ttyS3. [ 1022.032588][T14383] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1022.728301][T14385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.514787][T14386] can0 (unregistered): slcan off ttyS3. [ 1028.835627][T14448] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1029.152823][T14447] Invalid logical block size (3) [ 1030.372076][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1030.641166][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1030.666426][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1030.687857][ T9] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 1030.715638][ T9] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1030.749708][ T9] usb 4-1: config 17 has no interface number 0 [ 1030.950677][ T9] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 116, changing to 4 [ 1030.972891][ T9] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 30307, setting to 1023 [ 1031.060328][T14481] Invalid source name [ 1031.405243][ T9] usb 4-1: config 17 interface 8 has no altsetting 0 [ 1031.419749][T14483] Invalid source name [ 1032.025125][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1032.698810][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.698843][ T9] usb 4-1: Product: syz [ 1032.768016][ T9] usb 4-1: can't set config #17, error -71 [ 1032.801863][ T9] usb 4-1: USB disconnect, device number 6 [ 1032.998289][ T29] audit: type=1400 audit(1737373545.681:1072): avc: denied { connect } for pid=14495 comm="syz.5.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1038.379052][T14522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.483983][T14529] fuse: Bad value for 'fd' [ 1039.247841][ T29] audit: type=1400 audit(1737373551.961:1073): avc: denied { getopt } for pid=14527 comm="syz.4.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1040.364144][T14546] Invalid source name [ 1040.835336][T14547] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1042.014079][T14589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.065334][T14629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.103243][T14629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1722'. [ 1043.122931][T14629] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1043.131786][T14629] overlayfs: missing 'lowerdir' [ 1043.781799][T14636] Invalid source name [ 1044.989331][T14642] input: syz1 as /devices/virtual/input/input29 [ 1044.998850][T14646] NILFS (loop6): device size too small [ 1046.225864][ T29] audit: type=1326 audit(1737373558.941:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.1727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc10385d29 code=0x0 [ 1048.004566][T14672] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1732'. [ 1048.380575][T14678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.430448][T14688] lo speed is unknown, defaulting to 1000 [ 1050.025111][ T29] audit: type=1400 audit(1737373562.131:1075): avc: denied { create } for pid=14676 comm="syz.2.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1050.472519][ T29] audit: type=1400 audit(1737373562.131:1076): avc: denied { sys_admin } for pid=14676 comm="syz.2.1734" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1050.763657][T14696] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1053.294782][T14715] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1053.303230][T14715] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1054.429727][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.415150][T14727] Invalid source name [ 1055.665972][T14725] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1745'. [ 1055.781147][ T29] audit: type=1400 audit(1737373568.491:1077): avc: denied { listen } for pid=14729 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1057.228841][T14730] XFS (nullb0): Invalid superblock magic number [ 1057.857537][ T29] audit: type=1400 audit(1737373570.531:1078): avc: denied { setopt } for pid=14748 comm="syz.5.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1059.405528][T14767] input: syz0 as /devices/virtual/input/input30 [ 1059.412069][T14767] input: failed to attach handler leds to device input30, error: -6 [ 1060.607728][ T9938] libceph: connect (1)[c::]:6789 error -101 [ 1060.617994][ T9938] libceph: mon0 (1)[c::]:6789 connect error [ 1060.696736][T14770] ceph: No mds server is up or the cluster is laggy [ 1061.113215][ T9938] libceph: connect (1)[c::]:6789 error -101 [ 1061.177572][ T9938] libceph: mon0 (1)[c::]:6789 connect error [ 1061.191716][T14777] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1061.704892][T14785] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1064.490484][T14810] RDS: rds_bind could not find a transport for fe80::c, load rds_tcp or rds_rdma? [ 1064.607054][ T29] audit: type=1400 audit(1737373577.241:1079): avc: denied { create } for pid=14804 comm="syz.4.1760" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1065.081593][ T29] audit: type=1400 audit(1737373577.321:1080): avc: denied { mounton } for pid=14804 comm="syz.4.1760" path="/373/file0" dev="tmpfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1065.169889][T14809] Invalid source name [ 1065.481992][ T29] audit: type=1400 audit(1737373578.181:1081): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1067.798990][ T29] audit: type=1400 audit(1737373580.371:1082): avc: denied { ioctl } for pid=14827 comm="syz.6.1766" path="socket:[37746]" dev="sockfs" ino=37746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1068.072954][T14833] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1068.082057][T14833] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1068.094079][T14833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1068.237318][T14835] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 1068.247337][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.258766][T14835] ipvlan2: entered allmulticast mode [ 1068.264318][T14835] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 1068.273328][T14835] batman_adv: batadv0: Adding interface: ipvlan2 [ 1068.279741][T14835] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.305312][T14835] batman_adv: batadv0: Interface activated: ipvlan2 [ 1070.224701][T14851] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1070.642674][ T29] audit: type=1400 audit(1737373583.291:1083): avc: denied { accept } for pid=14840 comm="syz.4.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1072.007255][T14863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1074.452045][ T9938] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1075.193442][ T9938] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 1075.233322][ T9938] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.318023][ T9938] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 65 [ 1075.522069][ T9938] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1076.320735][ T9938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.346220][ T9938] usb 7-1: config 0 descriptor?? [ 1076.769477][T14899] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1077.267641][ T9938] hid-u2fzero 0003:10C4:8ACF.0004: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.6-1/input0 [ 1077.379249][ T9938] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero LED initialised [ 1077.389962][ T9938] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero RNG initialised [ 1079.062110][T14911] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1079.134278][ T29] audit: type=1400 audit(1737373591.851:1084): avc: denied { bind } for pid=14906 comm="syz.3.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1079.743659][ T5901] usb 7-1: USB disconnect, device number 4 [ 1080.799813][ T29] audit: type=1400 audit(1737373593.431:1085): avc: denied { read } for pid=14914 comm="syz.3.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1083.010581][T14939] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1083.157336][T14942] lo speed is unknown, defaulting to 1000 [ 1085.083106][T14966] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1088.326133][T14995] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1088.345850][T14996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.812291][T15011] [ 1089.814656][T15011] ====================================================== [ 1089.821673][T15011] WARNING: possible circular locking dependency detected [ 1089.828705][T15011] 6.13.0-syzkaller #0 Not tainted [ 1089.833731][T15011] ------------------------------------------------------ [ 1089.840769][T15011] syz.6.1806/15011 is trying to acquire lock: [ 1089.840782][T15011] ffff888075b26360 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 1089.855715][T15011] [ 1089.855715][T15011] but task is already holding lock: [ 1089.863060][T15011] ffff888025b16120 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 1089.872270][T15011] [ 1089.872270][T15011] which lock already depends on the new lock. [ 1089.872270][T15011] [ 1089.882651][T15011] [ 1089.882651][T15011] the existing dependency chain (in reverse order) is: [ 1089.891642][T15011] [ 1089.891642][T15011] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1089.899440][T15011] __mutex_lock+0x19b/0xa60 [ 1089.904454][T15011] blk_mq_init_sched+0x42b/0x640 [ 1089.909904][T15011] elevator_init_mq+0x2cd/0x420 [ 1089.915258][T15011] add_disk_fwnode+0x113/0x1300 [ 1089.920612][T15011] sd_probe+0xa86/0x1000 [ 1089.925360][T15011] really_probe+0x23e/0xa90 [ 1089.930366][T15011] __driver_probe_device+0x1de/0x440 [ 1089.936159][T15011] driver_probe_device+0x4c/0x1b0 [ 1089.941685][T15011] __device_attach_driver+0x1df/0x310 [ 1089.947556][T15011] bus_for_each_drv+0x157/0x1e0 [ 1089.952916][T15011] __device_attach_async_helper+0x1d3/0x290 [ 1089.959330][T15011] async_run_entry_fn+0x9c/0x530 [ 1089.964774][T15011] process_one_work+0x9c5/0x1ba0 [ 1089.970210][T15011] worker_thread+0x6c8/0xf00 [ 1089.975310][T15011] kthread+0x2c1/0x3a0 [ 1089.979880][T15011] ret_from_fork+0x45/0x80 [ 1089.984796][T15011] ret_from_fork_asm+0x1a/0x30 [ 1089.990064][T15011] [ 1089.990064][T15011] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 1089.998901][T15011] blk_queue_enter+0x50f/0x640 [ 1090.004169][T15011] blk_mq_alloc_request+0x59b/0x950 [ 1090.009874][T15011] scsi_execute_cmd+0x1da/0xf40 [ 1090.015232][T15011] read_capacity_16+0x213/0xe10 [ 1090.020585][T15011] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 1090.026891][T15011] sd_probe+0x904/0x1000 [ 1090.031635][T15011] really_probe+0x23e/0xa90 [ 1090.036637][T15011] __driver_probe_device+0x1de/0x440 [ 1090.042419][T15011] driver_probe_device+0x4c/0x1b0 [ 1090.047941][T15011] __device_attach_driver+0x1df/0x310 [ 1090.053818][T15011] bus_for_each_drv+0x157/0x1e0 [ 1090.059166][T15011] __device_attach_async_helper+0x1d3/0x290 [ 1090.065562][T15011] async_run_entry_fn+0x9c/0x530 [ 1090.071000][T15011] process_one_work+0x9c5/0x1ba0 [ 1090.076436][T15011] worker_thread+0x6c8/0xf00 [ 1090.081521][T15011] kthread+0x2c1/0x3a0 [ 1090.086087][T15011] ret_from_fork+0x45/0x80 [ 1090.091000][T15011] ret_from_fork_asm+0x1a/0x30 [ 1090.096277][T15011] [ 1090.096277][T15011] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 1090.103897][T15011] __mutex_lock+0x19b/0xa60 [ 1090.108909][T15011] __nbd_set_size+0x2c0/0x730 [ 1090.114090][T15011] nbd_start_device+0x8fd/0xd70 [ 1090.119437][T15011] nbd_ioctl+0x21a/0xfd0 [ 1090.124176][T15011] blkdev_ioctl+0x276/0x6d0 [ 1090.129183][T15011] __x64_sys_ioctl+0x190/0x200 [ 1090.134446][T15011] do_syscall_64+0xcd/0x250 [ 1090.139451][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.145853][T15011] [ 1090.145853][T15011] -> #2 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1090.154425][T15011] blk_mq_submit_bio+0x1fb6/0x24c0 [ 1090.160032][T15011] __submit_bio+0x384/0x540 [ 1090.165035][T15011] submit_bio_noacct_nocheck+0x698/0xd70 [ 1090.171164][T15011] submit_bio_noacct+0x93a/0x1e20 [ 1090.176681][T15011] block_read_full_folio+0x812/0xa50 [ 1090.182462][T15011] filemap_read_folio+0xc6/0x2a0 [ 1090.187895][T15011] filemap_get_pages+0x155f/0x1be0 [ 1090.193503][T15011] filemap_read+0x3ca/0xd70 [ 1090.198501][T15011] blkdev_read_iter+0x187/0x480 [ 1090.203850][T15011] vfs_read+0x87f/0xbe0 [ 1090.208503][T15011] ksys_read+0x12b/0x250 [ 1090.213260][T15011] do_syscall_64+0xcd/0x250 [ 1090.218265][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.224657][T15011] [ 1090.224657][T15011] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1090.233152][T15011] down_read+0x9a/0x330 [ 1090.237821][T15011] filemap_fault+0x2e0/0x2820 [ 1090.243000][T15011] __do_fault+0x10a/0x490 [ 1090.247830][T15011] do_pte_missing+0x99f/0x3e00 [ 1090.253091][T15011] __handle_mm_fault+0x103c/0x2a40 [ 1090.258699][T15011] handle_mm_fault+0x3fa/0xaa0 [ 1090.263964][T15011] __get_user_pages+0x8d9/0x3b50 [ 1090.269414][T15011] populate_vma_page_range+0x27f/0x3a0 [ 1090.275372][T15011] __mm_populate+0x1d6/0x380 [ 1090.280471][T15011] do_mlock+0x40a/0x7d0 [ 1090.285125][T15011] __x64_sys_mlock+0x59/0x80 [ 1090.290234][T15011] do_syscall_64+0xcd/0x250 [ 1090.295236][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.301626][T15011] [ 1090.301626][T15011] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 1090.309157][T15011] __lock_acquire+0x249e/0x3c40 [ 1090.314502][T15011] lock_acquire.part.0+0x11b/0x380 [ 1090.320110][T15011] __might_fault+0x11b/0x190 [ 1090.325217][T15011] _copy_from_user+0x29/0xd0 [ 1090.330299][T15011] __blk_trace_setup+0xa8/0x180 [ 1090.335663][T15011] blk_trace_setup+0x47/0x70 [ 1090.340768][T15011] sg_ioctl+0x65e/0x2750 [ 1090.345510][T15011] __x64_sys_ioctl+0x190/0x200 [ 1090.350776][T15011] do_syscall_64+0xcd/0x250 [ 1090.355780][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.362176][T15011] [ 1090.362176][T15011] other info that might help us debug this: [ 1090.362176][T15011] [ 1090.372375][T15011] Chain exists of: [ 1090.372375][T15011] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 1090.372375][T15011] [ 1090.386689][T15011] Possible unsafe locking scenario: [ 1090.386689][T15011] [ 1090.394123][T15011] CPU0 CPU1 [ 1090.399470][T15011] ---- ---- [ 1090.404805][T15011] lock(&q->debugfs_mutex); [ 1090.409386][T15011] lock(&q->q_usage_counter(queue)#50); [ 1090.417529][T15011] lock(&q->debugfs_mutex); [ 1090.424611][T15011] rlock(&mm->mmap_lock); [ 1090.428998][T15011] [ 1090.428998][T15011] *** DEADLOCK *** [ 1090.428998][T15011] [ 1090.437113][T15011] 1 lock held by syz.6.1806/15011: [ 1090.442219][T15011] #0: ffff888025b16120 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 1090.451862][T15011] [ 1090.451862][T15011] stack backtrace: [ 1090.457740][T15011] CPU: 0 UID: 0 PID: 15011 Comm: syz.6.1806 Not tainted 6.13.0-syzkaller #0 [ 1090.466385][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1090.476420][T15011] Call Trace: [ 1090.479675][T15011] [ 1090.482584][T15011] dump_stack_lvl+0x116/0x1f0 [ 1090.487244][T15011] print_circular_bug+0x419/0x5d0 [ 1090.492244][T15011] check_noncircular+0x31a/0x400 [ 1090.497159][T15011] ? __pfx_check_noncircular+0x10/0x10 [ 1090.502602][T15011] ? lockdep_lock+0xc6/0x200 [ 1090.507179][T15011] ? __pfx_lockdep_lock+0x10/0x10 [ 1090.512191][T15011] __lock_acquire+0x249e/0x3c40 [ 1090.517022][T15011] ? __pfx___lock_acquire+0x10/0x10 [ 1090.522193][T15011] ? trace_lock_acquire+0x14e/0x1f0 [ 1090.527371][T15011] ? __pfx_mark_lock+0x10/0x10 [ 1090.532126][T15011] lock_acquire.part.0+0x11b/0x380 [ 1090.537226][T15011] ? __might_fault+0xe3/0x190 [ 1090.541883][T15011] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1090.547508][T15011] ? rcu_is_watching+0x12/0xc0 [ 1090.552250][T15011] ? trace_lock_acquire+0x14e/0x1f0 [ 1090.557429][T15011] ? __might_fault+0xe3/0x190 [ 1090.562085][T15011] ? lock_acquire+0x2f/0xb0 [ 1090.566565][T15011] ? __might_fault+0xe3/0x190 [ 1090.571223][T15011] ? __might_fault+0xe3/0x190 [ 1090.575882][T15011] __might_fault+0x11b/0x190 [ 1090.580452][T15011] ? __might_fault+0xe3/0x190 [ 1090.585109][T15011] _copy_from_user+0x29/0xd0 [ 1090.589679][T15011] __blk_trace_setup+0xa8/0x180 [ 1090.594515][T15011] ? __pfx___blk_trace_setup+0x10/0x10 [ 1090.599955][T15011] ? do_vfs_ioctl+0x513/0x1990 [ 1090.604700][T15011] blk_trace_setup+0x47/0x70 [ 1090.609271][T15011] sg_ioctl+0x65e/0x2750 [ 1090.613492][T15011] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 1090.619986][T15011] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1090.626901][T15011] ? __pfx_sg_ioctl+0x10/0x10 [ 1090.631567][T15011] ? __pfx_lock_release+0x10/0x10 [ 1090.636597][T15011] ? selinux_file_ioctl+0x180/0x270 [ 1090.641808][T15011] ? selinux_file_ioctl+0xb4/0x270 [ 1090.646908][T15011] ? __pfx_sg_ioctl+0x10/0x10 [ 1090.651576][T15011] __x64_sys_ioctl+0x190/0x200 [ 1090.656333][T15011] do_syscall_64+0xcd/0x250 [ 1090.660820][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.666706][T15011] RIP: 0033:0x7f7d57b85d29 [ 1090.671097][T15011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.690684][T15011] RSP: 002b:00007f7d57996038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1090.699075][T15011] RAX: ffffffffffffffda RBX: 00007f7d57d76240 RCX: 00007f7d57b85d29 [ 1090.707031][T15011] RDX: 00000000200000c0 RSI: 00000000c0481273 RDI: 0000000000000005 [ 1090.714989][T15011] RBP: 00007f7d57c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1090.722936][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.730882][T15011] R13: 0000000000000000 R14: 00007f7d57d76240 R15: 00007ffe53794768 [ 1090.738838][T15011] [ 1090.980902][ T29] audit: type=1400 audit(1737373603.691:1086): avc: denied { append } for pid=15012 comm="syz.2.1809" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1091.004831][T15006] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1806'. [ 1091.375427][T15013] openvswitch: netlink: Missing valid actions attribute. [ 1091.382567][T15013] openvswitch: netlink: Flow actions may not be safe on all matching packets.